$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.mft File: Ob_95j0CYgK9yrA-gHWati6m3Fk.mft (raw, json) Hash identifier: v4A0bOEd5L+hmSYFQBpviI7F5zAqjvjoi6Dxcx+94Xg= Subject key identifier: C0:B6:C9:2C:CD:03:1A:E8:73:A3:C5:68:E9:5A:09:D1:27:E8:DB:28 Authority key identifier: 39:BF:FD:E6:3D:02:62:02:BD:CA:B0:3E:80:75:9A:B6:2E:A6:DC:59 Certificate issuer: /CN=A91C5DD4/serialNumber=39BFFDE63D026202BDCAB03E80759AB62EA6DC59 Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob_95j0CYgK9yrA-gHWati6m3Fk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.mft Manifest number: 07 Signing time: Fri 27 Mar 2026 08:44:33 +0000 Manifest this update: Fri 27 Mar 2026 08:44:32 +0000 Manifest next update: Fri 03 Apr 2026 08:44:32 +0000 Files and hashes: 1: Ob_95j0CYgK9yrA-gHWati6m3Fk.crl (hash: jSQ1w2d6FMqAg4hqFp8E/pgAmvxjU/IH2GRhYrGnPWk=) 2: 58020F1E221811F197C01364393D8C67.roa (hash: Q4n4wyg7Pq3awPq1N4He5jBYK2SnfPud4zLUgU3uA6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.crl rsync://rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob_95j0CYgK9yrA-gHWati6m3Fk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 08:44:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5DD4, serialNumber=39BFFDE63D026202BDCAB03E80759AB62EA6DC59 Validity Not Before: Mar 27 08:44:32 2026 GMT Not After : Apr 3 08:44:32 2026 GMT Subject: CN=69c64370-eadc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:66:ab:bd:1a:7b:1b:5c:8c:67:ee:56:e9:ff: b9:ad:2a:cf:61:a0:fd:1c:9e:4c:e2:4c:6a:3b:14: 8e:1b:5e:81:86:dc:23:0f:95:25:c3:5c:b1:b1:6e: 57:99:a2:12:d4:79:69:06:13:3c:c5:b5:88:bf:65: 35:35:42:d2:8d:9f:18:e0:9c:04:dc:af:1e:96:58: fe:11:0d:8c:06:35:73:6e:7a:7f:d0:72:fd:97:25: 7c:5d:80:c5:b8:6c:74:22:b9:96:1f:f8:3e:30:72: 99:50:c3:13:ca:94:d3:10:92:bc:1f:18:6f:6a:bb: a2:71:2a:c2:08:56:07:e7:4d:67:04:35:f1:82:ef: 72:06:35:3b:62:bf:17:81:a2:d8:0f:88:86:34:80: 10:1e:fe:ab:53:70:b1:d9:db:f7:eb:e3:47:c0:0b: 51:fb:ef:22:1c:49:a0:a9:8a:1f:08:6c:7a:68:45: 78:e1:3e:25:ad:81:23:42:e3:ec:85:a2:1e:31:02: 86:2e:4d:30:13:f6:24:ec:4f:67:da:68:6a:fb:ea: 34:dd:d1:77:3e:90:8b:fb:9f:27:25:96:a7:f4:f9: 99:e9:30:c6:eb:ed:6a:ee:8c:37:0d:1d:06:e6:47: a6:30:4f:47:66:33:e9:ca:e1:89:ee:93:eb:1c:83: 58:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:B6:C9:2C:CD:03:1A:E8:73:A3:C5:68:E9:5A:09:D1:27:E8:DB:28 X509v3 Authority Key Identifier: