$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft File: u5rRr2kxSy7y9klB8Db94PfMTwI.mft (raw, json) Hash identifier: vXCYyLqBWimdBSpUKuD16iGb2R64PAgUF4JdUBfjVyU= Subject key identifier: 4E:E0:53:BC:75:F8:5C:34:AE:2A:3E:2F:D6:46:33:DE:42:48:8A:1E Authority key identifier: BB:9A:D1:AF:69:31:4B:2E:F2:F6:49:41:F0:36:FD:E0:F7:CC:4F:02 Certificate issuer: /CN=A911DA8C/serialNumber=BB9AD1AF69314B2EF2F64941F036FDE0F7CC4F02 Certificate serial: 01ED Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u5rRr2kxSy7y9klB8Db94PfMTwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft Manifest number: 01E3 Signing time: Wed 25 Mar 2026 00:22:11 +0000 Manifest this update: Wed 25 Mar 2026 00:22:11 +0000 Manifest next update: Wed 01 Apr 2026 00:22:11 +0000 Files and hashes: 1: u5rRr2kxSy7y9klB8Db94PfMTwI.crl (hash: DWAmk00zN51WjZi2mqiqzVXfuOp0t/Iik+QCw1MnNxU=) 2: B6369EA2521711EE899DAC80C4F9AE02.roa (hash: k8e7fh/Sk4baSRucN3DJUvfanj8+Y0iTHkIRT27bbss=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.crl rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u5rRr2kxSy7y9klB8Db94PfMTwI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:22:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 493 (0x1ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DA8C, serialNumber=BB9AD1AF69314B2EF2F64941F036FDE0F7CC4F02 Validity Not Before: Mar 25 00:22:11 2026 GMT Not After : Apr 1 00:22:11 2026 GMT Subject: CN=69c32ab3-cb12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:73:83:1f:86:c3:22:25:6e:2f:aa:1c:b2:94: 94:c3:66:77:e8:1b:a9:9a:3d:ef:ce:33:cb:81:78: 40:53:bf:12:7a:32:d2:12:9f:16:6a:78:e1:51:c9: ea:ab:16:34:b3:1d:1d:e8:78:8a:2c:0a:e6:b8:5f: 69:44:dc:1d:68:35:26:03:96:3a:55:b2:9e:f0:31: 31:86:e4:da:72:a9:08:d5:2b:2f:35:44:8a:71:c6: 66:c2:27:12:bf:dd:9a:38:da:6d:7a:85:45:04:57: 54:20:90:1e:19:68:4f:f0:66:28:5b:be:e4:fd:f0: 81:33:22:f4:da:b9:8b:41:04:71:7b:ac:b0:9e:06: 91:2d:91:d7:02:a1:82:88:e1:04:3f:11:55:c9:6a: 52:8c:97:b4:e3:95:7e:0d:78:3f:30:45:4d:01:91: 07:79:ee:13:14:1e:4d:dd:5a:ad:b0:11:6d:45:6d: a9:8e:f3:7d:17:b6:49:00:3a:7d:4c:bf:6a:15:52: 6f:1d:dc:c0:90:69:4a:a0:44:f3:78:ba:a5:af:d5: ff:88:e5:14:5c:f1:0c:49:8c:04:0f:0b:18:f9:1b: 04:d8:4e:48:d9:a5:b0:3e:94:79:b7:fd:b4:2c:da: 87:9d:85:1c:e0:cc:7e:62:c6:be:e6:36:4a:9a:5f: 2b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:E0:53:BC:75:F8:5C:34:AE:2A:3E:2F:D6:46:33:DE:42:48:8A:1E X509v3 Authority Key Identifier: