$ rpki-client -vvf rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft File: Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft (raw, json) Hash identifier: iZ8zecsFv2IBfjZKdQybc/gpbcvueqEkES58impiv7E= Subject key identifier: F6:93:DF:18:00:38:29:EC:DB:F9:45:A8:84:28:5E:D6:C9:E8:C8:70 Authority key identifier: 3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60 Certificate issuer: /CN=A91188EE/serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360 Certificate serial: 0196 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft Manifest number: 0181 Signing time: Wed 25 Mar 2026 04:02:49 +0000 Manifest this update: Wed 25 Mar 2026 04:02:48 +0000 Manifest next update: Wed 01 Apr 2026 04:02:48 +0000 Files and hashes: 1: Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl (hash: RvPEBff9FBXeV6CH+LDqO4oF4WSyXYivFvDVzuuEadc=) 2: B7B28B24B29611F091864D65C4F9AE02.roa (hash: dj/sfeD/XP/p4+SxOW5PGasZJgjYig5gGrKVB5oVAWk=) 3: 4DC69458F51C11F0B1C1D2E9586F56BC.roa (hash: QcCJl1UfRJP0/shxvSvEBu5HkTvWkijjCe1nldV+mo4=) 4: 6AAF8E08F51C11F09AD046EA586F56BC.roa (hash: s2lIkMQgjms5atxnw0PAOxe6sKifUyjcGIbRJ9ah5DU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:02:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 406 (0x196) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91188EE, serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360 Validity Not Before: Mar 25 04:02:48 2026 GMT Not After : Apr 1 04:02:48 2026 GMT Subject: CN=69c35e69-b0f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:74:82:c1:34:ef:9e:1c:35:7f:5c:9f:dd:24: 96:4d:79:ad:e7:46:f2:7d:41:8d:f6:18:6a:1e:e2: ef:3a:32:6a:c3:0a:b3:16:b3:6f:1e:f9:c2:62:e0: 14:36:70:68:1b:d9:eb:e0:6b:46:74:6f:ba:f7:e7: 92:8a:16:c1:ae:1e:8a:ee:a4:53:d8:71:5f:f8:a3: 62:4b:0d:39:53:87:47:4c:b5:d5:4a:7b:f1:42:0d: 0f:81:42:d8:84:3c:e0:b3:44:1b:c0:60:e0:1d:92: 1f:0b:32:26:f6:c5:98:6e:ea:05:5e:7e:1e:72:be: 54:65:d1:02:79:65:98:34:f9:1e:d5:87:4d:fa:b5: f6:4f:80:c0:cc:c9:aa:42:f9:cc:0a:6e:dd:22:0c: e4:a0:55:07:8a:da:16:89:31:4c:e9:07:3f:e5:fe: 9c:e9:fb:e3:4b:c7:56:0a:4b:31:08:a2:21:66:b5: b9:bf:0a:d7:ba:2c:19:bc:42:d8:9c:e7:cd:08:cf: f1:14:fd:28:c2:60:e5:4a:2c:6e:ef:30:11:0b:c9: 31:5d:69:90:96:75:bd:89:3e:ce:40:57:68:48:ba: 67:79:b6:2e:40:43:9a:17:3d:55:2f:e0:0e:45:52: b7:66:7c:63:48:bb:96:1a:07:06:60:be:af:94:53: 4b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:93:DF:18:00:38:29:EC:DB:F9:45:A8:84:28:5E:D6:C9:E8:C8:70 X509v3 Authority