$ rpki-client -vvf rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft File: P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft (raw, json) Hash identifier: Ecbz3ciI6dduWPlLF8KggSRq9+u3kslKPSJOXSx/nF0= Subject key identifier: EB:17:62:DF:71:46:42:E5:F6:73:7B:2C:52:97:E6:D7:93:12:72:9B Authority key identifier: 3F:E3:AE:35:5A:92:77:B9:1D:73:E2:AC:52:F5:38:7F:09:5F:18:9A Certificate issuer: /CN=A91C37DD/serialNumber=3FE3AE355A9277B91D73E2AC52F5387F095F189A Certificate serial: 0195 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-OuNVqSd7kdc-KsUvU4fwlfGJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft Manifest number: 018A Signing time: Thu 21 May 2026 04:36:21 +0000 Manifest this update: Thu 21 May 2026 04:36:20 +0000 Manifest next update: Thu 28 May 2026 04:36:20 +0000 Files and hashes: 1: P-OuNVqSd7kdc-KsUvU4fwlfGJo.crl (hash: lX+MDXGQzM4Mdtmobyq6f7wnr2XWiptq5ef/qMHMIGs=) 2: 8670D60E096611EF99F30750C4F9AE02.roa (hash: 0yhvKskd5GqZK6c8Xx+j5Xrsh1PS3EvaAWcxy1VCVk0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.crl rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-OuNVqSd7kdc-KsUvU4fwlfGJo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 04:36:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 405 (0x195) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C37DD, serialNumber=3FE3AE355A9277B91D73E2AC52F5387F095F189A Validity Not Before: May 21 04:36:20 2026 GMT Not After : May 28 04:36:20 2026 GMT Subject: CN=6a0e8bc5-3760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0b:b2:7e:ed:d3:a2:17:56:d7:4e:8d:48:ac: 6f:1e:d4:7c:53:bc:05:cb:e1:fc:27:e6:73:a8:09: b8:32:03:e0:3b:e3:40:97:b7:b4:c9:ff:ce:c5:f3: 5a:bd:41:ca:12:b6:38:da:28:94:47:84:1d:9f:f0: 32:8f:9a:df:73:c0:6a:8d:79:7b:44:3b:d1:ae:98: 41:30:64:b3:b5:28:81:3e:00:ca:bc:ae:ef:76:9f: 11:35:07:eb:95:95:35:3c:c1:8d:88:c4:2f:11:76: 95:19:ec:7d:cf:f5:d2:96:42:d0:21:5a:46:a7:2a: 2c:34:10:e6:9c:e0:1f:58:a4:16:c5:eb:1d:73:67: 34:47:91:c3:44:19:31:4d:53:00:80:2d:75:19:2a: c2:b8:36:95:a5:f8:55:cd:af:17:48:9a:b0:43:9a: cb:71:32:0a:87:96:58:4a:61:3d:c5:54:7a:e1:2e: b8:58:f0:ee:1d:db:09:98:d2:24:58:12:2c:f9:d8: 75:2b:2f:0b:6d:4d:b3:08:1d:4b:2b:02:c8:dc:0e: 5f:f5:ec:eb:d7:f0:a6:9a:68:4d:43:26:cf:35:9f: f1:d0:5c:14:f7:d1:32:65:d5:bf:a1:ad:dc:a5:d5: ff:6e:bc:3f:54:98:9e:21:5f:f4:3d:92:0c:ca:86: b1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:17:62:DF:71:46:42:E5:F6:73:7B:2C:52:97:E6:D7:93:12:72:9B X509v3 Authority Key Identifier: