$ rpki-client -vvf rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft File: UxdJCV5En9gqodtQ2oNAFyML3RM.mft (raw, json) Hash identifier: MC5S7IUPYqmcAzmeVn1cXxLWkmJMwKQDpU1XUkuYGe8= Subject key identifier: 65:71:7A:FC:AC:70:21:48:3D:FA:98:72:E6:BF:1A:06:6E:E9:C4:60 Authority key identifier: 53:17:49:09:5E:44:9F:D8:2A:A1:DB:50:DA:83:40:17:23:0B:DD:13 Certificate issuer: /CN=A9117754/serialNumber=531749095E449FD82AA1DB50DA834017230BDD13 Certificate serial: 0C1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft Manifest number: 0C13 Signing time: Tue 24 Mar 2026 18:38:03 +0000 Manifest this update: Tue 24 Mar 2026 18:38:02 +0000 Manifest next update: Tue 31 Mar 2026 18:38:02 +0000 Files and hashes: 1: UxdJCV5En9gqodtQ2oNAFyML3RM.crl (hash: kFXBigP4E2B5O3+ZzK3nV6aJ+52zXv9FDvGIYIOt1E0=) 2: B5761C3E2C8E11EA83DAB436C4F9AE02.roa (hash: HVSrkMHkZUPuPigIBAFRqYkv/0wRB+c6OCpvUKZ3fUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.crl rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:38:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3101 (0xc1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117754, serialNumber=531749095E449FD82AA1DB50DA834017230BDD13 Validity Not Before: Mar 24 18:38:02 2026 GMT Not After : Mar 31 18:38:02 2026 GMT Subject: CN=69c2da0b-7d54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:6a:06:66:6f:ee:f1:a6:97:7a:ad:b1:27:94: 31:22:60:29:6b:94:13:77:16:31:c7:b6:c4:ee:3d: 36:41:54:fc:92:5a:44:42:32:e1:be:04:c8:bf:68: b5:24:57:ad:fd:8e:dd:7e:84:46:9b:0f:9a:78:c6: 6d:91:23:39:87:60:37:c5:a7:71:3b:64:96:dc:95: c9:f8:a3:4b:83:12:39:c6:a2:2f:09:c6:ad:3b:10: a4:0f:23:28:4a:9b:a9:f7:ff:b4:75:cf:2d:75:33: d4:a6:ea:14:ac:6d:0c:50:f3:a8:1e:af:83:14:61: 94:79:97:ef:7d:97:e5:42:d7:3a:58:4a:5d:a8:68: dd:ee:93:9f:15:22:4f:7c:1f:62:7b:cf:4b:52:2f: de:f7:8d:f3:a3:8a:3e:2e:8c:64:86:ae:3b:57:96: 83:c5:7d:fd:97:20:92:ee:0e:c0:9c:4c:0a:9f:6a: da:ce:f4:1d:24:ff:00:38:cb:6c:d5:d0:22:02:fa: 19:ef:ef:75:ca:9d:9a:e5:82:89:28:23:e7:92:5c: a2:a5:75:fa:49:28:96:14:56:8b:2f:74:a9:cb:f1: cc:5b:b9:dd:b8:2e:d5:b7:fa:69:b4:34:a2:4f:bf: f2:52:09:79:b5:9a:b2:07:ab:fe:77:5d:e4:35:29: e3:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:71:7A:FC:AC:70:21:48:3D:FA:98:72:E6:BF:1A:06:6E:E9:C4:60 X509v3 Authority Key Identifier: keyid:53:17:49:09:5E:44:9F:D8:2A:A1:DB:50:DA:83:40:17:23:0B:DD:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxdJCV5En9gqodtQ2oNAFyML3RM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117754/8B3145AE2C8C11EA90EA3732C4F9AE02/UxdJCV5En9gqodtQ2oNAFyML3RM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:b4:7e:68:70:a7:8d:e5:43:e9:7e:da:f4:7b:fb:8a:9a:4d: 