keyid:BB:9A:D1:AF:69:31:4B:2E:F2:F6:49:41:F0:36:FD:E0:F7:CC:4F:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u5rRr2kxSy7y9klB8Db94PfMTwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:36:c3:77:bc:b7:b7:cb:a0:87:7f:04:3b:bd:ad:38:e9:36: 93:68:4b:ad:c9:3d:70:f7:8a:ab:e6:5d:d1:7e:12:a2:63:98: 23:bc:2b:b3:c4:58:88:4e:ed:db:6f:1d:b8:38:d7:8f:36:1d: 1b:89:85:62:10:ab:7d:e4:18:a3:0f:d6:25:4b:78:77:e1:23: 29:e4:bc:f1:5d:2a:cc:10:4c:f4:84:ea:89:2f:af:ad:ae:eb: 17:3b:5f:c7:58:c1:90:7c:96:64:b1:06:3a:df:4e:1e:ee:47: ce:97:98:16:ef:e5:06:1c:4c:9f:13:c2:37:a8:9b:b6:be:3b: e5:51:a6:f8:e3:ea:c0:48:35:c3:c9:31:5a:4a:07:a9:69:0d: f9:41:a3:e4:6a:5a:5d:ee:f4:89:cb:1b:90:fd:34:60:94:69: ee:1f:66:5a:2e:de:11:a7:23:2a:93:0d:63:5c:e6:0d:9a:bb: f8:d9:6c:1c:0f:7c:8a:bf:d9:20:0c:85:65:e5:df:fb:b2:95: 3c:e5:3b:fe:0d:19:bb:48:81:be:5f:7f:e5:79:ff:d0:76:ed: 81:31:00:b2:6f:29:b9:f3:c5:db:2b:49:f2:38:b5:60:57:e0: dd:06:8c:43:8d:95:c6:fe:cc:32:40:40:72:2f:09:6e:f5:79: 1e:8f:68:99 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURBOEMxMTAvBgNVBAUTKEJCOUFEMUFGNjkzMTRCMkVGMkY2NDk0MUYwMzZGREUw RjdDQzRGMDIwHhcNMjYwMzI1MDAyMjExWhcNMjYwNDAxMDAyMjExWjAYMRYwFAYD VQQDEw02OWMzMmFiMy1jYjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA23ODH4bDIiVuL6ocspSUw2Z36Bupmj3vzjPLgXhAU78SejLSEp8WanjhUcnq qxY0sx0d6HiKLArmuF9pRNwdaDUmA5Y6VbKe8DExhuTacqkI1SsvNUSKccZmwicS v92aONpteoVFBFdUIJAeGWhP8GYoW77k/fCBMyL02rmLQQRxe6ywngaRLZHXAqGC iOEEPxFVyWpSjJe045V+DXg/MEVNAZEHee4TFB5N3VqtsBFtRW2pjvN9F7ZJADp9 TL9qFVJvHdzAkGlKoETzeLqlr9X/iOUUXPEMSYwEDwsY+RsE2E5I2aWwPpR5t/20 LNqHnYUc4Mx+Ysa+5jZKml8rowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE7gU7x1 +Fw0rio+L9ZGM95CSIoeMB8GA1UdIwQYMBaAFLua0a9pMUsu8vZJQfA2/eD3zE8C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREE4Qy81NDZFRjNCQTRC OTkxMUVFQkIzNjBCNTVDNEY5QUUwMi91NXJScjJreFN5N3k5a2xCOERiOTRQZk1U d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3U1clJyMmt4U3k3eTlrbEI4RGI5NFBmTVR3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REE4Qy81NDZFRjNCQTRCOTkxMUVFQkIzNjBCNTVDNEY5QUUwMi91NXJScjJreFN5 N3k5a2xCOERiOTRQZk1Ud0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYjbDd7y3t8ugh38EO72tOOk2k2hLrck9cPeKq+Zd0X4SomOYI7wrs8RYiE7t 228duDjXjzYdG4mFYhCrfeQYow/WJUt4d+EjKeS88V0qzBBM9ITqiS+vra7rFztf x1jBkHyWZLEGOt9OHu5HzpeYFu/lBhxMnxPCN6ibtr475VGm+OPqwEg1w8kxWkoH qWkN+UGj5GpaXe70icsbkP00YJRp7h9mWi7eEacjKpMNY1zmDZq7+NlsHA98ir/Z IAyFZeXf+7KVPOU7/g0Zu0iBvl9/5Xn/0HbtgTEAsm8pufPF2ytJ8ji1YFfg3QaM Q42Vxv7MMkBAci8JbvV5Ho9omQ== -----END CERTIFICATE-----Generated at Thu Mar 26 19:14:45 2026 by rpki-client