$ rpki-client -vvf rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft File: Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft (raw, json) Hash identifier: xebpWiPDF+rR2kW6BhZkAg4shvlOApxX8xvkfCIRutU= Subject key identifier: 9D:02:0A:6C:AE:EB:5D:9D:E6:2E:D3:2F:1A:9E:40:CF:05:33:C7:C6 Authority key identifier: 3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60 Certificate issuer: /CN=A91188EE/serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360 Certificate serial: 019C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft Manifest number: 0187 Signing time: Sun 05 Apr 2026 04:09:55 +0000 Manifest this update: Sun 05 Apr 2026 04:09:54 +0000 Manifest next update: Sun 12 Apr 2026 04:09:54 +0000 Files and hashes: 1: Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl (hash: 0oLHh9v0yG+3EOIq3gUP/EIN5J3NCqKo8XDjJ18FDis=) 2: 4DC69458F51C11F0B1C1D2E9586F56BC.roa (hash: QcCJl1UfRJP0/shxvSvEBu5HkTvWkijjCe1nldV+mo4=) 3: B7B28B24B29611F091864D65C4F9AE02.roa (hash: dj/sfeD/XP/p4+SxOW5PGasZJgjYig5gGrKVB5oVAWk=) 4: 6AAF8E08F51C11F09AD046EA586F56BC.roa (hash: s2lIkMQgjms5atxnw0PAOxe6sKifUyjcGIbRJ9ah5DU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 04:09:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 412 (0x19c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91188EE, serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360 Validity Not Before: Apr 5 04:09:54 2026 GMT Not After : Apr 12 04:09:54 2026 GMT Subject: CN=69d1e093-942c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:33:ee:79:6e:6b:e2:87:77:ae:30:c8:95:a4: fa:f9:96:b9:51:bd:12:26:4c:b0:c4:03:fa:b2:db: 79:25:10:40:31:93:22:f3:ef:b0:3e:cb:fa:ee:eb: 3d:7f:3d:4a:ae:4a:2c:3f:c8:10:05:71:23:bd:a8: 49:24:81:ba:ed:85:45:c6:a2:2a:63:5b:b2:db:d9: 38:f4:90:15:1a:bb:bd:72:e6:c8:33:93:c3:c4:d8: 5e:a7:7b:77:8a:66:2a:fe:21:99:f4:60:50:e4:f5: 03:cd:10:32:ea:ed:21:69:3e:de:30:d6:bc:68:9e: b2:19:8e:f9:19:e7:e7:cc:bb:b5:05:26:f8:c9:19: bd:d6:61:bd:4c:e7:cd:92:52:eb:20:42:be:92:b9: 59:d4:99:ed:cd:d8:79:da:ae:1a:5b:16:25:b6:e9: 9d:b8:03:b6:95:e3:01:30:c4:d7:1b:62:5c:64:17: 25:90:07:80:fd:28:9c:a1:d3:7a:5c:8a:fc:9d:2f: 7d:1b:36:3e:e5:1c:d1:bd:02:58:57:cf:38:d4:7f: 11:ce:5c:c0:b1:a6:69:29:59:db:88:19:40:ad:ef: 9a:de:89:16:bb:8a:6f:6d:4b:f3:38:d4:b4:ac:23: 49:e0:e6:b9:0b:4f:f1:36:70:7e:cd:d9:d2:ca:51: f2:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:02:0A:6C:AE:EB:5D:9D:E6:2E:D3:2F:1A:9E:40:CF:05:33:C7:C6 X509v3 