$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.mft File: O407UYT_W0gbWw5ZsLIpzAbWCR4.mft (raw, json) Hash identifier: vaXvCxGdUCRCt49wyRVd7U+j/BHqKgj0Cq9PvV3XirI= Subject key identifier: 49:82:96:B6:00:61:85:3D:8D:FA:74:03:A3:8E:B1:68:FF:5A:F5:2B Authority key identifier: 3B:8D:3B:51:84:FF:5B:48:1B:5B:0E:59:B0:B2:29:CC:06:D6:09:1E Certificate issuer: /CN=A91EA944/serialNumber=3B8D3B5184FF5B481B5B0E59B0B229CC06D6091E Certificate serial: 1102 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O407UYT_W0gbWw5ZsLIpzAbWCR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.mft Manifest number: 10F8 Signing time: Thu 26 Mar 2026 17:14:22 +0000 Manifest this update: Thu 26 Mar 2026 17:14:22 +0000 Manifest next update: Thu 02 Apr 2026 17:14:22 +0000 Files and hashes: 1: O407UYT_W0gbWw5ZsLIpzAbWCR4.crl (hash: SxkQjRdpUVIt6d9sQ79TYV6tZw7QqRw8RK+c37hGp50=) 2: E3272FE036B911E99F4D9A5CC4F9AE02.roa (hash: nGZHOo02zqocOQQTpOHHhjFk6Qcj9ucaWzj0iMpauxQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.crl rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O407UYT_W0gbWw5ZsLIpzAbWCR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4354 (0x1102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA944, serialNumber=3B8D3B5184FF5B481B5B0E59B0B229CC06D6091E Validity Not Before: Mar 26 17:14:22 2026 GMT Not After : Apr 2 17:14:22 2026 GMT Subject: CN=69c5696e-eb9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:cb:43:40:75:1d:b8:73:1f:7a:b3:89:3e:aa: d2:6a:6d:58:a9:f1:54:74:1c:9b:fd:91:89:99:e8: 49:3a:5f:d6:e0:fa:43:b5:24:5a:66:fd:58:2c:1a: b2:0e:fb:42:04:07:39:e2:e6:e8:ab:1d:61:62:da: 5a:24:d8:75:94:ad:93:5c:ae:0f:ae:15:a9:1d:d8: b5:c6:77:2e:0b:09:0a:94:03:ea:66:41:2d:8a:db: ca:15:74:f3:05:e6:b5:a2:8f:c1:65:8d:9e:74:9b: ea:a5:5a:3c:45:e4:4c:72:14:ca:c2:33:5c:f5:88: 11:1e:c6:34:4a:24:4a:ed:45:c2:74:59:7c:a2:a9: d4:fd:2e:aa:e4:f8:f7:95:79:64:d8:28:3d:74:aa: c2:d6:91:fb:08:89:a5:f8:d9:53:fa:8e:9b:8b:56: 43:85:9b:1f:0f:22:e2:d1:f1:fe:f1:ec:53:c6:7a: ee:75:71:99:22:b5:40:17:eb:90:46:9e:93:66:f4: af:42:51:79:2f:a5:8a:ab:30:e0:f2:a9:dc:c0:61: 17:c3:f7:35:45:ac:38:ed:29:2e:53:83:44:16:7b: fa:83:76:ff:68:6b:d7:44:ae:bc:f6:c4:7d:2c:67: 0e:e9:cc:bc:a5:fe:70:45:b1:18:20:02:85:3b:d5: 8a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:82:96:B6:00:61:85:3D:8D:FA:74:03:A3:8E:B1:68:FF:5A:F5:2B X509v3 Authority Key Identifier: keyid:3B:8D:3B:51:84:FF:5B:48:1B:5B:0E:59:B0:B2:29:CC:06:D6:09:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O407UYT_W0gbWw5ZsLIpzAbWCR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:ff:02:04:0c:07:b7:5f:62:9e:ba:6b:06:21:cc:3b:85:3d: 75:07:dc:45:d7:95:ac:58:6a:85:db:9e:92:bc:df:cb:8a:df: a1:0e:66:a8:61:6c:f4:76:01:46:05:f3:f1:10:1a:d4:39:60: ac:96:f8:a3:c0:6e:d1:d1:b3:88:86:bf:eb:bb:e1:8f:ad:9b: 11:88:01:66:a7:4f:d6:37:2d:fe:d3:bc:60:13:f1:8b:91:70: f6:5a:c6:10:7d:57:d9:36:56:f6:65:88:b1:aa:a9:c6:45:d9: 28:f8:a4:53:73:85:78:93:00:9f:35:93:f0:93:68:bd:16:67: 3d:14:81:11:84:82:4f:7b:a7:fc:90:86:41:0e:db:b4:55:97: 3a:db:af:6d:18:d7:05:c0:6a:05:1c:0d:c3:1b:89:3f:c1:09: 4e:11:1d:8a:93:6a:c9:f4:e0:3a:e8:55:57:50:7e:5b:ba:ed: a8:bb:c7:6b:a3:c0:c0:fb:df:4a:e3:42:02:91:81:a0:5a:5a: 4a:4f:88:57:4f:b9:12:31:88:35:6d:3e:78:5f:d0:db:eb:3f: ec:83:75:2f:6a:5b:57:68:79:16:d4:45:1f:60:a8:22:fa:f2: b3:62:c0:0e:9b:5c:37:30:2e:ed:c7:8b:53:27:e2:ca:2a:59: cc:4c:83:cf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5NDQxMTAvBgNVBAUTKDNCOEQzQjUxODRGRjVCNDgxQjVCMEU1OUIwQjIyOUND MDZENjA5MUUwHhcNMjYwMzI2MTcxNDIyWhcNMjYwNDAyMTcxNDIyWjAYMRYwFAYD VQQDEw02OWM1Njk2ZS1lYjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1stDQHUduHMferOJPqrSam1YqfFUdByb/ZGJmehJOl/W4PpDtSRaZv1YLBqy DvtCBAc54uboqx1hYtpaJNh1lK2TXK4PrhWpHdi1xncuCwkKlAPqZkEtitvKFXTz Bea1oo/BZY2edJvqpVo8ReRMchTKwjNc9YgRHsY0SiRK7UXCdFl8oqnU/S6q5Pj3 lXlk2Cg9dKrC1pH7CIml+NlT+o6bi1ZDhZsfDyLi0fH+8exTxnrudXGZIrVAF+uQ Rp6TZvSvQlF5L6WKqzDg8qncwGEXw/c1Raw47SkuU4NEFnv6g3b/aGvXRK689sR9 LGcO6cy8pf5wRbEYIAKFO9WK0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEmClrYA YYU9jfp0A6OOsWj/WvUrMB8GA1UdIwQYMBaAFDuNO1GE/1tIG1sOWbCyKcwG1gke MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTk0NC83OTZDOUQ3NDM2 QjkxMUU5OTg0Qjc2NUNDNEY5QUUwMi9PNDA3VVlUX1cwZ2JXdzVac0xJcHpBYldD UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL080MDdVWVRfVzBnYld3NVpzTElwekFiV0NSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTk0NC83OTZDOUQ3NDM2QjkxMUU5OTg0Qjc2NUNDNEY5QUUwMi9PNDA3VVlUX1cw Z2JXdzVac0xJcHpBYldDUjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATP8CBAwHt19inrprBiHMO4U9dQfcRdeVrFhqhduekrzfy4rfoQ5mqGFs9HYB RgXz8RAa1DlgrJb4o8Bu0dGziIa/67vhj62bEYgBZqdP1jct/tO8YBPxi5Fw9lrG EH1X2TZW9mWIsaqpxkXZKPikU3OFeJMAnzWT8JNovRZnPRSBEYSCT3un/JCGQQ7b tFWXOtuvbRjXBcBqBRwNwxuJP8EJThEdipNqyfTgOuhVV1B+W7rtqLvHa6PAwPvf SuNCApGBoFpaSk+IV0+5EjGINW0+eF/Q2+s/7IN1L2pbV2h5FtRFH2CoIvrys2LA DptcNzAu7ceLUyfiyipZzEyDzw== -----END CERTIFICATE-----Generated at Thu Mar 26 20:09:34 2026 by rpki-client