$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft File: UmRCqpPf8MUTmmF7DeZFtznmvs0.mft (raw, json) Hash identifier: rsFcoMJorEd0AmA2JQX30LAw6XFU9AgTCnk6qnRp1ek= Subject key identifier: 1D:70:BC:B1:B9:77:67:0B:3C:4D:D8:FE:29:7E:9D:AE:9F:76:17:2A Authority key identifier: 52:64:42:AA:93:DF:F0:C5:13:9A:61:7B:0D:E6:45:B7:39:E6:BE:CD Certificate issuer: /CN=A9140D7D/serialNumber=526442AA93DFF0C5139A617B0DE645B739E6BECD Certificate serial: 0A89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft Manifest number: 0A7D Signing time: Thu 26 Mar 2026 19:28:55 +0000 Manifest this update: Thu 26 Mar 2026 19:28:55 +0000 Manifest next update: Thu 02 Apr 2026 19:28:55 +0000 Files and hashes: 1: UmRCqpPf8MUTmmF7DeZFtznmvs0.crl (hash: bkxp0Nj8Pkq3X74nPcyHOKTlMDnIJrkLYBDi+SCsvNY=) 2: 1C9AB3F67D6711EA90858415C4F9AE02.roa (hash: 3EUvPkX0SOOlZadKwQdE/Ttb0l8oKRF3mN8x9otpD/E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.crl rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 19:28:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2697 (0xa89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140D7D, serialNumber=526442AA93DFF0C5139A617B0DE645B739E6BECD Validity Not Before: Mar 26 19:28:55 2026 GMT Not After : Apr 2 19:28:55 2026 GMT Subject: CN=69c588f7-4023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d8:7f:d9:65:37:a5:63:49:76:01:3c:6a:ae: 5c:b3:27:2f:5c:66:d9:69:7e:8e:5a:8c:75:3c:14: dd:3e:98:01:ca:22:aa:c4:ff:3c:71:c4:57:be:ce: 9c:b2:97:a4:28:c5:56:f7:e1:cc:42:15:70:0c:0b: 5d:96:47:c3:4f:97:ce:87:96:42:33:9f:73:55:7d: bb:c0:61:47:a0:6f:1b:c9:c4:5b:ae:e0:08:81:1e: ae:ef:48:9d:d6:e7:43:8e:53:b1:88:2d:74:f6:e2: 8d:46:f6:63:ec:ef:e0:ba:1c:83:26:10:4d:f1:c5: 73:8f:23:69:7a:df:68:69:b7:cb:8f:1a:64:9c:01: 12:3d:ad:5c:31:47:fa:84:b0:15:bb:77:85:8e:c3: 00:39:1d:e6:26:fb:95:df:8a:ac:aa:14:60:14:44: 33:7d:0c:8c:b1:67:f6:74:80:94:44:4e:07:ff:82: 1b:5c:a4:c7:b3:2f:08:2f:59:d9:59:35:c5:63:81: 09:1c:9c:74:a6:7f:a0:fa:80:ff:60:1f:61:40:70: fd:21:3a:ac:a9:dc:fc:3f:54:7a:85:9c:23:9c:30: a6:90:6b:38:dd:80:ea:44:ef:e6:9f:89:20:62:f5: 5a:1b:00:13:e5:c9:e2:8e:86:19:62:ef:66:29:9a: 04:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:70:BC:B1:B9:77:67:0B:3C:4D:D8:FE:29:7E:9D:AE:9F:76:17:2A X509v3 Authority Key Identifier: keyid:52:64:42:AA:93:DF:F0:C5:13:9A:61:7B:0D:E6:45:B7:39:E6:BE:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:c8:b1:15:f3:59:84:26:c1:86:b5:5d:56:a5:02:a8:10:e4: ee:49:99:cb:76:dc:1c:09:0f:aa:cb:e9:1d:c3:23:47:3f:b0: 74:ed:18:6e:28:7c:a5:4c:b8:10:8f:85:af:ee:06:ca:88:9f: 6f:2c:d5:f3:a4:94:bc:80:7c:39:74:db:4b:c8:59:8e:20:e0: 51:a0:20:6c:85:c1:cd:c9:79:e2:4a:75:b9:8e:4a:cf:e1:cd: 05:ab:23:2a:2f:62:f1:71:47:3e:30:ed:a1:f8:25:8d:3b:6d: 20:c8:55:3e:00:7f:3c:64:f9:fa:bf:01:42:1e:7a:e4:95:ef: 99:23:39:f7:2c:8c:b5:8b:6e:24:95:84:bb:aa:9e:be:3d:a6: c3:45:0b:32:58:e1:81:f6:ac:f8:60:c2:f8:72:30:a2:43:e0: 97:1c:08:ab:87:5f:51:c4:ea:33:b7:21:c3:a3:1e:22:0e:92: 17:6f:12:81:29:1d:b9:d4:5b:b5:61:c8:67:8c:aa:5c:21:68: 18:b1:7b:36:2a:a9:ba:c0:3b:15:a5:4e:f3:82:49:e1:44:69: 92:9a:50:ee:b7:d4:2d:24:3d:30:0a:c8:7d:35:ec:eb:64:9d: 51:b0:08:49:28:e3:c5:9c:df:e8:96:09:b6:ca:e1:a4:ad:f7: 81:23:bf:42 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBEN0QxMTAvBgNVBAUTKDUyNjQ0MkFBOTNERkYwQzUxMzlBNjE3QjBERTY0NUI3 MzlFNkJFQ0QwHhcNMjYwMzI2MTkyODU1WhcNMjYwNDAyMTkyODU1WjAYMRYwFAYD VQQDEw02OWM1ODhmNy00MDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsNh/2WU3pWNJdgE8aq5csycvXGbZaX6OWox1PBTdPpgByiKqxP88ccRXvs6c spekKMVW9+HMQhVwDAtdlkfDT5fOh5ZCM59zVX27wGFHoG8bycRbruAIgR6u70id 1udDjlOxiC109uKNRvZj7O/guhyDJhBN8cVzjyNpet9oabfLjxpknAESPa1cMUf6 hLAVu3eFjsMAOR3mJvuV34qsqhRgFEQzfQyMsWf2dICURE4H/4IbXKTHsy8IL1nZ WTXFY4EJHJx0pn+g+oD/YB9hQHD9ITqsqdz8P1R6hZwjnDCmkGs43YDqRO/mn4kg YvVaGwAT5cnijoYZYu9mKZoExQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB1wvLG5 d2cLPE3Y/il+na6fdhcqMB8GA1UdIwQYMBaAFFJkQqqT3/DFE5phew3mRbc55r7N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEQ3RC83MTZEMkYzNjdE NjYxMUVBQjMyQjNCMTVDNEY5QUUwMi9VbVJDcXBQZjhNVVRtbUY3RGVaRnR6bm12 czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VtUkNxcFBmOE1VVG1tRjdEZVpGdHpubXZzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEQ3RC83MTZEMkYzNjdENjYxMUVBQjMyQjNCMTVDNEY5QUUwMi9VbVJDcXBQZjhN VVRtbUY3RGVaRnR6bm12czAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAd8ixFfNZhCbBhrVdVqUCqBDk7kmZy3bcHAkPqsvpHcMjRz+wdO0Ybih8pUy4 EI+Fr+4GyoifbyzV86SUvIB8OXTbS8hZjiDgUaAgbIXBzcl54kp1uY5Kz+HNBasj Ki9i8XFHPjDtofgljTttIMhVPgB/PGT5+r8BQh565JXvmSM59yyMtYtuJJWEu6qe vj2mw0ULMljhgfas+GDC+HIwokPglxwIq4dfUcTqM7chw6MeIg6SF28SgSkdudRb tWHIZ4yqXCFoGLF7NiqpusA7FaVO84JJ4URpkppQ7rfULSQ9MArIfTXs62SdUbAI SSjjxZzf6JYJtsrhpK33gSO/Qg== -----END CERTIFICATE-----Generated at Sat Mar 28 10:33:50 2026 by rpki-client