$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft File: OopqLuXcCfyqgv8BjwnBr4S0EZY.mft (raw, json) Hash identifier: 19lS3JcjpTRCfYsVaqO0+nF6aj9N4IFeNkCjKr4msFM= Subject key identifier: 26:30:E7:87:63:60:93:A4:47:2F:7C:00:97:BD:86:3A:94:B6:75:05 Authority key identifier: 3A:8A:6A:2E:E5:DC:09:FC:AA:82:FF:01:8F:09:C1:AF:84:B4:11:96 Certificate issuer: /CN=A91CCCDD/serialNumber=3A8A6A2EE5DC09FCAA82FF018F09C1AF84B41196 Certificate serial: 025E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft Manifest number: 0257 Signing time: Wed 25 Mar 2026 01:41:09 +0000 Manifest this update: Wed 25 Mar 2026 01:41:09 +0000 Manifest next update: Wed 01 Apr 2026 01:41:09 +0000 Files and hashes: 1: OopqLuXcCfyqgv8BjwnBr4S0EZY.crl (hash: vmm1tVTLIDu5fMKOeZGrLUnGYEPaU51nhQ7AWMF5hGA=) 2: F77C1438964111EDAAB8E74AC4F9AE02.roa (hash: +vVLk4sB4I8wB31GUWlvFKxjQFLdu3FFGENTE3piOYQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.crl rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:41:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 606 (0x25e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCCDD, serialNumber=3A8A6A2EE5DC09FCAA82FF018F09C1AF84B41196 Validity Not Before: Mar 25 01:41:09 2026 GMT Not After : Apr 1 01:41:09 2026 GMT Subject: CN=69c33d35-be22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:98:42:74:8b:c4:84:aa:36:0b:54:97:c8:ca: b8:8a:c1:3d:24:f9:2f:78:d3:c0:0f:d2:fb:a0:c7: 32:eb:2b:28:82:54:0d:13:e9:e6:9f:0d:37:63:01: 1c:0e:b9:3e:c2:a6:9e:de:01:d8:0d:ad:d3:01:c3: b3:61:72:02:38:77:51:51:70:01:83:e7:b7:28:52: 08:14:5a:c7:a9:a3:9b:48:0a:75:12:d0:a4:11:80: ce:22:df:c8:36:a6:42:ce:a7:0c:0d:93:62:55:eb: 52:0f:85:20:04:91:fc:3a:5d:7f:52:2e:44:d5:3d: ca:e8:64:d8:6c:17:c9:f6:a2:45:8e:bd:35:fa:c1: 2e:d9:b1:b6:a7:00:38:c8:86:56:8c:1c:15:43:f5: 18:6c:76:cb:e7:14:85:10:e0:d8:0c:7d:44:06:3d: 80:15:55:ce:e7:72:6e:a3:7c:86:16:f9:4d:fe:ce: 4e:1f:12:4b:66:3e:57:8a:5a:59:ae:3d:69:f3:51: 89:57:98:e4:43:0f:7b:03:da:4d:b7:1a:3a:9b:ff: eb:19:3c:9d:3a:4e:6f:df:62:c8:1d:34:cd:c4:e2: b1:d2:d8:da:86:a7:e2:1c:4c:2a:77:5e:d7:29:b8: cb:7d:af:68:bb:9b:dc:ce:36:05:d0:64:d3:e7:80: 4d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:30:E7:87:63:60:93:A4:47:2F:7C:00:97:BD:86:3A:94:B6:75:05 X509v3 Authority Key Identifier: keyid:3A:8A:6A:2E:E5:DC:09:FC:AA:82:FF:01:8F:09:C1:AF:84:B4:11:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OopqLuXcCfyqgv8BjwnBr4S0EZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCCDD/F3BBE76E963D11EDBE3FD01AC4F9AE02/OopqLuXcCfyqgv8BjwnBr4S0EZY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:8a:74:55:74:89:20:5c:1d:79:8b:97:dc:9e:47:2d:c4:72: 