$ rpki-client -vvf rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft File: OoeHHjuuZe3i8xuxrVxZu3p0q90.mft (raw, json) Hash identifier: Q4xY79Y2TZJX0vGjLIHJM6UkyqyoVWNyODanHIb6pRM= Subject key identifier: 2A:31:1A:E4:E2:35:D1:6F:64:07:74:25:FE:77:BB:E2:1A:FF:C9:A7 Authority key identifier: 3A:87:87:1E:3B:AE:65:ED:E2:F3:1B:B1:AD:5C:59:BB:7A:74:AB:DD Certificate issuer: /CN=A91B87FC/serialNumber=3A87871E3BAE65EDE2F31BB1AD5C59BB7A74ABDD Certificate serial: 0127 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft Manifest number: 0116 Signing time: Wed 25 Mar 2026 05:07:12 +0000 Manifest this update: Wed 25 Mar 2026 05:07:11 +0000 Manifest next update: Wed 01 Apr 2026 05:07:11 +0000 Files and hashes: 1: OoeHHjuuZe3i8xuxrVxZu3p0q90.crl (hash: +Wt9HZtGN8lMVVAPsVm8NzseT+/kb4UqOgcWJ2gi2Go=) 2: 64517A3886E311EFA2B33527C4F9AE02.roa (hash: l3eydfjGEoMs5mo5Jx4Wnn5QeJIXXCfrBKeGcyLZ8Fs=) 3: 5E85AD042B1B11F0AE3E223BC4F9AE02.roa (hash: FGzuhrRvwprB5KpbvWYZLSjwv3h28HP8C3ekeqhOVdI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.crl rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:07:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 295 (0x127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B87FC, serialNumber=3A87871E3BAE65EDE2F31BB1AD5C59BB7A74ABDD Validity Not Before: Mar 25 05:07:11 2026 GMT Not After : Apr 1 05:07:11 2026 GMT Subject: CN=69c36d80-519e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:50:a8:af:ce:41:7b:6d:61:ab:3e:d0:9a:27: 8b:48:91:f5:b3:4a:57:65:2b:2a:74:73:96:7b:4b: c6:d2:da:92:3f:da:44:ad:34:5b:e5:40:12:cf:96: b2:79:5b:86:bf:69:37:0a:03:45:32:bf:72:bb:d7: 94:7f:a3:4f:68:1e:5f:ff:5b:45:7d:9a:f3:d0:e2: 50:41:0a:b8:2f:9e:87:b1:57:04:4c:e7:5e:51:a7: d7:53:8c:47:f7:57:4d:ca:e6:eb:f6:22:30:b3:e4: 3d:b8:2e:92:4d:30:d6:25:1e:1a:1d:5c:f3:cb:68: ab:ae:99:c0:3b:13:92:43:3b:fc:18:92:45:ee:cc: a6:c8:df:c3:05:81:be:d8:11:00:c8:2c:0f:48:3e: b0:18:df:8c:aa:df:78:76:0d:52:e4:88:19:61:87: 67:73:aa:5f:2f:4d:ac:76:cc:0c:b4:39:08:3e:41: 8e:05:65:61:bb:44:11:7b:31:14:80:88:ab:10:3a: 8f:ed:be:94:e1:38:b8:4a:5a:5d:42:40:bc:53:97: 99:3d:bf:25:df:b1:75:d2:78:cf:9c:9c:33:0f:d9: e2:32:e3:95:4f:f9:73:64:a2:62:27:af:08:73:0b: 4d:82:e8:63:ad:54:95:b6:ab:b6:86:ad:78:3b:af: e2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:31:1A:E4:E2:35:D1:6F:64:07:74:25:FE:77:BB:E2:1A:FF:C9:A7 X509v3 Authority Key Identifier: keyid:3A:87:87:1E:3B:AE:65:ED:E2:F3:1B:B1:AD:5C:59:BB:7A:74:AB:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:01:95:8c:2e:fb:02:83:5e:f7:5c:9e:54:3a:0b:67:e1:bc: a2:08:d6:65:3f:7d:ac:81:9a:26:49:a3:62:bf:6f:06:09:3f: d9:06:d5:0d:e5:44:b3:02:e2:7e:1e:d8:ba:28:65:f6:24:a5: ba:a0:5f:f7:e4:bf:53:e5:c9:27:43:0c:a1:1e:78:34:13:c5: 51:99:a1:f6:1d:d7:cd:e2:d8:51:88:a0:0a:46:15:eb:f7:d7: de:4b:7e:7d:4b:1f:ea:aa:34:b9:e6:a9:a2:20:52:cc:22:f5: 03:6c:91:35:79:96:cf:dc:86:b4:81:9c:f4:9b:03:39:2b:21: 3b:2f:9e:05:8c:a0:42:44:10:44:a3:82:2b:f0:9f:83:b2:e7: 59:42:3f:94:74:6f:39:22:cb:2d:38:33:a4:cd:df:07:6f:40: 29:5b:33:6c:1f:fe:4b:0c:d2:9a:7d:fc:c1:7a:1e:8a:49:29: 35:f8:f7:3c:bb:a3:50:87:13:70:e1:e9:79:f0:b6:19:44:ea: b6:10:f5:63:fa:4b:eb:52:30:5e:69:df:ce:37:d3:b3:ba:25: be:7d:a9:37:17:fd:b9:39:62:45:cc:50:80:23:f6:00:cd:6a: 94:34:5b:b3:a4:1b:a1:15:0d:97:80:0f:0d:6a:de:9a:e2:68: 27:5a:1b:16 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg3RkMxMTAvBgNVBAUTKDNBODc4NzFFM0JBRTY1RURFMkYzMUJCMUFENUM1OUJC N0E3NEFCREQwHhcNMjYwMzI1MDUwNzExWhcNMjYwNDAxMDUwNzExWjAYMRYwFAYD VQQDEw02OWMzNmQ4MC01MTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqlCor85Be21hqz7QmieLSJH1s0pXZSsqdHOWe0vG0tqSP9pErTRb5UASz5ay eVuGv2k3CgNFMr9yu9eUf6NPaB5f/1tFfZrz0OJQQQq4L56HsVcETOdeUafXU4xH 91dNyubr9iIws+Q9uC6STTDWJR4aHVzzy2irrpnAOxOSQzv8GJJF7symyN/DBYG+ 2BEAyCwPSD6wGN+Mqt94dg1S5IgZYYdnc6pfL02sdswMtDkIPkGOBWVhu0QRezEU gIirEDqP7b6U4Ti4SlpdQkC8U5eZPb8l37F10njPnJwzD9niMuOVT/lzZKJiJ68I cwtNguhjrVSVtqu2hq14O6/i2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCoxGuTi NdFvZAd0Jf53u+Ia/8mnMB8GA1UdIwQYMBaAFDqHhx47rmXt4vMbsa1cWbt6dKvd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODdGQy8zOTc4RTMxNjg2 RTExMUVGOEY3NzNGODJDNEY5QUUwMi9Pb2VISGp1dVplM2k4eHV4clZ4WnUzcDBx OTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL09vZUhIanV1WmUzaTh4dXhyVnhadTNwMHE5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODdGQy8zOTc4RTMxNjg2RTExMUVGOEY3NzNGODJDNEY5QUUwMi9Pb2VISGp1dVpl M2k4eHV4clZ4WnUzcDBxOTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARQGVjC77AoNe91yeVDoLZ+G8ogjWZT99rIGaJkmjYr9vBgk/2QbVDeVEswLi fh7Yuihl9iSluqBf9+S/U+XJJ0MMoR54NBPFUZmh9h3XzeLYUYigCkYV6/fX3kt+ fUsf6qo0ueapoiBSzCL1A2yRNXmWz9yGtIGc9JsDOSshOy+eBYygQkQQRKOCK/Cf g7LnWUI/lHRvOSLLLTgzpM3fB29AKVszbB/+SwzSmn38wXoeikkpNfj3PLujUIcT cOHpefC2GUTqthD1Y/pL61IwXmnfzjfTs7olvn2pNxf9uTliRcxQgCP2AM1qlDRb s6QboRUNl4APDWremuJoJ1obFg== -----END CERTIFICATE-----Generated at Thu Mar 26 18:38:42 2026 by rpki-client