$ rpki-client -vvf rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft File: juUibgV6ZUQkIur-2cYuKQ3zJIo.mft (raw, json) Hash identifier: M8gUest0bSaLQNFoVFybYEaAp0gI3N2IgMAfidGyEqg= Subject key identifier: 88:8A:C8:4B:69:B3:B1:96:42:C0:C6:DB:50:A1:CA:41:F5:B1:D2:AC Authority key identifier: 8E:E5:22:6E:05:7A:65:44:24:22:EA:FE:D9:C6:2E:29:0D:F3:24:8A Certificate issuer: /CN=A91672E3/serialNumber=8EE5226E057A65442422EAFED9C62E290DF3248A Certificate serial: 0241 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft Manifest number: 0229 Signing time: Wed 25 Mar 2026 02:09:13 +0000 Manifest this update: Wed 25 Mar 2026 02:09:13 +0000 Manifest next update: Wed 01 Apr 2026 02:09:13 +0000 Files and hashes: 1: juUibgV6ZUQkIur-2cYuKQ3zJIo.crl (hash: H6SAtCiNqHwGbXtJXPVyS8JX9WNonH1nyV6bwVWLq2Y=) 2: FD678F40214E11F095B05918C4F9AE02.roa (hash: nQpNjZ3lTAbfu1GiUOC4eyIWzIM6SnWGHo9FozfgyUQ=) 3: 45399802215111F0B94CA13FC4F9AE02.roa (hash: dqhqgG1ahTq17N+e11+nZjz13+WNxO29JRyPa9rncV0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.crl rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:09:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 577 (0x241) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91672E3, serialNumber=8EE5226E057A65442422EAFED9C62E290DF3248A Validity Not Before: Mar 25 02:09:13 2026 GMT Not After : Apr 1 02:09:13 2026 GMT Subject: CN=69c343c9-3381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:80:20:7c:67:d7:48:93:47:03:1d:0a:fa:0b: 82:5e:d1:4b:71:98:84:5b:6d:91:2e:d8:5d:87:57: 51:40:13:24:8d:ee:12:45:fb:46:92:05:e1:b5:1e: d0:06:79:d2:1e:30:49:35:55:b1:1e:5e:f9:92:82: fe:eb:18:38:c2:1a:7c:33:13:d9:8f:68:76:a0:c5: 1a:da:36:ef:94:c5:62:52:8e:57:62:a7:13:77:25: 79:04:18:df:2a:6c:54:b8:a4:86:1d:89:c2:4e:0f: 50:2d:3f:5d:ec:59:43:8e:f9:be:88:e7:d8:c5:f8: 1b:20:31:bc:67:14:38:a1:f6:1a:e7:b0:1d:e0:06: c9:f7:94:1a:2e:8c:73:c2:b8:e9:8f:2f:80:1e:81: c8:48:b5:24:c1:14:f2:a5:00:a6:34:41:7b:84:50: 9e:91:93:5c:1f:98:62:6c:5c:ab:16:2b:0f:ec:9c: 33:2b:3c:d6:b1:50:15:6a:fc:84:56:00:92:b1:81: 01:7e:16:45:d1:f8:0f:3f:88:fa:05:6c:9a:46:eb: 1a:4c:34:79:6f:79:33:2b:33:af:35:c0:c6:34:31: 1d:c8:57:c6:35:20:5c:9d:91:82:fa:65:03:0e:b4: ff:e3:c8:4f:ae:c0:59:dd:3a:68:62:18:05:15:26: 4a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:8A:C8:4B:69:B3:B1:96:42:C0:C6:DB:50:A1:CA:41:F5:B1:D2:AC X509v3 Authority Key Identifier: