$ rpki-client -vvf rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft File: PHUP1suMdwFoHlNr3WtxXxkrivk.mft (raw, json) Hash identifier: vT08p3oE+F93TKrxmYtg/KRndIXPPhrNnWytqjIOAhQ= Subject key identifier: E3:4C:A3:B7:3E:C3:75:DB:D6:EA:44:B3:18:CD:A9:51:19:2B:3E:8F Authority key identifier: 3C:75:0F:D6:CB:8C:77:01:68:1E:53:6B:DD:6B:71:5F:19:2B:8A:F9 Certificate issuer: /CN=A914233F/serialNumber=3C750FD6CB8C7701681E536BDD6B715F192B8AF9 Certificate serial: 01FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHUP1suMdwFoHlNr3WtxXxkrivk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft Manifest number: 01F0 Signing time: Fri 27 Mar 2026 02:53:28 +0000 Manifest this update: Fri 27 Mar 2026 02:53:28 +0000 Manifest next update: Fri 03 Apr 2026 02:53:28 +0000 Files and hashes: 1: PHUP1suMdwFoHlNr3WtxXxkrivk.crl (hash: S1ckP7Il84Ksry9fymuS0znjE4dQ8GAO3BfbUWUBc5A=) 2: F451A8D61D3411F188270AE1183D8C67.roa (hash: HhAPddYZebVgFTklVhrNnb9AwfNFYy5EHwSBa4LUjG0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.crl rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHUP1suMdwFoHlNr3WtxXxkrivk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 02:53:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 510 (0x1fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914233F, serialNumber=3C750FD6CB8C7701681E536BDD6B715F192B8AF9 Validity Not Before: Mar 27 02:53:28 2026 GMT Not After : Apr 3 02:53:28 2026 GMT Subject: CN=69c5f128-164c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:31:da:c2:0d:99:70:9f:3e:90:0d:1a:94:b5: e6:41:d0:dd:5e:d4:03:fc:a9:4d:05:8d:f5:32:1c: 75:49:80:b5:47:52:ee:b7:6c:c1:90:a6:20:02:82: f5:96:bd:be:9f:22:2c:fe:97:35:40:7a:0b:b5:ed: 31:f7:56:22:a3:87:ac:b1:9a:51:4b:81:19:7b:c7: 91:1d:ba:c3:e3:2b:ee:db:c3:20:ce:1c:14:0b:f0: 22:aa:36:27:23:7d:8b:ed:c9:9f:17:38:33:0a:dd: ca:b1:e5:fe:c5:94:e2:b9:ee:59:09:9c:f0:f9:2a: cb:8f:33:df:1c:75:d2:67:91:10:cd:c8:69:60:60: 58:7d:58:62:09:a5:69:2c:91:aa:90:49:e6:37:ec: 80:bc:42:63:18:5e:0f:32:1a:69:2e:ba:58:38:bd: be:d3:89:bd:45:8d:dc:f8:ea:03:e4:70:36:da:ee: 78:94:ed:11:c8:c9:65:de:b7:76:75:84:da:28:19: 89:56:78:e3:10:76:cb:fb:45:4c:f3:f2:7f:ee:d6: bf:27:79:1d:5c:ca:77:c8:c2:9f:4b:b1:21:75:d2: a4:23:67:56:15:51:eb:97:b7:22:9e:ad:68:55:03: 0b:42:97:eb:9d:e5:f8:11:96:20:89:17:7b:dc:3c: 5c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:4C:A3:B7:3E:C3:75:DB:D6:EA:44:B3:18:CD:A9:51:19:2B:3E:8F X509v3 Authority Key Identifier: keyid:3C:75:0F:D6:CB:8C:77:01:68:1E:53:6B:DD:6B:71:5F:19:2B:8A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHUP1suMdwFoHlNr3WtxXxkrivk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:9d:a8:f7:e4:2c:a9:1f:e8:cd:56:3d:ba:ad:f8:9e:08:08: de:85:c3:89:3f:50:e9:1f:f9:24:77:84:c7:e6:79:6c:6e:cd: 00:cc:b9:5c:82:d9:52:ff:33:49:26:e1:9c:c2:71:f7:a8:69: fd:de:a8:e2:90:f3:27:c4:ad:4a:86:ae:38:00:9d:4d:87:d0: 4a:77:88:67:fc:73:59:91:47:d9:66:05:a5:7c:15:ed:fd:b7: 7e:18:ab:75:2e:a0:30:e1:b7:4c:bb:c3:d1:3c:7a:ba:45:41: 19:f8:5b:6d:d5:cf:98:52:1b:a3:f5:65:5f:89:9a:9d:51:1f: 75:5c:fe:d1:62:79:d1:f7:28:54:c2:93:ff:64:46:49:3b:88: 3c:50:b9:d4:f4:d0:07:7c:ba:fd:32:98:22:16:27:c7:1f:2a: db:a8:82:bd:9c:81:11:28:cd:c9:c2:00:e2:cb:be:9f:e8:41: b5:ea:e7:c7:e7:82:d6:47:3e:b5:8b:97:e5:cb:73:38:fe:9a: 3a:1f:d0:e8:70:ca:52:26:4a:c3:92:d2:7b:e8:b1:0c:71:c0: 9d:83:ff:ce:c1:cd:e5:de:00:b0:97:c1:cb:e2:0e:3e:92:14: b1:9b:ad:7c:99:68:c2:39:3d:13:fc:d1:7b:cd:23:70:38:e7: 20:a9:41:33 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIzM0YxMTAvBgNVBAUTKDNDNzUwRkQ2Q0I4Qzc3MDE2ODFFNTM2QkRENkI3MTVG MTkyQjhBRjkwHhcNMjYwMzI3MDI1MzI4WhcNMjYwNDAzMDI1MzI4WjAYMRYwFAYD VQQDEw02OWM1ZjEyOC0xNjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAljHawg2ZcJ8+kA0alLXmQdDdXtQD/KlNBY31Mhx1SYC1R1Lut2zBkKYgAoL1 lr2+nyIs/pc1QHoLte0x91Yio4essZpRS4EZe8eRHbrD4yvu28MgzhwUC/AiqjYn I32L7cmfFzgzCt3KseX+xZTiue5ZCZzw+SrLjzPfHHXSZ5EQzchpYGBYfVhiCaVp LJGqkEnmN+yAvEJjGF4PMhppLrpYOL2+04m9RY3c+OoD5HA22u54lO0RyMll3rd2 dYTaKBmJVnjjEHbL+0VM8/J/7ta/J3kdXMp3yMKfS7EhddKkI2dWFVHrl7cinq1o VQMLQpfrneX4EZYgiRd73DxceQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFONMo7c+ w3Xb1upEsxjNqVEZKz6PMB8GA1UdIwQYMBaAFDx1D9bLjHcBaB5Ta91rcV8ZK4r5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjMzRi84NUMyMEJEQTQ2 M0MxMUVFOUI3ODkxMzlDNEY5QUUwMi9QSFVQMXN1TWR3Rm9IbE5yM1d0eFh4a3Jp dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BIVVAxc3VNZHdGb0hsTnIzV3R4WHhrcml2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjMzRi84NUMyMEJEQTQ2M0MxMUVFOUI3ODkxMzlDNEY5QUUwMi9QSFVQMXN1TWR3 Rm9IbE5yM1d0eFh4a3JpdmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAip2o9+QsqR/ozVY9uq34nggI3oXDiT9Q6R/5JHeEx+Z5bG7NAMy5XILZUv8z SSbhnMJx96hp/d6o4pDzJ8StSoauOACdTYfQSneIZ/xzWZFH2WYFpXwV7f23fhir dS6gMOG3TLvD0Tx6ukVBGfhbbdXPmFIbo/VlX4manVEfdVz+0WJ50fcoVMKT/2RG STuIPFC51PTQB3y6/TKYIhYnxx8q26iCvZyBESjNycIA4su+n+hBternx+eC1kc+ tYuX5ctzOP6aOh/Q6HDKUiZKw5LSe+ixDHHAnYP/zsHN5d4AsJfBy+IOPpIUsZut fJlowjk9E/zRe80jcDjnIKlBMw== -----END CERTIFICATE-----Generated at Sat Mar 28 10:41:59 2026 by rpki-client