$ rpki-client -vvf rpki.apnic.net/member_repository/A9196AF7/CBE7F36824CE11F1BC1F5B8EA9833773/ouLfhQX-LyqKzdbd8cVh7_fdnuI.mft File: ouLfhQX-LyqKzdbd8cVh7_fdnuI.mft (raw, json) Hash identifier: mxgD1u1DAaW3ua5kQbopgqgALdfdg2eGBA9QjHk/7is= Subject key identifier: 4A:02:FE:87:89:D7:60:88:77:4C:8B:1A:A2:2A:52:92:1E:A1:20:71 Authority key identifier: A2:E2:DF:85:05:FE:2F:2A:8A:CD:D6:DD:F1:C5:61:EF:F7:DD:9E:E2 Certificate issuer: /CN=A9196AF7/serialNumber=A2E2DF8505FE2F2A8ACDD6DDF1C561EFF7DD9EE2 Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ouLfhQX-LyqKzdbd8cVh7_fdnuI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196AF7/CBE7F36824CE11F1BC1F5B8EA9833773/ouLfhQX-LyqKzdbd8cVh7_fdnuI.mft Manifest number: 11 Signing time: Sun 19 Apr 2026 08:38:40 +0000 Manifest this update: Sun 19 Apr 2026 08:38:40 +0000 Manifest next update: Sun 26 Apr 2026 08:38:40 +0000 Files and hashes: 1: ouLfhQX-LyqKzdbd8cVh7_fdnuI.crl (hash: 82jQUIC8QFOd/7H3Xyc29gQLHfGbjHgeMe+n3llkVoU=) 2: 7EF6CB6E24CF11F1AAA533A9A9833773.roa (hash: 8y7L9hPSTuk1LDFXpb7ShDJmE7OnOp5HbjTXee/kCzg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196AF7/CBE7F36824CE11F1BC1F5B8EA9833773/ouLfhQX-LyqKzdbd8cVh7_fdnuI.crl rsync://rpki.apnic.net/member_repository/A9196AF7/CBE7F36824CE11F1BC1F5B8EA9833773/ouLfhQX-LyqKzdbd8cVh7_fdnuI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ouLfhQX-LyqKzdbd8cVh7_fdnuI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 04:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196AF7, serialNumber=A2E2DF8505FE2F2A8ACDD6DDF1C561EFF7DD9EE2 Validity Not Before: Apr 19 08:38:40 2026 GMT Not After : Apr 26 08:38:40 2026 GMT Subject: CN=69e49490-b242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ee:54:b3:f0:14:57:99:bf:5c:83:2a:44:81: fe:11:2f:93:05:0f:89:0e:fe:3d:55:94:d4:de:f9: 96:52:d0:7e:69:e6:85:d5:64:49:0d:4a:55:72:92: ec:3d:c3:c3:52:3b:5d:f9:59:f5:12:ff:41:cc:fa: 70:3a:af:7f:da:73:75:e7:ae:2b:e7:38:e5:29:1c: 8b:bc:02:47:24:51:f5:4b:61:ec:4d:32:c1:2a:87: 65:ce:98:12:67:3b:89:0a:26:97:f4:56:d5:a5:ee: fb:09:28:a2:5e:4e:14:16:74:79:77:39:3c:80:81: 42:1f:db:f4:f9:68:3d:02:12:11:f2:5e:b8:08:ff: 7e:c4:27:c8:99:74:f7:54:fd:ba:ff:d4:12:a4:b5: 53:22:ef:22:10:a7:d8:30:9d:37:16:c9:99:0c:15: 52:ee:89:f4:17:52:78:03:a7:0c:a4:a8:9f:0a:0b: fb:03:66:23:0d:a2:89:90:50:ff:ac:0a:66:a4:22: 68:dc:39:75:24:0a:42:71:71:46:7a:33:50:f0:c9: 87:af:60:2b:97:69:1e:32:66:02:34:ad:38:fc:af: 2c:00:f6:f2:41:82:d8:c3:e8:f9:e7:a8:b7:84:b2: 16:5c:b4:6c:53:c5:08:4f:1f:bf:e1:85:2b:d9:f2: ea:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:02:FE:87:89:D7:60:88:77:4C:8B:1A:A2:2A:52:92:1E:A1:20:71 X509v3 Authority Key Identifier: keyid:A2:E2:DF:85:05:FE:2F:2A:8A:CD:D6:DD:F1:C5:61:EF:F7:DD:9E:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196AF7/CBE7F36824CE11F1BC1F5B8EA9833773/ouLfhQX-LyqKzdbd8cVh7_fdnuI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ouLfhQX-LyqKzdbd8cVh7_fdnuI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196AF7/CBE7F36824CE11F1BC1F5B8EA9833773/ouLfhQX-LyqKzdbd8cVh7_fdnuI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:9f:09:0f:73:03:a1:a4:cb:3e:5f:67:67:9f:90:52:4a:2c: 9a:56:d4:f2:11:a3:02:55:47:fe:35:0b:8b:1d:48:85:23:ec: 58:e0:03:f0:2b:23:27:ef:53:78:45:5d:da:4b:fe:a0:02:7b: 23:f4:38:36:8d:b5:6d:02:02:03:78:ab:56:d6:4b:9e:9c:a6: f8:e4:d6:c3:24:28:10:2c:4b:70:16:f5:c6:27:48:0c:1f:78: 79:1d:de:5a:f6:fb:bc:8b:57:c3:d2:e9:bc:63:a4:45:cc:bc: 29:0f:a0:7f:f3:35:e7:df:a4:7b:b1:3b:dd:7e:06:14:bf:4f: d4:08:1f:0e:b6:e8:4c:2d:03:12:46:44:0e:3f:19:b2:9d:aa: 16:62:38:c5:75:ad:52:58:ca:53:da:38:2c:b2:9b:1c:dc:42: 08:6a:59:0e:73:12:fe:cd:31:40:5f:a6:2c:df:35:66:ec:10: d1:f3:11:55:f6:b4:a6:1a:a3:a3:95:9e:6a:5e:97:ab:9c:1d: e0:4f:db:82:71:90:54:20:ce:3b:c0:82:7a:ad:4f:85:2a:6a: e0:6f:f9:c6:16:cb:86:4b:6e:7f:d9:3c:47:80:53:b1:e3:e3: 97:52:a2:4b:6d:ec:ed:b6:f6:80:a1:00:fd:f9:44:01:bb:3c: b2:d1:d2:d1 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NkFGNzExMC8GA1UEBRMoQTJFMkRGODUwNUZFMkYyQThBQ0RENkRERjFDNTYxRUZG N0REOUVFMjAeFw0yNjA0MTkwODM4NDBaFw0yNjA0MjYwODM4NDBaMBgxFjAUBgNV BAMTDTY5ZTQ5NDkwLWIyNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDP7lSz8BRXmb9cgypEgf4RL5MFD4kO/j1VlNTe+ZZS0H5p5oXVZEkNSlVykuw9 w8NSO135WfUS/0HM+nA6r3/ac3XnrivnOOUpHIu8AkckUfVLYexNMsEqh2XOmBJn O4kKJpf0VtWl7vsJKKJeThQWdHl3OTyAgUIf2/T5aD0CEhHyXrgI/37EJ8iZdPdU /br/1BKktVMi7yIQp9gwnTcWyZkMFVLuifQXUngDpwykqJ8KC/sDZiMNoomQUP+s CmakImjcOXUkCkJxcUZ6M1DwyYevYCuXaR4yZgI0rTj8rywA9vJBgtjD6PnnqLeE shZctGxTxQhPH7/hhSvZ8upfAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUSgL+h4nX YIh3TIsaoipSkh6hIHEwHwYDVR0jBBgwFoAUouLfhQX+LyqKzdbd8cVh7/fdnuIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2QUY3L0NCRTdGMzY4MjRD RTExRjFCQzFGNUI4RUE5ODMzNzczL291TGZoUVgtTHlxS3pkYmQ4Y1ZoN19mZG51 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb3VMZmhRWC1MeXFLemRiZDhjVmg3X2ZkbnVJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2 QUY3L0NCRTdGMzY4MjRDRTExRjFCQzFGNUI4RUE5ODMzNzczL291TGZoUVgtTHlx S3pkYmQ4Y1ZoN19mZG51SS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBynwkPcwOhpMs+X2dnn5BSSiyaVtTyEaMCVUf+NQuLHUiFI+xY4APwKyMn71N4 RV3aS/6gAnsj9Dg2jbVtAgIDeKtW1kuenKb45NbDJCgQLEtwFvXGJ0gMH3h5Hd5a 9vu8i1fD0um8Y6RFzLwpD6B/8zXn36R7sTvdfgYUv0/UCB8OtuhMLQMSRkQOPxmy naoWYjjFda1SWMpT2jgsspsc3EIIalkOcxL+zTFAX6Ys3zVm7BDR8xFV9rSmGqOj lZ5qXpernB3gT9uCcZBUIM47wIJ6rU+FKmrgb/nGFsuGS25/2TxHgFOx4+OXUqJL bezttvaAoQD9+UQBuzyy0dLR -----END CERTIFICATE-----Generated at Sun Apr 19 12:45:13 2026 by rpki-client