$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft File: ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft (raw, json) Hash identifier: fAM1LpH3JHyqLZJuh+XhPppEZLduQXE8JYgDaIgI3VM= Subject key identifier: EE:34:2C:EA:69:45:EB:0E:41:87:5D:B2:5B:2E:77:DC:77:66:15:5C Authority key identifier: A2:0C:57:F5:2C:E9:8C:88:48:F6:36:25:0E:4A:46:70:81:1B:50:76 Certificate issuer: /CN=A91E7656/serialNumber=A20C57F52CE98C8848F636250E4A4670811B5076 Certificate serial: 0CB2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft Manifest number: 0CAE Signing time: Tue 24 Mar 2026 18:17:30 +0000 Manifest this update: Tue 24 Mar 2026 18:17:30 +0000 Manifest next update: Tue 31 Mar 2026 18:17:30 +0000 Files and hashes: 1: ogxX9SzpjIhI9jYlDkpGcIEbUHY.crl (hash: umpL+dhis0WpNxdxvnVfzFZXcHaF3KA/d+YobCtK/oQ=) 2: AF73E1423D2011F0ACC34F2BC4F9AE02.roa (hash: W7MZ66614Bjz+q19F1iQRur60uJ3iXxnIUipfMhpqPA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.crl rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3250 (0xcb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7656, serialNumber=A20C57F52CE98C8848F636250E4A4670811B5076 Validity Not Before: Mar 24 18:17:30 2026 GMT Not After : Mar 31 18:17:30 2026 GMT Subject: CN=69c2d53a-556b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8c:5f:31:ea:50:e8:76:d2:08:a0:2b:15:f6: 1b:66:86:cc:3d:1a:74:74:f8:19:1d:1a:e2:76:cb: 7c:0a:c5:d1:62:c6:87:56:b5:d2:86:b4:36:6c:19: 10:d4:f1:f9:e3:b4:e8:f7:b9:67:06:8b:a4:0c:62: 11:05:d4:b9:3f:61:12:c1:df:46:cb:36:a0:02:06: fe:a0:be:0e:ac:9b:07:49:da:60:a9:1b:3e:c8:70: 8b:0b:03:9d:9d:8f:1f:22:91:d9:4f:a2:de:35:05: a9:b4:25:25:49:0c:0c:b0:f1:49:d0:d5:bc:41:94: 49:3b:6d:62:49:df:e5:aa:9d:3a:67:3b:d3:d4:3e: 67:26:8e:93:e3:2f:ed:05:3e:76:1d:a5:78:e0:e0: 82:98:7f:68:50:75:d7:65:3b:0c:65:2e:ce:ed:0c: 7d:2f:27:f9:fd:0f:a4:4e:be:80:8b:e5:a7:fb:5d: 3a:6c:4f:c1:97:c5:2f:67:eb:40:62:ea:5d:a3:ce: 95:34:26:e8:42:e7:13:5e:49:97:ca:97:75:64:d4: 87:c3:41:54:9c:a4:36:44:aa:9c:05:1d:f6:8c:6b: eb:e8:5f:b5:bf:f3:9c:15:02:46:14:91:0d:50:94: 06:ef:08:a4:38:eb:1f:82:ce:4b:1e:20:3d:42:6c: 18:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:34:2C:EA:69:45:EB:0E:41:87:5D:B2:5B:2E:77:DC:77:66:15:5C X509v3 Authority Key Identifier: keyid:A2:0C:57:F5:2C:E9:8C:88:48:F6:36:25:0E:4A:46:70:81:1B:50:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:36:57:81:ba:28:ef:19:b5:39:43:0d:5b:32:e4:b0:8e:89: 