6b:53:f0:c2:32:7e:e6:34:ce:f1:03:e8:41:fd:ef:15:2c:1f: 06:5d:14:08:5e:3b:40:14:78:d4:be:ad:2f:e1:44:0e:dd:e5: 6e:84:0e:03:83:97:77:82:1f:83:3c:56:92:e2:ca:c9:e5:93: bc:00:49:da:21:cc:ed:70:74:10:3a:d4:99:bd:1f:eb:05:74: 36:c3:f2:4b:ed:21:ca:f3:04:24:5d:51:a8:90:b1:4e:48:7c: 92:1e:ff:9b:4c:f3:07:ea:12:d5:cd:8c:64:d5:70:38:c3:26: c4:ef:96:b9:df:c2:2e:3d:b1:76:68:a4:b2:99:78:f8:c4:ad: a1:65:4d:db:2b:34:4a:8a:f5:09:e7:90:dd:b5:53:97:eb:cf: 99:f5:27:5e:98:0a:c7:09:a0:88:18:1a:84:8f:7d:43:e0:df: 0f:9b:0b:44:36:02:4f:0e:59:db:8d:57:1d:e8:75:23:99:ac: 23:81:21:24:ac:cd:2b:05:89:75:5f:b9:89:88:eb:78:17:fa: d8:8a:44:c7:5c:6f:d4:b4:ca:5c:3e:95:b1:d7:34:d9:0c:ad: fd:55:a8:38:ae:ca:91:f4:43:13:88:96:d7:14:15:4f:55:37: 67:ed:06:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NDREQxMTAvBgNVBAUTKDNBOEE2QTJFRTVEQzA5RkNBQTgyRkYwMThGMDlDMUFG ODRCNDExOTYwHhcNMjYwMzI1MDE0MTA5WhcNMjYwNDAxMDE0MTA5WjAYMRYwFAYD VQQDEw02OWMzM2QzNS1iZTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApJhCdIvEhKo2C1SXyMq4isE9JPkveNPAD9L7oMcy6ysoglQNE+nmnw03YwEc Drk+wqae3gHYDa3TAcOzYXICOHdRUXABg+e3KFIIFFrHqaObSAp1EtCkEYDOIt/I NqZCzqcMDZNiVetSD4UgBJH8Ol1/Ui5E1T3K6GTYbBfJ9qJFjr01+sEu2bG2pwA4 yIZWjBwVQ/UYbHbL5xSFEODYDH1EBj2AFVXO53Juo3yGFvlN/s5OHxJLZj5XilpZ rj1p81GJV5jkQw97A9pNtxo6m//rGTydOk5v32LIHTTNxOKx0tjahqfiHEwqd17X KbjLfa9ou5vczjYF0GTT54BNiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCYw54dj YJOkRy98AJe9hjqUtnUFMB8GA1UdIwQYMBaAFDqKai7l3An8qoL/AY8Jwa+EtBGW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0NERC9GM0JCRTc2RTk2 M0QxMUVEQkUzRkQwMUFDNEY5QUUwMi9Pb3BxTHVYY0NmeXFndjhCanduQnI0UzBF WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09vcHFMdVhjQ2Z5cWd2OEJqd25CcjRTMEVaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0NERC9GM0JCRTc2RTk2M0QxMUVEQkUzRkQwMUFDNEY5QUUwMi9Pb3BxTHVYY0Nm eXFndjhCanduQnI0UzBFWlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHIp0VXSJIFwdeYuX3J5HLcRya1PwwjJ+5jTO8QPoQf3vFSwfBl0UCF47QBR4 1L6tL+FEDt3lboQOA4OXd4IfgzxWkuLKyeWTvABJ2iHM7XB0EDrUmb0f6wV0NsPy S+0hyvMEJF1RqJCxTkh8kh7/m0zzB+oS1c2MZNVwOMMmxO+Wud/CLj2xdmikspl4 +MStoWVN2ys0Sor1CeeQ3bVTl+vPmfUnXpgKxwmgiBgahI99Q+DfD5sLRDYCTw5Z 241XHeh1I5msI4EhJKzNKwWJdV+5iYjreBf62IpEx1xv1LTKXD6Vsdc02Qyt/VWo OK7KkfRDE4iW1xQVT1U3Z+0GgQ== -----END CERTIFICATE-----Generated at Thu Mar 26 17:30:38 2026 by rpki-client