$ rpki-client -vvf rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft File: Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft (raw, json) Hash identifier: dwpKjEe8pYCLa7Qla4ABIntaHaXsCiW/Rc1rhsVzF2k= Subject key identifier: 1A:D4:DE:C5:F4:7F:AA:6E:93:55:A5:33:53:D8:3A:A1:DF:0E:A6:05 Authority key identifier: 3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60 Certificate issuer: /CN=A91188EE/serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360 Certificate serial: 0185 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft Manifest number: 0173 Signing time: Sun 01 Mar 2026 05:56:43 +0000 Manifest this update: Sun 01 Mar 2026 05:56:42 +0000 Manifest next update: Sun 08 Mar 2026 05:56:42 +0000 Files and hashes: 1: Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl (hash: MlOft9Xh36J0pLdPGewCAHOuyfS9n5vhwbf1HtdS9vE=) 2: 6AAF8E08F51C11F09AD046EA586F56BC.roa (hash: kc9sOCeRb3zN+5Mnvc8nN+23u1KD7QtmcMoVlWRYrFU=) 3: 4DC69458F51C11F0B1C1D2E9586F56BC.roa (hash: yE76dxQCIDj4GWBj/uSzYEEhzsPLZuYCmzMfrK+bTRU=) 4: B7B28B24B29611F091864D65C4F9AE02.roa (hash: R+HTfU3ExQBNMZ+axibvvpKJt+DXstKCKz/X+iou2Bc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 05:56:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 389 (0x185) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91188EE, serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360 Validity Not Before: Mar 1 05:56:42 2026 GMT Not After : Mar 8 05:56:42 2026 GMT Subject: CN=69a3d51b-57fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:74:9e:15:ed:cb:e0:d0:75:50:42:e8:30:39: 59:70:c8:0d:7a:1d:46:72:82:0a:63:49:a0:f8:ea: 48:63:34:07:d2:c7:a1:95:de:65:5b:90:eb:2c:27: 42:46:aa:16:7f:15:e0:e4:f6:ab:25:3e:4c:81:ce: ff:a1:a7:41:42:d5:a2:20:77:db:72:75:6f:97:af: 23:3c:6b:71:ff:9a:ff:e4:7b:0c:36:50:38:f1:e2: ba:27:d1:55:d5:61:fc:46:1e:7f:d3:61:1d:f0:99: 76:31:e0:8f:44:db:a2:f2:61:43:aa:72:e4:13:2a: 84:0f:5e:a1:85:03:8f:42:3e:99:dd:b1:cd:42:09: 67:d1:63:2e:64:e9:7c:73:1d:4d:fe:c4:25:04:1e: 17:8a:d5:9c:87:05:b0:74:ce:1c:50:da:ef:25:00: cf:ed:c1:fe:52:1f:92:45:65:0f:98:57:13:f7:75: c0:7c:a5:31:6b:2f:87:9f:f0:a2:3e:f1:08:fc:2f: fa:58:00:d7:d7:e2:de:5a:79:91:af:d9:cb:3f:46: 3e:f4:c6:08:bc:df:36:fc:ac:8c:36:74:46:c0:ce: 7f:42:bb:4b:82:a8:bf:08:14:9b:02:9f:b9:8b:73: f6:23:f5:00:44:d7:b5:0d:cf:84:bb:cc:3a:0a:84: 57:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:D4:DE:C5:F4:7F:AA:6E:93:55:A5:33:53:D8:3A:A1:DF:0E:A6:05 X509v3 