$ rpki-client -vvf rpki.apnic.net/member_repository/A9196AF7/CBE7F36824CE11F1BC1F5B8EA9833773/ouLfhQX-LyqKzdbd8cVh7_fdnuI.mft File: ouLfhQX-LyqKzdbd8cVh7_fdnuI.mft (raw, json) Hash identifier: nFcOPSQSqjdZm7kdZWX9Q1ERtKcfjXNO+ci/NaTZyXY= Subject key identifier: 49:AC:33:07:A8:46:08:5F:25:6A:F2:4B:0F:8F:1C:7D:CA:3B:5C:58 Authority key identifier: A2:E2:DF:85:05:FE:2F:2A:8A:CD:D6:DD:F1:C5:61:EF:F7:DD:9E:E2 Certificate issuer: /CN=A9196AF7/serialNumber=A2E2DF8505FE2F2A8ACDD6DDF1C561EFF7DD9EE2 Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ouLfhQX-LyqKzdbd8cVh7_fdnuI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196AF7/CBE7F36824CE11F1BC1F5B8EA9833773/ouLfhQX-LyqKzdbd8cVh7_fdnuI.mft Manifest number: 0A Signing time: Sun 05 Apr 2026 08:28:09 +0000 Manifest this update: Sun 05 Apr 2026 08:28:08 +0000 Manifest next update: Sun 12 Apr 2026 08:28:08 +0000 Files and hashes: 1: ouLfhQX-LyqKzdbd8cVh7_fdnuI.crl (hash: nrEJpRjE59HKIgOZ9/5wg/2fln30j+tIpRmk7javA00=) 2: 7EF6CB6E24CF11F1AAA533A9A9833773.roa (hash: 8y7L9hPSTuk1LDFXpb7ShDJmE7OnOp5HbjTXee/kCzg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196AF7/CBE7F36824CE11F1BC1F5B8EA9833773/ouLfhQX-LyqKzdbd8cVh7_fdnuI.crl rsync://rpki.apnic.net/member_repository/A9196AF7/CBE7F36824CE11F1BC1F5B8EA9833773/ouLfhQX-LyqKzdbd8cVh7_fdnuI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ouLfhQX-LyqKzdbd8cVh7_fdnuI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:28:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196AF7, serialNumber=A2E2DF8505FE2F2A8ACDD6DDF1C561EFF7DD9EE2 Validity Not Before: Apr 5 08:28:08 2026 GMT Not After : Apr 12 08:28:08 2026 GMT Subject: CN=69d21d19-9d1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a9:49:25:d9:36:ee:6a:08:a7:de:74:24:1d: 27:a6:61:4a:65:a6:f6:5f:23:93:0a:d8:05:32:8e: ac:a3:b7:23:f5:35:7e:89:f6:11:46:0d:27:05:2b: 59:f4:ef:0d:58:dd:50:29:e6:e9:66:de:c4:43:8d: a5:b1:6c:6a:38:d8:7f:c1:20:c1:80:47:bf:f5:c8: 7a:23:b8:aa:e6:37:cc:8d:08:21:2f:e0:72:62:b5: d0:32:d7:80:d5:e7:11:ff:d0:58:80:dd:47:bc:f3: 6d:f2:af:91:ff:7d:52:81:eb:67:c2:0f:88:1b:b4: b3:ae:64:71:96:4c:09:26:cc:89:c8:81:1a:7c:c4: 8b:ce:a8:c2:7f:02:d5:48:67:06:20:76:ea:3a:61: 82:f1:50:81:2d:30:74:30:ef:62:e7:a4:ab:68:a8: 56:db:65:81:27:d1:65:01:13:28:a9:3f:43:53:49: 4e:81:94:56:fd:d2:09:c4:8d:66:ab:ce:a4:c0:9d: 9c:ea:39:9d:8c:1e:77:b5:46:30:38:b5:58:c7:85: fa:65:cd:44:f8:80:f5:ee:22:68:cb:60:08:71:e6: 09:08:3b:5b:e9:bc:1f:38:3c:f6:76:e5:8a:27:bc: 58:83:fa:8f:49:41:09:8a:d3:59:66:7a:8f:97:ed: 7b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:AC:33:07:A8:46:08:5F:25:6A:F2:4B:0F:8F:1C:7D:CA:3B:5C:58 X509v3 Authority Key Identifier: keyid:A2:E2:DF:85:05:FE:2F:2A:8A:CD:D6:DD:F1:C5:61:EF:F7:DD:9E:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196AF7/CBE7F36824CE11F1BC1F5B8EA9833773/ouLfhQX-LyqKzdbd8cVh7_fdnuI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ouLfhQX-LyqKzdbd8cVh7_fdnuI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196AF7/CBE7F36824CE11F1BC1F5B8EA9833773/ouLfhQX-LyqKzdbd8cVh7_fdnuI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:13:ad:b0:77:7a:a3:ee:37:e8:55:c5:aa:6d:ff:a9:96:35: 9d:4e:a9:28:bb:3a:94:90:05:22:6a:2f:54:b4:fe:9d:78:09: ff:88:28:28:6f:b0:dd:97:f4:c4:dc:60:75:6e:0b:57:56:16: 8d:23:00:81:dc:1b:ed:ef:ba:de:dc:c1:d3:45:9f:1d:23:0b: 73:f8:d9:78:31:5c:85:57:91:06:06:60:7d:fa:a7:a4:91:23: 87:6e:25:87:cc:e4:d8:f2:65:22:b8:b8:98:28:dd:58:98:9a: 32:52:fe:bc:be:75:42:df:b3:0a:47:86:c0:62:4f:16:82:c6: 36:4c:07:b6:dd:b9:7f:5d:0d:7e:05:c8:6d:dd:1a:a3:3b:a2: a7:80:d2:53:f3:60:e6:98:43:bc:6c:7a:5d:5f:48:73:0d:4f: 24:2b:6c:49:47:f7:6d:a7:ae:cd:50:5a:55:51:ae:fa:c0:60: 62:c7:30:59:75:53:7b:81:23:d0:13:89:ff:8c:f0:09:4d:4c: df:77:db:60:4a:7f:77:c5:63:fd:d0:ba:40:f9:78:86:8e:d1: 31:63:27:ed:15:35:3c:5b:88:ec:1a:4b:00:15:57:0c:87:ef: b4:f9:13:63:e2:c2:ea:1e:c1:a0:40:48:9d:af:eb:59:90:03: 10:d4:c5:61 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NkFGNzExMC8GA1UEBRMoQTJFMkRGODUwNUZFMkYyQThBQ0RENkRERjFDNTYxRUZG N0REOUVFMjAeFw0yNjA0MDUwODI4MDhaFw0yNjA0MTIwODI4MDhaMBgxFjAUBgNV BAMTDTY5ZDIxZDE5LTlkMWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCYqUkl2Tbuagin3nQkHSemYUplpvZfI5MK2AUyjqyjtyP1NX6J9hFGDScFK1n0 7w1Y3VAp5ulm3sRDjaWxbGo42H/BIMGAR7/1yHojuKrmN8yNCCEv4HJitdAy14DV 5xH/0FiA3Ue8823yr5H/fVKB62fCD4gbtLOuZHGWTAkmzInIgRp8xIvOqMJ/AtVI ZwYgduo6YYLxUIEtMHQw72LnpKtoqFbbZYEn0WUBEyipP0NTSU6BlFb90gnEjWar zqTAnZzqOZ2MHne1RjA4tVjHhfplzUT4gPXuImjLYAhx5gkIO1vpvB84PPZ25Yon vFiD+o9JQQmK01lmeo+X7XsbAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUSawzB6hG CF8lavJLD48cfco7XFgwHwYDVR0jBBgwFoAUouLfhQX+LyqKzdbd8cVh7/fdnuIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2QUY3L0NCRTdGMzY4MjRD RTExRjFCQzFGNUI4RUE5ODMzNzczL291TGZoUVgtTHlxS3pkYmQ4Y1ZoN19mZG51 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb3VMZmhRWC1MeXFLemRiZDhjVmg3X2ZkbnVJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2 QUY3L0NCRTdGMzY4MjRDRTExRjFCQzFGNUI4RUE5ODMzNzczL291TGZoUVgtTHlx S3pkYmQ4Y1ZoN19mZG51SS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCgE62wd3qj7jfoVcWqbf+pljWdTqkouzqUkAUiai9UtP6deAn/iCgob7Ddl/TE 3GB1bgtXVhaNIwCB3Bvt77re3MHTRZ8dIwtz+Nl4MVyFV5EGBmB9+qekkSOHbiWH zOTY8mUiuLiYKN1YmJoyUv68vnVC37MKR4bAYk8WgsY2TAe23bl/XQ1+Bcht3Rqj O6KngNJT82DmmEO8bHpdX0hzDU8kK2xJR/dtp67NUFpVUa76wGBixzBZdVN7gSPQ E4n/jPAJTUzfd9tgSn93xWP90LpA+XiGjtExYyftFTU8W4jsGksAFVcMh++0+RNj 4sLqHsGgQEidr+tZkAMQ1MVh -----END CERTIFICATE-----Generated at Sun Apr 5 19:37:27 2026 by rpki-client