$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.mft File: UT8gd9itkRrHe1tcWbPiFMeLAjs.mft (raw, json) Hash identifier: 8VOVcQwjxyXlYK1xAdqq//DwTGw6HXESBQTHC182kMU= Subject key identifier: E1:F6:8C:A6:9E:78:B9:4F:4D:7D:73:CC:91:7B:B5:10:EF:28:AC:CD Authority key identifier: 51:3F:20:77:D8:AD:91:1A:C7:7B:5B:5C:59:B3:E2:14:C7:8B:02:3B Certificate issuer: /CN=A917E1B9/serialNumber=513F2077D8AD911AC77B5B5C59B3E214C78B023B Certificate serial: 0652 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT8gd9itkRrHe1tcWbPiFMeLAjs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.mft Manifest number: 064B Signing time: Tue 24 Mar 2026 22:23:33 +0000 Manifest this update: Tue 24 Mar 2026 22:23:33 +0000 Manifest next update: Tue 31 Mar 2026 22:23:33 +0000 Files and hashes: 1: UT8gd9itkRrHe1tcWbPiFMeLAjs.crl (hash: 0+KzhsAZxJBYeablXOJY3TVFDgsyZfWQ4kSdkY+YPr8=) 2: 7F27A9D6C88211EBB7A6F948C4F9AE02.roa (hash: XRS9X+c5H6+PF5E3AA5+5JCGv1T1c0IZvsE7D/UMy8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.crl rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT8gd9itkRrHe1tcWbPiFMeLAjs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:23:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1618 (0x652) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E1B9, serialNumber=513F2077D8AD911AC77B5B5C59B3E214C78B023B Validity Not Before: Mar 24 22:23:33 2026 GMT Not After : Mar 31 22:23:33 2026 GMT Subject: CN=69c30ee5-ada9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f1:37:6f:cc:4c:74:de:fe:64:65:09:66:ff: 9b:85:a7:a1:f2:48:d7:7b:de:68:6c:2c:eb:ea:07: 9b:3d:87:0e:9c:00:b1:cd:5e:dd:1d:03:e5:53:c2: 30:6e:2e:32:2c:59:8b:e4:5a:dd:af:4d:af:33:d0: cb:1a:ab:64:7c:8d:d6:da:ed:1d:06:38:6e:2e:1c: 44:c3:08:84:b6:f4:4b:8d:97:12:50:36:90:29:70: 3c:1e:f0:50:8a:b8:ba:fc:22:c2:49:00:7a:12:13: b4:55:8c:52:f7:b5:9a:90:72:b0:b2:b3:3f:5f:ae: 35:ff:7f:02:f5:df:65:51:f3:dd:d3:54:e5:fb:07: b5:1e:c6:b8:03:b2:a9:17:a0:7d:c0:98:3b:94:7c: c3:fe:23:fe:27:1d:79:c0:00:75:16:b8:22:4b:55: 6f:0e:0e:a9:95:80:82:68:e3:e2:e5:c1:93:2e:80: 14:8f:c9:e9:cc:0e:39:1b:65:73:3e:e1:18:84:bf: 7c:4b:92:ed:3c:a9:67:0f:25:ec:e4:bb:95:fd:47: 31:24:91:de:c9:97:42:88:7f:60:5a:cd:e7:90:d3: a7:6e:38:ec:ee:0f:b7:2b:c2:1e:2c:18:9a:e5:ce: 8e:74:99:83:a6:b4:8d:48:fb:ea:ae:7c:88:7b:ae: 81:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F6:8C:A6:9E:78:B9:4F:4D:7D:73:CC:91:7B:B5:10:EF:28:AC:CD X509v3 Authority Key Identifier: keyid:51:3F:20:77:D8:AD:91:1A:C7:7B:5B:5C:59:B3:E2:14:C7:8B:02:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT8gd9itkRrHe1tcWbPiFMeLAjs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:12:76:40:ff:5f:cc:34:0b:96:85:02:f4:e9:c5:63:35:f7: 93:5a:ba:d0:6c:ca:1d:27:41:92:68:ae:42:fc:f2:12:32:61: 43:19:b5:8b:50:4d:f0:52:72:b8:ef:3b:38:4a:f8:a4:fa:fa: 05:ae:1c:b0:30:fb:be:cc:e0:7b:14:12:d7:f0:c4:72:76:40: 44:5e:97:86:11:e8:e8:19:8a:85:d1:7e:f3:9a:84:0e:16:22: f2:70:b8:59:d9:1e:d0:02:7a:0c:6a:93:9e:c2:aa:09:49:66: 6e:dd:f6:1b:46:57:de:85:27:d1:e6:03:a4:2f:e6:59:86:bc: 01:fc:1d:50:53:6e:06:aa:9d:e5:b2:dc:b5:3a:ec:f0:e6:82: 44:27:ee:c9:3d:12:88:6e:f0:0e:57:51:91:0f:5c:a5:ea:53: 1a:38:75:83:b5:37:5b:dd:f7:0b:62:80:c8:dd:d8:15:4a:d9: 7e:c7:3b:b0:43:4e:d7:f9:01:65:87:ff:22:a4:24:71:56:33: e1:47:9c:64:3c:04:93:f9:1d:2f:d9:da:84:0f:c4:a4:ad:54: 74:10:bd:e5:53:27:47:6c:4e:10:4d:ae:68:d8:3e:80:64:a2: 17:ee:1e:7e:60:8c:d3:93:42:01:62:ba:3b:5c:9a:ef:f1:26: f0:b9:3f:0b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UxQjkxMTAvBgNVBAUTKDUxM0YyMDc3RDhBRDkxMUFDNzdCNUI1QzU5QjNFMjE0 Qzc4QjAyM0IwHhcNMjYwMzI0MjIyMzMzWhcNMjYwMzMxMjIyMzMzWjAYMRYwFAYD VQQDEw02OWMzMGVlNS1hZGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq/E3b8xMdN7+ZGUJZv+bhaeh8kjXe95obCzr6gebPYcOnACxzV7dHQPlU8Iw bi4yLFmL5Frdr02vM9DLGqtkfI3W2u0dBjhuLhxEwwiEtvRLjZcSUDaQKXA8HvBQ iri6/CLCSQB6EhO0VYxS97WakHKwsrM/X641/38C9d9lUfPd01Tl+we1Hsa4A7Kp F6B9wJg7lHzD/iP+Jx15wAB1FrgiS1VvDg6plYCCaOPi5cGTLoAUj8npzA45G2Vz PuEYhL98S5LtPKlnDyXs5LuV/UcxJJHeyZdCiH9gWs3nkNOnbjjs7g+3K8IeLBia 5c6OdJmDprSNSPvqrnyIe66BDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOH2jKae eLlPTX1zzJF7tRDvKKzNMB8GA1UdIwQYMBaAFFE/IHfYrZEax3tbXFmz4hTHiwI7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTFCOS9DREI3MDJGNkM4 N0IxMUVCQUZBNjk1M0JDNEY5QUUwMi9VVDhnZDlpdGtSckhlMXRjV2JQaUZNZUxB anMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VUOGdkOWl0a1JySGUxdGNXYlBpRk1lTEFqcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTFCOS9DREI3MDJGNkM4N0IxMUVCQUZBNjk1M0JDNEY5QUUwMi9VVDhnZDlpdGtS ckhlMXRjV2JQaUZNZUxBanMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGhJ2QP9fzDQLloUC9OnFYzX3k1q60GzKHSdBkmiuQvzyEjJhQxm1i1BN8FJy uO87OEr4pPr6Ba4csDD7vszgexQS1/DEcnZARF6XhhHo6BmKhdF+85qEDhYi8nC4 Wdke0AJ6DGqTnsKqCUlmbt32G0ZX3oUn0eYDpC/mWYa8AfwdUFNuBqqd5bLctTrs 8OaCRCfuyT0SiG7wDldRkQ9cpepTGjh1g7U3W933C2KAyN3YFUrZfsc7sENO1/kB ZYf/IqQkcVYz4UecZDwEk/kdL9nahA/EpK1UdBC95VMnR2xOEE2uaNg+gGSiF+4e fmCM05NCAWK6O1ya7/Em8Lk/Cw== -----END CERTIFICATE-----Generated at Thu Mar 26 08:24:17 2026 by rpki-client