keyid:3F:E3:AE:35:5A:92:77:B9:1D:73:E2:AC:52:F5:38:7F:09:5F:18:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-OuNVqSd7kdc-KsUvU4fwlfGJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C37DD/24855D80096511EFA4BCE87AC4F9AE02/P-OuNVqSd7kdc-KsUvU4fwlfGJo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:48:df:33:7d:ce:7b:25:b1:c6:86:6b:ea:8a:73:a5:d4:6a: dd:b6:d7:a8:22:1d:f3:02:e1:2a:c3:00:5a:6f:cd:09:49:c3: 29:cf:8e:e8:80:55:0e:18:cd:a7:6c:66:4c:44:1a:36:24:a9: e4:13:00:20:69:6a:f6:c8:f0:3c:68:4e:98:a1:74:3a:ce:83: 5e:4d:0d:29:1d:87:25:7a:dc:1d:8c:99:65:59:cd:2a:e5:0b: 1d:dd:c8:fc:b0:c3:b1:9d:57:43:72:99:d1:93:b5:3d:b1:09: 53:0f:54:13:23:0a:76:82:b0:c0:8e:67:3d:06:b0:09:e4:fc: a4:38:d6:9d:b4:2b:06:e3:b6:6a:58:39:29:2e:6c:7f:72:87: 12:de:83:53:ba:4d:c4:a4:94:c2:49:fe:88:73:6a:d9:33:fe: a1:5d:13:72:8f:b9:87:7e:d8:80:3b:26:b0:34:ad:14:54:ed: af:24:26:71:38:26:3c:fa:b2:65:ea:2b:a8:64:47:19:5d:c7: f5:03:d5:6f:d8:e2:3c:75:45:c3:76:db:0f:47:8d:10:94:57: 72:fd:4c:1d:2f:cd:fe:04:a4:b4:ff:3c:f8:d8:4b:d4:2f:7a: 33:86:05:0f:68:9e:07:b6:32:f9:d5:a7:90:1b:bd:e4:15:8e: 76:fb:de:0f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzM3REQxMTAvBgNVBAUTKDNGRTNBRTM1NUE5Mjc3QjkxRDczRTJBQzUyRjUzODdG MDk1RjE4OUEwHhcNMjYwNTIxMDQzNjIwWhcNMjYwNTI4MDQzNjIwWjAYMRYwFAYD VQQDEw02YTBlOGJjNS0zNzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvwuyfu3TohdW106NSKxvHtR8U7wFy+H8J+ZzqAm4MgPgO+NAl7e0yf/OxfNa vUHKErY42iiUR4Qdn/Ayj5rfc8BqjXl7RDvRrphBMGSztSiBPgDKvK7vdp8RNQfr lZU1PMGNiMQvEXaVGex9z/XSlkLQIVpGpyosNBDmnOAfWKQWxesdc2c0R5HDRBkx TVMAgC11GSrCuDaVpfhVza8XSJqwQ5rLcTIKh5ZYSmE9xVR64S64WPDuHdsJmNIk WBIs+dh1Ky8LbU2zCB1LKwLI3A5f9ezr1/CmmmhNQybPNZ/x0FwU99EyZdW/oa3c pdX/brw/VJieIV/0PZIMyoaxbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOsXYt9x RkLl9nN7LFKX5teTEnKbMB8GA1UdIwQYMBaAFD/jrjVakne5HXPirFL1OH8JXxia MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzdERC8yNDg1NUQ4MDA5 NjUxMUVGQTRCQ0U4N0FDNEY5QUUwMi9QLU91TlZxU2Q3a2RjLUtzVXZVNGZ3bGZH Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AtT3VOVnFTZDdrZGMtS3NVdlU0ZndsZkdKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzdERC8yNDg1NUQ4MDA5NjUxMUVGQTRCQ0U4N0FDNEY5QUUwMi9QLU91TlZxU2Q3 a2RjLUtzVXZVNGZ3bGZHSm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACkjfM33OeyWxxoZr6opzpdRq3bbXqCId8wLhKsMAWm/NCUnDKc+O6IBVDhjN p2xmTEQaNiSp5BMAIGlq9sjwPGhOmKF0Os6DXk0NKR2HJXrcHYyZZVnNKuULHd3I /LDDsZ1XQ3KZ0ZO1PbEJUw9UEyMKdoKwwI5nPQawCeT8pDjWnbQrBuO2alg5KS5s f3KHEt6DU7pNxKSUwkn+iHNq2TP+oV0Tco+5h37YgDsmsDStFFTtryQmcTgmPPqy ZeorqGRHGV3H9QPVb9jiPHVFw3bbD0eNEJRXcv1MHS/N/gSktP88+NhL1C96M4YF D2ieB7Yy+dWnkBu95BWOdvveDw== -----END CERTIFICATE-----Generated at Thu May 21 10:23:05 2026 by rpki-client