$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.mft File: 2OL6sVCi_VePZ-GbApZTmzdSyak.mft (raw, json) Hash identifier: oOoJIfZHXe7Jdc3wB79OZz2XIjnKi0dRavyfZPR54Aw= Subject key identifier: 8A:08:62:C7:DC:21:9E:9F:8E:F3:AB:C6:33:CF:6F:B3:96:E1:8B:17 Authority key identifier: D8:E2:FA:B1:50:A2:FD:57:8F:67:E1:9B:02:96:53:9B:37:52:C9:A9 Certificate issuer: /CN=A91EC225/serialNumber=D8E2FAB150A2FD578F67E19B0296539B3752C9A9 Certificate serial: 0F4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2OL6sVCi_VePZ-GbApZTmzdSyak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.mft Manifest number: 0F41 Signing time: Tue 24 Mar 2026 17:26:44 +0000 Manifest this update: Tue 24 Mar 2026 17:26:43 +0000 Manifest next update: Tue 31 Mar 2026 17:26:43 +0000 Files and hashes: 1: 2OL6sVCi_VePZ-GbApZTmzdSyak.crl (hash: GTVGSNESzsHYaJL+KF0yEFE/6MmRGLQ/mp0j/zKCUfs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.crl rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2OL6sVCi_VePZ-GbApZTmzdSyak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:26:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3915 (0xf4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC225, serialNumber=D8E2FAB150A2FD578F67E19B0296539B3752C9A9 Validity Not Before: Mar 24 17:26:43 2026 GMT Not After : Mar 31 17:26:43 2026 GMT Subject: CN=69c2c954-d89b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:1c:83:54:48:2e:18:05:4e:bc:dc:c9:62:6a: 5c:b8:84:db:9e:f4:b0:67:7c:f1:48:99:6a:05:12: 4c:41:6b:5c:a7:0b:0b:0b:5a:6b:e5:10:4f:13:54: f6:38:9c:8a:e1:78:7a:6a:57:05:9e:c5:c5:0c:57: 4a:ee:04:cb:63:8e:b5:d5:76:d2:34:78:5a:ff:0b: 84:03:72:74:3d:d2:2d:b1:69:0a:96:65:b0:ef:63: 80:28:99:5f:f6:a5:c5:9b:8c:d5:4f:f2:1b:5a:e6: 89:0f:dc:02:4b:31:89:0c:91:30:78:0b:dd:2c:48: ab:7c:98:bd:fc:a8:f4:b3:06:36:10:3c:21:f2:9a: 81:03:1f:e0:6b:c7:fd:46:7c:07:85:a1:d9:d6:88: 96:59:b5:1e:ed:45:5e:d0:94:2f:90:82:ef:14:56: 57:10:41:ba:a0:3d:bf:e7:92:54:3d:66:b4:58:6d: e3:3c:b3:1b:e0:d6:6e:3e:73:c1:6e:aa:bc:5e:4d: 3b:f6:3d:89:0a:97:40:a2:3a:e6:bc:93:df:4e:e5: 27:8a:b9:e8:16:56:06:f7:4e:4b:84:e6:16:86:63: d2:cb:8b:58:b3:20:4a:b8:90:3b:72:6a:b8:79:32: 25:79:a4:c2:9a:06:8a:06:26:29:d5:da:f5:ec:5f: bd:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:08:62:C7:DC:21:9E:9F:8E:F3:AB:C6:33:CF:6F:B3:96:E1:8B:17 X509v3 Authority Key Identifier: keyid:D8:E2:FA:B1:50:A2:FD:57:8F:67:E1:9B:02:96:53:9B:37:52:C9:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2OL6sVCi_VePZ-GbApZTmzdSyak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:d0:7f:d9:ea:4e:e5:e6:b0:d5:e0:06:d7:64:20:bf:6c:29: 8d:01:8f:bf:11:cf:a5:32:f4:40:0b:1d:92:be:f2:f2:23:96: be:f4:1c:45:86:3d:1e:bf:40:5d:2d:38:52:fb:2b:35:6e:96: 88:f2:0b:c8:ed:12:2e:4d:50:5e:e8:7b:8d:b7:1c:98:68:bb: fb:c2:b7:1e:7f:b3:9d:af:34:24:ec:84:30:ec:5f:75:71:47: 1a:ff:78:0a:83:81:cd:00:c4:13:3e:91:7e:4c:10:04:a0:23: 3a:5c:33:5a:be:c7:ad:b8:56:ab:9d:79:2a:96:89:9a:61:93: 18:a9:4e:ed:63:c1:fd:35:56:77:2b:57:0c:a3:b6:b7:5b:37: 48:ec:03:e5:19:2b:e7:aa:b7:09:91:31:68:b6:32:3d:03:cd: fb:87:83:c7:c7:82:d5:13:2b:0c:af:2f:92:9f:0b:aa:92:a4: bb:77:9a:22:e2:08:36:9c:ff:6c:39:46:4b:01:e1:f9:c6:28: c2:91:1b:b0:a9:ca:88:ae:7d:2a:ce:88:99:d4:42:72:35:43: f5:a2:05:dc:7f:6c:c0:40:fc:fa:ee:af:64:2f:68:e1:41:e3: 8f:2b:fb:9c:cf:61:b6:5e:42:36:50:59:d5:b3:b9:e4:9c:a8: 29:08:15:09 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUMyMjUxMTAvBgNVBAUTKEQ4RTJGQUIxNTBBMkZENTc4RjY3RTE5QjAyOTY1MzlC Mzc1MkM5QTkwHhcNMjYwMzI0MTcyNjQzWhcNMjYwMzMxMTcyNjQzWjAYMRYwFAYD VQQDEw02OWMyYzk1NC1kODliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlRyDVEguGAVOvNzJYmpcuITbnvSwZ3zxSJlqBRJMQWtcpwsLC1pr5RBPE1T2 OJyK4Xh6alcFnsXFDFdK7gTLY4611XbSNHha/wuEA3J0PdItsWkKlmWw72OAKJlf 9qXFm4zVT/IbWuaJD9wCSzGJDJEweAvdLEirfJi9/Kj0swY2EDwh8pqBAx/ga8f9 RnwHhaHZ1oiWWbUe7UVe0JQvkILvFFZXEEG6oD2/55JUPWa0WG3jPLMb4NZuPnPB bqq8Xk079j2JCpdAojrmvJPfTuUnirnoFlYG905LhOYWhmPSy4tYsyBKuJA7cmq4 eTIleaTCmgaKBiYp1dr17F+9jwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIoIYsfc IZ6fjvOrxjPPb7OW4YsXMB8GA1UdIwQYMBaAFNji+rFQov1Xj2fhmwKWU5s3Usmp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzIyNS80OTlGREY5MDhF NTUxMUU5ODBEMDlBNDJDNEY5QUUwMi8yT0w2c1ZDaV9WZVBaLUdiQXBaVG16ZFN5 YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJPTDZzVkNpX1ZlUFotR2JBcFpUbXpkU3lhay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzIyNS80OTlGREY5MDhFNTUxMUU5ODBEMDlBNDJDNEY5QUUwMi8yT0w2c1ZDaV9W ZVBaLUdiQXBaVG16ZFN5YWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ9B/2epO5eaw1eAG12Qgv2wpjQGPvxHPpTL0QAsdkr7y8iOWvvQcRYY9Hr9A XS04UvsrNW6WiPILyO0SLk1QXuh7jbccmGi7+8K3Hn+zna80JOyEMOxfdXFHGv94 CoOBzQDEEz6RfkwQBKAjOlwzWr7HrbhWq515KpaJmmGTGKlO7WPB/TVWdytXDKO2 t1s3SOwD5Rkr56q3CZExaLYyPQPN+4eDx8eC1RMrDK8vkp8LqpKku3eaIuIINpz/ bDlGSwHh+cYowpEbsKnKiK59Ks6ImdRCcjVD9aIF3H9swED8+u6vZC9o4UHjjyv7 nM9htl5CNlBZ1bO55JyoKQgVCQ== -----END CERTIFICATE-----Generated at Thu Mar 26 18:45:48 2026 by rpki-client