$ rpki-client -vvf rpki.apnic.net/member_repository/A9196AF7/CBE7F36824CE11F1BC1F5B8EA9833773/ouLfhQX-LyqKzdbd8cVh7_fdnuI.mft File: ouLfhQX-LyqKzdbd8cVh7_fdnuI.mft (raw, json) Hash identifier: PF2gTZ7LOaoxvlcDAuFcIVP6dTWDK1xE99UmmQbe1fE= Subject key identifier: 1C:1A:AA:D1:D3:95:52:0E:B3:ED:3D:57:6F:53:5A:D1:FB:53:EA:2B Authority key identifier: A2:E2:DF:85:05:FE:2F:2A:8A:CD:D6:DD:F1:C5:61:EF:F7:DD:9E:E2 Certificate issuer: /CN=A9196AF7/serialNumber=A2E2DF8505FE2F2A8ACDD6DDF1C561EFF7DD9EE2 Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ouLfhQX-LyqKzdbd8cVh7_fdnuI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196AF7/CBE7F36824CE11F1BC1F5B8EA9833773/ouLfhQX-LyqKzdbd8cVh7_fdnuI.mft Manifest number: 42 Signing time: Mon 27 Jul 2026 10:47:20 +0000 Manifest this update: Mon 27 Jul 2026 10:47:20 +0000 Manifest next update: Mon 03 Aug 2026 10:47:20 +0000 Files and hashes: 1: ouLfhQX-LyqKzdbd8cVh7_fdnuI.crl (hash: YOe21BeJ85CAXC6zPYu3Hx2PYqPZCOBnOSn93qeSza4=) 2: 7EF6CB6E24CF11F1AAA533A9A9833773.roa (hash: 8y7L9hPSTuk1LDFXpb7ShDJmE7OnOp5HbjTXee/kCzg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196AF7/CBE7F36824CE11F1BC1F5B8EA9833773/ouLfhQX-LyqKzdbd8cVh7_fdnuI.crl rsync://rpki.apnic.net/member_repository/A9196AF7/CBE7F36824CE11F1BC1F5B8EA9833773/ouLfhQX-LyqKzdbd8cVh7_fdnuI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ouLfhQX-LyqKzdbd8cVh7_fdnuI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 10:47:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196AF7, serialNumber=A2E2DF8505FE2F2A8ACDD6DDF1C561EFF7DD9EE2 Validity Not Before: Jul 27 10:47:20 2026 GMT Not After : Aug 3 10:47:20 2026 GMT Subject: CN=6a673738-e3e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:76:d8:79:12:5e:d8:01:c2:72:13:20:a5:3f: 9c:6f:20:b8:ef:a7:ab:e8:ea:9c:38:ed:a7:7b:c1: ba:ff:96:9c:40:2f:da:de:4e:12:50:3b:4c:0c:a0: 8c:ae:b5:19:4e:17:3a:33:e0:73:53:fb:8a:6a:46: d3:d7:86:19:6a:1d:23:3d:e3:3f:a6:b6:0c:0a:7c: 47:29:86:c5:58:bb:45:84:8e:c4:98:cf:d7:53:d0: cd:29:52:00:be:2e:42:76:3a:30:fc:b1:9c:ba:75: f5:b5:0e:db:28:57:c8:e4:40:1f:63:48:b2:71:17: 19:1b:71:65:30:84:0e:45:f7:d3:e1:69:63:56:1f: 2b:74:e4:80:2f:01:2a:d7:36:41:99:ef:57:cc:10: ec:74:9b:f6:b1:1f:4f:3c:f5:b5:8f:e8:81:a2:78: 91:aa:b2:a7:2f:39:62:ef:21:93:3b:57:ae:bc:82: e1:e9:32:e5:0c:09:97:a6:81:f9:75:25:96:9c:e7: c7:12:ec:21:30:9d:23:0f:b7:1e:e6:41:b7:9c:06: e1:c8:20:f4:45:bf:15:b5:21:0d:5d:29:ce:f1:4c: 87:13:db:27:19:ea:8e:7f:56:bc:01:16:1f:06:ca: 31:6c:d9:26:71:d6:69:61:a3:f5:64:eb:8c:0f:85: d7:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:1A:AA:D1:D3:95:52:0E:B3:ED:3D:57:6F:53:5A:D1:FB:53:EA:2B X509v3 Authority Key Identifier: