$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft File: oNGf1mnyVeFici98GdiGS7Brc5k.mft (raw, json) Hash identifier: RV2ZIrQf13jEv3LK4o5s4AJO2feooqXExv/ACzl/slI= Subject key identifier: F2:DC:BC:81:80:C4:80:2C:F7:90:E6:3F:BA:E5:72:03:AD:51:27:E9 Authority key identifier: A0:D1:9F:D6:69:F2:55:E1:62:72:2F:7C:19:D8:86:4B:B0:6B:73:99 Certificate issuer: /CN=A91DEC72/serialNumber=A0D19FD669F255E162722F7C19D8864BB06B7399 Certificate serial: 01EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNGf1mnyVeFici98GdiGS7Brc5k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft Manifest number: 01EB Signing time: Wed 25 Mar 2026 02:40:23 +0000 Manifest this update: Wed 25 Mar 2026 02:40:22 +0000 Manifest next update: Wed 01 Apr 2026 02:40:22 +0000 Files and hashes: 1: oNGf1mnyVeFici98GdiGS7Brc5k.crl (hash: 9/ecpabtwGAWADrmdbyDKJ8OEZ7nD9FuErkGzTEQHKo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.crl rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNGf1mnyVeFici98GdiGS7Brc5k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:40:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 492 (0x1ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEC72, serialNumber=A0D19FD669F255E162722F7C19D8864BB06B7399 Validity Not Before: Mar 25 02:40:22 2026 GMT Not After : Apr 1 02:40:22 2026 GMT Subject: CN=69c34b17-f6ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e2:ec:9b:cd:88:ff:d4:94:31:35:53:4b:7b: be:2d:cc:0b:5c:76:d0:d2:03:b2:9b:a7:bf:15:ae: cc:f4:2c:bb:66:66:05:33:45:70:4a:7a:fa:25:c8: 12:56:8a:86:f9:f7:5b:cf:2f:f6:0d:cb:2b:d6:97: 3d:29:3e:b7:3a:ed:29:e1:f3:b8:0b:b7:32:f3:2a: 97:84:8c:b4:01:1c:e7:24:13:1a:02:8c:a2:6e:f6: 24:c5:98:1b:78:a2:0d:b5:4d:5a:67:35:73:4f:d6: 5e:0a:d9:e1:e5:2d:1f:51:89:8f:ce:8a:3f:1b:04: ba:f3:bd:5f:c2:f2:5c:81:a6:4c:91:63:32:0a:a0: e3:a9:3b:56:4f:d7:3e:3b:a7:79:57:28:e6:60:e7: 61:5b:47:e9:9f:00:12:91:90:ec:51:8a:17:0b:6d: 86:a4:52:cd:4b:1e:62:dd:c1:4d:2d:fb:12:62:57: 0f:36:38:09:92:c9:50:08:d2:93:be:4f:56:67:b0: e0:f9:f3:af:01:d1:51:e5:0f:e1:86:40:2e:69:0c: 76:de:78:ab:d3:a3:5b:77:e7:6d:f5:77:df:24:87: 8c:cf:84:c5:0e:39:5d:d3:a5:ee:cc:d8:64:ff:67: 49:26:56:21:94:87:e0:68:9a:bd:7f:92:d4:a0:d0: b9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:DC:BC:81:80:C4:80:2C:F7:90:E6:3F:BA:E5:72:03:AD:51:27:E9 X509v3 Authority Key Identifier: keyid:A0:D1:9F:D6:69:F2:55:E1:62:72:2F:7C:19:D8:86:4B:B0:6B:73:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oNGf1mnyVeFici98GdiGS7Brc5k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEC72/3F71FF883B9111EEAC617E6AC4F9AE02/oNGf1mnyVeFici98GdiGS7Brc5k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:a7:b4:46:73:a7:af:ae:ab:64:5b:2d:36:24:04:f3:a2:9f: 62:03:08:e8:84:e7:6f:23:b2:7f:28:42:c6:37:63:29:6d:89: 16:52:64:b9:af:8a:6b:c9:06:96:b9:a6:c7:66:67:51:ee:aa: b1:25:4a:4b:98:7c:62:15:30:cb:2e:45:58:09:d4:5b:03:7e: 90:d5:56:d6:d8:b4:d2:b4:a6:ec:53:08:05:8b:91:05:de:5e: a9:a4:3e:ed:fb:06:40:17:33:bb:f9:b9:b7:8a:3b:b2:7a:44: bb:f5:19:e1:2a:e5:7c:e6:09:7c:7f:28:1d:88:fc:a1:5a:17: 2c:25:30:2d:66:f8:bf:c0:3e:29:40:1b:8f:17:3a:4c:5e:39: 79:04:e5:f2:84:b7:c0:f9:eb:66:ce:77:21:3a:d8:cb:7b:80: 41:55:75:2b:73:e1:92:ed:fc:0c:2a:68:b4:f7:1d:6c:e3:a0: 5c:bf:cd:95:9e:35:f5:95:30:96:d7:47:53:fb:d0:f8:05:8e: 29:1a:90:c5:b3:84:ab:ad:19:76:88:74:61:32:bb:77:b9:b3: 22:54:d4:12:79:9a:77:ce:a0:41:2e:0c:d0:7a:06:f4:c5:49: a6:66:25:5b:e2:64:9f:41:14:a2:b6:ea:fd:85:1e:65:5f:8e: 02:08:3b:85 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVDNzIxMTAvBgNVBAUTKEEwRDE5RkQ2NjlGMjU1RTE2MjcyMkY3QzE5RDg4NjRC QjA2QjczOTkwHhcNMjYwMzI1MDI0MDIyWhcNMjYwNDAxMDI0MDIyWjAYMRYwFAYD VQQDEw02OWMzNGIxNy1mNmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuOLsm82I/9SUMTVTS3u+LcwLXHbQ0gOym6e/Fa7M9Cy7ZmYFM0VwSnr6JcgS VoqG+fdbzy/2Dcsr1pc9KT63Ou0p4fO4C7cy8yqXhIy0ARznJBMaAoyibvYkxZgb eKINtU1aZzVzT9ZeCtnh5S0fUYmPzoo/GwS6871fwvJcgaZMkWMyCqDjqTtWT9c+ O6d5VyjmYOdhW0fpnwASkZDsUYoXC22GpFLNSx5i3cFNLfsSYlcPNjgJkslQCNKT vk9WZ7Dg+fOvAdFR5Q/hhkAuaQx23nir06Nbd+dt9XffJIeMz4TFDjld06XuzNhk /2dJJlYhlIfgaJq9f5LUoNC5eQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPLcvIGA xIAs95DmP7rlcgOtUSfpMB8GA1UdIwQYMBaAFKDRn9Zp8lXhYnIvfBnYhkuwa3OZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUM3Mi8zRjcxRkY4ODNC OTExMUVFQUM2MTdFNkFDNEY5QUUwMi9vTkdmMW1ueVZlRmljaTk4R2RpR1M3QnJj NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29OR2YxbW55VmVGaWNpOThHZGlHUzdCcmM1ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUM3Mi8zRjcxRkY4ODNCOTExMUVFQUM2MTdFNkFDNEY5QUUwMi9vTkdmMW1ueVZl RmljaTk4R2RpR1M3QnJjNWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAi6e0RnOnr66rZFstNiQE86KfYgMI6ITnbyOyfyhCxjdjKW2JFlJkua+Ka8kG lrmmx2ZnUe6qsSVKS5h8YhUwyy5FWAnUWwN+kNVW1ti00rSm7FMIBYuRBd5eqaQ+ 7fsGQBczu/m5t4o7snpEu/UZ4SrlfOYJfH8oHYj8oVoXLCUwLWb4v8A+KUAbjxc6 TF45eQTl8oS3wPnrZs53ITrYy3uAQVV1K3Phku38DCpotPcdbOOgXL/NlZ419ZUw ltdHU/vQ+AWOKRqQxbOEq60Zdoh0YTK7d7mzIlTUEnmad86gQS4M0HoG9MVJpmYl W+Jkn0EUorbq/YUeZV+OAgg7hQ== -----END CERTIFICATE-----Generated at Thu Mar 26 08:53:58 2026 by rpki-client