$ rpki-client -vvf rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft File: UZQtJe28pR36Vs4J7TYet6JtvSU.mft (raw, json) Hash identifier: P4D7oxluazXQ7dvd8HtIbLlzHljy08VMe1kUFMkmXns= Subject key identifier: 2B:B9:BD:41:0A:54:AE:69:A9:02:DE:58:FE:21:1D:FF:70:30:E6:73 Authority key identifier: 51:94:2D:25:ED:BC:A5:1D:FA:56:CE:09:ED:36:1E:B7:A2:6D:BD:25 Certificate issuer: /CN=A912AFA4/serialNumber=51942D25EDBCA51DFA56CE09ED361EB7A26DBD25 Certificate serial: 0A27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft Manifest number: 09E2 Signing time: Tue 24 Mar 2026 19:48:10 +0000 Manifest this update: Tue 24 Mar 2026 19:48:09 +0000 Manifest next update: Tue 31 Mar 2026 19:48:09 +0000 Files and hashes: 1: UZQtJe28pR36Vs4J7TYet6JtvSU.crl (hash: ugOpsO6UCD5jpExaqUrgmuYnTHBPk6nIMZfYPSjLDSI=) 2: 4729B9CC10B011F19AF5FC353C3D8C67.roa (hash: XieuBOApj93vMX/PSd4DPB5YCJHLqVArIOgws7wb0zA=) 3: E2891A621EA111F1917EDCD9123D8C67.roa (hash: gEX8Atz/LLQf1n/y8rRUMSuwdmjVhyMahE2Jamzx/nI=) 4: A476C8C41EA011F187B67505113D8C67.roa (hash: W8WqvCmfqjbYm/Nsa9FcNN92lO+HROWGL8GeAXxnfuk=) 5: A837ACBA072311F1857499832B3D8C67.roa (hash: kLIQMU/1+OWEQ00tXB9bahteZuevt4BTHzYh2B2K2I0=) 6: C1D6AD981EA111F1B2DD47B2123D8C67.roa (hash: t7Va3DBJIf7NqIYUpRn9OjFokUb0h7zcGhor8Wmv+E4=) 7: C37BD92A1EA111F1B2DD47B2123D8C67.roa (hash: ATlrZQLMN1i/u5Bq0wuL1/pAApfhNtO3TRUif4rFqr0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.crl rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:48:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2599 (0xa27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AFA4, serialNumber=51942D25EDBCA51DFA56CE09ED361EB7A26DBD25 Validity Not Before: Mar 24 19:48:09 2026 GMT Not After : Mar 31 19:48:09 2026 GMT Subject: CN=69c2ea7a-785e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:cb:cd:42:2a:89:7c:a6:4f:34:4a:6f:4e:79: c5:e2:90:10:8b:18:66:dd:71:df:c9:40:5b:eb:7f: 6a:64:e5:f8:18:6b:44:2a:65:00:18:28:18:7f:53: 80:a9:4a:43:35:fa:8a:44:ff:d0:e1:9d:47:c3:7e: 7c:a0:d1:a5:61:c8:42:5e:66:6d:b6:88:37:18:4f: 29:6c:aa:8f:28:8e:1f:c2:0f:16:bd:2b:a1:a9:e5: 12:a8:58:bd:30:a3:88:50:43:bf:52:0c:d9:35:9c: d5:03:c8:35:9d:e9:80:7b:4a:9d:45:24:03:67:96: ef:1e:56:fa:a1:4a:5d:cf:83:2e:94:0c:eb:27:0c: b4:0a:36:ab:64:e0:bb:99:0f:9b:ce:5b:5e:8d:38: 9a:a1:d9:c6:47:5e:b1:fe:ca:03:1c:86:68:01:a0: 46:45:d2:9d:72:df:c6:f2:95:20:1a:ac:c3:d3:20: be:16:61:14:63:a5:99:93:a2:be:7d:b3:47:c4:f3: 9d:0c:2c:45:d8:c0:df:b5:26:d0:aa:01:8c:3a:a1: e9:95:a1:3c:52:30:20:d2:3c:2c:07:c2:04:fb:91: 52:f5:9d:70:72:aa:9e:09:5b:e9:3d:62:f1:30:c7: bb:2f:6f:c6:45:1a:6b:de:21:b0:05:9d:2f:c0:bd: 76:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:B9:BD:41:0A:54:AE:69:A9:02:DE:58:FE:21:1D:FF:70:30:E6:73 X509v3 Authority Key Identifier: keyid:51:94:2D:25:ED:BC:A5:1D:FA:56:CE:09:ED:36:1E:B7:A2:6D:BD:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:86:37:2d:6a:0e:f6:a2:9e:3a:97:90:89:fa:1d:54:25:83: 2c:e3:f3:c4:68:18:a8:5d:b7:10:b5:ce:71:c7:bc:6b:f7:7b: 58:41:8f:ed:84:a1:24:57:fe:70:65:d5:88:15:ec:f9:4e:15: d3:39:68:10:58:f2:1c:e7:4c:24:59:e3:cc:3c:52:35:e6:3c: 1e:4a:e3:36:c8:36:80:19:bc:2e:79:ac:86:14:45:64:7e:01: 1e:8a:53:e5:c4:c9:78:ac:52:2b:60:ba:5f:8b:04:bf:58:e8: 70:40:f3:23:0e:2e:6d:e6:05:03:f3:20:dc:fc:dd:28:21:f0: 89:e5:62:dc:8b:17:b3:47:5e:64:6f:fa:5b:2d:10:1e:4d:59: 95:7f:6b:4d:8b:31:24:46:2b:73:15:c4:fc:c4:24:06:f6:e7: 98:a6:4e:da:2f:28:49:72:74:0b:12:e8:09:ed:ed:9e:0d:a2: c3:12:a6:5a:ac:54:35:02:be:05:93:a4:b3:38:13:4f:7f:6d: 59:78:da:97:72:ff:a8:07:8b:45:df:fc:e3:21:8d:cf:84:b3: 7a:3b:75:56:ca:c4:df:38:f8:b1:e4:8a:6c:38:21:8a:1e:0a: f4:9a:7f:50:a3:ea:4e:7d:5f:8d:ff:b6:6d:ae:f0:fd:b0:2c: af:41:eb:fc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFGQTQxMTAvBgNVBAUTKDUxOTQyRDI1RURCQ0E1MURGQTU2Q0UwOUVEMzYxRUI3 QTI2REJEMjUwHhcNMjYwMzI0MTk0ODA5WhcNMjYwMzMxMTk0ODA5WjAYMRYwFAYD VQQDEw02OWMyZWE3YS03ODVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkMvNQiqJfKZPNEpvTnnF4pAQixhm3XHfyUBb639qZOX4GGtEKmUAGCgYf1OA qUpDNfqKRP/Q4Z1Hw358oNGlYchCXmZttog3GE8pbKqPKI4fwg8WvSuhqeUSqFi9 MKOIUEO/UgzZNZzVA8g1nemAe0qdRSQDZ5bvHlb6oUpdz4MulAzrJwy0CjarZOC7 mQ+bzltejTiaodnGR16x/soDHIZoAaBGRdKdct/G8pUgGqzD0yC+FmEUY6WZk6K+ fbNHxPOdDCxF2MDftSbQqgGMOqHplaE8UjAg0jwsB8IE+5FS9Z1wcqqeCVvpPWLx MMe7L2/GRRpr3iGwBZ0vwL12sQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCu5vUEK VK5pqQLeWP4hHf9wMOZzMB8GA1UdIwQYMBaAFFGULSXtvKUd+lbOCe02Hreibb0l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUZBNC9CNjc4NjJGQUFC OTUxMUVBQjI1NTlDNUJDNEY5QUUwMi9VWlF0SmUyOHBSMzZWczRKN1RZZXQ2SnR2 U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VaUXRKZTI4cFIzNlZzNEo3VFlldDZKdHZTVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUZBNC9CNjc4NjJGQUFCOTUxMUVBQjI1NTlDNUJDNEY5QUUwMi9VWlF0SmUyOHBS MzZWczRKN1RZZXQ2SnR2U1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQIY3LWoO9qKeOpeQifodVCWDLOPzxGgYqF23ELXOcce8a/d7WEGP7YShJFf+ cGXViBXs+U4V0zloEFjyHOdMJFnjzDxSNeY8HkrjNsg2gBm8LnmshhRFZH4BHopT 5cTJeKxSK2C6X4sEv1jocEDzIw4ubeYFA/Mg3PzdKCHwieVi3IsXs0deZG/6Wy0Q Hk1ZlX9rTYsxJEYrcxXE/MQkBvbnmKZO2i8oSXJ0CxLoCe3tng2iwxKmWqxUNQK+ BZOkszgTT39tWXjal3L/qAeLRd/84yGNz4Szejt1VsrE3zj4seSKbDghih4K9Jp/ UKPqTn1fjf+2ba7w/bAsr0Hr/A== -----END CERTIFICATE-----Generated at Thu Mar 26 02:43:10 2026 by rpki-client