$ rpki-client -vvf rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft File: P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft (raw, json) Hash identifier: gv8WTUIXDrAStoLNWkniSzlBLY3XRY60LosISRfQ7pc= Subject key identifier: 5E:08:83:9B:E7:4E:E4:75:7B:6C:D3:C1:4D:36:D9:5E:7A:C2:2F:15 Authority key identifier: 3F:E3:AE:35:5A:92:77:B9:1D:73:E2:AC:52:F5:38:7F:09:5F:18:9A Certificate issuer: /CN=A91C37DD/serialNumber=3FE3AE355A9277B91D73E2AC52F5387F095F189A Certificate serial: 0178 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-OuNVqSd7kdc-KsUvU4fwlfGJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft Manifest number: 016D Signing time: Wed 25 Mar 2026 04:08:39 +0000 Manifest this update: Wed 25 Mar 2026 04:08:38 +0000 Manifest next update: Wed 01 Apr 2026 04:08:38 +0000 Files and hashes: 1: P-OuNVqSd7kdc-KsUvU4fwlfGJo.crl (hash: OouMGEKlgIhwDzDUlJogb1OFGdYQZmdL0JtNwUzsdWU=) 2: 8670D60E096611EF99F30750C4F9AE02.roa (hash: 0yhvKskd5GqZK6c8Xx+j5Xrsh1PS3EvaAWcxy1VCVk0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.crl rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-OuNVqSd7kdc-KsUvU4fwlfGJo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:08:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 376 (0x178) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C37DD, serialNumber=3FE3AE355A9277B91D73E2AC52F5387F095F189A Validity Not Before: Mar 25 04:08:38 2026 GMT Not After : Apr 1 04:08:38 2026 GMT Subject: CN=69c35fc7-a239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:90:e3:47:4c:13:2f:d0:dc:56:28:83:ee:2c: 0c:db:02:20:bb:b4:26:e1:5f:68:67:a0:a4:5f:06: 5f:47:37:46:85:d9:fc:6a:fe:02:9e:48:d0:45:83: 28:49:cd:ad:7c:73:31:fd:c1:48:88:7f:50:9b:48: 9e:71:72:f3:08:39:21:df:51:3f:98:ff:5a:36:ad: 5e:44:6a:2a:4a:09:e4:1c:e8:cb:31:e6:15:fa:89: fb:f4:d0:4a:db:bb:2b:04:82:17:c6:2d:29:90:27: 97:36:d4:03:f7:67:38:8a:d6:44:f8:0e:49:2f:5e: 78:c6:96:eb:89:ba:1a:20:c6:8b:c3:0e:40:db:68: 71:5b:80:83:f9:2a:1a:46:7b:85:b5:31:39:85:ab: bf:1c:1f:3a:32:8e:20:ab:5c:22:34:09:f2:23:dd: e6:13:7a:3b:d6:98:3f:e2:a3:a5:df:07:1d:a4:40: 08:98:55:77:d8:6d:63:dd:df:a1:d0:aa:f1:8f:e0: 60:19:29:0d:db:8f:9d:d1:58:8b:4c:98:eb:94:d3: 5d:c3:20:86:c9:8f:47:91:70:af:01:c9:86:7a:73: 51:c9:94:49:52:3b:ad:71:9a:b6:91:93:b2:c6:7b: 47:1b:6e:34:13:52:a6:40:d1:2e:f3:b1:5d:d5:b9: a4:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:08:83:9B:E7:4E:E4:75:7B:6C:D3:C1:4D:36:D9:5E:7A:C2:2F:15 X509v3 Authority Key Identifier: keyid:3F:E3:AE:35:5A:92:77:B9:1D:73:E2:AC:52:F5:38:7F:09:5F:18:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-OuNVqSd7kdc-KsUvU4fwlfGJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:07:cf:a8:dd:f2:5e:d4:e6:a9:ac:88:fc:20:59:f1:d3:8f: a5:19:79:39:de:74:a9:bc:12:94:ca:97:3a:f5:45:c8:5a:94: b8:63:80:2e:f8:12:6f:9a:26:8f:18:a8:69:4e:51:51:b3:4f: fc:82:6b:47:1c:cb:3e:43:50:64:dc:38:0a:e5:17:88:d6:db: 89:ab:8b:73:06:7a:86:ff:cb:51:56:75:e6:d2:76:3a:b5:04: 1d:09:e4:5c:26:9e:5c:c2:41:f4:9c:e9:dc:15:7e:1e:2e:59: bb:6d:e4:ec:21:a4:86:9a:61:98:63:3c:30:30:5b:2a:14:f7: fa:5e:32:d7:fa:9c:d8:97:ea:a1:4a:b1:ea:29:0d:9a:2f:22: 99:10:17:eb:6f:15:16:34:f5:61:13:04:b1:13:82:af:c0:2f: 69:fb:87:87:a4:cf:73:24:22:17:e0:91:d8:60:e6:ca:48:f8: d5:d5:c4:b3:05:11:23:75:76:d4:5c:ab:4f:2d:57:00:e7:ee: f2:2c:66:8a:ae:cd:14:db:33:6f:7d:94:95:14:fe:b1:5f:51: 7c:21:32:51:16:71:b8:02:0a:94:85:70:c5:9f:04:75:71:ed: a0:a0:df:a6:cb:fe:d7:b4:48:20:af:be:92:7c:8a:eb:86:c1: cd:36:a4:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzM3REQxMTAvBgNVBAUTKDNGRTNBRTM1NUE5Mjc3QjkxRDczRTJBQzUyRjUzODdG MDk1RjE4OUEwHhcNMjYwMzI1MDQwODM4WhcNMjYwNDAxMDQwODM4WjAYMRYwFAYD VQQDEw02OWMzNWZjNy1hMjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtpDjR0wTL9DcViiD7iwM2wIgu7Qm4V9oZ6CkXwZfRzdGhdn8av4CnkjQRYMo Sc2tfHMx/cFIiH9Qm0iecXLzCDkh31E/mP9aNq1eRGoqSgnkHOjLMeYV+on79NBK 27srBIIXxi0pkCeXNtQD92c4itZE+A5JL154xpbriboaIMaLww5A22hxW4CD+Soa RnuFtTE5hau/HB86Mo4gq1wiNAnyI93mE3o71pg/4qOl3wcdpEAImFV32G1j3d+h 0Krxj+BgGSkN24+d0ViLTJjrlNNdwyCGyY9HkXCvAcmGenNRyZRJUjutcZq2kZOy xntHG240E1KmQNEu87Fd1bmkmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF4Ig5vn TuR1e2zTwU022V56wi8VMB8GA1UdIwQYMBaAFD/jrjVakne5HXPirFL1OH8JXxia MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzdERC8yNDg1NUQ4MDA5 NjUxMUVGQTRCQ0U4N0FDNEY5QUUwMi9QLU91TlZxU2Q3a2RjLUtzVXZVNGZ3bGZH Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AtT3VOVnFTZDdrZGMtS3NVdlU0ZndsZkdKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzdERC8yNDg1NUQ4MDA5NjUxMUVGQTRCQ0U4N0FDNEY5QUUwMi9QLU91TlZxU2Q3 a2RjLUtzVXZVNGZ3bGZHSm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQgfPqN3yXtTmqayI/CBZ8dOPpRl5Od50qbwSlMqXOvVFyFqUuGOALvgSb5om jxioaU5RUbNP/IJrRxzLPkNQZNw4CuUXiNbbiauLcwZ6hv/LUVZ15tJ2OrUEHQnk XCaeXMJB9Jzp3BV+Hi5Zu23k7CGkhpphmGM8MDBbKhT3+l4y1/qc2JfqoUqx6ikN mi8imRAX628VFjT1YRMEsROCr8AvafuHh6TPcyQiF+CR2GDmykj41dXEswURI3V2 1FyrTy1XAOfu8ixmiq7NFNszb32UlRT+sV9RfCEyURZxuAIKlIVwxZ8EdXHtoKDf psv+17RIIK++knyK64bBzTakeQ== -----END CERTIFICATE-----Generated at Thu Mar 26 12:46:18 2026 by rpki-client