$ rpki-client -vvf rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft File: P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft (raw, json) Hash identifier: 4/YFrbZB31rxGDTkXN+D3JWX/W+YKPfiBCbnMbgIvRM= Subject key identifier: 24:60:CB:68:57:BA:EB:10:B7:01:28:3D:EF:39:EA:9D:94:F9:67:DD Authority key identifier: 3F:E3:AE:35:5A:92:77:B9:1D:73:E2:AC:52:F5:38:7F:09:5F:18:9A Certificate issuer: /CN=A91C37DD/serialNumber=3FE3AE355A9277B91D73E2AC52F5387F095F189A Certificate serial: 01C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-OuNVqSd7kdc-KsUvU4fwlfGJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft Manifest number: 01B9 Signing time: Wed 19 Aug 2026 04:39:53 +0000 Manifest this update: Wed 19 Aug 2026 04:39:52 +0000 Manifest next update: Wed 26 Aug 2026 04:39:52 +0000 Files and hashes: 1: P-OuNVqSd7kdc-KsUvU4fwlfGJo.crl (hash: kAn1IIb/Cu8nbx0YPKO8SQ6zQWCPaSSV7xvJu+8VvkU=) 2: 8670D60E096611EF99F30750C4F9AE02.roa (hash: xQfXZG9thzj3/CL2WyGBShFxcEh/aS+ejX4ZQkD/eSA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.crl rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-OuNVqSd7kdc-KsUvU4fwlfGJo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 04:39:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 453 (0x1c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C37DD, serialNumber=3FE3AE355A9277B91D73E2AC52F5387F095F189A Validity Not Before: Aug 19 04:39:52 2026 GMT Not After : Aug 26 04:39:52 2026 GMT Subject: CN=6a853398-2754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0b:8b:63:ad:a8:f5:94:84:4c:83:ee:fb:19: 8c:d6:a8:14:8a:13:f5:b8:4e:86:fa:62:0f:33:24: 0e:3f:14:f5:5d:13:71:9b:9e:68:7c:87:32:69:dc: 29:bd:6b:dc:d6:45:0e:19:fe:d2:f6:c8:50:c7:40: 7c:5c:c8:85:31:db:36:78:18:2f:d7:f5:2a:13:6a: e2:3b:6d:2a:08:ba:2a:aa:f7:fb:5f:e0:f4:dd:f7: 34:ad:41:95:5d:69:19:e5:2d:16:dc:0b:86:39:2e: a0:a5:73:e7:8a:6f:5f:28:10:30:29:b4:9b:40:d7: c9:8d:95:64:62:65:83:49:4e:52:e8:85:fc:22:86: e5:c6:7d:4c:e3:a6:1e:f7:72:de:65:76:d3:24:c2: 46:97:3a:ab:fa:43:d5:c7:b6:dd:5b:4a:82:08:42: e0:38:e1:5e:6d:1d:ea:32:0a:f3:0c:eb:ab:c6:3c: 47:2e:0c:86:15:d4:0f:f6:9f:08:3a:41:94:cd:c3: ad:d7:a4:3c:a5:14:e1:f3:5b:a2:bc:4e:02:f0:f8: d4:09:d4:d1:20:0a:f7:c3:50:e1:4d:9c:ee:51:64: f0:c7:b5:ba:d7:8e:6d:1d:96:3f:45:b2:70:65:9b: cd:c7:60:c1:db:95:68:00:43:f6:d8:b4:78:b3:ca: 87:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:60:CB:68:57:BA:EB:10:B7:01:28:3D:EF:39:EA:9D:94:F9:67:DD X509v3 Authority Key Identifier: keyid:3F:E3:AE:35:5A:92:77:B9:1D:73:E2:AC:52:F5:38:7F:09:5F:18:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-OuNVqSd7kdc-KsUvU4fwlfGJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:e7:ce:da:a3:98:fc:78:78:8d:3e:b3:d7:a7:ba:02:c1:a7: 38:a0:d1:d9:96:26:03:62:dd:55:3f:21:9c:2d:1d:1d:cb:f7: 17:26:7e:c8:ba:ca:76:c0:30:57:ed:f5:ab:5c:12:05:d7:62: f2:d8:a7:19:f8:63:8e:40:ce:33:0f:e3:3d:6f:66:d1:d6:b1: 62:35:09:d3:0b:dd:90:98:39:c7:19:2d:1f:42:8e:3b:f8:74: c8:6c:b3:fb:45:1f:17:50:d3:b9:0d:a7:f7:6a:4c:0b:40:ce: e0:e7:cf:ba:ae:b7:03:9d:54:a7:71:7b:1e:65:57:6e:dd:fa: f5:e0:91:c2:86:f8:86:01:93:6d:4e:09:ed:c0:b6:62:6d:61: 71:05:4d:ff:90:d1:9b:7e:84:b1:8e:f6:ae:d8:87:56:77:6e: 6e:a4:1f:1a:8f:d5:8f:a0:ee:a7:f5:55:e7:ba:37:af:e7:bc: 9c:57:87:9c:9d:e9:bb:9f:d9:63:af:60:3b:fd:2d:00:80:92: 7b:26:02:1c:11:ed:96:07:d4:30:36:db:c4:2f:07:74:d1:89: 71:0a:f9:ca:c5:03:41:f6:a7:37:ef:23:15:25:70:8c:2a:90: 3f:2f:30:ea:02:c9:9f:e2:4c:e4:f2:12:2f:dd:1d:e3:79:8a: 2b:7a:cc:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzM3REQxMTAvBgNVBAUTKDNGRTNBRTM1NUE5Mjc3QjkxRDczRTJBQzUyRjUzODdG MDk1RjE4OUEwHhcNMjYwODE5MDQzOTUyWhcNMjYwODI2MDQzOTUyWjAYMRYwFAYD VQQDEw02YTg1MzM5OC0yNzU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuAuLY62o9ZSETIPu+xmM1qgUihP1uE6G+mIPMyQOPxT1XRNxm55ofIcyadwp vWvc1kUOGf7S9shQx0B8XMiFMds2eBgv1/UqE2riO20qCLoqqvf7X+D03fc0rUGV XWkZ5S0W3AuGOS6gpXPnim9fKBAwKbSbQNfJjZVkYmWDSU5S6IX8Ioblxn1M46Ye 93LeZXbTJMJGlzqr+kPVx7bdW0qCCELgOOFebR3qMgrzDOurxjxHLgyGFdQP9p8I OkGUzcOt16Q8pRTh81uivE4C8PjUCdTRIAr3w1DhTZzuUWTwx7W6145tHZY/RbJw ZZvNx2DB25VoAEP22LR4s8qH1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCRgy2hX uusQtwEoPe856p2U+WfdMB8GA1UdIwQYMBaAFD/jrjVakne5HXPirFL1OH8JXxia MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzdERC8yNDg1NUQ4MDA5 NjUxMUVGQTRCQ0U4N0FDNEY5QUUwMi9QLU91TlZxU2Q3a2RjLUtzVXZVNGZ3bGZH Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AtT3VOVnFTZDdrZGMtS3NVdlU0ZndsZkdKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzdERC8yNDg1NUQ4MDA5NjUxMUVGQTRCQ0U4N0FDNEY5QUUwMi9QLU91TlZxU2Q3 a2RjLUtzVXZVNGZ3bGZHSm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATOfO2qOY/Hh4jT6z16e6AsGnOKDR2ZYmA2LdVT8hnC0dHcv3FyZ+yLrKdsAw V+31q1wSBddi8tinGfhjjkDOMw/jPW9m0daxYjUJ0wvdkJg5xxktH0KOO/h0yGyz +0UfF1DTuQ2n92pMC0DO4OfPuq63A51Up3F7HmVXbt369eCRwob4hgGTbU4J7cC2 Ym1hcQVN/5DRm36EsY72rtiHVndubqQfGo/Vj6Dup/VV57o3r+e8nFeHnJ3pu5/Z Y69gO/0tAICSeyYCHBHtlgfUMDbbxC8HdNGJcQr5ysUDQfanN+8jFSVwjCqQPy8w 6gLJn+JM5PISL90d43mKK3rM0Q== -----END CERTIFICATE-----Generated at Wed Aug 19 16:47:51 2026 by rpki-client