$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft File: OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft (raw, json) Hash identifier: aaVvX5Tv4N1t6rVWx1HBmvvZj44Dgwx6I9bfL3FHkgw= Subject key identifier: 99:83:A9:B1:43:67:A4:07:63:40:4A:F5:62:A3:54:D7:6F:B2:B8:51 Authority key identifier: 38:1E:53:48:50:46:CB:30:27:91:C9:09:F2:DB:D6:7D:AF:8D:78:1A Certificate issuer: /CN=A91DB0C2/serialNumber=381E53485046CB302791C909F2DBD67DAF8D781A Certificate serial: 0B16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OB5TSFBGyzAnkckJ8tvWfa-NeBo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft Manifest number: 0B0E Signing time: Tue 24 Mar 2026 19:07:28 +0000 Manifest this update: Tue 24 Mar 2026 19:07:28 +0000 Manifest next update: Tue 31 Mar 2026 19:07:28 +0000 Files and hashes: 1: OB5TSFBGyzAnkckJ8tvWfa-NeBo.crl (hash: YShGFTRWT22oVKJlqtBLUXDUkwqje50NmvUK+K0nH4k=) 2: E8DA2D1C5F5211EABFCF4128C4F9AE02.roa (hash: 7rxQ44c/qdRbGP8wrso0qxvln83h8xRgmyXIf3/sc94=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.crl rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OB5TSFBGyzAnkckJ8tvWfa-NeBo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:07:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2838 (0xb16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB0C2, serialNumber=381E53485046CB302791C909F2DBD67DAF8D781A Validity Not Before: Mar 24 19:07:28 2026 GMT Not After : Mar 31 19:07:28 2026 GMT Subject: CN=69c2e0f0-e705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:29:4c:a3:62:a9:84:63:26:cc:2f:e2:aa:f1: eb:a7:af:ba:cf:94:89:1d:c5:e1:c4:04:95:02:56: 6b:f6:bb:77:71:22:f7:01:ab:82:88:12:56:7f:57: c1:a7:28:1b:97:96:79:c5:44:6f:7b:64:e6:df:24: 59:db:4e:5e:77:ff:33:51:19:3f:db:54:c1:2c:60: 4b:2e:cc:7a:55:48:6d:2f:5d:e3:66:e0:98:8e:1d: 48:e0:22:56:80:fc:9a:22:5f:88:2e:4c:70:ec:0c: 31:70:87:80:ec:ff:9c:0f:43:78:83:13:47:bc:a3: 76:51:14:79:7a:85:7e:d1:e8:bc:13:fd:c0:69:0a: 86:f6:82:4b:0c:5b:4a:24:96:1b:8f:15:20:48:d9: 19:f0:af:d9:8d:41:70:60:cb:79:d4:a9:f9:ac:41: e4:6b:08:e5:81:b5:0c:2d:72:9b:59:1e:3a:40:5b: fa:ac:31:26:b7:54:60:33:c1:dd:dd:aa:94:55:0b: 30:09:78:63:b0:28:91:c5:61:05:b0:b6:e3:40:97: 5d:67:cb:2c:2f:63:42:c1:75:ab:2e:c6:47:48:2f: 9f:e1:37:2a:95:a5:68:1f:dc:82:8a:12:98:b1:95: c2:f5:97:a6:e5:1a:0c:27:36:bc:e1:60:5f:f2:aa: 4a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:83:A9:B1:43:67:A4:07:63:40:4A:F5:62:A3:54:D7:6F:B2:B8:51 X509v3 Authority Key Identifier: keyid:38:1E:53:48:50:46:CB:30:27:91:C9:09:F2:DB:D6:7D:AF:8D:78:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OB5TSFBGyzAnkckJ8tvWfa-NeBo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:2a:ba:d6:4d:e0:4b:74:73:c8:4f:0f:30:28:1b:48:25:95: 50:b6:3a:72:55:48:06:e6:59:0d:1f:96:d4:1e:34:0a:fa:d2: 87:7c:19:ea:04:ae:ed:06:82:47:e7:89:81:99:f3:e8:e5:91: 33:72:03:1a:8e:6c:f5:b1:b9:ad:b2:8a:c3:ca:09:ab:61:30: 30:df:67:d7:9c:6f:40:2f:d8:35:03:28:e3:95:20:40:ce:05: 11:74:b3:7f:c2:af:75:f8:b9:00:a6:c2:fe:df:e1:52:7c:ee: 33:0d:25:06:13:6a:c1:15:3e:25:49:1e:77:5f:85:2a:18:fd: 10:b4:d9:58:17:9d:e3:43:62:13:52:03:6f:ba:c9:84:54:f0: 0c:5e:57:ef:38:3e:2b:d1:71:dd:b4:67:ab:64:80:02:e4:53: bd:21:f7:15:86:af:ca:41:d1:30:3f:03:f3:dd:ed:51:20:46: e5:14:6d:8a:e8:40:40:4a:8d:c0:ce:20:83:9a:a1:da:e4:f3: 07:46:79:55:4d:44:76:0d:de:34:c0:cf:26:3e:3d:5b:56:2f: 68:5a:9b:71:7f:cf:80:4a:71:99:a5:d6:99:4b:d7:69:2d:9a: 06:7a:1d:c3:71:4b:e1:b9:a2:fe:e7:0a:34:74:f6:fb:4d:da: 48:97:d2:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCxYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIwQzIxMTAvBgNVBAUTKDM4MUU1MzQ4NTA0NkNCMzAyNzkxQzkwOUYyREJENjdE QUY4RDc4MUEwHhcNMjYwMzI0MTkwNzI4WhcNMjYwMzMxMTkwNzI4WjAYMRYwFAYD VQQDEw02OWMyZTBmMC1lNzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwilMo2KphGMmzC/iqvHrp6+6z5SJHcXhxASVAlZr9rt3cSL3AauCiBJWf1fB pygbl5Z5xURve2Tm3yRZ205ed/8zURk/21TBLGBLLsx6VUhtL13jZuCYjh1I4CJW gPyaIl+ILkxw7AwxcIeA7P+cD0N4gxNHvKN2URR5eoV+0ei8E/3AaQqG9oJLDFtK JJYbjxUgSNkZ8K/ZjUFwYMt51Kn5rEHkawjlgbUMLXKbWR46QFv6rDEmt1RgM8Hd 3aqUVQswCXhjsCiRxWEFsLbjQJddZ8ssL2NCwXWrLsZHSC+f4TcqlaVoH9yCihKY sZXC9Zem5RoMJza84WBf8qpKlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJmDqbFD Z6QHY0BK9WKjVNdvsrhRMB8GA1UdIwQYMBaAFDgeU0hQRsswJ5HJCfLb1n2vjXga MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjBDMi9GRDg4MzgyMjVG NTExMUVBODk5OTNEMjdDNEY5QUUwMi9PQjVUU0ZCR3l6QW5rY2tKOHR2V2ZhLU5l Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09CNVRTRkJHeXpBbmtja0o4dHZXZmEtTmVCby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjBDMi9GRDg4MzgyMjVGNTExMUVBODk5OTNEMjdDNEY5QUUwMi9PQjVUU0ZCR3l6 QW5rY2tKOHR2V2ZhLU5lQm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATSq61k3gS3RzyE8PMCgbSCWVULY6clVIBuZZDR+W1B40CvrSh3wZ6gSu7QaC R+eJgZnz6OWRM3IDGo5s9bG5rbKKw8oJq2EwMN9n15xvQC/YNQMo45UgQM4FEXSz f8Kvdfi5AKbC/t/hUnzuMw0lBhNqwRU+JUked1+FKhj9ELTZWBed40NiE1IDb7rJ hFTwDF5X7zg+K9Fx3bRnq2SAAuRTvSH3FYavykHRMD8D893tUSBG5RRtiuhAQEqN wM4gg5qh2uTzB0Z5VU1Edg3eNMDPJj49W1YvaFqbcX/PgEpxmaXWmUvXaS2aBnod w3FL4bmi/ucKNHT2+03aSJfSIw== -----END CERTIFICATE-----Generated at Thu Mar 26 02:26:41 2026 by rpki-client