$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft File: OddGjPgMUFXp0EybT60xF1wU1l8.mft (raw, json) Hash identifier: xUdiloSNO4tR51ut6x28WEAviPTNEVqW7hnafLY97zA= Subject key identifier: 00:05:DC:F1:2C:C9:C6:0E:4A:B0:9D:2A:EF:AC:3A:D1:8D:D5:4E:0B Authority key identifier: 39:D7:46:8C:F8:0C:50:55:E9:D0:4C:9B:4F:AD:31:17:5C:14:D6:5F Certificate issuer: /CN=A91AD643/serialNumber=39D7468CF80C5055E9D04C9B4FAD31175C14D65F Certificate serial: 0778 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft Manifest number: 0766 Signing time: Tue 24 Mar 2026 21:23:41 +0000 Manifest this update: Tue 24 Mar 2026 21:23:41 +0000 Manifest next update: Tue 31 Mar 2026 21:23:41 +0000 Files and hashes: 1: OddGjPgMUFXp0EybT60xF1wU1l8.crl (hash: hiGJVwlaHbmCNKlA6GdJU3l+ZRQ5W1gulBFqPP8e7cU=) 2: 81E9653E5B8A11EB857A3F77C4F9AE02.roa (hash: NHvUGTdmuwIhXvGpasqL3enB4HKIbc5EZnmgVQdvyDA=) 3: 865F2F80EE8911EBB390AC76C4F9AE02.roa (hash: 4tQkVgaEfrNeT5ZxKwsq/6JwQwooD/KUZ+m6cfHLrN0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.crl rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:23:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1912 (0x778) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD643, serialNumber=39D7468CF80C5055E9D04C9B4FAD31175C14D65F Validity Not Before: Mar 24 21:23:41 2026 GMT Not After : Mar 31 21:23:41 2026 GMT Subject: CN=69c300dd-a759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:1b:f8:b4:c4:02:e3:ce:c3:91:78:66:d3:7d: aa:66:2d:d5:e8:dd:2d:7f:2f:ce:52:94:b9:84:aa: 57:93:59:fa:4e:35:49:78:0d:60:f4:e4:03:24:a9: a4:e2:47:83:3a:62:b6:46:9f:b4:c8:a1:42:1b:16: 84:e1:3c:6c:f2:69:14:3d:93:dc:c2:73:dd:ed:33: ab:be:04:15:08:c2:58:06:04:0d:ac:30:d8:a6:cf: b9:bd:86:1f:ab:0c:9a:9f:5c:5c:34:eb:27:f9:cb: 90:66:e7:2b:b3:72:8c:b3:56:12:20:0e:d8:7b:da: 20:ef:97:a9:c2:95:65:84:11:45:0f:fb:35:5c:8c: f0:41:9f:99:ef:c0:2f:2b:bf:97:fd:dc:4c:34:3f: 99:d5:63:5a:56:f7:ab:ec:de:a1:04:95:4b:9e:63: 61:b5:fe:5f:50:19:5b:bc:25:44:ff:c6:5b:7c:21: 77:72:20:6d:4c:4c:87:98:b0:d3:d0:07:2b:86:3d: 19:e7:6d:f1:ae:a8:f5:65:1e:8e:5a:58:e0:cc:08: 93:eb:ae:52:66:5e:c5:bb:e8:7f:58:db:6c:b4:4e: bb:f9:12:91:3d:a0:19:d6:38:61:19:2f:cb:7b:e0: a9:a4:f7:80:f9:9e:7e:3a:a7:98:61:2a:4e:74:5f: 47:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:05:DC:F1:2C:C9:C6:0E:4A:B0:9D:2A:EF:AC:3A:D1:8D:D5:4E:0B X509v3 Authority Key Identifier: keyid:39:D7:46:8C:F8:0C:50:55:E9:D0:4C:9B:4F:AD:31:17:5C:14:D6:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:c0:fa:0e:1b:16:c9:fb:6b:af:ab:29:75:cd:3f:ef:ed:50: b5:dd:5e:41:5f:b7:95:ee:2b:bc:92:85:89:93:30:86:d9:6a: b1:61:7b:92:b3:7d:da:32:17:18:f0:51:2d:e5:99:22:c8:7b: 97:c5:88:22:bf:ce:dd:4c:cc:bc:11:8a:91:27:59:5c:d2:fb: d6:1f:a1:0b:30:f8:58:48:9f:cc:7a:af:98:a6:ed:65:10:98: 4e:21:a9:f2:87:58:d5:e9:49:9d:ee:37:c7:46:f4:8d:d3:99: 75:36:b6:3f:e2:92:3c:9f:ee:4c:b6:ee:ed:89:f4:11:7f:03: a7:01:e9:aa:04:ad:7b:7c:65:b7:e6:f2:ed:e2:a7:9a:9b:01: 71:b7:5e:29:84:b0:38:a5:14:3f:e7:8b:aa:0f:d8:cb:35:3a: a9:14:1f:ff:54:4f:7b:5a:3f:62:0a:23:83:3b:bb:e7:75:a1: c0:5d:56:51:0b:10:6a:e1:a5:38:c0:45:0c:d8:d3:37:c2:1f: 07:6a:78:42:46:15:e8:0b:12:a5:3d:41:c6:e0:7d:ca:95:b0: 30:c5:7e:84:97:df:a6:c2:81:ab:43:ba:5e:db:1f:5b:93:76: 45:e2:98:d5:12:69:a9:7d:cb:33:94:2f:a7:56:41:9b:a9:da: 27:90:4c:af -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB3gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ2NDMxMTAvBgNVBAUTKDM5RDc0NjhDRjgwQzUwNTVFOUQwNEM5QjRGQUQzMTE3 NUMxNEQ2NUYwHhcNMjYwMzI0MjEyMzQxWhcNMjYwMzMxMjEyMzQxWjAYMRYwFAYD VQQDEw02OWMzMDBkZC1hNzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3xv4tMQC487DkXhm032qZi3V6N0tfy/OUpS5hKpXk1n6TjVJeA1g9OQDJKmk 4keDOmK2Rp+0yKFCGxaE4Txs8mkUPZPcwnPd7TOrvgQVCMJYBgQNrDDYps+5vYYf qwyan1xcNOsn+cuQZucrs3KMs1YSIA7Ye9og75epwpVlhBFFD/s1XIzwQZ+Z78Av K7+X/dxMND+Z1WNaVver7N6hBJVLnmNhtf5fUBlbvCVE/8ZbfCF3ciBtTEyHmLDT 0Acrhj0Z523xrqj1ZR6OWljgzAiT665SZl7Fu+h/WNtstE67+RKRPaAZ1jhhGS/L e+CppPeA+Z5+OqeYYSpOdF9HTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAAF3PEs ycYOSrCdKu+sOtGN1U4LMB8GA1UdIwQYMBaAFDnXRoz4DFBV6dBMm0+tMRdcFNZf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDY0My9FRkJFNkVCMjVC ODgxMUVCQkQ1RjMwNzZDNEY5QUUwMi9PZGRHalBnTVVGWHAwRXliVDYweEYxd1Ux bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09kZEdqUGdNVUZYcDBFeWJUNjB4RjF3VTFsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDY0My9FRkJFNkVCMjVCODgxMUVCQkQ1RjMwNzZDNEY5QUUwMi9PZGRHalBnTVVG WHAwRXliVDYweEYxd1UxbDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAN8D6DhsWyftrr6spdc0/7+1Qtd1eQV+3le4rvJKFiZMwhtlqsWF7krN92jIX GPBRLeWZIsh7l8WIIr/O3UzMvBGKkSdZXNL71h+hCzD4WEifzHqvmKbtZRCYTiGp 8odY1elJne43x0b0jdOZdTa2P+KSPJ/uTLbu7Yn0EX8DpwHpqgSte3xlt+by7eKn mpsBcbdeKYSwOKUUP+eLqg/YyzU6qRQf/1RPe1o/Ygojgzu753WhwF1WUQsQauGl OMBFDNjTN8IfB2p4QkYV6AsSpT1BxuB9ypWwMMV+hJffpsKBq0O6XtsfW5N2ReKY 1RJpqX3LM5Qvp1ZBm6naJ5BMrw== -----END CERTIFICATE-----Generated at Thu Mar 26 19:04:38 2026 by rpki-client