keyid:A2:E2:DF:85:05:FE:2F:2A:8A:CD:D6:DD:F1:C5:61:EF:F7:DD:9E:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196AF7/CBE7F36824CE11F1BC1F5B8EA9833773/ouLfhQX-LyqKzdbd8cVh7_fdnuI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ouLfhQX-LyqKzdbd8cVh7_fdnuI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196AF7/CBE7F36824CE11F1BC1F5B8EA9833773/ouLfhQX-LyqKzdbd8cVh7_fdnuI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:02:79:22:b5:c9:b8:e9:aa:8f:05:dc:d6:9d:2e:05:d3:fb: 97:d4:6d:74:cc:53:be:77:82:08:dd:2d:e9:21:45:c7:f2:b6: 02:52:49:f6:64:87:b6:0f:c7:2c:5e:8b:d0:5f:73:47:72:bf: 87:f1:c5:a7:3c:46:35:28:d9:2a:84:ac:07:79:04:35:67:12: 41:6e:7d:56:8f:c0:22:98:69:96:24:82:00:6a:a2:cf:6e:d6: 28:90:e8:4b:b2:31:a2:28:83:e4:ac:8a:b3:b9:5d:2a:76:96: e6:4f:98:e0:8f:1d:52:33:dd:58:1b:ba:09:9f:89:1b:48:1b: 31:fc:9d:8f:65:25:a8:55:00:19:94:8b:6f:96:0c:5c:d7:7a: d3:2f:30:10:fa:51:63:61:bf:ed:9f:ff:2b:20:e6:06:20:66: 22:8f:8a:82:a5:9f:55:16:e9:b5:ec:cd:28:a3:a7:ce:0c:d3: 03:da:87:0a:22:f3:6d:dc:13:ad:e7:1e:0a:78:3c:72:1d:dc: 5c:d2:47:51:d7:0c:6b:78:43:2d:39:2d:3f:2a:53:9b:25:9e: db:17:2c:92:e4:3a:22:c1:50:41:66:7d:8b:f6:35:e6:78:58: 69:2c:36:63:fd:50:2c:73:94:af:02:64:a9:55:2b:19:82:be: 17:18:41:4c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NkFGNzExMC8GA1UEBRMoQTJFMkRGODUwNUZFMkYyQThBQ0RENkRERjFDNTYxRUZG N0REOUVFMjAeFw0yNjA3MjcxMDQ3MjBaFw0yNjA4MDMxMDQ3MjBaMBgxFjAUBgNV BAMTDTZhNjczNzM4LWUzZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCndth5El7YAcJyEyClP5xvILjvp6vo6pw47ad7wbr/lpxAL9reThJQO0wMoIyu tRlOFzoz4HNT+4pqRtPXhhlqHSM94z+mtgwKfEcphsVYu0WEjsSYz9dT0M0pUgC+ LkJ2OjD8sZy6dfW1DtsoV8jkQB9jSLJxFxkbcWUwhA5F99PhaWNWHyt05IAvASrX NkGZ71fMEOx0m/axH0889bWP6IGieJGqsqcvOWLvIZM7V668guHpMuUMCZemgfl1 JZac58cS7CEwnSMPtx7mQbecBuHIIPRFvxW1IQ1dKc7xTIcT2ycZ6o5/VrwBFh8G yjFs2SZx1mlho/Vk64wPhddfAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUHBqq0dOV Ug6z7T1Xb1Na0ftT6iswHwYDVR0jBBgwFoAUouLfhQX+LyqKzdbd8cVh7/fdnuIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2QUY3L0NCRTdGMzY4MjRD RTExRjFCQzFGNUI4RUE5ODMzNzczL291TGZoUVgtTHlxS3pkYmQ4Y1ZoN19mZG51 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb3VMZmhRWC1MeXFLemRiZDhjVmg3X2ZkbnVJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2 QUY3L0NCRTdGMzY4MjRDRTExRjFCQzFGNUI4RUE5ODMzNzczL291TGZoUVgtTHlx S3pkYmQ4Y1ZoN19mZG51SS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCjAnkitcm46aqPBdzWnS4F0/uX1G10zFO+d4II3S3pIUXH8rYCUkn2ZIe2D8cs XovQX3NHcr+H8cWnPEY1KNkqhKwHeQQ1ZxJBbn1Wj8AimGmWJIIAaqLPbtYokOhL sjGiKIPkrIqzuV0qdpbmT5jgjx1SM91YG7oJn4kbSBsx/J2PZSWoVQAZlItvlgxc 13rTLzAQ+lFjYb/tn/8rIOYGIGYij4qCpZ9VFum17M0oo6fODNMD2ocKIvNt3BOt 5x4KeDxyHdxc0kdR1wxreEMtOS0/KlObJZ7bFyyS5DoiwVBBZn2L9jXmeFhpLDZj /VAsc5SvAmSpVSsZgr4XGEFM -----END CERTIFICATE-----Generated at Wed Jul 29 01:47:48 2026 by rpki-client