$ rpki-client -vvf rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft File: P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft (raw, json) Hash identifier: CmbUhFm9+/tdxZPZ3vzvmeTe4h9Oo9PLoWWchiL0OyM= Subject key identifier: D5:A7:21:A5:20:7C:8D:4A:B8:7A:D7:DE:FE:58:5B:FA:22:66:AE:21 Authority key identifier: 3F:E3:AE:35:5A:92:77:B9:1D:73:E2:AC:52:F5:38:7F:09:5F:18:9A Certificate issuer: /CN=A91C37DD/serialNumber=3FE3AE355A9277B91D73E2AC52F5387F095F189A Certificate serial: 01B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-OuNVqSd7kdc-KsUvU4fwlfGJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft Manifest number: 01AB Signing time: Thu 23 Jul 2026 05:36:49 +0000 Manifest this update: Thu 23 Jul 2026 05:36:49 +0000 Manifest next update: Thu 30 Jul 2026 05:36:49 +0000 Files and hashes: 1: P-OuNVqSd7kdc-KsUvU4fwlfGJo.crl (hash: swVzG0BLxz3MFoPtt/fAaP8m3cEIHn2z/NdLqiatoi4=) 2: 8670D60E096611EF99F30750C4F9AE02.roa (hash: xQfXZG9thzj3/CL2WyGBShFxcEh/aS+ejX4ZQkD/eSA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.crl rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-OuNVqSd7kdc-KsUvU4fwlfGJo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 05:36:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 439 (0x1b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C37DD, serialNumber=3FE3AE355A9277B91D73E2AC52F5387F095F189A Validity Not Before: Jul 23 05:36:49 2026 GMT Not After : Jul 30 05:36:49 2026 GMT Subject: CN=6a61a871-6ff0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:df:78:b2:e6:29:a2:18:44:fd:f3:ac:ed:47: b1:db:a1:99:59:8f:f2:97:33:82:20:6e:a4:0d:ff: 60:b3:3d:05:76:eb:a1:3f:3d:7a:65:d4:17:b9:9e: d2:d7:b4:f7:82:a2:e0:da:c4:65:29:eb:01:72:8b: a9:13:35:51:69:bd:2c:9f:34:09:09:d5:d3:18:11: 4c:f8:77:64:2c:e0:4b:3d:dd:80:a6:d4:6a:ae:d4: 46:57:09:70:2a:fd:80:99:89:99:a5:79:d0:51:6c: 26:37:cd:4c:65:64:ca:55:2d:ee:d7:f5:03:66:a9: a4:a3:26:02:93:ba:04:12:52:02:71:5e:db:4e:7a: 56:98:0e:a9:8c:4a:a4:d4:e9:f9:98:34:fe:a1:58: df:67:81:a4:68:f7:80:08:d6:ab:92:2f:08:c9:7f: d8:8c:34:ea:51:f5:60:32:be:35:c3:7c:bd:c8:21: 16:c9:40:44:3d:9c:b9:2c:5e:9f:f5:94:fa:51:e9: 4d:ad:9d:99:af:78:7f:52:aa:11:13:3c:20:cc:b1: 3f:67:5b:2b:6d:8e:8e:b4:c8:46:e3:66:c7:b2:87: 51:96:2d:dc:c5:08:03:48:b5:bd:f4:ea:08:c6:f4: 4a:c0:d0:d7:c8:50:7a:56:76:d4:e5:9a:02:df:0c: c4:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:A7:21:A5:20:7C:8D:4A:B8:7A:D7:DE:FE:58:5B:FA:22:66:AE:21 X509v3 Authority Key Identifier: keyid:3F:E3:AE:35:5A:92:77:B9:1D:73:E2:AC:52:F5:38:7F:09:5F:18:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-OuNVqSd7kdc-KsUvU4fwlfGJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:6c:fa:15:b7:f1:da:1c:4a:78:13:cf:6c:03:df:b0:25:f6: 13:99:bf:21:3f:f9:1e:16:5a:c2:72:91:70:14:aa:02:1b:04: ec:97:f7:7f:45:1a:29:b6:92:17:6d:f4:ae:ce:6a:69:93:83: af:b1:41:0e:cf:37:ad:13:1a:36:e8:a1:97:d4:b5:11:86:3e: 4a:75:1a:7b:48:3c:e7:14:e8:28:84:08:f6:e4:c5:99:f3:2f: c2:83:68:fe:be:ef:3a:83:e7:ca:55:c1:85:7f:4d:de:e1:07: e9:7f:c2:dc:e8:a5:09:8d:eb:99:11:91:5c:c8:24:89:24:64: 88:f4:ff:14:ef:ae:e3:ba:8b:ba:9c:0e:c1:a9:c9:8d:65:11: ce:2b:07:12:47:c7:cc:70:28:d4:88:6f:84:d7:5e:27:3f:f6: 8c:ed:b3:1b:24:5c:14:cf:9e:17:b8:a8:25:57:39:5b:b7:a8: 75:8a:83:43:33:0b:4e:9e:bd:5b:93:b3:f6:f1:cc:c4:12:11: 14:d1:1e:8a:0c:40:e7:3f:17:7a:94:ef:7b:a9:76:11:1a:ed: d7:05:d0:2b:96:b4:6b:4f:e8:e0:da:3b:9f:e3:ef:86:d8:2e: 53:05:e8:28:4e:81:b2:b1:61:c8:af:32:82:38:10:c8:7a:f8: 7f:16:88:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzM3REQxMTAvBgNVBAUTKDNGRTNBRTM1NUE5Mjc3QjkxRDczRTJBQzUyRjUzODdG MDk1RjE4OUEwHhcNMjYwNzIzMDUzNjQ5WhcNMjYwNzMwMDUzNjQ5WjAYMRYwFAYD VQQDEw02YTYxYTg3MS02ZmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyN94suYpohhE/fOs7Uex26GZWY/ylzOCIG6kDf9gsz0FduuhPz16ZdQXuZ7S 17T3gqLg2sRlKesBcoupEzVRab0snzQJCdXTGBFM+HdkLOBLPd2AptRqrtRGVwlw Kv2AmYmZpXnQUWwmN81MZWTKVS3u1/UDZqmkoyYCk7oEElICcV7bTnpWmA6pjEqk 1On5mDT+oVjfZ4GkaPeACNarki8IyX/YjDTqUfVgMr41w3y9yCEWyUBEPZy5LF6f 9ZT6UelNrZ2Zr3h/UqoREzwgzLE/Z1srbY6OtMhG42bHsodRli3cxQgDSLW99OoI xvRKwNDXyFB6VnbU5ZoC3wzELQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNWnIaUg fI1KuHrX3v5YW/oiZq4hMB8GA1UdIwQYMBaAFD/jrjVakne5HXPirFL1OH8JXxia MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzdERC8yNDg1NUQ4MDA5 NjUxMUVGQTRCQ0U4N0FDNEY5QUUwMi9QLU91TlZxU2Q3a2RjLUtzVXZVNGZ3bGZH Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AtT3VOVnFTZDdrZGMtS3NVdlU0ZndsZkdKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzdERC8yNDg1NUQ4MDA5NjUxMUVGQTRCQ0U4N0FDNEY5QUUwMi9QLU91TlZxU2Q3 a2RjLUtzVXZVNGZ3bGZHSm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACWz6Fbfx2hxKeBPPbAPfsCX2E5m/IT/5HhZawnKRcBSqAhsE7Jf3f0UaKbaS F230rs5qaZODr7FBDs83rRMaNuihl9S1EYY+SnUae0g85xToKIQI9uTFmfMvwoNo /r7vOoPnylXBhX9N3uEH6X/C3OilCY3rmRGRXMgkiSRkiPT/FO+u47qLupwOwanJ jWURzisHEkfHzHAo1IhvhNdeJz/2jO2zGyRcFM+eF7ioJVc5W7eodYqDQzMLTp69 W5Oz9vHMxBIRFNEeigxA5z8XepTve6l2ERrt1wXQK5a0a0/o4No7n+PvhtguUwXo KE6BsrFhyK8ygjgQyHr4fxaIkg== -----END CERTIFICATE-----Generated at Fri Jul 24 04:27:13 2026 by rpki-client