$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.mft File: ooradhG9_Q-tuB2KgDoRCZAPd4A.mft (raw, json) Hash identifier: D7ETuesmmirJSXuTGD4wDy7DPag8hflqHjg/I2CGSPY= Subject key identifier: 10:1C:C1:0D:EA:51:2C:0C:64:68:49:50:65:D8:20:DA:76:58:4E:50 Authority key identifier: A2:8A:DA:76:11:BD:FD:0F:AD:B8:1D:8A:80:3A:11:09:90:0F:77:80 Certificate issuer: /CN=A91FBFC9/serialNumber=A28ADA7611BDFD0FADB81D8A803A1109900F7780 Certificate serial: 08AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ooradhG9_Q-tuB2KgDoRCZAPd4A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.mft Manifest number: 089D Signing time: Tue 24 Mar 2026 20:17:33 +0000 Manifest this update: Tue 24 Mar 2026 20:17:33 +0000 Manifest next update: Tue 31 Mar 2026 20:17:33 +0000 Files and hashes: 1: ooradhG9_Q-tuB2KgDoRCZAPd4A.crl (hash: dqZfquKeFnICFXJbM/EkySQv8n2rqhSmaPC4VUvShVE=) 2: 76A59020E12911EAB8642E19C4F9AE02.roa (hash: t3r3ct1v62CkRoqbDTfbFNF8KY0PM5gtyGYmsu7VXes=) 3: B019C596499E11EBA61D7146C4F9AE02.roa (hash: vmFeCCqd0p+xBwwBiH862ux9Uk8d+Hb/Tq8YBNVAOrY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.crl rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ooradhG9_Q-tuB2KgDoRCZAPd4A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:17:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2223 (0x8af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBFC9, serialNumber=A28ADA7611BDFD0FADB81D8A803A1109900F7780 Validity Not Before: Mar 24 20:17:33 2026 GMT Not After : Mar 31 20:17:33 2026 GMT Subject: CN=69c2f15d-65e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e7:e9:c5:52:48:c0:6a:04:3f:76:5a:ab:6b: e1:fb:52:12:9b:2f:f5:37:ce:5d:05:b3:da:cb:9e: d2:f6:f4:12:4b:a5:d6:2f:51:95:d1:c7:11:38:ef: 3a:a6:b2:e6:ed:e4:07:b3:65:86:84:d3:74:37:9e: 5d:9c:15:8c:a7:8c:c6:35:1c:3e:fe:96:da:5a:d3: 08:3d:b6:56:99:45:25:9d:a9:4d:eb:f2:86:55:96: 62:2d:55:3c:81:a0:f5:66:08:cd:ff:38:5a:45:df: 52:05:b6:f4:33:a8:30:d1:3a:e1:c5:0f:d5:05:81: 6b:08:aa:b2:cd:ab:8e:13:02:87:44:e1:3f:9c:62: 51:14:0d:69:98:67:4e:99:24:b5:c4:a9:63:bf:fd: 4b:b3:0f:06:fa:3c:e0:43:8f:e5:62:84:01:c8:4c: 4c:12:a8:f8:f5:23:64:8a:d5:8f:58:28:14:f9:e3: 57:9c:a7:a4:c5:74:d4:56:4b:6e:e5:4e:50:41:48: d6:84:f1:05:92:7a:71:86:aa:68:1d:0f:62:0f:2f: 41:5c:82:26:36:9e:9c:7d:e6:1a:df:c4:e4:d4:0c: 6b:88:48:d7:4c:db:e7:08:1a:5e:09:7e:2e:02:ff: a4:40:15:ba:69:db:72:6f:0a:c7:e7:25:36:53:84: d7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:1C:C1:0D:EA:51:2C:0C:64:68:49:50:65:D8:20:DA:76:58:4E:50 X509v3 Authority Key Identifier: keyid:A2:8A:DA:76:11:BD:FD:0F:AD:B8:1D:8A:80:3A:11:09:90:0F:77:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ooradhG9_Q-tuB2KgDoRCZAPd4A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:6d:2a:f3:b9:80:0c:71:ef:28:e4:b5:a4:a2:c2:c5:65:0f: c2:54:53:8e:1f:b9:ea:de:02:05:d1:6b:6e:7e:e8:be:a0:7b: 22:0a:a3:78:5d:bd:03:ee:75:d6:18:03:36:57:17:10:5c:09: 1b:8e:ae:35:1d:41:0b:de:22:69:f9:3b:ad:16:bb:22:d1:16: b6:71:f9:41:50:4a:33:c4:fe:2b:c4:05:52:95:cf:1c:5b:8b: 17:82:82:4b:e9:ca:cb:82:91:55:0e:d9:c0:1a:30:2c:bc:83: 57:cd:9c:de:fe:ab:0c:47:74:99:1e:31:a7:33:5d:d9:7a:16: 04:61:8d:c3:ca:73:5f:ce:5f:bf:35:1e:81:f5:b6:87:81:7e: 31:80:66:33:1e:03:d7:6a:5c:cb:84:e8:ad:f7:ae:98:8d:db: ea:49:30:2d:eb:78:50:9e:d9:a5:44:0f:70:03:07:49:ac:86: 47:87:2b:dd:d1:03:a8:7e:56:66:1f:03:98:09:61:39:b3:b8: 4e:f2:47:1c:f5:12:ba:3d:56:f5:a2:19:27:f7:8d:85:17:88: 4e:16:48:54:2e:95:14:4f:e4:ad:a0:34:f4:ce:c8:38:5b:58: 12:c5:1b:2a:bd:ac:23:22:a3:bb:3e:4b:76:bf:ec:d1:64:af: 63:f5:03:56 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJGQzkxMTAvBgNVBAUTKEEyOEFEQTc2MTFCREZEMEZBREI4MUQ4QTgwM0ExMTA5 OTAwRjc3ODAwHhcNMjYwMzI0MjAxNzMzWhcNMjYwMzMxMjAxNzMzWjAYMRYwFAYD VQQDEw02OWMyZjE1ZC02NWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzufpxVJIwGoEP3Zaq2vh+1ISmy/1N85dBbPay57S9vQSS6XWL1GV0ccROO86 prLm7eQHs2WGhNN0N55dnBWMp4zGNRw+/pbaWtMIPbZWmUUlnalN6/KGVZZiLVU8 gaD1ZgjN/zhaRd9SBbb0M6gw0TrhxQ/VBYFrCKqyzauOEwKHROE/nGJRFA1pmGdO mSS1xKljv/1Lsw8G+jzgQ4/lYoQByExMEqj49SNkitWPWCgU+eNXnKekxXTUVktu 5U5QQUjWhPEFknpxhqpoHQ9iDy9BXIImNp6cfeYa38Tk1AxriEjXTNvnCBpeCX4u Av+kQBW6adtybwrH5yU2U4TX/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBAcwQ3q USwMZGhJUGXYINp2WE5QMB8GA1UdIwQYMBaAFKKK2nYRvf0PrbgdioA6EQmQD3eA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkZDOS9CMzdGNjUyMkUx MjcxMUVBOEVBQTIxMTZDNEY5QUUwMi9vb3JhZGhHOV9RLXR1QjJLZ0RvUkNaQVBk NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29vcmFkaEc5X1EtdHVCMktnRG9SQ1pBUGQ0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkZDOS9CMzdGNjUyMkUxMjcxMUVBOEVBQTIxMTZDNEY5QUUwMi9vb3JhZGhHOV9R LXR1QjJLZ0RvUkNaQVBkNEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbm0q87mADHHvKOS1pKLCxWUPwlRTjh+56t4CBdFrbn7ovqB7IgqjeF29A+51 1hgDNlcXEFwJG46uNR1BC94iafk7rRa7ItEWtnH5QVBKM8T+K8QFUpXPHFuLF4KC S+nKy4KRVQ7ZwBowLLyDV82c3v6rDEd0mR4xpzNd2XoWBGGNw8pzX85fvzUegfW2 h4F+MYBmMx4D12pcy4TorfeumI3b6kkwLet4UJ7ZpUQPcAMHSayGR4cr3dEDqH5W Zh8DmAlhObO4TvJHHPUSuj1W9aIZJ/eNhReIThZIVC6VFE/kraA09M7IOFtYEsUb Kr2sIyKjuz5Ldr/s0WSvY/UDVg== -----END CERTIFICATE-----Generated at Thu Mar 26 06:46:14 2026 by rpki-client