$ rpki-client -vvf rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft File: UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft (raw, json) Hash identifier: Ez2XH14HAsKjf426jZG9IPITYW2js1GAYOSWWMXV8xk= Subject key identifier: 20:01:30:BA:BA:34:CD:11:33:F6:79:F7:A8:7D:D1:A6:D3:2F:A0:99 Authority key identifier: 53:32:F9:AF:30:52:CF:3F:85:EA:BD:D0:AA:D6:81:52:39:52:E6:56 Certificate issuer: /CN=A911BAD6/serialNumber=5332F9AF3052CF3F85EABDD0AAD681523952E656 Certificate serial: 02BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft Manifest number: 02AB Signing time: Wed 25 Mar 2026 01:08:20 +0000 Manifest this update: Wed 25 Mar 2026 01:08:20 +0000 Manifest next update: Wed 01 Apr 2026 01:08:20 +0000 Files and hashes: 1: UzL5rzBSzz-F6r3QqtaBUjlS5lY.crl (hash: 4AZOt334ey2lHA667fNYw7WdeTx2W8PssJ6OGPBz9So=) 2: 35CBA9EC70D311F08BF5B035C4F9AE02.roa (hash: nJ1vYtdsXfeT0k12QEfSHKja0MiLNjEpDEZqyjvHy0M=) 3: B288EC9C870811F0A371DD81C4F9AE02.roa (hash: EbM83ZEvePXe1Ly5n5Vgc1KedeQFazDTw+k8LcCr0ls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.crl rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:08:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 702 (0x2be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BAD6, serialNumber=5332F9AF3052CF3F85EABDD0AAD681523952E656 Validity Not Before: Mar 25 01:08:20 2026 GMT Not After : Apr 1 01:08:20 2026 GMT Subject: CN=69c33584-3bf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f7:08:bd:f1:ab:eb:09:5c:f4:bd:9b:0e:3a: 00:41:fb:a5:42:ca:fa:5b:a7:3c:2f:d1:51:d7:79: f1:17:14:48:4b:e2:26:31:a4:b6:2d:cf:42:15:00: 68:2a:2e:82:cb:33:7d:72:4f:00:fe:89:72:5c:89: f9:ec:f2:50:cd:33:d2:50:ef:55:3b:7e:8c:22:3a: 35:cb:26:6a:e0:9d:fa:8e:6c:2d:f9:a3:76:a2:26: c9:83:91:41:cc:36:2c:4b:17:58:6b:03:e3:03:28: b5:c4:7d:c2:a9:8c:0e:0b:42:61:0d:4c:d1:cc:e7: 0b:9a:ce:9d:97:d8:85:3e:9d:c3:35:45:b9:1f:57: 84:d3:9f:f7:21:3b:f1:fd:f3:4c:1e:1b:bd:91:c1: 19:5a:9e:31:1d:c8:12:f3:65:5c:40:3c:4c:21:ff: 20:94:4e:e8:44:66:54:60:0b:fd:ee:d4:65:e6:24: 38:78:33:49:24:c6:38:33:d9:4c:0b:89:1e:9c:b3: 5d:00:61:2f:22:ec:68:14:df:f3:c1:34:7e:0e:34: 88:85:e5:00:9b:8d:15:9b:0c:20:41:47:bf:5e:85: 45:ca:7e:91:cd:34:c2:68:46:87:62:de:1f:b8:c1: 0b:2d:0f:a1:65:39:20:0f:09:70:ed:37:f6:1e:84: 1e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:01:30:BA:BA:34:CD:11:33:F6:79:F7:A8:7D:D1:A6:D3:2F:A0:99 X509v3 Authority Key Identifier: