$ rpki-client -vvf rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft File: S-UGizexYyUw_1Ijhue3-wGI6eo.mft (raw, json) Hash identifier: XWYsR59bURUyk3XI6hMgLnrTF0NcESzhH31ceT3yNS0= Subject key identifier: 70:59:5A:85:D6:0D:3D:71:D2:F8:DD:C6:D0:08:64:E7:9B:A7:15:26 Authority key identifier: 4B:E5:06:8B:37:B1:63:25:30:FF:52:23:86:E7:B7:FB:01:88:E9:EA Certificate issuer: /CN=A9172BD3/serialNumber=4BE5068B37B1632530FF522386E7B7FB0188E9EA Certificate serial: 01AF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft Manifest number: 01A3 Signing time: Wed 25 Mar 2026 03:31:17 +0000 Manifest this update: Wed 25 Mar 2026 03:31:17 +0000 Manifest next update: Wed 01 Apr 2026 03:31:17 +0000 Files and hashes: 1: S-UGizexYyUw_1Ijhue3-wGI6eo.crl (hash: GccdHkhaLX9qfObyX8mV+7nrwyGMjgmO7nolkre1/Ak=) 2: B979F0F4BE4211EE9D6A1D6CC4F9AE02.roa (hash: Mu781u2UOCsoMogGCO1asa+hOVZHkRFUxZxq0Tk4hzk=) 3: 2DAB7B74BE4211EE970F4140C4F9AE02.roa (hash: Zp+vDxjgp9IBMQisqTAyGrA6N1rfRNHRmhhuRUlKotI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.crl rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 431 (0x1af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172BD3, serialNumber=4BE5068B37B1632530FF522386E7B7FB0188E9EA Validity Not Before: Mar 25 03:31:17 2026 GMT Not After : Apr 1 03:31:17 2026 GMT Subject: CN=69c35705-c33a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:5c:66:6e:00:92:ec:08:36:50:5a:06:36:10: 23:b6:f7:a3:aa:61:d9:97:7d:4f:9c:18:0c:b7:90: 6d:88:09:89:19:5a:9e:a7:83:fd:92:90:c5:05:36: d4:fe:67:ce:a4:42:21:27:2b:84:25:1f:5e:21:58: 6e:be:4c:00:c9:35:d2:32:09:29:89:46:0e:02:88: d7:d9:27:23:17:e6:67:1d:39:bb:05:40:92:0d:e3: 92:8b:2a:ae:7d:11:03:2b:dc:c7:a7:a2:51:4a:47: 7c:73:f9:0b:13:4c:09:0f:f8:f0:a0:5b:19:45:8c: 9a:7e:40:f0:cd:27:95:b3:03:71:26:6f:22:bc:b5: f9:13:fc:21:2f:bc:ab:fd:96:26:d8:8f:42:01:77: a9:92:6f:11:c2:a9:ae:96:ee:03:f4:18:ac:49:29: 89:74:0e:6a:c1:51:9c:65:22:58:4f:6b:18:db:59: b1:fc:e0:b8:bb:70:71:93:d3:6d:ba:31:db:07:f4: 58:36:4e:7e:a0:0c:7c:f9:04:a2:e0:5c:a4:cf:ce: 98:40:69:65:52:78:9c:f8:d1:2f:2d:ce:78:13:16: d2:56:3c:71:02:9f:2b:ec:43:dd:26:50:d3:50:a9: 33:f5:d4:59:dd:18:07:cb:b8:8b:8f:6e:55:07:b7: b0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:59:5A:85:D6:0D:3D:71:D2:F8:DD:C6:D0:08:64:E7:9B:A7:15:26 X509v3 Authority Key Identifier: keyid:4B:E5:06:8B:37:B1:63:25:30:FF:52:23:86:E7:B7:FB:01:88:E9:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:c3:25:03:77:9d:4c:bf:6f:ec:ac:9f:ad:f0:51:0f:61:0c: ab:89:92:ce:9a:d9:53:d6:92:71:dd:15:3d:38:d8:8b:8b:75: d7:d6:e6:72:8b:8f:9c:e8:56:6a:47:b5:39:27:51:be:07:2b: 17:b2:b4:54:be:c7:2c:e6:91:30:04:ec:ed:dc:f2:89:dd:92: 94:3a:0b:4f:f8:28:6b:1c:ec:ad:50:e2:76:b4:e2:e3:24:4b: c1:d8:86:01:d7:fd:4e:1b:61:ca:a2:45:09:90:21:27:7d:3f: 2c:78:2f:33:cc:5d:b2:d6:0b:40:08:4b:1d:f9:88:ac:88:21: 9c:e0:fb:d9:d6:db:ac:db:06:69:d8:25:b5:2b:2d:ca:96:d1: 67:da:48:f3:86:1b:aa:58:77:58:c8:05:8d:5c:58:05:38:de: a0:98:61:b1:df:db:03:86:57:6e:30:52:c2:61:2e:31:69:dc: 70:55:e7:29:59:e4:95:3f:77:35:f9:58:3a:dc:ba:64:67:f5: b1:85:9c:22:91:44:cb:cd:0b:ed:e4:5d:ce:fd:3a:f5:90:79: 74:5a:11:b1:ec:41:9e:a5:1d:4f:3a:bd:ef:2c:74:d5:81:61: f3:a1:1e:59:59:4d:ec:d1:51:c9:f4:04:2f:22:5d:14:c5:bf: 2f:2d:77:f1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCRDMxMTAvBgNVBAUTKDRCRTUwNjhCMzdCMTYzMjUzMEZGNTIyMzg2RTdCN0ZC MDE4OEU5RUEwHhcNMjYwMzI1MDMzMTE3WhcNMjYwNDAxMDMzMTE3WjAYMRYwFAYD VQQDEw02OWMzNTcwNS1jMzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA21xmbgCS7Ag2UFoGNhAjtvejqmHZl31PnBgMt5BtiAmJGVqep4P9kpDFBTbU /mfOpEIhJyuEJR9eIVhuvkwAyTXSMgkpiUYOAojX2ScjF+ZnHTm7BUCSDeOSiyqu fREDK9zHp6JRSkd8c/kLE0wJD/jwoFsZRYyafkDwzSeVswNxJm8ivLX5E/whL7yr /ZYm2I9CAXepkm8Rwqmulu4D9BisSSmJdA5qwVGcZSJYT2sY21mx/OC4u3Bxk9Nt ujHbB/RYNk5+oAx8+QSi4Fykz86YQGllUnic+NEvLc54ExbSVjxxAp8r7EPdJlDT UKkz9dRZ3RgHy7iLj25VB7ewmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHBZWoXW DT1x0vjdxtAIZOebpxUmMB8GA1UdIwQYMBaAFEvlBos3sWMlMP9SI4bnt/sBiOnq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkJEMy9FODBGMTM3Q0I5 OTIxMUVFQUI5RjFEMTlDNEY5QUUwMi9TLVVHaXpleFl5VXdfMUlqaHVlMy13R0k2 ZW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1MtVUdpemV4WXlVd18xSWpodWUzLXdHSTZlby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkJEMy9FODBGMTM3Q0I5OTIxMUVFQUI5RjFEMTlDNEY5QUUwMi9TLVVHaXpleFl5 VXdfMUlqaHVlMy13R0k2ZW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhcMlA3edTL9v7KyfrfBRD2EMq4mSzprZU9aScd0VPTjYi4t119bmcouPnOhW ake1OSdRvgcrF7K0VL7HLOaRMATs7dzyid2SlDoLT/goaxzsrVDidrTi4yRLwdiG Adf9ThthyqJFCZAhJ30/LHgvM8xdstYLQAhLHfmIrIghnOD72dbbrNsGadgltSst ypbRZ9pI84Ybqlh3WMgFjVxYBTjeoJhhsd/bA4ZXbjBSwmEuMWnccFXnKVnklT93 NflYOty6ZGf1sYWcIpFEy80L7eRdzv069ZB5dFoRsexBnqUdTzq97yx01YFh86Ee WVlN7NFRyfQELyJdFMW/Ly138Q== -----END CERTIFICATE-----Generated at Thu Mar 26 16:09:31 2026 by rpki-client