$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.mft File: 38UozwAG40FK-3_obR_er2SLXJ0.mft (raw, json) Hash identifier: 3amqM5CXwcfMz8BkyhzBZZ94G5pSrR4Tz9XfhhnnW6I= Subject key identifier: 5D:A6:7F:E9:1D:91:B1:B4:8D:85:43:28:2F:BB:64:D0:6C:7D:35:51 Authority key identifier: DF:C5:28:CF:00:06:E3:41:4A:FB:7F:E8:6D:1F:DE:AF:64:8B:5C:9D Certificate issuer: /CN=A91B1A3B/serialNumber=DFC528CF0006E3414AFB7FE86D1FDEAF648B5C9D Certificate serial: 0132 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38UozwAG40FK-3_obR_er2SLXJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.mft Manifest number: 012A Signing time: Thu 21 May 2026 05:43:10 +0000 Manifest this update: Thu 21 May 2026 05:43:10 +0000 Manifest next update: Thu 28 May 2026 05:43:10 +0000 Files and hashes: 1: 38UozwAG40FK-3_obR_er2SLXJ0.crl (hash: bw3jaSu2XW/Kh/xuURFUgGSaLqaBs2yh+wkVMNRQ3yU=) 2: 6CF3FF44901111EF922BFC29C4F9AE02.roa (hash: hvfFWUPLyFvJCXfs1g4giSnFKRGrDpasDj01CVoVhxU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.crl rsync://rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38UozwAG40FK-3_obR_er2SLXJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 05:43:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 306 (0x132) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1A3B, serialNumber=DFC528CF0006E3414AFB7FE86D1FDEAF648B5C9D Validity Not Before: May 21 05:43:10 2026 GMT Not After : May 28 05:43:10 2026 GMT Subject: CN=6a0e9b6e-fee7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3b:b8:2d:84:3c:7e:64:2a:4c:1f:30:0e:f7: d8:c2:72:a2:dd:2f:70:e5:91:0e:61:ea:ee:f8:25: c9:58:6e:2c:80:2d:88:07:ef:a8:7f:ba:04:25:d3: 0d:43:7c:3c:94:3f:7b:1a:86:e6:1b:2c:6d:50:de: 49:f6:53:f6:66:be:c9:aa:2d:82:ba:07:c3:cb:72: 5d:96:ad:2b:60:0d:b1:c5:b1:d7:aa:64:ff:92:1c: 1a:b8:ff:bd:11:73:e0:3a:3e:66:12:df:c2:eb:4e: 82:52:fc:87:09:71:5d:f6:29:0c:69:05:de:d8:53: e1:ba:4c:8f:97:61:b3:b7:e0:1e:d4:0e:a0:a5:28: 42:ab:5d:18:90:c4:a5:79:52:a8:5d:44:26:45:00: 17:b0:a6:22:58:10:61:cd:9c:60:25:a1:f0:c3:77: 44:6c:b7:a4:e2:fa:cd:08:8f:6a:d2:e3:3e:6d:d4: 49:5f:6d:59:42:fe:8b:1f:a3:3a:0b:32:cf:b9:43: 64:8e:ef:07:b3:64:ca:21:7c:2b:e7:30:8f:ec:74: 69:99:ec:9a:3a:39:53:17:7c:df:50:7b:11:23:64: 79:a6:2e:cc:4b:43:41:1d:29:2f:4f:11:90:3b:eb: 15:53:ec:c8:96:83:04:df:9a:9c:c2:fc:ef:0c:64: a7:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:A6:7F:E9:1D:91:B1:B4:8D:85:43:28:2F:BB:64:D0:6C:7D:35:51 X509v3 Authority Key Identifier: keyid:DF:C5:28:CF:00:06:E3:41:4A:FB:7F:E8:6D:1F:DE:AF:64:8B:5C:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38UozwAG40FK-3_obR_er2SLXJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:66:79:98:ca:49:2d:3b:c9:db:cc:d0:3d:50:0c:e3:1d:3e: 19:55:17:4c:bd:ba:97:39:09:cc:ad:8f:a1:04:9b:b4:99:07: 69:e6:ee:76:07:22:62:4d:1d:69:48:c6:8a:c6:b9:a0:6f:b1: 57:cc:16:e3:4a:26:65:e8:f5:a2:44:da:28:25:58:85:62:a3: c6:9b:6f:13:7a:bf:04:a7:32:2c:57:ca:0c:8d:74:12:2b:1f: 7e:80:83:99:bf:90:72:94:a6:82:ce:04:d5:89:6d:45:bb:07: 04:dc:35:ed:1e:74:79:4a:56:36:3b:43:ab:c1:84:03:b4:27: 97:e6:21:df:50:83:3c:f7:3c:b2:aa:1f:63:3a:d8:95:76:71: 0a:a7:b5:2e:a7:1e:18:09:4e:f1:fd:dc:c3:ee:cc:d8:aa:28: 85:24:2e:ed:1e:97:4e:77:ca:12:7c:42:ff:e8:1d:0b:e2:1e: 5a:8b:1b:9d:1c:f6:ff:3c:21:4b:2a:53:73:4b:10:9c:cf:57: c5:b2:72:6b:4e:00:1e:aa:7e:ce:9a:25:d8:34:56:37:56:25: 5e:f6:2c:c5:13:a1:a3:0d:ae:c0:1a:95:a3:22:1e:fb:94:ef: b0:2e:95:ed:0e:ac:ae:ad:91:4d:49:2e:b8:b5:49:29:c9:37: f4:97:70:10 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFBM0IxMTAvBgNVBAUTKERGQzUyOENGMDAwNkUzNDE0QUZCN0ZFODZEMUZERUFG NjQ4QjVDOUQwHhcNMjYwNTIxMDU0MzEwWhcNMjYwNTI4MDU0MzEwWjAYMRYwFAYD VQQDEw02YTBlOWI2ZS1mZWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Tu4LYQ8fmQqTB8wDvfYwnKi3S9w5ZEOYeru+CXJWG4sgC2IB++of7oEJdMN Q3w8lD97GobmGyxtUN5J9lP2Zr7Jqi2CugfDy3Jdlq0rYA2xxbHXqmT/khwauP+9 EXPgOj5mEt/C606CUvyHCXFd9ikMaQXe2FPhukyPl2Gzt+Ae1A6gpShCq10YkMSl eVKoXUQmRQAXsKYiWBBhzZxgJaHww3dEbLek4vrNCI9q0uM+bdRJX21ZQv6LH6M6 CzLPuUNkju8Hs2TKIXwr5zCP7HRpmeyaOjlTF3zfUHsRI2R5pi7MS0NBHSkvTxGQ O+sVU+zIloME35qcwvzvDGSnaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF2mf+kd kbG0jYVDKC+7ZNBsfTVRMB8GA1UdIwQYMBaAFN/FKM8ABuNBSvt/6G0f3q9ki1yd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUEzQi8yMjcwMTlEQTkw MTExMUVGOUI4NUM5NkFDNEY5QUUwMi8zOFVvendBRzQwRkstM19vYlJfZXIyU0xY SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM4VW96d0FHNDBGSy0zX29iUl9lcjJTTFhKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUEzQi8yMjcwMTlEQTkwMTExMUVGOUI4NUM5NkFDNEY5QUUwMi8zOFVvendBRzQw RkstM19vYlJfZXIyU0xYSjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgGZ5mMpJLTvJ28zQPVAM4x0+GVUXTL26lzkJzK2PoQSbtJkHaebudgciYk0d aUjGisa5oG+xV8wW40omZej1okTaKCVYhWKjxptvE3q/BKcyLFfKDI10EisffoCD mb+QcpSmgs4E1YltRbsHBNw17R50eUpWNjtDq8GEA7Qnl+Yh31CDPPc8sqofYzrY lXZxCqe1LqceGAlO8f3cw+7M2KoohSQu7R6XTnfKEnxC/+gdC+IeWosbnRz2/zwh SypTc0sQnM9XxbJya04AHqp+zpol2DRWN1YlXvYsxROhow2uwBqVoyIe+5TvsC6V 7Q6srq2RTUkuuLVJKck39JdwEA== -----END CERTIFICATE-----Generated at Thu May 21 10:53:14 2026 by rpki-client