keyid:39:BF:FD:E6:3D:02:62:02:BD:CA:B0:3E:80:75:9A:B6:2E:A6:DC:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob_95j0CYgK9yrA-gHWati6m3Fk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5DD4/119C4AFE221711F1B1DF2100393D8C67/Ob_95j0CYgK9yrA-gHWati6m3Fk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:ba:b6:0a:58:d0:78:b2:8f:94:91:bc:ac:a9:b1:5a:03:fe: 79:40:20:73:44:6a:02:88:e1:4d:29:82:f8:57:9d:1a:d2:9e: 94:e9:8c:6d:ed:b2:aa:3b:3b:f3:36:a0:2d:64:23:61:14:58: cd:12:1b:fc:69:c9:75:91:fa:96:7a:42:d0:16:5a:05:cb:df: 48:01:c7:22:9b:60:dd:30:ab:b2:3a:e1:12:77:47:06:b0:d9: f6:0c:75:c2:bf:8f:f8:bf:01:70:cf:c0:fc:c3:05:b0:0b:a5: 44:02:82:97:b6:5c:92:14:17:8d:bc:e0:1f:18:6a:5f:4f:bb: b0:2d:8b:56:08:34:fc:5a:9e:7e:ea:65:90:29:4d:02:ae:00: 66:f0:9c:74:ec:63:91:de:8d:dd:c0:2c:cf:79:1f:b9:fe:31: a3:4b:f2:34:16:a7:00:ab:56:b3:66:cd:b4:f1:cf:96:bc:38: 3f:84:c4:83:a0:7c:99:e3:95:1f:83:21:4f:ed:bf:4d:d6:55: b7:30:1b:db:5a:ac:62:2c:49:d7:a9:c0:e8:fd:04:ff:61:cf: d5:42:c2:f1:db:40:ee:88:4e:c9:ae:cb:8d:fe:c1:72:5d:a7: 56:28:db:0f:7d:c3:ab:07:8e:04:cc:71:cd:08:b2:fb:6f:61: 6a:cd:8c:ff -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NURENDExMC8GA1UEBRMoMzlCRkZERTYzRDAyNjIwMkJEQ0FCMDNFODA3NTlBQjYy RUE2REM1OTAeFw0yNjAzMjcwODQ0MzJaFw0yNjA0MDMwODQ0MzJaMBgxFjAUBgNV BAMTDTY5YzY0MzcwLWVhZGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5Zqu9GnsbXIxn7lbp/7mtKs9hoP0cnkziTGo7FI4bXoGG3CMPlSXDXLGxbleZ ohLUeWkGEzzFtYi/ZTU1QtKNnxjgnATcrx6WWP4RDYwGNXNuen/Qcv2XJXxdgMW4 bHQiuZYf+D4wcplQwxPKlNMQkrwfGG9qu6JxKsIIVgfnTWcENfGC73IGNTtivxeB otgPiIY0gBAe/qtTcLHZ2/fr40fAC1H77yIcSaCpih8IbHpoRXjhPiWtgSNC4+yF oh4xAoYuTTAT9iTsT2faaGr76jTd0Xc+kIv7nycllqf0+ZnpMMbr7WrujDcNHQbm R6YwT0dmM+nK4Ynuk+scg1hlAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUwLbJLM0D Guhzo8Vo6VoJ0Sfo2ygwHwYDVR0jBBgwFoAUOb/95j0CYgK9yrA+gHWati6m3Fkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1REQ0LzExOUM0QUZFMjIx NzExRjFCMURGMjEwMDM5M0Q4QzY3L09iXzk1ajBDWWdLOXlyQS1nSFdhdGk2bTNG ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT2JfOTVqMENZZ0s5eXJBLWdIV2F0aTZtM0ZrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1 REQ0LzExOUM0QUZFMjIxNzExRjFCMURGMjEwMDM5M0Q4QzY3L09iXzk1ajBDWWdL OXlyQS1nSFdhdGk2bTNGay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBhurYKWNB4so+UkbysqbFaA/55QCBzRGoCiOFNKYL4V50a0p6U6Yxt7bKqOzvz NqAtZCNhFFjNEhv8acl1kfqWekLQFloFy99IAccim2DdMKuyOuESd0cGsNn2DHXC v4/4vwFwz8D8wwWwC6VEAoKXtlySFBeNvOAfGGpfT7uwLYtWCDT8Wp5+6mWQKU0C rgBm8Jx07GOR3o3dwCzPeR+5/jGjS/I0FqcAq1azZs208c+WvDg/hMSDoHyZ45Uf gyFP7b9N1lW3MBvbWqxiLEnXqcDo/QT/Yc/VQsLx20DuiE7JrsuN/sFyXadWKNsP fcOrB44EzHHNCLL7b2FqzYz/ -----END CERTIFICATE-----Generated at Sat Mar 28 08:50:25 2026 by rpki-client