$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft File: _oJu6bwS2q07GXRxsEE_HrIIJjU.mft (raw, json) Hash identifier: 3N0a84xNuvqs24VDd5NIW+HcE+bAVqQpayRfaqpWEdQ= Subject key identifier: 90:76:9D:AF:9A:C1:D6:2D:BB:28:C9:61:80:60:67:EF:70:A6:BF:5C Authority key identifier: FE:82:6E:E9:BC:12:DA:AD:3B:19:74:71:B0:41:3F:1E:B2:08:26:35 Certificate issuer: /CN=A91CEBCA/serialNumber=FE826EE9BC12DAAD3B197471B0413F1EB2082635 Certificate serial: 3562 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft Manifest number: 3543 Signing time: Tue 24 Mar 2026 14:30:20 +0000 Manifest this update: Tue 24 Mar 2026 14:30:20 +0000 Manifest next update: Tue 31 Mar 2026 14:30:20 +0000 Files and hashes: 1: _oJu6bwS2q07GXRxsEE_HrIIJjU.crl (hash: bitfOoSmBiU4cZiI+3w6qDCx6cOy3+YVDcXNju1XyjM=) 2: 9954B962F02D11EFBA26B94FC4F9AE02.roa (hash: 99YygClo0kB3JyoGQXR3g3LXUoBxw1KUF7KrE+OpztE=) 3: BFABA2D6BECE11F0B218C045C4F9AE02.roa (hash: /QkgzfATlH/sUZdlcC1kixai5w0E/QTcB6zQhhCEKdA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.crl rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 14:30:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13666 (0x3562) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEBCA, serialNumber=FE826EE9BC12DAAD3B197471B0413F1EB2082635 Validity Not Before: Mar 24 14:30:20 2026 GMT Not After : Mar 31 14:30:20 2026 GMT Subject: CN=69c29ffc-4bb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a3:31:bc:ae:59:50:f1:c2:f1:af:11:f1:85: a1:52:5b:02:c7:d1:60:56:06:7e:c3:09:6c:cb:e5: 9b:a9:bc:f0:ef:f9:6c:8e:d6:01:95:e5:fa:a1:a7: 76:2c:70:10:04:7c:c5:0d:8d:29:0b:16:a9:79:10: 61:dd:ef:86:de:69:21:aa:5e:a3:3b:07:b3:7e:46: 98:08:67:17:1e:fc:36:50:ba:b3:ec:d0:6c:ef:f7: 09:86:54:91:26:eb:c0:13:ae:33:d6:31:2c:a7:94: 4f:e4:23:db:cc:df:9d:73:a4:0d:68:e4:10:7b:bf: ba:e2:28:43:79:e1:2d:72:2e:5b:17:af:ad:e0:10: 85:eb:64:79:d3:a8:dd:e1:82:5b:56:a7:1a:70:cb: 63:08:4e:d2:06:eb:78:00:80:46:23:67:3d:e6:0e: e5:e0:87:31:df:e4:33:9f:07:97:80:78:e6:06:52: 70:33:e5:b0:4c:58:fe:b2:ea:ed:e3:33:01:20:c6: 97:4d:2f:48:93:c5:91:c1:57:d2:7c:28:14:94:04: 5a:4b:6f:46:b2:98:48:6d:20:a6:09:d5:1f:b6:e6: 5c:5a:20:8f:36:0c:ff:7e:de:7c:df:91:7a:83:c4: f2:28:5d:39:b5:3e:89:6d:56:0f:27:64:52:b0:69: 7b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:76:9D:AF:9A:C1:D6:2D:BB:28:C9:61:80:60:67:EF:70:A6:BF:5C X509v3 Authority Key Identifier: