$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.mft File: oE50OtMfT4PwncXS9-9Pq-HvaHs.mft (raw, json) Hash identifier: 9r7vHv5Y/Hh1fIWHxxUwMsX99xo9FGGrwc1i7N8pwoY= Subject key identifier: 6C:33:2B:FF:08:DD:BE:42:C1:6E:3C:0E:B3:B0:88:CC:9D:EE:F3:F8 Authority key identifier: A0:4E:74:3A:D3:1F:4F:83:F0:9D:C5:D2:F7:EF:4F:AB:E1:EF:68:7B Certificate issuer: /CN=A91E0EF8/serialNumber=A04E743AD31F4F83F09DC5D2F7EF4FABE1EF687B Certificate serial: 066D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.mft Manifest number: 0649 Signing time: Tue 24 Mar 2026 22:25:19 +0000 Manifest this update: Tue 24 Mar 2026 22:25:19 +0000 Manifest next update: Tue 31 Mar 2026 22:25:19 +0000 Files and hashes: 1: oE50OtMfT4PwncXS9-9Pq-HvaHs.crl (hash: FQ/CCJ+cqo7yE9EoqMlcF77k8U+zDNG2ycLllTlPgh0=) 2: 1767CE4A93C711EDB3D8A867C4F9AE02.roa (hash: j0Lls1jMW2LtYeSOUO6Wabswupqh4cWP6NRbUoZu3gQ=) 3: 2F581CEA33F311EEABFC7410C4F9AE02.roa (hash: F9EcEQA+HmBdtnZV4TQMHFa8YoL9P87Gx491WL3HtyA=) 4: 16A4DFE893C711EDB3D8A867C4F9AE02.roa (hash: D28JViq5DTul15vvpmV6z9+X0ID4UKSv89OD87IAkHk=) 5: 1614034C93C711EDB3D8A867C4F9AE02.roa (hash: NrQQkVXLMpdvNf6nXRcerpadEJ5fwZiI58MW+BR6ujg=) 6: 180DF9BE93C711EDB3D8A867C4F9AE02.roa (hash: 2F9/OfNqLH/Bv3B/s5QChirZib/NP8advNQvVdkiNgM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.crl rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:25:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1645 (0x66d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0EF8, serialNumber=A04E743AD31F4F83F09DC5D2F7EF4FABE1EF687B Validity Not Before: Mar 24 22:25:19 2026 GMT Not After : Mar 31 22:25:19 2026 GMT Subject: CN=69c30f4f-499d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f3:6d:73:43:ec:4f:85:52:0f:72:04:5a:6a: 18:36:76:3b:54:68:de:4c:e8:5d:27:c7:11:d3:8b: bd:3d:37:75:b8:55:fc:88:91:76:fb:48:2a:60:f6: 9e:ae:1f:87:6a:4f:1b:fd:9d:fe:02:1a:db:a9:51: ea:cd:9e:9b:6d:f2:74:55:8a:d5:97:e0:7e:ae:76: 54:93:51:42:ea:cc:12:8e:55:ea:d1:42:57:d9:6f: a9:e2:fb:be:41:1b:6c:c1:24:c1:00:3b:5f:24:24: e4:4c:0a:21:12:b2:85:fe:00:20:bd:46:25:b0:86: a1:9f:ee:cf:6b:3b:da:a4:b0:e1:74:4e:13:79:be: f4:1e:b2:77:d3:82:79:d8:da:9b:9e:fd:dc:fd:70: d6:7e:7e:41:17:94:5c:4b:44:0c:8a:10:ec:d3:8b: c7:b3:33:b0:fa:15:ee:b9:7a:b1:b2:f6:15:b3:c3: 96:82:2b:47:2c:69:7e:88:21:a9:8a:9b:88:41:a0: 21:ac:89:85:fe:f1:e1:cd:ec:1e:3e:0e:6e:66:dd: 3d:61:9b:16:8d:09:c3:90:5e:6b:c4:01:ff:66:c2: eb:b8:14:e1:17:32:5b:1c:e7:47:43:0f:9c:a9:0c: e6:ec:b9:27:fc:21:73:b1:ee:5f:ca:af:31:b0:a1: 7c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:33:2B:FF:08:DD:BE:42:C1:6E:3C:0E:B3:B0:88:CC:9D:EE:F3:F8 