$ rpki-client -vvf rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft File: UG14DtF5dIDxUlE0f8KEQ9culQc.mft (raw, json) Hash identifier: 3zaHpdNogrVcqRugezXmyIxkxO4LvUL6uE3nNf3E0Rw= Subject key identifier: 89:6F:1F:E9:58:60:75:17:BB:1C:E5:7D:28:71:29:D0:F8:AC:FD:D1 Authority key identifier: 50:6D:78:0E:D1:79:74:80:F1:52:51:34:7F:C2:84:43:D7:2E:95:07 Certificate issuer: /CN=A917EB0C/serialNumber=506D780ED1797480F15251347FC28443D72E9507 Certificate serial: 0C89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft Manifest number: 0C66 Signing time: Tue 24 Mar 2026 18:33:24 +0000 Manifest this update: Tue 24 Mar 2026 18:33:24 +0000 Manifest next update: Tue 31 Mar 2026 18:33:24 +0000 Files and hashes: 1: UG14DtF5dIDxUlE0f8KEQ9culQc.crl (hash: +MeTXrmnBwLFFEQhxYo23wQ8smUzi8R7xHbdJHWwH+c=) 2: FB2EC05CA3B111EE92169F16C4F9AE02.roa (hash: ZcWtfkepcoTH3hYySssNcb8QgN4PKAntgG2yhFuPzqs=) 3: E5B6117E2BC611EAB1456E4CC4F9AE02.roa (hash: 4wHwD6cPpHWdIAGlk+QPknVHSXJJAxVoDS9hDjhyH1o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.crl rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:33:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3209 (0xc89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EB0C, serialNumber=506D780ED1797480F15251347FC28443D72E9507 Validity Not Before: Mar 24 18:33:24 2026 GMT Not After : Mar 31 18:33:24 2026 GMT Subject: CN=69c2d8f4-24d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0c:ab:7e:4e:e7:a9:76:af:ec:d5:c9:0e:f4: 1d:cb:7b:f9:fb:e9:65:e1:0c:a4:6e:2f:7e:09:ab: d9:88:69:e4:8b:82:87:8c:78:13:89:6f:5e:71:62: ac:1c:f3:f9:04:b0:08:eb:2d:40:78:34:73:6a:b9: f3:f6:f9:5f:97:a9:0b:79:30:bd:2f:8b:66:29:38: e1:bd:7d:a0:a0:7b:dc:68:ea:5f:89:5b:dc:98:c1: 41:9c:1c:e6:4b:d5:8f:0c:c3:c3:e9:09:26:7e:db: df:54:60:57:8a:fb:cd:32:ea:be:84:2e:d0:da:d4: ed:63:53:b5:e7:de:5c:fc:2f:ae:20:b3:26:64:10: 09:21:98:71:8e:78:bc:87:c3:28:d4:28:ff:4e:ec: 3a:53:ee:0d:fd:4b:a8:60:34:1e:62:6b:f0:56:0e: c7:fd:01:44:be:10:89:07:ef:bd:64:df:ef:2f:9c: f3:3a:ce:17:4a:aa:6d:65:ed:5f:31:c6:eb:14:19: 60:84:13:84:8e:75:93:e7:ee:54:ac:22:1c:28:cc: c4:c7:08:e5:17:8d:27:22:32:6c:fd:f4:c2:28:c9: 47:f3:9b:49:88:98:ae:1b:23:fc:9e:63:5e:11:0d: f0:6d:ed:5c:ed:6c:6e:1f:f0:8c:fd:97:01:6c:cc: ec:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:6F:1F:E9:58:60:75:17:BB:1C:E5:7D:28:71:29:D0:F8:AC:FD:D1 X509v3 Authority Key Identifier: keyid:50:6D:78:0E:D1:79:74:80:F1:52:51:34:7F:C2:84:43:D7:2E:95:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:5e:18:a9:2e:17:24:e9:b5:67:8e:1c:2f:b1:27:bb:3b:68: 28:55:4f:58:6e:11:a4:aa:5e:06:bc:fa:20:c7:96:d3:e4:82: 69:3a:61:c8:64:da:b5:89:fe:a6:3d:dc:53:d9:b6:ab:09:57: f5:17:0d:6c:83:6c:dd:a9:39:39:df:f0:42:85:21:f2:68:fd: 85:a3:3e:f7:ac:ac:96:d6:08:54:98:e0:d1:cf:18:5a:86:74: 91:e5:60:a3:4e:ad:fe:cb:58:e8:ab:8a:75:31:f2:c5:8b:60: 97:e7:a6:f9:5f:15:6e:ca:a6:28:27:88:cd:d9:76:43:c4:53: 89:86:4d:26:8d:dd:0f:b2:22:a5:5f:fd:53:26:50:b4:bf:ae: ab:c6:6c:9c:f4:a0:b1:fd:ee:3e:94:81:03:c1:1b:e4:88:60: 28:f6:f7:12:d4:5f:94:70:25:05:34:a2:52:85:e6:12:b3:5c: 06:81:7b:82:73:d5:67:ac:db:bb:5c:2c:11:fb:14:8f:71:3c: 85:6c:1e:51:83:0a:ca:9f:40:c2:97:ca:70:a5:e1:d5:5f:56: ea:74:f7:86:0a:d5:24:70:8c:2b:8c:ba:09:6b:1c:52:55:36: 00:38:43:61:59:1b:e8:7b:fa:d7:43:b7:c6:92:9b:04:35:e2: ef:a2:f5:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VCMEMxMTAvBgNVBAUTKDUwNkQ3ODBFRDE3OTc0ODBGMTUyNTEzNDdGQzI4NDQz RDcyRTk1MDcwHhcNMjYwMzI0MTgzMzI0WhcNMjYwMzMxMTgzMzI0WjAYMRYwFAYD VQQDEw02OWMyZDhmNC0yNGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxAyrfk7nqXav7NXJDvQdy3v5++ll4Qykbi9+CavZiGnki4KHjHgTiW9ecWKs HPP5BLAI6y1AeDRzarnz9vlfl6kLeTC9L4tmKTjhvX2goHvcaOpfiVvcmMFBnBzm S9WPDMPD6QkmftvfVGBXivvNMuq+hC7Q2tTtY1O1595c/C+uILMmZBAJIZhxjni8 h8Mo1Cj/Tuw6U+4N/UuoYDQeYmvwVg7H/QFEvhCJB++9ZN/vL5zzOs4XSqptZe1f McbrFBlghBOEjnWT5+5UrCIcKMzExwjlF40nIjJs/fTCKMlH85tJiJiuGyP8nmNe EQ3wbe1c7WxuH/CM/ZcBbMzsDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIlvH+lY YHUXuxzlfShxKdD4rP3RMB8GA1UdIwQYMBaAFFBteA7ReXSA8VJRNH/ChEPXLpUH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUIwQy82MTM3NUI2QTIy MkExMUVBOUE4MjZENDVDNEY5QUUwMi9VRzE0RHRGNWRJRHhVbEUwZjhLRVE5Y3Vs UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VHMTREdEY1ZElEeFVsRTBmOEtFUTljdWxRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RUIwQy82MTM3NUI2QTIyMkExMUVBOUE4MjZENDVDNEY5QUUwMi9VRzE0RHRGNWRJ RHhVbEUwZjhLRVE5Y3VsUWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAF4YqS4XJOm1Z44cL7EnuztoKFVPWG4RpKpeBrz6IMeW0+SCaTphyGTatYn+ pj3cU9m2qwlX9RcNbINs3ak5Od/wQoUh8mj9haM+96ysltYIVJjg0c8YWoZ0keVg o06t/stY6KuKdTHyxYtgl+em+V8VbsqmKCeIzdl2Q8RTiYZNJo3dD7IipV/9UyZQ tL+uq8ZsnPSgsf3uPpSBA8Eb5IhgKPb3EtRflHAlBTSiUoXmErNcBoF7gnPVZ6zb u1wsEfsUj3E8hWweUYMKyp9AwpfKcKXh1V9W6nT3hgrVJHCMK4y6CWscUlU2ADhD YVkb6Hv610O3xpKbBDXi76L1fg== -----END CERTIFICATE-----Generated at Thu Mar 26 15:45:41 2026 by rpki-client