0e:cb:71:4b:86:18:e1:95:4f:83:a5:5f:ad:17:7d:ec:d0:1e: 7a:f5:d3:d2:aa:e7:5f:e8:4d:c9:ac:6f:33:0b:da:bd:a6:bf: d9:a4:47:ab:cb:b1:c3:16:a4:06:ed:0d:c7:f5:1f:65:69:c7: 0f:2a:2e:55:7f:5e:11:35:22:13:99:5d:dc:41:ba:c0:13:81: 56:9c:7e:0b:37:bb:80:73:2a:27:eb:c4:16:e0:df:1f:7f:c5: 9c:f8:fa:48:84:26:2a:ed:f9:96:4f:e9:be:b8:bc:02:c9:b6: c4:cd:5a:f8:89:42:04:55:a2:b8:f5:11:8a:ab:12:6b:24:7c: 5f:20:e3:e2:59:42:0d:da:a7:2b:77:55:23:b4:41:c4:1a:aa: b0:ee:56:a1:8c:5a:16:92:5a:99:c1:81:e1:cc:67:78:14:63: f4:c0:c8:2d:1a:29:33:ef:ba:7f:81:73:56:3c:47:a6:44:48: 2b:1a:f8:0d:65:6c:b5:ab:3c:a4:58:8b:76:be:d8:c2:b4:47: 31:a7:46:21:98:f6:8c:d4:d3:48:9d:75:8c:c8:b1:d3:12:e4: 02:0f:59:38:a7:5e:51:9f:09:32:bf:0a:44:fa:86:64:02:1d: 3d:39:d5:87 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDB0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc3NTQxMTAvBgNVBAUTKDUzMTc0OTA5NUU0NDlGRDgyQUExREI1MERBODM0MDE3 MjMwQkREMTMwHhcNMjYwMzI0MTgzODAyWhcNMjYwMzMxMTgzODAyWjAYMRYwFAYD VQQDEw02OWMyZGEwYi03ZDU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA82oGZm/u8aaXeq2xJ5QxImApa5QTdxYxx7bE7j02QVT8klpEQjLhvgTIv2i1 JFet/Y7dfoRGmw+aeMZtkSM5h2A3xadxO2SW3JXJ+KNLgxI5xqIvCcatOxCkDyMo Spup9/+0dc8tdTPUpuoUrG0MUPOoHq+DFGGUeZfvfZflQtc6WEpdqGjd7pOfFSJP fB9ie89LUi/e943zo4o+Loxkhq47V5aDxX39lyCS7g7AnEwKn2razvQdJP8AOMts 1dAiAvoZ7+91yp2a5YKJKCPnklyipXX6SSiWFFaLL3Spy/HMW7nduC7Vt/pptDSi T7/yUgl5tZqyB6v+d13kNSnjLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGVxevys cCFIPfqYcua/GgZu6cRgMB8GA1UdIwQYMBaAFFMXSQleRJ/YKqHbUNqDQBcjC90T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzc1NC84QjMxNDVBRTJD OEMxMUVBOTBFQTM3MzJDNEY5QUUwMi9VeGRKQ1Y1RW45Z3FvZHRRMm9OQUZ5TUwz Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V4ZEpDVjVFbjlncW9kdFEyb05BRnlNTDNSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Nzc1NC84QjMxNDVBRTJDOEMxMUVBOTBFQTM3MzJDNEY5QUUwMi9VeGRKQ1Y1RW45 Z3FvZHRRMm9OQUZ5TUwzUk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAArR+aHCnjeVD6X7a9Hv7ippNDstxS4YY4ZVPg6VfrRd97NAeevXT0qrnX+hN yaxvMwvavaa/2aRHq8uxwxakBu0Nx/UfZWnHDyouVX9eETUiE5ld3EG6wBOBVpx+ Cze7gHMqJ+vEFuDfH3/FnPj6SIQmKu35lk/pvri8Asm2xM1a+IlCBFWiuPURiqsS ayR8XyDj4llCDdqnK3dVI7RBxBqqsO5WoYxaFpJamcGB4cxneBRj9MDILRopM++6 f4FzVjxHpkRIKxr4DWVstas8pFiLdr7YwrRHMadGIZj2jNTTSJ11jMix0xLkAg9Z OKdeUZ8JMr8KRPqGZAIdPTnVhw== -----END CERTIFICATE-----Generated at Thu Mar 26 02:38:05 2026 by rpki-client