$ rpki-client -vvf rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft File: P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft (raw, json) Hash identifier: jJ+7UnCXGG5h5/GWKSf66PonHDXN5alx7El0c6+zp4Q= Subject key identifier: E2:93:9C:34:8B:E5:D8:4E:AE:33:48:BB:D1:25:68:9C:B0:43:CF:7A Authority key identifier: 3F:E3:AE:35:5A:92:77:B9:1D:73:E2:AC:52:F5:38:7F:09:5F:18:9A Certificate issuer: /CN=A91C37DD/serialNumber=3FE3AE355A9277B91D73E2AC52F5387F095F189A Certificate serial: 0184 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-OuNVqSd7kdc-KsUvU4fwlfGJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft Manifest number: 0179 Signing time: Fri 17 Apr 2026 04:27:15 +0000 Manifest this update: Fri 17 Apr 2026 04:27:15 +0000 Manifest next update: Fri 24 Apr 2026 04:27:15 +0000 Files and hashes: 1: P-OuNVqSd7kdc-KsUvU4fwlfGJo.crl (hash: cqj0DIDur81tBwF0m4eriHnaQlDIx9Cw3gbhGNTKQ6Y=) 2: 8670D60E096611EF99F30750C4F9AE02.roa (hash: 0yhvKskd5GqZK6c8Xx+j5Xrsh1PS3EvaAWcxy1VCVk0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.crl rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-OuNVqSd7kdc-KsUvU4fwlfGJo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 04:27:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 388 (0x184) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C37DD, serialNumber=3FE3AE355A9277B91D73E2AC52F5387F095F189A Validity Not Before: Apr 17 04:27:15 2026 GMT Not After : Apr 24 04:27:15 2026 GMT Subject: CN=69e1b6a3-d83c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fd:05:53:2e:df:08:a8:00:56:12:97:b1:fb: cc:58:5a:99:fc:58:9a:9f:ef:37:94:0b:3e:ed:80: c5:58:2c:4a:cd:e6:23:ef:17:bf:75:a4:e5:5e:f0: 14:59:c9:a9:02:5c:0e:dd:d7:df:4a:f0:ad:13:c8: d1:5d:4e:0e:02:e0:ea:3c:05:94:76:ad:9d:c5:8e: ff:94:79:33:28:24:f4:77:3b:a9:e3:fb:57:9c:8a: 8c:1e:28:d0:74:7c:d7:37:b8:c2:df:6b:76:18:cd: 9b:06:7b:2a:df:66:e7:2e:67:d3:17:37:80:3d:a2: 02:f0:26:7a:9a:c3:5a:8c:9b:28:0f:88:c0:64:e2: cc:a3:af:7b:37:0a:fd:33:9b:24:eb:60:17:a1:e6: 95:c3:b4:64:b3:49:e8:a3:90:7f:ef:d4:96:21:c0: 80:3c:5b:ba:fe:8a:1e:c5:0a:79:78:05:a4:87:d7: e3:3c:e6:5d:29:bb:6d:7c:56:32:fd:3e:42:90:3c: 07:bf:8e:b4:0b:83:1c:2d:1a:02:12:41:6b:47:08: d0:53:62:1f:ab:74:d8:91:87:0e:46:4d:21:fd:12: e8:72:eb:86:5f:d4:71:fa:c6:fc:fa:c7:ea:ec:a0: e7:c4:3c:51:48:36:89:43:55:28:c6:5d:cd:e0:ee: 97:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:93:9C:34:8B:E5:D8:4E:AE:33:48:BB:D1:25:68:9C:B0:43:CF:7A X509v3 Authority Key Identifier: keyid:3F:E3:AE:35:5A:92:77:B9:1D:73:E2:AC:52:F5:38:7F:09:5F:18:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-OuNVqSd7kdc-KsUvU4fwlfGJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:d6:ff:c8:bf:3d:04:3b:59:50:25:82:5e:7a:ea:f3:a1:ad: c1:bd:87:e1:ab:70:df:c4:c2:6c:a1:06:28:4f:9a:88:29:b2: 72:56:91:df:48:35:62:51:d7:f7:52:69:29:99:b5:05:e6:05: b8:30:47:07:bf:ce:c1:72:65:4c:e9:b4:31:79:b6:e9:ee:07: 07:0c:55:fd:08:15:af:46:55:af:df:af:27:d7:87:8c:11:37: aa:ed:e6:00:0e:32:c8:61:bb:89:b0:45:02:1d:b1:03:61:a3: 99:75:1f:ba:5a:3f:1a:a2:af:2c:67:94:9c:a8:93:2d:82:74: 12:df:73:85:cf:a8:fb:bf:57:cc:9f:8a:53:95:38:b7:45:d6: 7f:c8:bd:ea:50:95:c4:17:9d:90:10:a4:2a:12:b2:d2:e7:54: cc:2f:42:a4:62:29:ff:ed:b3:75:a9:0a:cd:a1:05:36:7e:18: f8:49:38:d3:05:de:39:58:05:f2:53:ee:6a:77:fc:4e:32:35: d0:ab:89:e2:b2:28:4e:1e:50:cb:13:5e:3a:77:62:cf:29:39: 84:ec:ff:56:a3:22:08:f8:22:81:49:f5:36:0d:22:ba:d6:a3: 9f:99:60:ba:38:5e:99:51:b6:67:20:29:91:e2:d3:21:d6:f1: 49:5f:dd:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzM3REQxMTAvBgNVBAUTKDNGRTNBRTM1NUE5Mjc3QjkxRDczRTJBQzUyRjUzODdG MDk1RjE4OUEwHhcNMjYwNDE3MDQyNzE1WhcNMjYwNDI0MDQyNzE1WjAYMRYwFAYD VQQDEw02OWUxYjZhMy1kODNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvv0FUy7fCKgAVhKXsfvMWFqZ/Fian+83lAs+7YDFWCxKzeYj7xe/daTlXvAU WcmpAlwO3dffSvCtE8jRXU4OAuDqPAWUdq2dxY7/lHkzKCT0dzup4/tXnIqMHijQ dHzXN7jC32t2GM2bBnsq32bnLmfTFzeAPaIC8CZ6msNajJsoD4jAZOLMo697Nwr9 M5sk62AXoeaVw7Rks0noo5B/79SWIcCAPFu6/ooexQp5eAWkh9fjPOZdKbttfFYy /T5CkDwHv460C4McLRoCEkFrRwjQU2Ifq3TYkYcORk0h/RLocuuGX9Rx+sb8+sfq 7KDnxDxRSDaJQ1Uoxl3N4O6X0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOKTnDSL 5dhOrjNIu9ElaJywQ896MB8GA1UdIwQYMBaAFD/jrjVakne5HXPirFL1OH8JXxia MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzdERC8yNDg1NUQ4MDA5 NjUxMUVGQTRCQ0U4N0FDNEY5QUUwMi9QLU91TlZxU2Q3a2RjLUtzVXZVNGZ3bGZH Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AtT3VOVnFTZDdrZGMtS3NVdlU0ZndsZkdKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzdERC8yNDg1NUQ4MDA5NjUxMUVGQTRCQ0U4N0FDNEY5QUUwMi9QLU91TlZxU2Q3 a2RjLUtzVXZVNGZ3bGZHSm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOtb/yL89BDtZUCWCXnrq86Gtwb2H4atw38TCbKEGKE+aiCmyclaR30g1YlHX 91JpKZm1BeYFuDBHB7/OwXJlTOm0MXm26e4HBwxV/QgVr0ZVr9+vJ9eHjBE3qu3m AA4yyGG7ibBFAh2xA2GjmXUfulo/GqKvLGeUnKiTLYJ0Et9zhc+o+79XzJ+KU5U4 t0XWf8i96lCVxBedkBCkKhKy0udUzC9CpGIp/+2zdakKzaEFNn4Y+Ek40wXeOVgF 8lPuanf8TjI10KuJ4rIoTh5QyxNeOndizyk5hOz/VqMiCPgigUn1Ng0iutajn5lg ujhemVG2ZyApkeLTIdbxSV/d0Q== -----END CERTIFICATE-----Generated at Fri Apr 17 14:37:30 2026 by rpki-client