$ rpki-client -vvf rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.mft File: oVZKa9a5Cg-he_V9i-rJ4pJZves.mft (raw, json) Hash identifier: XY3ShfpPH1MUsTr8D6tf9vXR1LgaXI6UcAwgEvnxFrQ= Subject key identifier: A9:C9:F9:B8:F5:C6:EC:53:3B:4F:3B:A1:4C:2A:EA:94:CD:30:48:A1 Authority key identifier: A1:56:4A:6B:D6:B9:0A:0F:A1:7B:F5:7D:8B:EA:C9:E2:92:59:BD:EB Certificate issuer: /CN=A91F61DA/serialNumber=A1564A6BD6B90A0FA17BF57D8BEAC9E29259BDEB Certificate serial: 0D47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oVZKa9a5Cg-he_V9i-rJ4pJZves.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.mft Manifest number: 0D3B Signing time: Tue 24 Mar 2026 17:53:07 +0000 Manifest this update: Tue 24 Mar 2026 17:53:07 +0000 Manifest next update: Tue 31 Mar 2026 17:53:07 +0000 Files and hashes: 1: oVZKa9a5Cg-he_V9i-rJ4pJZves.crl (hash: l627sAUlgSyKaFwx8kZSdQyyxCHOqOSNWZjjtUn3IJs=) 2: EA18D5547D8F11EC8E894A1DC4F9AE02.roa (hash: XMEHY700mwLD1H5UH+kDiYWGkC5d0JNM+7D3NKZezoM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.crl rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oVZKa9a5Cg-he_V9i-rJ4pJZves.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:53:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3399 (0xd47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F61DA, serialNumber=A1564A6BD6B90A0FA17BF57D8BEAC9E29259BDEB Validity Not Before: Mar 24 17:53:07 2026 GMT Not After : Mar 31 17:53:07 2026 GMT Subject: CN=69c2cf83-4e75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f7:18:8c:8d:1b:a3:92:f6:27:36:c2:fd:e1: bc:0d:9a:cb:5e:f6:a8:46:c3:b1:fa:56:d3:7f:06: 5e:12:3c:ad:93:4c:0e:d2:2a:61:55:34:d1:1a:00: 53:1d:51:c1:07:57:dd:50:f3:d7:42:5e:8f:b0:32: 08:16:eb:f3:2f:f0:74:af:14:d0:47:20:24:87:f5: 92:c6:91:3c:8e:43:95:27:bd:89:ed:a4:97:fe:55: 0b:f4:c3:8a:52:44:3c:51:3f:8f:05:26:26:3b:16: 4b:e9:87:7e:a0:68:52:a5:e9:9a:04:f5:62:22:18: 99:eb:70:1b:07:71:ae:22:1e:13:9f:a6:8f:a4:b4: 39:c1:16:06:5d:fd:6e:fa:5b:6d:11:45:ac:de:41: 58:c9:bd:1a:eb:84:92:76:65:77:6a:b2:bd:78:a7: 5a:be:3a:b9:4b:c2:02:a3:c7:05:d5:4c:49:3b:9c: 98:69:0e:05:36:97:ad:b2:60:0c:77:52:4d:1f:4a: ee:f6:c1:fc:22:a7:0c:14:ac:e5:6e:af:3d:36:b7: 0b:ec:db:82:85:8b:3a:6a:9b:c0:33:8d:21:ff:38: f1:fe:45:b0:aa:fc:95:50:03:a9:02:36:e7:53:0f: ef:6c:b7:67:a0:35:df:cd:40:f5:90:87:b2:f0:00: ca:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C9:F9:B8:F5:C6:EC:53:3B:4F:3B:A1:4C:2A:EA:94:CD:30:48:A1 X509v3 Authority Key Identifier: keyid:A1:56:4A:6B:D6:B9:0A:0F:A1:7B:F5:7D:8B:EA:C9:E2:92:59:BD:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oVZKa9a5Cg-he_V9i-rJ4pJZves.