$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft File: ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft (raw, json) Hash identifier: lwkbg1Thrc4uGRarzQejbU2MGSdChwq8Is3l3+TSWW8= Subject key identifier: 36:DE:A0:E5:87:28:99:46:5E:8B:4F:42:08:3D:0D:3B:3E:5A:23:E7 Authority key identifier: A1:C2:39:65:70:40:17:72:42:9E:B8:CB:B0:DF:66:53:F1:67:8C:F6 Certificate issuer: /CN=A91CE6EC/serialNumber=A1C2396570401772429EB8CBB0DF6653F1678CF6 Certificate serial: 2627 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft Manifest number: 2618 Signing time: Tue 24 Mar 2026 15:39:40 +0000 Manifest this update: Tue 24 Mar 2026 15:39:40 +0000 Manifest next update: Tue 31 Mar 2026 15:39:40 +0000 Files and hashes: 1: ocI5ZXBAF3JCnrjLsN9mU_FnjPY.crl (hash: jE082XF8wJNCeh2K8J2xpzmcvfrt5VbUTjHx2f8aM30=) 2: 86D7036A0E1011F1BB4320E6093D8C67.roa (hash: T9SIi9mDgUlqLoammnb7erYFDZJKyrEKSkygd0pgH9w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.crl rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:39:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9767 (0x2627) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE6EC, serialNumber=A1C2396570401772429EB8CBB0DF6653F1678CF6 Validity Not Before: Mar 24 15:39:40 2026 GMT Not After : Mar 31 15:39:40 2026 GMT Subject: CN=69c2b03c-14c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:42:27:85:9a:c4:87:e0:eb:21:27:6d:a4:55: 29:f0:f0:46:50:66:21:fe:a6:7d:e1:18:4c:d7:a2: f6:db:b2:16:3e:d5:48:51:3e:c8:2c:52:b8:05:6b: 74:09:66:df:85:5f:3c:09:05:5f:c1:7e:73:b4:50: 0a:79:01:87:dd:1a:7a:59:bb:86:ea:56:f4:d1:23: 66:ee:20:d8:68:1b:38:de:e1:db:f8:7e:d2:28:b4: f7:b5:6f:fd:12:4d:58:bd:56:2e:26:76:2a:ed:2c: 05:b1:b1:0a:f5:be:ee:f7:6f:9b:ee:d6:b9:a8:ac: 64:a4:ef:92:bb:d1:fc:49:79:f7:b4:8f:42:1a:d2: fc:5d:6b:47:c4:b0:da:e9:02:66:ff:16:75:97:85: 0b:16:e7:25:94:2e:d7:bd:b4:4c:b0:e9:f8:85:87: db:e9:ab:06:d3:ed:67:c3:d0:c6:8e:9b:27:d6:a0: d8:bc:c3:ab:ad:47:89:35:76:5d:75:d8:b3:90:4e: e2:83:8c:ac:ca:38:0e:da:27:45:9d:3f:55:d6:93: 9d:3b:40:b1:f1:0f:22:0a:78:ec:bd:06:86:e8:a0: 5b:62:4d:87:31:a7:34:92:95:fe:28:0b:d1:21:57: 51:4e:71:a2:9d:7a:86:59:e8:de:f7:bc:7d:07:27: 21:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:DE:A0:E5:87:28:99:46:5E:8B:4F:42:08:3D:0D:3B:3E:5A:23:E7 X509v3 Authority Key Identifier: keyid:A1:C2:39:65:70:40:17:72:42:9E:B8:CB:B0:DF:66:53:F1:67:8C:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:d7:fd:f6:cb:61:65:5d:23:94:a6:6b:a5:c0:26:44:33:45: 