$ rpki-client -vvf rpki.apnic.net/member_repository/A9196AF7/CBE7F36824CE11F1BC1F5B8EA9833773/ouLfhQX-LyqKzdbd8cVh7_fdnuI.mft File: ouLfhQX-LyqKzdbd8cVh7_fdnuI.mft (raw, json) Hash identifier: Lft5fKz5mRJRLfClnRW4SDbjP5cLR+WS2Msew+lxexQ= Subject key identifier: 2F:DC:35:70:C2:C8:14:15:E9:C8:4E:F5:FF:E1:04:EC:12:93:11:6E Authority key identifier: A2:E2:DF:85:05:FE:2F:2A:8A:CD:D6:DD:F1:C5:61:EF:F7:DD:9E:E2 Certificate issuer: /CN=A9196AF7/serialNumber=A2E2DF8505FE2F2A8ACDD6DDF1C561EFF7DD9EE2 Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ouLfhQX-LyqKzdbd8cVh7_fdnuI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196AF7/CBE7F36824CE11F1BC1F5B8EA9833773/ouLfhQX-LyqKzdbd8cVh7_fdnuI.mft Manifest number: 04 Signing time: Wed 25 Mar 2026 08:24:18 +0000 Manifest this update: Wed 25 Mar 2026 08:24:18 +0000 Manifest next update: Wed 01 Apr 2026 08:24:18 +0000 Files and hashes: 1: ouLfhQX-LyqKzdbd8cVh7_fdnuI.crl (hash: cHCnOj2aIYLiXORENjtl5nfztw7VxU+3D4ChdY4qY8U=) 2: 7EF6CB6E24CF11F1AAA533A9A9833773.roa (hash: 8y7L9hPSTuk1LDFXpb7ShDJmE7OnOp5HbjTXee/kCzg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196AF7/CBE7F36824CE11F1BC1F5B8EA9833773/ouLfhQX-LyqKzdbd8cVh7_fdnuI.crl rsync://rpki.apnic.net/member_repository/A9196AF7/CBE7F36824CE11F1BC1F5B8EA9833773/ouLfhQX-LyqKzdbd8cVh7_fdnuI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ouLfhQX-LyqKzdbd8cVh7_fdnuI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:24:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196AF7, serialNumber=A2E2DF8505FE2F2A8ACDD6DDF1C561EFF7DD9EE2 Validity Not Before: Mar 25 08:24:18 2026 GMT Not After : Apr 1 08:24:18 2026 GMT Subject: CN=69c39bb2-d79f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4b:7f:2f:fe:3b:39:aa:aa:b6:1a:7a:88:3c: 24:bb:e0:4d:02:d6:56:b5:a8:31:79:e9:7a:91:ac: 0d:63:66:98:8f:09:75:87:ba:fc:4b:9f:54:55:73: 4e:a4:03:53:67:2a:ad:69:30:55:fa:11:79:ae:fb: a2:b4:33:c9:62:2d:e2:f7:8a:79:9e:11:b6:af:b3: 71:14:f3:e6:2d:b0:0d:f6:dd:9b:19:da:79:ea:25: c1:27:e2:3e:88:b5:92:84:20:30:5d:21:e5:7f:c6: 5d:14:8a:4e:2b:6d:31:b8:b2:33:20:85:81:a9:fa: 2c:4b:6e:99:1f:61:c5:27:86:dd:08:74:bf:7c:70: 1c:0b:ef:4c:57:c9:61:22:5b:88:c8:75:a0:a6:35: f6:8d:42:5d:17:ea:9e:86:f3:ce:f2:4f:6e:50:4e: 3b:2d:51:3d:94:48:ce:ee:c4:37:e4:68:be:9e:2f: bb:47:8e:77:9c:bd:47:ca:c4:6e:17:8a:29:fe:62: 4c:29:fa:e2:0f:cf:65:3d:32:67:f7:9d:d0:5e:03: 37:e5:e9:50:bd:db:0a:ec:73:31:52:a0:b4:68:f0: 1e:71:9a:ed:02:8f:66:f9:78:fa:a7:f7:6c:b1:d1: e9:bb:dd:49:69:99:a7:37:0b:de:4f:63:3f:3c:2a: 13:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:DC:35:70:C2:C8:14:15:E9:C8:4E:F5:FF:E1:04:EC:12:93:11:6E X509v3 Authority Key Identifier: keyid:A2:E2:DF:85:05:FE:2F:2A:8A:CD:D6:DD:F1:C5:61:EF:F7:DD:9E:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196AF7/CBE7F36824CE11F1BC1F5B8EA9833773/ouLfhQX-LyqKzdbd8cVh7_fdnuI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ouLfhQX-LyqKzdbd8cVh7_fdnuI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196AF7/CBE7F36824CE11F1BC1F5B8EA9833773/ouLfhQX-LyqKzdbd8cVh7_fdnuI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:9f:6e:60:ba:e5:1d:f7:ef:0f:1c:71:c9:ec:9c:d5:b5:54: 2f:f9:26:7a:50:86:bc:9b:e4:99:52:94:ea:1b:6c:38:cc:18: f3:f9:39:73:fe:63:b7:a2:4f:e9:c0:64:00:39:70:7d:f3:b4: de:30:6a:ad:02:31:c3:b9:42:78:6e:5c:43:91:8e:ab:dc:80: d6:97:cd:7c:92:6a:24:50:24:de:dd:37:f5:69:5f:74:47:b4: b2:93:c0:89:c9:27:4d:63:ce:f0:42:05:f5:e4:12:5e:0d:c8: 98:3f:1c:b9:f5:78:e1:44:0a:9d:a0:8c:dc:6d:bc:f6:66:36: 4c:c5:67:0d:46:23:23:e0:0a:e0:85:a9:9c:7f:43:bc:ec:a8: 2c:67:40:17:0e:08:f8:f0:f0:7a:bf:3a:aa:e7:5f:75:ea:68: 10:c6:6f:78:45:c0:f1:07:e3:a1:0f:c4:c9:3b:f2:49:14:6f: 54:b8:8b:1d:65:74:f0:c4:d2:19:1b:7e:5b:15:1f:44:04:de: 17:18:b5:63:bc:94:29:e0:a4:dd:11:b3:1a:29:fe:e5:2e:a1: 7d:56:cf:27:89:ab:9e:42:51:21:3f:8e:a0:4f:64:86:ed:34: a8:ce:65:3c:76:3a:c2:84:76:eb:47:45:ae:de:81:39:90:be: 01:39:80:34 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NkFGNzExMC8GA1UEBRMoQTJFMkRGODUwNUZFMkYyQThBQ0RENkRERjFDNTYxRUZG N0REOUVFMjAeFw0yNjAzMjUwODI0MThaFw0yNjA0MDEwODI0MThaMBgxFjAUBgNV BAMTDTY5YzM5YmIyLWQ3OWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjS38v/js5qqq2GnqIPCS74E0C1la1qDF56XqRrA1jZpiPCXWHuvxLn1RVc06k A1NnKq1pMFX6EXmu+6K0M8liLeL3inmeEbavs3EU8+YtsA323ZsZ2nnqJcEn4j6I tZKEIDBdIeV/xl0Uik4rbTG4sjMghYGp+ixLbpkfYcUnht0IdL98cBwL70xXyWEi W4jIdaCmNfaNQl0X6p6G887yT25QTjstUT2USM7uxDfkaL6eL7tHjnecvUfKxG4X iin+Ykwp+uIPz2U9Mmf3ndBeAzfl6VC92wrsczFSoLRo8B5xmu0Cj2b5ePqn92yx 0em73Ulpmac3C95PYz88KhMFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUL9w1cMLI FBXpyE71/+EE7BKTEW4wHwYDVR0jBBgwFoAUouLfhQX+LyqKzdbd8cVh7/fdnuIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2QUY3L0NCRTdGMzY4MjRD RTExRjFCQzFGNUI4RUE5ODMzNzczL291TGZoUVgtTHlxS3pkYmQ4Y1ZoN19mZG51 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb3VMZmhRWC1MeXFLemRiZDhjVmg3X2ZkbnVJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2 QUY3L0NCRTdGMzY4MjRDRTExRjFCQzFGNUI4RUE5ODMzNzczL291TGZoUVgtTHlx S3pkYmQ4Y1ZoN19mZG51SS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAon25guuUd9+8PHHHJ7JzVtVQv+SZ6UIa8m+SZUpTqG2w4zBjz+Tlz/mO3ok/p wGQAOXB987TeMGqtAjHDuUJ4blxDkY6r3IDWl818kmokUCTe3Tf1aV90R7Syk8CJ ySdNY87wQgX15BJeDciYPxy59XjhRAqdoIzcbbz2ZjZMxWcNRiMj4Arghamcf0O8 7KgsZ0AXDgj48PB6vzqq51916mgQxm94RcDxB+OhD8TJO/JJFG9UuIsdZXTwxNIZ G35bFR9EBN4XGLVjvJQp4KTdEbMaKf7lLqF9Vs8niaueQlEhP46gT2SG7TSozmU8 djrChHbrR0Wu3oE5kL4BOYA0 -----END CERTIFICATE-----Generated at Thu Mar 26 00:27:58 2026 by rpki-client