keyid:8E:E5:22:6E:05:7A:65:44:24:22:EA:FE:D9:C6:2E:29:0D:F3:24:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:e4:ee:08:2d:d7:2b:be:d6:a1:e8:fd:c8:a0:31:2c:de:22: f9:2c:28:29:a5:f4:2b:f2:9e:a5:a2:0f:5d:83:0c:6a:fd:54: 35:db:91:c8:ff:89:54:f3:74:7e:90:d9:62:8c:77:83:ab:b5: a0:88:1e:70:c0:81:36:b9:b0:1d:2d:46:3b:89:72:3b:96:18: f0:bb:3f:d9:f4:c2:47:15:0c:9f:c3:aa:0b:4a:ac:d5:7e:ba: 70:7e:f4:5f:af:fa:a4:c0:c5:b6:56:17:da:64:25:9f:b4:21: 47:b4:f4:ba:61:cd:2f:2a:00:59:81:b3:1b:c6:a9:66:e5:e1: c5:c0:23:7b:56:e9:8b:ac:38:db:35:82:e5:1a:c0:4c:83:a6: f9:1a:ae:ad:05:0c:2d:74:13:0f:5b:82:42:09:4c:d3:aa:a0: 39:e0:bd:a3:8e:27:09:48:11:36:73:1e:b9:ac:6e:7f:fc:a0: 2c:20:77:30:7e:07:76:7c:bc:9f:5e:ec:d1:1d:c7:d3:76:ae: 27:02:05:f6:d3:19:af:f9:c5:0d:ea:3d:ba:42:bb:14:d3:bc: e9:4b:9b:f7:6b:3b:5b:69:8b:bd:a3:51:07:1d:8d:ea:51:1b: 24:ac:b9:b3:36:8f:b8:cf:6a:77:02:ee:e5:be:22:4d:8b:dc: f1:eb:8e:fe -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcyRTMxMTAvBgNVBAUTKDhFRTUyMjZFMDU3QTY1NDQyNDIyRUFGRUQ5QzYyRTI5 MERGMzI0OEEwHhcNMjYwMzI1MDIwOTEzWhcNMjYwNDAxMDIwOTEzWjAYMRYwFAYD VQQDEw02OWMzNDNjOS0zMzgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyIAgfGfXSJNHAx0K+guCXtFLcZiEW22RLthdh1dRQBMkje4SRftGkgXhtR7Q BnnSHjBJNVWxHl75koL+6xg4whp8MxPZj2h2oMUa2jbvlMViUo5XYqcTdyV5BBjf KmxUuKSGHYnCTg9QLT9d7FlDjvm+iOfYxfgbIDG8ZxQ4ofYa57Ad4AbJ95QaLoxz wrjpjy+AHoHISLUkwRTypQCmNEF7hFCekZNcH5hibFyrFisP7JwzKzzWsVAVavyE VgCSsYEBfhZF0fgPP4j6BWyaRusaTDR5b3kzKzOvNcDGNDEdyFfGNSBcnZGC+mUD DrT/48hPrsBZ3TpoYhgFFSZKgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIiKyEtp s7GWQsDG21ChykH1sdKsMB8GA1UdIwQYMBaAFI7lIm4FemVEJCLq/tnGLikN8ySK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzJFMy9DNkI1MDEzQ0VB RTkxMUVEODc1QTJENTFDNEY5QUUwMi9qdVVpYmdWNlpVUWtJdXItMmNZdUtRM3pK SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p1VWliZ1Y2WlVRa0l1ci0yY1l1S1EzekpJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzJFMy9DNkI1MDEzQ0VBRTkxMUVEODc1QTJENTFDNEY5QUUwMi9qdVVpYmdWNlpV UWtJdXItMmNZdUtRM3pKSW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAo+TuCC3XK77Woej9yKAxLN4i+SwoKaX0K/KepaIPXYMMav1UNduRyP+JVPN0 fpDZYox3g6u1oIgecMCBNrmwHS1GO4lyO5YY8Ls/2fTCRxUMn8OqC0qs1X66cH70 X6/6pMDFtlYX2mQln7QhR7T0umHNLyoAWYGzG8apZuXhxcAje1bpi6w42zWC5RrA TIOm+RqurQUMLXQTD1uCQglM06qgOeC9o44nCUgRNnMeuaxuf/ygLCB3MH4Hdny8 n17s0R3H03auJwIF9tMZr/nFDeo9ukK7FNO86Uub92s7W2mLvaNRBx2N6lEbJKy5 szaPuM9qdwLu5b4iTYvc8euO/g== -----END CERTIFICATE-----Generated at Thu Mar 26 12:46:17 2026 by rpki-client