82:c3:31:62:d8:43:74:25:59:e0:01:f8:b5:88:d8:a8:bc:a0: f9:8f:aa:01:1f:11:b1:45:ef:91:12:fe:19:ec:f9:1e:44:9e: 03:2c:ce:e6:e6:69:24:5f:8e:8d:ba:c7:fe:03:05:7d:bc:f2: e5:24:05:f6:5d:52:6c:87:b5:4d:8a:27:b0:b9:85:91:24:6c: 6c:85:4b:8c:55:5e:f5:09:37:f7:7f:a9:dc:46:ed:7d:17:3e: 0a:5c:ea:b9:20:fe:9d:18:dd:8e:b3:43:c3:2f:70:d6:85:af: dc:37:db:ac:62:63:a1:b9:f0:17:af:4d:0a:74:72:20:93:87: 7a:18:d0:a7:3e:50:95:9a:a6:14:58:36:f5:cc:1d:6f:73:7f: 7b:f5:20:c6:55:d4:ce:c2:69:5c:df:1b:f4:ee:e1:5b:25:d5: 6a:63:aa:2b:c7:cf:44:13:62:ff:c3:56:77:d7:bb:08:f7:66: 75:14:56:01:c8:3b:fe:5d:e4:76:d8:c6:be:31:a9:76:44:60: 00:d8:fe:e6:bd:c3:fc:0a:7d:3f:18:38:b8:92:4a:9d:ee:1f: 9e:27:33:3b:7f:1b:8c:61:a7:75:db:f7:28:26:31:ff:1a:8a: 30:f0:b5:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U2RUMxMTAvBgNVBAUTKEExQzIzOTY1NzA0MDE3NzI0MjlFQjhDQkIwREY2NjUz RjE2NzhDRjYwHhcNMjYwMzI0MTUzOTQwWhcNMjYwMzMxMTUzOTQwWjAYMRYwFAYD VQQDEw02OWMyYjAzYy0xNGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA70InhZrEh+DrISdtpFUp8PBGUGYh/qZ94RhM16L227IWPtVIUT7ILFK4BWt0 CWbfhV88CQVfwX5ztFAKeQGH3Rp6WbuG6lb00SNm7iDYaBs43uHb+H7SKLT3tW/9 Ek1YvVYuJnYq7SwFsbEK9b7u92+b7ta5qKxkpO+Su9H8SXn3tI9CGtL8XWtHxLDa 6QJm/xZ1l4ULFucllC7XvbRMsOn4hYfb6asG0+1nw9DGjpsn1qDYvMOrrUeJNXZd ddizkE7ig4ysyjgO2idFnT9V1pOdO0Cx8Q8iCnjsvQaG6KBbYk2HMac0kpX+KAvR IVdRTnGinXqGWeje97x9BychAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDbeoOWH KJlGXotPQgg9DTs+WiPnMB8GA1UdIwQYMBaAFKHCOWVwQBdyQp64y7DfZlPxZ4z2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTZFQy9EM0FCNjAxNjE0 QzgxMUU1QTJGQ0VGMTVDNEY5QUUwMi9vY0k1WlhCQUYzSkNucmpMc045bVVfRm5q UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29jSTVaWEJBRjNKQ25yakxzTjltVV9GbmpQWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTZFQy9EM0FCNjAxNjE0QzgxMUU1QTJGQ0VGMTVDNEY5QUUwMi9vY0k1WlhCQUYz SkNucmpMc045bVVfRm5qUFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgNf99sthZV0jlKZrpcAmRDNFgsMxYthDdCVZ4AH4tYjYqLyg+Y+qAR8RsUXv kRL+Gez5HkSeAyzO5uZpJF+OjbrH/gMFfbzy5SQF9l1SbIe1TYonsLmFkSRsbIVL jFVe9Qk393+p3EbtfRc+ClzquSD+nRjdjrNDwy9w1oWv3DfbrGJjobnwF69NCnRy IJOHehjQpz5QlZqmFFg29cwdb3N/e/UgxlXUzsJpXN8b9O7hWyXVamOqK8fPRBNi /8NWd9e7CPdmdRRWAcg7/l3kdtjGvjGpdkRgANj+5r3D/Ap9Pxg4uJJKne4fnicz O38bjGGnddv3KCYx/xqKMPC14Q== -----END CERTIFICATE-----Generated at Thu Mar 26 08:23:17 2026 by rpki-client