28:48:65:c8:09:b5:be:af:bd:ea:dc:1b:66:bf:8c:5b:b9:d4: 48:dd:89:3f:26:f3:1d:97:48:ee:8d:36:3f:a4:2a:da:63:b3: 6a:00:dc:b5:1f:c6:b7:0e:ea:80:72:5e:c4:28:7d:23:2e:27: ae:a5:1a:2c:05:ec:b9:81:27:67:4f:6b:2f:41:67:b6:41:be: f5:04:e6:2b:b3:14:1a:f4:9f:d9:82:da:45:e8:49:30:f1:e6: 81:e1:42:90:0a:e5:c9:bc:33:d0:3b:4a:86:80:d1:74:a6:c1: a6:45:b1:e9:1b:40:2e:95:b9:73:de:a3:86:4e:5c:07:f4:19: 8a:b0:b8:b9:8e:aa:56:98:bb:4b:91:d9:82:49:53:2c:eb:c8: 1c:e5:6f:8d:59:b3:2b:59:d8:f8:e5:05:51:bd:90:04:fb:45: 54:8c:fd:7f:1b:6f:4f:45:06:c3:2b:0b:08:db:c0:97:77:12: 00:74:0f:ba:1b:5e:38:2a:f2:2c:27:2a:62:c6:21:62:5d:f5: 38:12:b5:12:0b:f4:0a:7b:7c:0f:69:87:b2:89:dd:15:86:47: 3d:1e:9b:28:dc:68:76:64:93:30:8f:60:b1:a3:10:4f:98:17: 82:fb:f3:e2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc2NTYxMTAvBgNVBAUTKEEyMEM1N0Y1MkNFOThDODg0OEY2MzYyNTBFNEE0Njcw ODExQjUwNzYwHhcNMjYwMzI0MTgxNzMwWhcNMjYwMzMxMTgxNzMwWjAYMRYwFAYD VQQDEw02OWMyZDUzYS01NTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuYxfMepQ6HbSCKArFfYbZobMPRp0dPgZHRridst8CsXRYsaHVrXShrQ2bBkQ 1PH547To97lnBoukDGIRBdS5P2ESwd9GyzagAgb+oL4OrJsHSdpgqRs+yHCLCwOd nY8fIpHZT6LeNQWptCUlSQwMsPFJ0NW8QZRJO21iSd/lqp06ZzvT1D5nJo6T4y/t BT52HaV44OCCmH9oUHXXZTsMZS7O7Qx9Lyf5/Q+kTr6Ai+Wn+106bE/Bl8UvZ+tA Yupdo86VNCboQucTXkmXypd1ZNSHw0FUnKQ2RKqcBR32jGvr6F+1v/OcFQJGFJEN UJQG7wikOOsfgs5LHiA9QmwYxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO40LOpp ResOQYddslsud9x3ZhVcMB8GA1UdIwQYMBaAFKIMV/Us6YyISPY2JQ5KRnCBG1B2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzY1Ni8wRUUzQTVCQzBD RDYxMUVBQkY1NjI1NTNDNEY5QUUwMi9vZ3hYOVN6cGpJaEk5allsRGtwR2NJRWJV SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29neFg5U3pwakloSTlqWWxEa3BHY0lFYlVIWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzY1Ni8wRUUzQTVCQzBDRDYxMUVBQkY1NjI1NTNDNEY5QUUwMi9vZ3hYOVN6cGpJ aEk5allsRGtwR2NJRWJVSFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbTZXgboo7xm1OUMNWzLksI6JKEhlyAm1vq+96twbZr+MW7nUSN2JPybzHZdI 7o02P6Qq2mOzagDctR/Gtw7qgHJexCh9Iy4nrqUaLAXsuYEnZ09rL0FntkG+9QTm K7MUGvSf2YLaRehJMPHmgeFCkArlybwz0DtKhoDRdKbBpkWx6RtALpW5c96jhk5c B/QZirC4uY6qVpi7S5HZgklTLOvIHOVvjVmzK1nY+OUFUb2QBPtFVIz9fxtvT0UG wysLCNvAl3cSAHQPuhteOCryLCcqYsYhYl31OBK1Egv0Cnt8D2mHsondFYZHPR6b KNxodmSTMI9gsaMQT5gXgvvz4g== -----END CERTIFICATE-----Generated at Thu Mar 26 19:43:32 2026 by rpki-client