Authority Key Identifier: keyid:3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:f7:65:a0:99:d6:b3:a9:5e:74:00:7f:9a:75:03:3c:4f:88: c3:44:2e:6e:e9:d2:2e:c0:5c:af:f0:77:a5:83:fd:0d:d8:0b: 7a:24:8e:3c:3e:af:ba:c9:0c:37:65:f6:90:02:1f:34:30:6c: 0a:ba:cb:84:77:9f:f4:be:16:e7:8a:a1:c8:a5:37:ea:c5:32: 91:df:e4:4a:4d:c2:62:20:7b:0e:ff:3f:00:a8:3c:6a:0f:a8: 3e:9f:f7:22:b5:9c:18:b5:02:83:49:5a:3e:be:2f:1d:e1:fc: 4e:5f:af:7b:86:b2:17:cf:59:d7:fe:e9:dc:28:7d:f5:67:ab: 03:ee:21:4f:7b:4c:7c:de:b2:05:42:5b:ff:07:c5:05:fe:c9: 6a:8c:eb:75:30:91:3f:0b:24:cd:7b:da:86:47:ac:90:ea:b3: 74:05:e5:21:0e:44:8c:57:72:1d:4c:cb:17:8b:d7:91:33:31: 21:3e:fe:fb:03:67:9d:0c:00:5c:8d:f2:86:e0:a8:11:4b:4b: a7:b0:2c:73:8c:24:47:c8:5d:d0:5f:98:d8:dd:1a:ad:41:e7: 33:d5:06:4f:83:db:07:8f:13:45:cc:b8:2b:6c:e4:53:3c:60: 74:03:25:92:16:e7:a7:46:8f:6f:f6:c3:36:b6:91:3d:6a:79: c9:ce:7d:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg4RUUxMTAvBgNVBAUTKDNBRURBODA0MDdENzdCQjUyODQ4QUJEOUY3MjU5QkQ4 MDdBNUQzNjAwHhcNMjYwMzAxMDU1NjQyWhcNMjYwMzA4MDU1NjQyWjAYMRYwFAYD VQQDEw02OWEzZDUxYi01N2ZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXSeFe3L4NB1UELoMDlZcMgNeh1GcoIKY0mg+OpIYzQH0sehld5lW5DrLCdC RqoWfxXg5ParJT5Mgc7/oadBQtWiIHfbcnVvl68jPGtx/5r/5HsMNlA48eK6J9FV 1WH8Rh5/02Ed8Jl2MeCPRNui8mFDqnLkEyqED16hhQOPQj6Z3bHNQgln0WMuZOl8 cx1N/sQlBB4XitWchwWwdM4cUNrvJQDP7cH+Uh+SRWUPmFcT93XAfKUxay+Hn/Ci PvEI/C/6WADX1+LeWnmRr9nLP0Y+9MYIvN82/KyMNnRGwM5/QrtLgqi/CBSbAp+5 i3P2I/UARNe1Dc+Eu8w6CoRXTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBrU3sX0 f6puk1WlM1PYOqHfDqYFMB8GA1UdIwQYMBaAFDrtqAQH13u1KEir2fclm9gHpdNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODhFRS8zMjA5NzMxQUZC QUYxMUVFQTZCQzM5NTJDNEY5QUUwMi9PdTJvQkFmWGU3VW9TS3ZaOXlXYjJBZWww MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL091Mm9CQWZYZTdVb1NLdlo5eVdiMkFlbDAyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODhFRS8zMjA5NzMxQUZCQUYxMUVFQTZCQzM5NTJDNEY5QUUwMi9PdTJvQkFmWGU3 VW9TS3ZaOXlXYjJBZWwwMkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlvdloJnWs6ledAB/mnUDPE+Iw0QubunSLsBcr/B3pYP9DdgLeiSOPD6vuskM N2X2kAIfNDBsCrrLhHef9L4W54qhyKU36sUykd/kSk3CYiB7Dv8/AKg8ag+oPp/3 IrWcGLUCg0laPr4vHeH8Tl+ve4ayF89Z1/7p3Ch99WerA+4hT3tMfN6yBUJb/wfF Bf7JaozrdTCRPwskzXvahkeskOqzdAXlIQ5EjFdyHUzLF4vXkTMxIT7++wNnnQwA XI3yhuCoEUtLp7Asc4wkR8hd0F+Y2N0arUHnM9UGT4PbB48TRcy4K2zkUzxgdAMl khbnp0aPb/bDNraRPWp5yc591Q== -----END CERTIFICATE-----Generated at Sun Mar 1 20:21:21 2026 by rpki-client