X509v3 Authority Key Identifier: keyid:A0:4E:74:3A:D3:1F:4F:83:F0:9D:C5:D2:F7:EF:4F:AB:E1:EF:68:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:d5:9c:f5:fb:10:44:c7:6d:ae:86:47:11:55:f8:7a:54:d9: 77:37:bb:3a:ee:c5:35:13:ab:ec:d1:46:9d:33:3d:b2:68:2d: c3:ae:fd:88:b7:01:f1:96:e0:07:60:e0:90:fe:38:5c:31:1a: 7e:30:0c:f7:bb:bf:4d:0a:fb:dc:60:e0:31:09:92:d7:58:15: 52:44:6c:62:ae:1a:d1:15:57:c3:a8:6c:93:0f:9d:5f:6b:d6: ac:56:ab:2a:fa:ed:9a:1a:ee:a9:f5:f3:ad:23:15:9b:c5:77: 2b:04:5a:3a:45:ad:e6:3c:73:57:e1:ff:07:e8:57:db:83:70: b9:50:73:42:41:eb:c4:38:10:f5:42:c8:92:68:26:d1:35:db: 75:53:c9:83:60:9d:cc:cc:b1:61:f5:64:00:8c:d4:97:d6:03: cc:e0:92:31:a6:08:0d:74:d8:b3:54:4f:10:83:80:e4:f0:43: 6e:b3:19:64:08:ea:52:7a:01:56:db:2c:a5:2a:0a:60:a5:f6: 0a:75:a2:79:7b:e9:92:d6:88:9c:a1:c5:50:da:05:22:fd:98: f1:58:ef:27:5a:cd:14:87:98:40:7a:55:e3:c5:cd:c8:93:90: c5:62:72:9f:6a:8c:0c:df:87:f5:2e:cc:9f:78:20:9f:d2:d8: 33:f2:3d:bd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBFRjgxMTAvBgNVBAUTKEEwNEU3NDNBRDMxRjRGODNGMDlEQzVEMkY3RUY0RkFC RTFFRjY4N0IwHhcNMjYwMzI0MjIyNTE5WhcNMjYwMzMxMjIyNTE5WjAYMRYwFAYD VQQDEw02OWMzMGY0Zi00OTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnvNtc0PsT4VSD3IEWmoYNnY7VGjeTOhdJ8cR04u9PTd1uFX8iJF2+0gqYPae rh+Hak8b/Z3+AhrbqVHqzZ6bbfJ0VYrVl+B+rnZUk1FC6swSjlXq0UJX2W+p4vu+ QRtswSTBADtfJCTkTAohErKF/gAgvUYlsIahn+7PazvapLDhdE4Teb70HrJ304J5 2Nqbnv3c/XDWfn5BF5RcS0QMihDs04vHszOw+hXuuXqxsvYVs8OWgitHLGl+iCGp ipuIQaAhrImF/vHhzewePg5uZt09YZsWjQnDkF5rxAH/ZsLruBThFzJbHOdHQw+c qQzm7Lkn/CFzse5fyq8xsKF8mwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGwzK/8I 3b5CwW48DrOwiMyd7vP4MB8GA1UdIwQYMBaAFKBOdDrTH0+D8J3F0vfvT6vh72h7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEVGOC9DOTM4RDEwNkNC NTQxMUVCQTNEMzZDNUJDNEY5QUUwMi9vRTUwT3RNZlQ0UHduY1hTOS05UHEtSHZh SHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29FNTBPdE1mVDRQd25jWFM5LTlQcS1IdmFIcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEVGOC9DOTM4RDEwNkNCNTQxMUVCQTNEMzZDNUJDNEY5QUUwMi9vRTUwT3RNZlQ0 UHduY1hTOS05UHEtSHZhSHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAW9Wc9fsQRMdtroZHEVX4elTZdze7Ou7FNROr7NFGnTM9smgtw679iLcB8Zbg B2DgkP44XDEafjAM97u/TQr73GDgMQmS11gVUkRsYq4a0RVXw6hskw+dX2vWrFar KvrtmhruqfXzrSMVm8V3KwRaOkWt5jxzV+H/B+hX24NwuVBzQkHrxDgQ9ULIkmgm 0TXbdVPJg2CdzMyxYfVkAIzUl9YDzOCSMaYIDXTYs1RPEIOA5PBDbrMZZAjqUnoB VtsspSoKYKX2CnWieXvpktaInKHFUNoFIv2Y8VjvJ1rNFIeYQHpV48XNyJOQxWJy n2qMDN+H9S7Mn3ggn9LYM/I9vQ== -----END CERTIFICATE-----Generated at Thu Mar 26 12:05:06 2026 by rpki-client