keyid:FE:82:6E:E9:BC:12:DA:AD:3B:19:74:71:B0:41:3F:1E:B2:08:26:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:7a:af:97:c9:6b:8b:83:a3:cc:f8:99:5a:38:32:21:3f:15: 92:d4:55:a0:23:22:fb:32:c5:b8:45:ff:24:c6:7e:dc:62:90: 17:cd:b1:ed:28:09:be:26:3b:51:82:fa:a3:89:01:ac:a0:09: ff:41:e3:55:77:c0:27:ee:ff:03:cc:4f:02:7f:22:83:c4:04: ff:11:fb:7a:29:18:d9:61:17:bb:16:54:95:4c:40:44:fa:06: 09:16:af:77:01:0d:ff:00:58:17:5a:02:66:d9:3c:9d:2c:f6: 4e:a9:91:95:ae:86:db:84:3b:00:d6:45:b6:50:4c:27:da:f1: 47:b7:df:f7:1f:2e:0c:87:43:c4:1a:ed:d9:b3:98:f5:e6:33: 4d:46:d4:21:bc:36:70:92:03:ea:62:9b:9d:ba:9c:7e:7d:35: f5:f7:e0:2c:f2:cc:08:ba:b6:9f:dd:5e:3d:fe:d6:60:84:bc: 19:93:72:90:f3:e5:d9:df:a6:c3:00:1f:90:d6:ba:76:8d:36: 3d:3c:80:7f:16:5d:73:10:34:f5:29:68:21:19:e9:8a:82:c6: a8:74:1b:53:b5:0e:db:36:9d:04:cc:5b:07:66:93:9f:46:db: ff:53:8e:63:b6:76:7a:8f:81:15:36:df:5d:c2:fe:b8:f0:82: 3a:13:18:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VCQ0ExMTAvBgNVBAUTKEZFODI2RUU5QkMxMkRBQUQzQjE5NzQ3MUIwNDEzRjFF QjIwODI2MzUwHhcNMjYwMzI0MTQzMDIwWhcNMjYwMzMxMTQzMDIwWjAYMRYwFAYD VQQDEw02OWMyOWZmYy00YmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmKMxvK5ZUPHC8a8R8YWhUlsCx9FgVgZ+wwlsy+Wbqbzw7/lsjtYBleX6oad2 LHAQBHzFDY0pCxapeRBh3e+G3mkhql6jOwezfkaYCGcXHvw2ULqz7NBs7/cJhlSR JuvAE64z1jEsp5RP5CPbzN+dc6QNaOQQe7+64ihDeeEtci5bF6+t4BCF62R506jd 4YJbVqcacMtjCE7SBut4AIBGI2c95g7l4Icx3+QznweXgHjmBlJwM+WwTFj+surt 4zMBIMaXTS9Ik8WRwVfSfCgUlARaS29GsphIbSCmCdUftuZcWiCPNgz/ft5835F6 g8TyKF05tT6JbVYPJ2RSsGl7EQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJB2na+a wdYtuyjJYYBgZ+9wpr9cMB8GA1UdIwQYMBaAFP6Cbum8EtqtOxl0cbBBPx6yCCY1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUJDQS9CNTg4QjRBNjFE ODgxMUUyOENBRThGRTEwOEIwMkNEMi9fb0p1NmJ3UzJxMDdHWFJ4c0VFX0hySUlK alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19vSnU2YndTMnEwN0dYUnhzRUVfSHJJSUpqVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUJDQS9CNTg4QjRBNjFEODgxMUUyOENBRThGRTEwOEIwMkNEMi9fb0p1NmJ3UzJx MDdHWFJ4c0VFX0hySUlKalUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPHqvl8lri4OjzPiZWjgyIT8VktRVoCMi+zLFuEX/JMZ+3GKQF82x7SgJviY7 UYL6o4kBrKAJ/0HjVXfAJ+7/A8xPAn8ig8QE/xH7eikY2WEXuxZUlUxARPoGCRav dwEN/wBYF1oCZtk8nSz2TqmRla6G24Q7ANZFtlBMJ9rxR7ff9x8uDIdDxBrt2bOY 9eYzTUbUIbw2cJID6mKbnbqcfn019ffgLPLMCLq2n91ePf7WYIS8GZNykPPl2d+m wwAfkNa6do02PTyAfxZdcxA09SloIRnpioLGqHQbU7UO2zadBMxbB2aTn0bb/1OO Y7Z2eo+BFTbfXcL+uPCCOhMY2Q== -----END CERTIFICATE-----Generated at Thu Mar 26 16:46:39 2026 by rpki-client