keyid:53:32:F9:AF:30:52:CF:3F:85:EA:BD:D0:AA:D6:81:52:39:52:E6:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:6b:77:34:af:09:e9:1b:15:ed:d5:1b:0b:8f:d8:bd:82:5d: fe:b4:6c:8d:5e:66:1c:6a:ec:b8:1f:6f:93:b3:6e:52:63:a0: 28:1c:2a:ed:28:ad:a8:34:c0:22:60:88:4b:a7:7f:2d:f7:64: cb:d7:29:42:d2:ed:88:b4:76:f2:05:fe:b7:43:08:e1:f4:c2: eb:b0:23:d7:d2:2b:a3:b9:59:aa:bd:26:d7:55:c6:90:4a:c4: 17:41:d4:22:09:c5:fa:a8:90:aa:8e:de:77:72:0f:49:36:5b: 0e:a5:8e:94:7b:ae:2c:cb:0d:b4:a5:43:39:b6:35:de:60:e6: 0e:ff:81:76:d5:b7:ff:65:11:04:da:dd:36:a1:bb:66:13:f0: 5e:18:e1:2b:4b:7d:78:70:65:e6:64:2b:31:c6:83:ac:2c:30: 83:15:55:18:bd:2f:65:6f:04:d9:c5:a2:f9:0c:d9:14:21:85: ff:77:88:ec:d1:c1:df:25:22:fb:9d:50:04:12:b8:7a:80:22: 21:bc:e3:36:ad:8b:34:b5:54:f6:56:1b:a9:fc:a5:b3:42:c6: 6c:ea:9a:2d:38:57:68:9a:b9:bc:71:fd:e9:ff:b7:4e:89:b7: 94:ff:7a:ee:33:da:c9:84:5f:c7:03:67:ea:11:1a:27:c9:01: be:b0:e8:dc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAr4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJBRDYxMTAvBgNVBAUTKDUzMzJGOUFGMzA1MkNGM0Y4NUVBQkREMEFBRDY4MTUy Mzk1MkU2NTYwHhcNMjYwMzI1MDEwODIwWhcNMjYwNDAxMDEwODIwWjAYMRYwFAYD VQQDEw02OWMzMzU4NC0zYmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsPcIvfGr6wlc9L2bDjoAQfulQsr6W6c8L9FR13nxFxRIS+ImMaS2Lc9CFQBo Ki6CyzN9ck8A/olyXIn57PJQzTPSUO9VO36MIjo1yyZq4J36jmwt+aN2oibJg5FB zDYsSxdYawPjAyi1xH3CqYwOC0JhDUzRzOcLms6dl9iFPp3DNUW5H1eE05/3ITvx /fNMHhu9kcEZWp4xHcgS82VcQDxMIf8glE7oRGZUYAv97tRl5iQ4eDNJJMY4M9lM C4kenLNdAGEvIuxoFN/zwTR+DjSIheUAm40VmwwgQUe/XoVFyn6RzTTCaEaHYt4f uMELLQ+hZTkgDwlw7Tf2HoQeTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCABMLq6 NM0RM/Z596h90abTL6CZMB8GA1UdIwQYMBaAFFMy+a8wUs8/heq90KrWgVI5UuZW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkFENi9ENjRGNEU5QzNB RjIxMUVEQTg0MkM1NzZDNEY5QUUwMi9Vekw1cnpCU3p6LUY2cjNRcXRhQlVqbFM1 bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V6TDVyekJTenotRjZyM1FxdGFCVWpsUzVsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkFENi9ENjRGNEU5QzNBRjIxMUVEQTg0MkM1NzZDNEY5QUUwMi9Vekw1cnpCU3p6 LUY2cjNRcXRhQlVqbFM1bFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOGt3NK8J6RsV7dUbC4/YvYJd/rRsjV5mHGrsuB9vk7NuUmOgKBwq7SitqDTA ImCIS6d/Lfdky9cpQtLtiLR28gX+t0MI4fTC67Aj19Iro7lZqr0m11XGkErEF0HU IgnF+qiQqo7ed3IPSTZbDqWOlHuuLMsNtKVDObY13mDmDv+BdtW3/2URBNrdNqG7 ZhPwXhjhK0t9eHBl5mQrMcaDrCwwgxVVGL0vZW8E2cWi+QzZFCGF/3eI7NHB3yUi +51QBBK4eoAiIbzjNq2LNLVU9lYbqfyls0LGbOqaLThXaJq5vHH96f+3Tom3lP96 7jPayYRfxwNn6hEaJ8kBvrDo3A== -----END CERTIFICATE-----Generated at Thu Mar 26 14:33:16 2026 by rpki-client