$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.mft File: 38UozwAG40FK-3_obR_er2SLXJ0.mft (raw, json) Hash identifier: lbGHRu0ULgcLkjvVq19199H74A8t3BdglxQW4i+zKIY= Subject key identifier: BF:E0:AE:48:4B:1E:65:99:F7:A0:C8:32:E0:16:2F:77:3C:C4:AA:F1 Authority key identifier: DF:C5:28:CF:00:06:E3:41:4A:FB:7F:E8:6D:1F:DE:AF:64:8B:5C:9D Certificate issuer: /CN=A91B1A3B/serialNumber=DFC528CF0006E3414AFB7FE86D1FDEAF648B5C9D Certificate serial: 0121 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38UozwAG40FK-3_obR_er2SLXJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.mft Manifest number: 0119 Signing time: Fri 17 Apr 2026 05:32:12 +0000 Manifest this update: Fri 17 Apr 2026 05:32:12 +0000 Manifest next update: Fri 24 Apr 2026 05:32:12 +0000 Files and hashes: 1: 38UozwAG40FK-3_obR_er2SLXJ0.crl (hash: 4IxLkzcfaIq5WgwwLezFihzyeNPnpgNkvdGnDPSFx6M=) 2: 6CF3FF44901111EF922BFC29C4F9AE02.roa (hash: hvfFWUPLyFvJCXfs1g4giSnFKRGrDpasDj01CVoVhxU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.crl rsync://rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38UozwAG40FK-3_obR_er2SLXJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:32:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1A3B, serialNumber=DFC528CF0006E3414AFB7FE86D1FDEAF648B5C9D Validity Not Before: Apr 17 05:32:12 2026 GMT Not After : Apr 24 05:32:12 2026 GMT Subject: CN=69e1c5dc-23da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:40:89:91:44:f1:04:58:b0:ae:ec:70:fb:cf: 1f:1f:4e:f5:43:d9:e8:b8:4d:42:b7:d5:e6:30:8d: 24:bb:f6:c0:94:72:d5:72:9d:a6:08:24:c5:98:ab: 99:75:4c:a2:7a:55:bc:b1:bc:38:f8:58:31:84:96: 4c:b8:2f:19:4e:53:9c:12:37:83:3d:a3:58:ce:aa: 56:2e:d2:36:71:54:09:b9:db:03:3a:5e:d4:02:a5: 29:c1:3e:d0:45:c4:bd:2d:1c:9c:a2:87:94:c6:af: 8c:6c:1c:e8:a4:c6:1f:10:93:8f:6d:9e:f5:c0:f5: 9f:ad:74:d1:ef:49:e7:b4:f7:93:3b:86:65:54:1d: c9:23:51:dd:56:a8:a4:72:d1:e0:34:61:98:dc:2f: 25:db:77:f4:4a:79:7d:0e:0a:32:23:54:30:cd:d7: 16:26:26:16:00:87:d2:02:ac:6d:df:95:8d:c2:1c: 3a:0c:8d:c9:28:e6:8f:95:dd:0b:54:d1:03:87:b3: b8:88:6d:91:76:44:8d:22:35:5a:bf:65:3a:69:73: 39:4e:e6:4a:0e:c7:f2:e6:10:1a:bb:b8:95:a3:51: 56:fd:51:13:fe:18:e1:e5:a1:97:06:6d:be:6a:e9: bd:7b:ae:ab:f3:55:76:66:09:53:7f:11:a0:9b:6d: 91:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:E0:AE:48:4B:1E:65:99:F7:A0:C8:32:E0:16:2F:77:3C:C4:AA:F1 X509v3 Authority Key Identifier: keyid:DF:C5:28:CF:00:06:E3:41:4A:FB:7F:E8:6D:1F:DE:AF:64:8B:5C:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38UozwAG40FK-3_obR_er2SLXJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:e3:3d:cf:54:4a:7d:c9:da:2c:64:54:64:18:7e:d5:24:f9: b9:5f:f0:25:22:ad:92:08:56:c9:83:76:03:1b:b7:3b:ee:10: ea:ac:fb:57:43:c6:06:09:62:af:ee:ed:25:05:cc:3b:eb:c1: 31:22:3f:ce:e0:51:50:22:b2:ab:94:c1:5f:c7:0a:d3:fa:66: c2:1f:20:12:2f:e1:c7:92:54:49:80:a5:5f:31:9b:de:77:b6: 0b:17:cd:56:91:46:cf:fb:2f:eb:7c:b7:71:92:ee:c7:46:8f: 51:61:32:4d:22:58:c5:a0:e9:d1:b0:69:c0:70:a2:20:94:fa: ca:af:93:0d:0c:05:19:a2:01:0b:39:f9:c2:79:1a:1e:43:34: 45:58:c2:5b:6b:a1:e6:6b:68:b9:04:44:22:f3:f8:20:3b:b4: b7:fe:9f:50:28:20:90:46:f1:50:25:39:8b:92:f2:17:1c:cb: a8:ff:d6:6f:5a:fa:66:a2:9e:f9:af:d7:b8:4b:bd:10:4e:bc: 7e:b2:54:8c:a2:7c:30:e7:34:d6:b4:d4:e3:b7:4f:04:cb:32: 93:95:6b:50:62:2a:fc:e6:12:a6:af:3b:43:56:a2:dc:56:ce: a9:4e:57:98:63:01:3d:3e:1e:79:c1:d3:9c:40:08:7b:3b:34: e7:b8:ec:56 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFBM0IxMTAvBgNVBAUTKERGQzUyOENGMDAwNkUzNDE0QUZCN0ZFODZEMUZERUFG NjQ4QjVDOUQwHhcNMjYwNDE3MDUzMjEyWhcNMjYwNDI0MDUzMjEyWjAYMRYwFAYD VQQDEw02OWUxYzVkYy0yM2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArkCJkUTxBFiwruxw+88fH071Q9nouE1Ct9XmMI0ku/bAlHLVcp2mCCTFmKuZ dUyielW8sbw4+FgxhJZMuC8ZTlOcEjeDPaNYzqpWLtI2cVQJudsDOl7UAqUpwT7Q RcS9LRycooeUxq+MbBzopMYfEJOPbZ71wPWfrXTR70nntPeTO4ZlVB3JI1HdVqik ctHgNGGY3C8l23f0Snl9DgoyI1QwzdcWJiYWAIfSAqxt35WNwhw6DI3JKOaPld0L VNEDh7O4iG2RdkSNIjVav2U6aXM5TuZKDsfy5hAau7iVo1FW/VET/hjh5aGXBm2+ aum9e66r81V2ZglTfxGgm22RJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL/grkhL HmWZ96DIMuAWL3c8xKrxMB8GA1UdIwQYMBaAFN/FKM8ABuNBSvt/6G0f3q9ki1yd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUEzQi8yMjcwMTlEQTkw MTExMUVGOUI4NUM5NkFDNEY5QUUwMi8zOFVvendBRzQwRkstM19vYlJfZXIyU0xY SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM4VW96d0FHNDBGSy0zX29iUl9lcjJTTFhKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUEzQi8yMjcwMTlEQTkwMTExMUVGOUI4NUM5NkFDNEY5QUUwMi8zOFVvendBRzQw RkstM19vYlJfZXIyU0xYSjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgeM9z1RKfcnaLGRUZBh+1ST5uV/wJSKtkghWyYN2Axu3O+4Q6qz7V0PGBgli r+7tJQXMO+vBMSI/zuBRUCKyq5TBX8cK0/pmwh8gEi/hx5JUSYClXzGb3ne2CxfN VpFGz/sv63y3cZLux0aPUWEyTSJYxaDp0bBpwHCiIJT6yq+TDQwFGaIBCzn5wnka HkM0RVjCW2uh5mtouQREIvP4IDu0t/6fUCggkEbxUCU5i5LyFxzLqP/Wb1r6ZqKe +a/XuEu9EE68frJUjKJ8MOc01rTU47dPBMsyk5VrUGIq/OYSpq87Q1ai3FbOqU5X mGMBPT4eecHTnEAIezs057jsVg== -----END CERTIFICATE-----Generated at Fri Apr 17 09:59:16 2026 by rpki-client