$ rpki-client -vvf rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft File: O4dpDvQFVnODtvcv3TARYM6CHys.mft (raw, json) Hash identifier: 3UdbI+E+lHelRqOnWFNtyDrm4+EYQ2rLUEOvInxG6eE= Subject key identifier: 56:3B:4B:B2:67:F9:08:FA:EB:74:20:0D:EB:88:7E:9E:8D:DA:67:39 Authority key identifier: 3B:87:69:0E:F4:05:56:73:83:B6:F7:2F:DD:30:11:60:CE:82:1F:2B Certificate issuer: /CN=A91F81AD/serialNumber=3B87690EF405567383B6F72FDD301160CE821F2B Certificate serial: 02CE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft Manifest number: 02C2 Signing time: Wed 25 Mar 2026 01:02:53 +0000 Manifest this update: Wed 25 Mar 2026 01:02:53 +0000 Manifest next update: Wed 01 Apr 2026 01:02:53 +0000 Files and hashes: 1: O4dpDvQFVnODtvcv3TARYM6CHys.crl (hash: QKiXxThv+3dld2ZH7x7UFt0YlmRDZ9P34+9IECaWyaI=) 2: F86A2F7680FA11ED9B35954DC4F9AE02.roa (hash: 4SMwt+gACInnRK5OGYg5pUcdCWuk0YqF9HQ/Xt+IzcY=) 3: F9424C6C80FA11ED9B35954DC4F9AE02.roa (hash: kA6NvISB8IT/6NkuxuF6Q7P9ApF1p1wHgdDAw6Jwa34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.crl rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:02:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 718 (0x2ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F81AD, serialNumber=3B87690EF405567383B6F72FDD301160CE821F2B Validity Not Before: Mar 25 01:02:53 2026 GMT Not After : Apr 1 01:02:53 2026 GMT Subject: CN=69c3343d-a15d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d8:3c:ef:fd:90:91:f4:6c:08:df:97:de:54: 6b:54:03:37:62:93:0e:b9:7a:e1:34:67:df:88:02: 67:fb:d7:ed:c8:7c:26:4d:2a:68:81:36:cb:9c:23: 68:89:99:de:33:c9:af:b6:fa:52:61:f0:1e:2e:9b: 69:8e:fb:cd:0e:b8:7e:b9:95:9a:20:3f:89:49:a0: 50:69:26:f6:0b:27:32:58:b1:00:14:c5:ca:60:a0: 46:76:1a:0d:b9:92:c1:8b:a8:ad:63:e3:61:24:f3: 47:fb:71:99:7b:d8:04:96:eb:bb:7f:4e:63:ab:94: d3:d7:1a:df:b3:28:7f:6e:e6:b8:78:df:d8:f5:ab: 62:8f:e1:23:64:f9:08:eb:f3:61:a5:bd:3d:30:1f: 54:76:c9:2d:5a:62:1c:93:69:bf:eb:a8:8a:32:30: 42:33:b1:12:f2:c4:d6:ce:aa:8a:22:e2:b1:4b:4f: 52:e4:70:65:f4:c9:c2:23:e6:76:3f:f1:77:28:e0: 3f:2b:cc:91:d7:ab:6b:62:aa:23:a8:be:86:26:b0: c8:13:d3:40:93:1e:6c:26:e1:5f:8e:97:37:fa:14: 14:e9:76:26:7a:be:9a:b6:8a:04:61:0d:8a:c8:fd: ac:f1:66:19:73:08:d1:53:dd:07:9b:a8:c0:19:9c: 3f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:3B:4B:B2:67:F9:08:FA:EB:74:20:0D:EB:88:7E:9E:8D:DA:67:39 X509v3 Authority Key Identifier: keyid:3B:87:69:0E:F4:05:56:73:83:B6:F7:2F:DD:30:11:60:CE:82:1F:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:49:8b:65:63:cf:5c:fc:4c:93:db:31:58:1e:f9:e4:8c:6b: 2f:fb:6d:35:bd:00:a2:db:8c:bf:3b:c4:7a:11:fc:0e:50:a3: 52:cc:b7:33:88:06:70:28:0b:ca:2c:3b:72:6f:d5:e9:2c:c2: 77:08:57:bf:c0:c6:3e:1e:9b:46:3c:6e:e1:9f:0f:86:91:8f: 61:ad:2c:54:8f:ca:19:e8:2c:21:16:1c:8b:af:7c:95:ab:78: a2:34:95:f3:08:f1:4a:21:ca:1e:09:fc:9e:cd:3f:5f:05:0a: a6:4e:d7:ee:91:40:8d:60:ca:65:eb:55:b1:3e:50:2c:36:b7: 72:f3:67:52:35:c1:e5:e8:5e:e7:e4:f4:70:49:1e:41:8e:a8: a6:5b:e3:04:04:98:d1:c6:be:44:7b:f5:28:19:fe:79:ab:1d: 15:cf:09:46:10:37:10:90:d6:4e:d1:c2:ef:ac:6c:45:56:5e: 80:35:a5:fd:65:18:fd:68:62:8c:0c:eb:3a:5f:fe:cd:50:46: 7a:6b:29:a0:7c:23:cf:2b:b8:e3:6f:9a:e2:88:30:95:69:fc: ff:4e:e5:fe:fc:d8:b2:71:0f:7b:b8:45:91:93:84:c8:72:ff: 22:cd:c9:65:6b:38:15:01:51:fd:d1:ff:eb:1b:34:3d:70:1b: 8a:4f:b4:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAs4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgxQUQxMTAvBgNVBAUTKDNCODc2OTBFRjQwNTU2NzM4M0I2RjcyRkREMzAxMTYw Q0U4MjFGMkIwHhcNMjYwMzI1MDEwMjUzWhcNMjYwNDAxMDEwMjUzWjAYMRYwFAYD VQQDEw02OWMzMzQzZC1hMTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjdg87/2QkfRsCN+X3lRrVAM3YpMOuXrhNGffiAJn+9ftyHwmTSpogTbLnCNo iZneM8mvtvpSYfAeLptpjvvNDrh+uZWaID+JSaBQaSb2CycyWLEAFMXKYKBGdhoN uZLBi6itY+NhJPNH+3GZe9gEluu7f05jq5TT1xrfsyh/bua4eN/Y9atij+EjZPkI 6/Nhpb09MB9UdsktWmIck2m/66iKMjBCM7ES8sTWzqqKIuKxS09S5HBl9MnCI+Z2 P/F3KOA/K8yR16trYqojqL6GJrDIE9NAkx5sJuFfjpc3+hQU6XYmer6atooEYQ2K yP2s8WYZcwjRU90Hm6jAGZw/oQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFY7S7Jn +Qj663QgDeuIfp6N2mc5MB8GA1UdIwQYMBaAFDuHaQ70BVZzg7b3L90wEWDOgh8r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODFBRC80M0E1MTFBRTJD QkUxMUVEOTk4MjRCNENDNEY5QUUwMi9PNGRwRHZRRlZuT0R0dmN2M1RBUllNNkNI eXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL080ZHBEdlFGVm5PRHR2Y3YzVEFSWU02Q0h5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODFBRC80M0E1MTFBRTJDQkUxMUVEOTk4MjRCNENDNEY5QUUwMi9PNGRwRHZRRlZu T0R0dmN2M1RBUllNNkNIeXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZkmLZWPPXPxMk9sxWB755IxrL/ttNb0AotuMvzvEehH8DlCjUsy3M4gGcCgL yiw7cm/V6SzCdwhXv8DGPh6bRjxu4Z8PhpGPYa0sVI/KGegsIRYci698lat4ojSV 8wjxSiHKHgn8ns0/XwUKpk7X7pFAjWDKZetVsT5QLDa3cvNnUjXB5ehe5+T0cEke QY6oplvjBASY0ca+RHv1KBn+easdFc8JRhA3EJDWTtHC76xsRVZegDWl/WUY/Whi jAzrOl/+zVBGemspoHwjzyu442+a4ogwlWn8/07l/vzYsnEPe7hFkZOEyHL/Is3J ZWs4FQFR/dH/6xs0PXAbik+0Aw== -----END CERTIFICATE-----Generated at Thu Mar 26 14:08:05 2026 by rpki-client