Authority Key Identifier: keyid:3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:e5:ad:c9:93:72:50:83:e1:0a:b7:c1:f4:21:6b:e1:57:b2: 66:6e:f9:f6:76:18:ae:87:7b:1e:26:86:4e:b5:6f:5b:ac:4f: d7:27:ee:82:76:99:71:49:82:04:d1:91:a9:91:09:f2:79:c3: 99:99:a2:fd:9c:08:8d:c5:0b:e8:c1:9b:fc:52:1b:89:17:0a: d5:8c:18:02:19:21:5f:7d:d6:12:34:e1:62:b5:d3:3a:d3:05: 00:c4:7f:73:7b:d8:8c:da:84:5d:7e:26:31:e0:3d:76:d3:3d: 75:ce:55:27:61:99:ef:a1:bc:a1:21:fa:9d:b6:35:0d:25:fc: 50:6c:08:5f:56:88:55:c4:e4:00:3e:29:6f:b6:ad:10:52:63: 08:95:90:f8:8d:47:b1:ca:0b:9d:84:67:37:1e:10:11:19:18: d6:9d:74:89:87:48:66:f7:ba:b3:01:39:b6:29:bb:f6:f5:7a: 6c:4f:06:61:4d:c0:1d:c4:87:2f:97:89:76:a6:f8:2e:fd:3f: 9a:0b:3e:15:9a:c2:b3:9c:15:37:af:48:6a:46:05:ff:50:35: bd:07:65:b0:26:2b:9e:be:e4:64:bd:ae:23:b6:30:cb:36:ce: a0:bd:8b:3b:6d:a3:b8:d4:8b:43:ff:63:2c:b5:f0:3e:41:d3: 01:bb:dd:20 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg4RUUxMTAvBgNVBAUTKDNBRURBODA0MDdENzdCQjUyODQ4QUJEOUY3MjU5QkQ4 MDdBNUQzNjAwHhcNMjYwNDA1MDQwOTU0WhcNMjYwNDEyMDQwOTU0WjAYMRYwFAYD VQQDEw02OWQxZTA5My05NDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnDPueW5r4od3rjDIlaT6+Za5Ub0SJkywxAP6stt5JRBAMZMi8++wPsv67us9 fz1KrkosP8gQBXEjvahJJIG67YVFxqIqY1uy29k49JAVGru9cubIM5PDxNhep3t3 imYq/iGZ9GBQ5PUDzRAy6u0haT7eMNa8aJ6yGY75GefnzLu1BSb4yRm91mG9TOfN klLrIEK+krlZ1Jntzdh52q4aWxYltumduAO2leMBMMTXG2JcZBclkAeA/SicodN6 XIr8nS99GzY+5RzRvQJYV8841H8RzlzAsaZpKVnbiBlAre+a3okWu4pvbUvzONS0 rCNJ4Oa5C0/xNnB+zdnSylHyhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ0CCmyu 612d5i7TLxqeQM8FM8fGMB8GA1UdIwQYMBaAFDrtqAQH13u1KEir2fclm9gHpdNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODhFRS8zMjA5NzMxQUZC QUYxMUVFQTZCQzM5NTJDNEY5QUUwMi9PdTJvQkFmWGU3VW9TS3ZaOXlXYjJBZWww MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL091Mm9CQWZYZTdVb1NLdlo5eVdiMkFlbDAyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODhFRS8zMjA5NzMxQUZCQUYxMUVFQTZCQzM5NTJDNEY5QUUwMi9PdTJvQkFmWGU3 VW9TS3ZaOXlXYjJBZWwwMkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWeWtyZNyUIPhCrfB9CFr4VeyZm759nYYrod7HiaGTrVvW6xP1yfugnaZcUmC BNGRqZEJ8nnDmZmi/ZwIjcUL6MGb/FIbiRcK1YwYAhkhX33WEjThYrXTOtMFAMR/ c3vYjNqEXX4mMeA9dtM9dc5VJ2GZ76G8oSH6nbY1DSX8UGwIX1aIVcTkAD4pb7at EFJjCJWQ+I1HscoLnYRnNx4QERkY1p10iYdIZve6swE5tim79vV6bE8GYU3AHcSH L5eJdqb4Lv0/mgs+FZrCs5wVN69IakYF/1A1vQdlsCYrnr7kZL2uI7YwyzbOoL2L O22juNSLQ/9jLLXwPkHTAbvdIA== -----END CERTIFICATE-----Generated at Mon Apr 6 13:33:58 2026 by rpki-client