Key Identifier: keyid:3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:c8:2a:a5:a1:89:fb:3a:90:16:86:8a:08:55:8e:6e:34:e7: d7:80:76:64:58:b5:69:9f:69:3c:c3:2f:14:f0:a1:eb:8f:78: db:d8:ec:3a:4e:bf:6d:b3:d0:bf:2b:af:d8:29:6b:e4:9e:34: 31:bc:ec:92:0f:38:45:ab:2d:89:64:fd:c6:5e:36:e6:98:a4: 63:35:b8:0f:ca:d3:8e:ff:eb:e1:b6:58:72:fb:4b:77:9d:29: d9:77:8f:f5:41:5e:fe:4c:59:01:44:e2:b3:10:5f:c5:d7:d7: 0b:7f:68:9a:b7:c0:c9:7a:71:85:03:96:09:ad:84:4c:ce:de: c0:27:d4:a8:e9:ca:d4:8b:e5:7f:65:85:d0:90:3b:2c:57:8f: de:25:97:a8:15:a8:91:0b:29:c0:0d:19:e9:45:3f:a3:36:e9: 6d:25:8d:d0:e7:2a:8b:52:36:c1:f6:1c:50:81:d0:38:b1:fd: 77:ec:8f:c2:35:19:29:49:d8:77:cb:53:98:49:c1:1a:79:14: 4f:91:e7:85:b0:33:11:04:36:3f:81:ff:9e:a7:f7:89:95:17: 02:f4:cb:98:9c:ea:f5:91:a8:0c:43:91:56:10:15:6b:2e:af: de:2c:d8:aa:de:ca:48:bc:01:df:9e:dc:59:65:d7:e3:62:f9: 4e:2f:6d:c3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg4RUUxMTAvBgNVBAUTKDNBRURBODA0MDdENzdCQjUyODQ4QUJEOUY3MjU5QkQ4 MDdBNUQzNjAwHhcNMjYwMzI1MDQwMjQ4WhcNMjYwNDAxMDQwMjQ4WjAYMRYwFAYD VQQDEw02OWMzNWU2OS1iMGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsXSCwTTvnhw1f1yf3SSWTXmt50byfUGN9hhqHuLvOjJqwwqzFrNvHvnCYuAU NnBoG9nr4GtGdG+69+eSihbBrh6K7qRT2HFf+KNiSw05U4dHTLXVSnvxQg0PgULY hDzgs0QbwGDgHZIfCzIm9sWYbuoFXn4ecr5UZdECeWWYNPke1YdN+rX2T4DAzMmq QvnMCm7dIgzkoFUHitoWiTFM6Qc/5f6c6fvjS8dWCksxCKIhZrW5vwrXuiwZvELY nOfNCM/xFP0owmDlSixu7zARC8kxXWmQlnW9iT7OQFdoSLpnebYuQEOaFz1VL+AO RVK3ZnxjSLuWGgcGYL6vlFNLqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPaT3xgA OCns2/lFqIQoXtbJ6MhwMB8GA1UdIwQYMBaAFDrtqAQH13u1KEir2fclm9gHpdNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODhFRS8zMjA5NzMxQUZC QUYxMUVFQTZCQzM5NTJDNEY5QUUwMi9PdTJvQkFmWGU3VW9TS3ZaOXlXYjJBZWww MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL091Mm9CQWZYZTdVb1NLdlo5eVdiMkFlbDAyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODhFRS8zMjA5NzMxQUZCQUYxMUVFQTZCQzM5NTJDNEY5QUUwMi9PdTJvQkFmWGU3 VW9TS3ZaOXlXYjJBZWwwMkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADsgqpaGJ+zqQFoaKCFWObjTn14B2ZFi1aZ9pPMMvFPCh649429jsOk6/bbPQ vyuv2Clr5J40Mbzskg84RastiWT9xl425pikYzW4D8rTjv/r4bZYcvtLd50p2XeP 9UFe/kxZAUTisxBfxdfXC39omrfAyXpxhQOWCa2ETM7ewCfUqOnK1Ivlf2WF0JA7 LFeP3iWXqBWokQspwA0Z6UU/ozbpbSWN0Ocqi1I2wfYcUIHQOLH9d+yPwjUZKUnY d8tTmEnBGnkUT5HnhbAzEQQ2P4H/nqf3iZUXAvTLmJzq9ZGoDEORVhAVay6v3izY qt7KSLwB357cWWXX42L5Ti9tww== -----END CERTIFICATE-----Generated at Thu Mar 26 11:24:09 2026 by rpki-client