$ rpki-client -vvf rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft File: iUNmPc-DCfonSkZS-oOr0m2EJk8.mft (raw, json) Hash identifier: 26QuCs3XGbnbxxBVPgnmHhdAW7L0dlr0kCs+0iyUH8U= Subject key identifier: 50:A3:6E:8E:A5:9E:27:C9:D8:CD:FA:E2:28:D5:DA:47:D1:58:6A:C5 Authority key identifier: 89:43:66:3D:CF:83:09:FA:27:4A:46:52:FA:83:AB:D2:6D:84:26:4F Certificate issuer: /CN=A913097A/serialNumber=8943663DCF8309FA274A4652FA83ABD26D84264F Certificate serial: 053B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUNmPc-DCfonSkZS-oOr0m2EJk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft Manifest number: 052F Signing time: Tue 24 Mar 2026 23:13:34 +0000 Manifest this update: Tue 24 Mar 2026 23:13:34 +0000 Manifest next update: Tue 31 Mar 2026 23:13:34 +0000 Files and hashes: 1: iUNmPc-DCfonSkZS-oOr0m2EJk8.crl (hash: aRLyaRvhWsOL4yWTlQfpWOHGLU2Qsbekm5kiIRSh+jc=) 2: D19C3D9CCB9F11F090C50D0BC4F9AE02.roa (hash: uGlOlq0hoAHAqivL5Gx3x5YPd18McYYtsJimOV3Kgqs=) 3: A18054D6CB9F11F088CB660AC4F9AE02.roa (hash: K1f/qaJuEbUdhfD0uMMWW5s85D2uyNgYsK07EHXQMGc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.crl rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUNmPc-DCfonSkZS-oOr0m2EJk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1339 (0x53b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913097A, serialNumber=8943663DCF8309FA274A4652FA83ABD26D84264F Validity Not Before: Mar 24 23:13:34 2026 GMT Not After : Mar 31 23:13:34 2026 GMT Subject: CN=69c31a9e-465a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:db:50:0e:3a:cf:c4:b4:64:62:a6:bb:2c:5c: bf:57:26:67:4c:76:8c:58:fa:50:d9:6e:13:25:91: 3e:5e:ac:21:c3:5c:40:b8:84:dd:f5:cf:41:36:6f: 2f:0d:8e:1b:b1:9c:a0:fa:9f:4e:11:3f:c3:b6:7b: a4:2b:9c:32:01:66:9b:94:df:07:be:13:16:d1:94: 08:5a:18:89:cf:aa:b3:89:f5:fd:66:11:e3:40:51: bd:5f:7e:37:a4:2a:39:bd:6c:f5:a8:10:e6:ad:56: d9:f6:2b:40:6a:75:99:4c:f9:ed:e3:b8:c1:21:eb: d5:bd:2e:23:2d:9b:57:b3:ae:b5:b0:e9:2f:b7:c1: 08:aa:1e:5b:47:d8:b3:be:1c:e6:dd:3a:c4:a1:3b: 13:5a:74:e3:89:5d:49:9b:40:7e:a0:b4:38:d5:cf: 8d:df:84:bb:6a:08:f5:9b:51:4c:e7:27:11:60:6e: 79:84:21:a3:7d:fd:5e:07:cf:72:1e:37:21:53:4f: 86:01:ff:4a:d0:09:4f:8a:34:01:20:ed:13:b0:b9: 80:24:b2:ac:39:06:91:9a:73:c5:95:8f:65:28:74: 9c:65:56:17:3e:b6:76:89:91:91:f8:cc:c5:6f:22: 1b:41:50:4c:a0:58:2c:38:80:e3:a4:e8:3e:8f:2e: 74:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:A3:6E:8E:A5:9E:27:C9:D8:CD:FA:E2:28:D5:DA:47:D1:58:6A:C5 X509v3 Authority Key Identifier: keyid:89:43:66:3D:CF:83:09:FA:27:4A:46:52:FA:83:AB:D2:6D:84:26:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUNmPc-DCfonSkZS-oOr0m2EJk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913097A/6167A6D23B0811EC9483C527C4F9AE02/iUNmPc-DCfonSkZS-oOr0m2EJk8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:d6:d2:cb:9a:9f:7b:f9:68:8e:0c:cf:fa:dd:4d:6a:77:9c: 0b:5d:f7:c8:ff:9b:04:0f:d7:0d:14:cd:07:14:41:21:6a:fe: e6:4e:b6:2d:05:b7:f0:23:88:40:fd:48:66:db:ed:b1:00:2e: 99:d6:14:c8:64:0d:c1:49:4e:18:83:f3:00:34:2a:ee:86:e3: 5d:21:b6:a5:13:1a:72:19:19:41:82:03:7c:65:e8:5f:43:58: a6:dc:4f:c5:4d:3d:b9:98:1a:1a:0e:bf:39:90:d5:b9:e4:cd: 5e:20:9b:77:94:69:1f:cf:c6:05:a2:76:0b:f8:00:47:c7:41: 62:33:12:e3:74:3f:eb:b8:db:68:2b:1a:19:c7:a1:56:6d:be: 5c:53:30:1f:2a:2f:97:4c:9e:5e:cf:47:8f:e2:d8:12:fa:b9: f8:33:89:0f:88:e1:67:c9:c0:94:94:73:e9:1e:0c:e4:86:e4: d0:12:a9:0d:ff:e9:9c:df:f4:df:7a:e7:3e:1e:a7:93:e4:6c: 21:2f:1d:7a:aa:71:e3:fa:b6:be:27:0e:29:67:fc:04:9f:f8: 2e:d4:82:e0:7b:04:43:92:e5:da:5e:b9:6d:b6:96:32:bf:49: ad:30:b1:8e:55:22:9e:57:55:c8:6a:43:88:71:a0:79:a2:e6: af:0a:3a:3d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBTswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA5N0ExMTAvBgNVBAUTKDg5NDM2NjNEQ0Y4MzA5RkEyNzRBNDY1MkZBODNBQkQy NkQ4NDI2NEYwHhcNMjYwMzI0MjMxMzM0WhcNMjYwMzMxMjMxMzM0WjAYMRYwFAYD VQQDEw02OWMzMWE5ZS00NjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAgttQDjrPxLRkYqa7LFy/VyZnTHaMWPpQ2W4TJZE+Xqwhw1xAuITd9c9BNm8v DY4bsZyg+p9OET/DtnukK5wyAWablN8HvhMW0ZQIWhiJz6qzifX9ZhHjQFG9X343 pCo5vWz1qBDmrVbZ9itAanWZTPnt47jBIevVvS4jLZtXs661sOkvt8EIqh5bR9iz vhzm3TrEoTsTWnTjiV1Jm0B+oLQ41c+N34S7agj1m1FM5ycRYG55hCGjff1eB89y HjchU0+GAf9K0AlPijQBIO0TsLmAJLKsOQaRmnPFlY9lKHScZVYXPrZ2iZGR+MzF byIbQVBMoFgsOIDjpOg+jy50dwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFCjbo6l nifJ2M364ijV2kfRWGrFMB8GA1UdIwQYMBaAFIlDZj3Pgwn6J0pGUvqDq9JthCZP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDk3QS82MTY3QTZEMjNC MDgxMUVDOTQ4M0M1MjdDNEY5QUUwMi9pVU5tUGMtRENmb25Ta1pTLW9PcjBtMkVK azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lVTm1QYy1EQ2ZvblNrWlMtb09yMG0yRUprOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDk3QS82MTY3QTZEMjNCMDgxMUVDOTQ4M0M1MjdDNEY5QUUwMi9pVU5tUGMtRENm b25Ta1pTLW9PcjBtMkVKazgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAItbSy5qfe/lojgzP+t1NanecC133yP+bBA/XDRTNBxRBIWr+5k62LQW38COI QP1IZtvtsQAumdYUyGQNwUlOGIPzADQq7objXSG2pRMachkZQYIDfGXoX0NYptxP xU09uZgaGg6/OZDVueTNXiCbd5RpH8/GBaJ2C/gAR8dBYjMS43Q/67jbaCsaGceh Vm2+XFMwHyovl0yeXs9Hj+LYEvq5+DOJD4jhZ8nAlJRz6R4M5Ibk0BKpDf/pnN/0 33rnPh6nk+RsIS8deqpx4/q2vicOKWf8BJ/4LtSC4HsEQ5Ll2l65bbaWMr9JrTCx jlUinldVyGpDiHGgeaLmrwo6PQ== -----END CERTIFICATE-----Generated at Thu Mar 26 22:26:19 2026 by rpki-client