$ rpki-client -vvf rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.mft File: ufrcQefh-XVse8mz3jlyy_bPYLU.mft (raw, json) Hash identifier: z5d/v9FUnUg8HpjXOywHs2R+Isew0ZzRxSRF/CTcf4k= Subject key identifier: 18:7E:FB:D7:52:A1:0F:24:26:46:6E:88:E4:58:58:81:78:CA:58:6F Authority key identifier: B9:FA:DC:41:E7:E1:F9:75:6C:7B:C9:B3:DE:39:72:CB:F6:CF:60:B5 Certificate issuer: /CN=A9140562/serialNumber=B9FADC41E7E1F9756C7BC9B3DE3972CBF6CF60B5 Certificate serial: D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufrcQefh-XVse8mz3jlyy_bPYLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.mft Manifest number: D2 Signing time: Wed 25 Mar 2026 05:58:49 +0000 Manifest this update: Wed 25 Mar 2026 05:58:49 +0000 Manifest next update: Wed 01 Apr 2026 05:58:49 +0000 Files and hashes: 1: ufrcQefh-XVse8mz3jlyy_bPYLU.crl (hash: hIazjVyoebXALEtxITDB5JfZ1jFYG6+cyJ/2o1TrEkw=) 2: 5FCE01D8EDFA11EF8193933AC4F9AE02.roa (hash: VVrV7jvsQ36nCZSxe/dX4uftVXST3hoj5p0k5ak5K3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.crl rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufrcQefh-XVse8mz3jlyy_bPYLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:58:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 214 (0xd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140562, serialNumber=B9FADC41E7E1F9756C7BC9B3DE3972CBF6CF60B5 Validity Not Before: Mar 25 05:58:49 2026 GMT Not After : Apr 1 05:58:49 2026 GMT Subject: CN=69c37999-0c3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f6:c4:6c:aa:ed:15:94:5b:6e:9c:52:01:ed: 10:67:47:07:4d:e5:0a:f6:11:b3:9b:8d:98:fa:3d: eb:1b:36:f0:c7:9f:ed:2a:b9:95:50:13:de:81:c8: 5b:5a:ae:a3:91:d5:40:16:69:64:93:63:69:5c:0f: 28:77:06:85:7f:2e:f0:1c:e9:69:8d:91:5c:5e:6a: 09:67:a0:6f:5f:99:b0:5e:32:d1:db:04:79:f8:c5: 42:70:ca:cd:19:38:70:55:63:9f:44:b8:68:4d:b0: f7:b0:d9:58:e0:eb:00:9b:35:ff:6a:2b:e5:2d:ae: c4:a6:20:84:fb:9b:97:56:25:81:e0:e9:13:36:20: 64:2b:35:1a:8b:d9:f0:9f:47:39:ef:d7:6b:41:6d: 85:ec:5b:14:6b:d6:58:cd:ef:46:a6:03:38:32:5d: 8c:d5:46:80:f3:5e:5c:18:56:94:63:1d:3b:f3:95: 97:e6:24:e0:bc:c4:47:47:cf:57:a1:d7:06:0e:5c: 78:09:fb:18:a0:6e:48:a7:19:08:10:77:f3:85:9a: ec:87:bf:4f:e3:ff:a1:94:1a:d2:51:73:64:1b:29: 16:64:eb:fa:5b:f9:20:bf:ab:0a:6b:56:2c:bf:3a: 4b:c8:9c:2c:83:db:8a:0f:00:d6:1a:de:d9:fa:55: 2b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:7E:FB:D7:52:A1:0F:24:26:46:6E:88:E4:58:58:81:78:CA:58:6F X509v3 Authority Key Identifier: keyid:B9:FA:DC:41:E7:E1:F9:75:6C:7B:C9:B3:DE:39:72:CB:F6:CF:60:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufrcQefh-XVse8mz3jlyy_bPYLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:08:7d:45:92:66:3d:cd:79:7a:f7:67:77:5c:00:c5:b8:b5: d7:27:7b:71:97:23:72:24:f0:35:9a:9a:39:a5:b2:58:0b:3b: 7d:e4:21:30:f3:e0:94:dc:62:88:9a:fb:76:43:a0:56:a9:1f: a5:97:3c:85:98:b7:80:fa:66:03:24:c4:e4:17:72:1f:0e:ad: 01:fd:7b:a3:d9:df:d2:83:c8:f3:06:e0:7c:02:62:59:cf:30: f9:32:13:b1:aa:80:29:25:45:7e:f4:f4:69:02:f9:0a:aa:26: eb:3a:99:1e:45:ab:9b:34:d0:d8:80:6f:45:90:e2:00:a6:ad: 56:20:24:11:97:5b:fa:9c:6b:4c:c0:a0:f1:64:1a:3d:2b:02: af:62:a5:e9:d0:9d:4a:41:d9:7b:11:24:ea:4f:9e:2e:e4:53: f3:8b:8c:79:ef:ca:f3:40:6f:93:ac:85:6f:90:23:0c:6f:33: d6:91:35:72:dd:68:a0:09:68:fe:19:de:eb:c5:a7:fc:3a:89: 73:93:35:d9:fb:4b:67:eb:ce:7a:3b:f0:bd:e9:c0:7b:77:0f: b9:bf:c4:78:cc:f1:f6:aa:e2:0b:2b:f5:7b:54:7a:ca:6f:a7: f1:1e:e7:d9:7d:84:a8:9b:97:9a:e3:df:01:4c:ed:ad:e3:98: 4f:b6:b8:75 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA1NjIxMTAvBgNVBAUTKEI5RkFEQzQxRTdFMUY5NzU2QzdCQzlCM0RFMzk3MkNC RjZDRjYwQjUwHhcNMjYwMzI1MDU1ODQ5WhcNMjYwNDAxMDU1ODQ5WjAYMRYwFAYD VQQDEw02OWMzNzk5OS0wYzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAi/bEbKrtFZRbbpxSAe0QZ0cHTeUK9hGzm42Y+j3rGzbwx5/tKrmVUBPegchb Wq6jkdVAFmlkk2NpXA8odwaFfy7wHOlpjZFcXmoJZ6BvX5mwXjLR2wR5+MVCcMrN GThwVWOfRLhoTbD3sNlY4OsAmzX/aivlLa7EpiCE+5uXViWB4OkTNiBkKzUai9nw n0c579drQW2F7FsUa9ZYze9GpgM4Ml2M1UaA815cGFaUYx0785WX5iTgvMRHR89X odcGDlx4CfsYoG5IpxkIEHfzhZrsh79P4/+hlBrSUXNkGykWZOv6W/kgv6sKa1Ys vzpLyJwsg9uKDwDWGt7Z+lUrzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBh++9dS oQ8kJkZuiORYWIF4ylhvMB8GA1UdIwQYMBaAFLn63EHn4fl1bHvJs945csv2z2C1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDU2Mi82NkMzQzk3RUVE RjkxMUVGQTlDREE4MzhDNEY5QUUwMi91ZnJjUWVmaC1YVnNlOG16M2pseXlfYlBZ TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VmcmNRZWZoLVhWc2U4bXozamx5eV9iUFlMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDU2Mi82NkMzQzk3RUVERjkxMUVGQTlDREE4MzhDNEY5QUUwMi91ZnJjUWVmaC1Y VnNlOG16M2pseXlfYlBZTFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACwh9RZJmPc15evdnd1wAxbi11yd7cZcjciTwNZqaOaWyWAs7feQhMPPglNxi iJr7dkOgVqkfpZc8hZi3gPpmAyTE5BdyHw6tAf17o9nf0oPI8wbgfAJiWc8w+TIT saqAKSVFfvT0aQL5Cqom6zqZHkWrmzTQ2IBvRZDiAKatViAkEZdb+pxrTMCg8WQa PSsCr2Kl6dCdSkHZexEk6k+eLuRT84uMee/K80Bvk6yFb5AjDG8z1pE1ct1ooAlo /hne68Wn/DqJc5M12ftLZ+vOejvwvenAe3cPub/EeMzx9qriCyv1e1R6ym+n8R7n 2X2EqJuXmuPfAUztreOYT7a4dQ== -----END CERTIFICATE-----Generated at Thu Mar 26 07:16:27 2026 by rpki-client