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:ec:0a:29:70:8c:40:b3:12:4d:bc:d4:ca:e2:af:a3:84:14: 72:65:34:54:f6:a7:42:39:b5:bb:29:d9:fa:a7:f7:42:78:82: 6c:2e:47:08:ca:23:30:9d:09:e7:6e:75:c8:a8:7e:58:f5:2d: 1e:d0:cb:a7:bc:fe:33:73:2a:d9:5d:61:31:34:1e:de:46:28: ec:51:80:c7:c6:64:36:2e:2d:9d:68:4b:0b:61:a7:e1:73:14: 46:a0:47:47:96:da:c8:30:c1:03:92:fd:15:7b:f3:89:26:a4: 77:5a:4f:d2:1b:60:33:71:e2:6b:1e:e0:cd:23:3b:48:e3:ce: dd:e6:9b:27:d9:e5:ff:9a:c5:b8:cc:c0:ed:41:46:24:e9:7d: 54:61:4f:63:59:36:f0:38:32:d5:aa:cc:91:35:d0:b0:a0:6c: 52:8a:b3:bd:07:c2:ea:16:87:11:b3:30:e7:64:36:15:ae:4e: 35:32:f2:cd:25:a5:78:d7:52:74:c0:e0:c6:0b:58:58:52:0b: fe:4e:23:65:44:22:66:93:ec:67:5a:c5:b4:a2:e6:3b:2b:23: 07:a6:7c:9e:61:c9:9e:bc:b6:c6:3b:84:1c:a0:48:40:28:2e: 13:a7:a3:ab:63:f0:fd:e8:50:f6:a9:00:6a:48:7d:79:af:16: 8e:6a:6a:3a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjYxREExMTAvBgNVBAUTKEExNTY0QTZCRDZCOTBBMEZBMTdCRjU3RDhCRUFDOUUy OTI1OUJERUIwHhcNMjYwMzI0MTc1MzA3WhcNMjYwMzMxMTc1MzA3WjAYMRYwFAYD VQQDEw02OWMyY2Y4My00ZTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3PcYjI0bo5L2JzbC/eG8DZrLXvaoRsOx+lbTfwZeEjytk0wO0iphVTTRGgBT HVHBB1fdUPPXQl6PsDIIFuvzL/B0rxTQRyAkh/WSxpE8jkOVJ72J7aSX/lUL9MOK UkQ8UT+PBSYmOxZL6Yd+oGhSpemaBPViIhiZ63AbB3GuIh4Tn6aPpLQ5wRYGXf1u +lttEUWs3kFYyb0a64SSdmV3arK9eKdavjq5S8ICo8cF1UxJO5yYaQ4FNpetsmAM d1JNH0ru9sH8IqcMFKzlbq89NrcL7NuChYs6apvAM40h/zjx/kWwqvyVUAOpAjbn Uw/vbLdnoDXfzUD1kIey8ADKPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKnJ+bj1 xuxTO087oUwq6pTNMEihMB8GA1UdIwQYMBaAFKFWSmvWuQoPoXv1fYvqyeKSWb3r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjFEQS8xN0M4MUZEMEY0 MUUxMUU5QTgzNDNBNzRDNEY5QUUwMi9vVlpLYTlhNUNnLWhlX1Y5aS1ySjRwSlp2 ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29WWkthOWE1Q2ctaGVfVjlpLXJKNHBKWnZlcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjFEQS8xN0M4MUZEMEY0MUUxMUU5QTgzNDNBNzRDNEY5QUUwMi9vVlpLYTlhNUNn LWhlX1Y5aS1ySjRwSlp2ZXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWuwKKXCMQLMSTbzUyuKvo4QUcmU0VPanQjm1uynZ+qf3QniCbC5HCMojMJ0J 5251yKh+WPUtHtDLp7z+M3Mq2V1hMTQe3kYo7FGAx8ZkNi4tnWhLC2Gn4XMURqBH R5bayDDBA5L9FXvziSakd1pP0htgM3Hiax7gzSM7SOPO3eabJ9nl/5rFuMzA7UFG JOl9VGFPY1k28Dgy1arMkTXQsKBsUoqzvQfC6haHEbMw52Q2Fa5ONTLyzSWleNdS dMDgxgtYWFIL/k4jZUQiZpPsZ1rFtKLmOysjB6Z8nmHJnry2xjuEHKBIQCguE6ej q2Pw/ehQ9qkAakh9ea8WjmpqOg== -----END CERTIFICATE-----Generated at Thu Mar 26 00:56:56 2026 by rpki-client