$ rpki-client -vvf rpki.apnic.net/member_repository/A917FFCC/06C55AE816D311F1BAA410C8303D8C67/UG49HcCtxzidnNuq-lFwdBtVhho.mft File: UG49HcCtxzidnNuq-lFwdBtVhho.mft (raw, json) Hash identifier: WHWhb02MaKhVqbCCgfLdgW1StRzduiQm1FGg1B4ico8= Subject key identifier: FE:BA:6F:0F:73:98:82:09:49:37:A3:A0:08:DD:01:40:FB:4D:04:9C Authority key identifier: 50:6E:3D:1D:C0:AD:C7:38:9D:9C:DB:AA:FA:51:70:74:1B:55:86:1A Certificate issuer: /CN=A917FFCC/serialNumber=506E3D1DC0ADC7389D9CDBAAFA5170741B55861A Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UG49HcCtxzidnNuq-lFwdBtVhho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FFCC/06C55AE816D311F1BAA410C8303D8C67/UG49HcCtxzidnNuq-lFwdBtVhho.mft Manifest number: 0E Signing time: Wed 25 Mar 2026 08:16:33 +0000 Manifest this update: Wed 25 Mar 2026 08:16:32 +0000 Manifest next update: Wed 01 Apr 2026 08:16:32 +0000 Files and hashes: 1: UG49HcCtxzidnNuq-lFwdBtVhho.crl (hash: yormTbnFT9eMOpOS/As0P4aOeiqbWYKDSg6eljmFxWQ=) 2: D040E1BC16D311F18D1B19D1303D8C67.roa (hash: FW4iyNzwJYx2pnIdKFnPL+9FFZZIBrzKM+GhxItUIOM=) 3: F780D776194611F1871644483C3D8C67.roa (hash: ho5eEvE3UY6na6Rt/OnfOdSf9aaBbnbQUdpdtiKwfI4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FFCC/06C55AE816D311F1BAA410C8303D8C67/UG49HcCtxzidnNuq-lFwdBtVhho.crl rsync://rpki.apnic.net/member_repository/A917FFCC/06C55AE816D311F1BAA410C8303D8C67/UG49HcCtxzidnNuq-lFwdBtVhho.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UG49HcCtxzidnNuq-lFwdBtVhho.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:16:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FFCC, serialNumber=506E3D1DC0ADC7389D9CDBAAFA5170741B55861A Validity Not Before: Mar 25 08:16:32 2026 GMT Not After : Apr 1 08:16:32 2026 GMT Subject: CN=69c399e1-61a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f8:df:88:ce:a1:c0:40:e5:96:fe:3d:b2:26: c4:f6:3f:4e:86:a5:1e:c7:76:5d:19:8d:8a:95:4e: 32:50:d8:4d:22:19:1b:9b:26:d4:5a:c1:33:61:ba: f8:eb:df:63:de:8a:47:7c:db:c3:61:cd:60:9e:b1: 49:8e:85:0c:23:fc:f3:07:8e:b4:9d:35:bb:48:25: e7:f0:ee:cd:e8:70:33:92:f7:06:d1:6f:2a:01:d9: ba:25:97:c7:06:97:5e:6e:6e:8e:7b:eb:05:7b:1b: 80:3b:17:83:3a:a7:4c:c5:87:ed:6d:ae:14:d0:ed: f5:5f:34:46:2a:de:1a:70:6e:d5:4c:11:fa:b0:d5: 77:e7:eb:57:1f:bb:89:b0:2f:6c:e8:c2:c8:70:56: af:7d:10:a8:43:38:00:07:59:13:74:c8:60:95:6a: 27:77:2e:00:df:a4:a0:97:e9:a8:2b:55:53:82:b2: 77:49:63:cd:7b:12:eb:3e:ab:2c:09:db:e4:8d:44: 7e:e4:a4:7e:b2:86:bc:c6:b7:43:d1:25:7e:75:5a: b4:35:3f:b9:a1:0c:4c:c3:d4:6a:cf:71:f0:79:67: eb:61:95:00:0f:73:d2:4a:61:fe:db:72:f4:39:4c: 9b:dc:27:ae:86:2e:94:58:e6:db:c8:32:33:39:f8: 84:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:BA:6F:0F:73:98:82:09:49:37:A3:A0:08:DD:01:40:FB:4D:04:9C X509v3 Authority Key Identifier: keyid:50:6E:3D:1D:C0:AD:C7:38:9D:9C:DB:AA:FA:51:70:74:1B:55:86:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FFCC/06C55AE816D311F1BAA410C8303D8C67/UG49HcCtxzidnNuq-lFwdBtVhho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UG49HcCtxzidnNuq-lFwdBtVhho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FFCC/06C55AE816D311F1BAA410C8303D8C67/UG49HcCtxzidnNuq-lFwdBtVhho.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:6c:a1:f0:98:0a:af:d2:db:4f:f0:b2:53:3b:16:04:82:59: 5a:8a:d6:14:a2:1a:0a:b8:5d:d1:e8:2a:66:bb:1e:71:2c:c6: f4:d1:a7:73:ae:f3:62:29:41:f6:08:84:ce:a9:a8:0a:77:0a: 18:05:d8:ed:8a:29:48:27:60:12:b7:5e:dd:85:de:2c:96:9e: fd:a6:65:70:85:3c:1a:da:9b:fb:f3:41:98:45:1e:9d:16:83: a8:22:fb:58:cb:c6:7e:70:32:8a:62:4d:25:81:74:dc:9e:be: 46:9d:7c:2b:33:8a:f3:db:18:9b:0d:b2:f0:bd:a1:4d:21:b1: 27:22:7b:95:bd:2c:d9:f9:d4:eb:7d:54:1c:55:97:3e:45:f0: cb:e9:68:14:98:f8:a6:5f:86:8a:9b:94:42:d9:df:67:f4:89: 1e:a8:81:0f:c4:b8:cd:93:28:43:13:ee:63:67:28:a0:22:2b: 91:e1:c7:21:e8:f0:9e:85:ac:ad:38:00:61:65:1d:30:05:8d: 09:ed:26:77:42:b0:89:ec:b9:19:88:2d:c2:eb:ea:33:4b:0c: 06:9b:3a:2c:8b:a9:40:7f:8a:ab:6d:37:4a:b9:06:f0:3d:c3: 96:25:31:f0:e7:f4:a9:3e:fe:61:c5:20:8f:6d:d0:de:7a:b3: bf:0a:c4:14 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RkZDQzExMC8GA1UEBRMoNTA2RTNEMURDMEFEQzczODlEOUNEQkFBRkE1MTcwNzQx QjU1ODYxQTAeFw0yNjAzMjUwODE2MzJaFw0yNjA0MDEwODE2MzJaMBgxFjAUBgNV BAMTDTY5YzM5OWUxLTYxYTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDF+N+IzqHAQOWW/j2yJsT2P06GpR7Hdl0ZjYqVTjJQ2E0iGRubJtRawTNhuvjr 32Peikd828NhzWCesUmOhQwj/PMHjrSdNbtIJefw7s3ocDOS9wbRbyoB2boll8cG l15ubo576wV7G4A7F4M6p0zFh+1trhTQ7fVfNEYq3hpwbtVMEfqw1Xfn61cfu4mw L2zowshwVq99EKhDOAAHWRN0yGCVaid3LgDfpKCX6agrVVOCsndJY817Eus+qywJ 2+SNRH7kpH6yhrzGt0PRJX51WrQ1P7mhDEzD1GrPcfB5Z+thlQAPc9JKYf7bcvQ5 TJvcJ66GLpRY5tvIMjM5+IR/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU/rpvD3OY gglJN6OgCN0BQPtNBJwwHwYDVR0jBBgwFoAUUG49HcCtxzidnNuq+lFwdBtVhhow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdGRkNDLzA2QzU1QUU4MTZE MzExRjFCQUE0MTBDODMwM0Q4QzY3L1VHNDlIY0N0eHppZG5OdXEtbEZ3ZEJ0Vmho by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVUc0OUhjQ3R4emlkbk51cS1sRndkQnRWaGhvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdG RkNDLzA2QzU1QUU4MTZEMzExRjFCQUE0MTBDODMwM0Q4QzY3L1VHNDlIY0N0eHpp ZG5OdXEtbEZ3ZEJ0Vmhoby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCAbKHwmAqv0ttP8LJTOxYEgllaitYUohoKuF3R6Cpmux5xLMb00adzrvNiKUH2 CITOqagKdwoYBdjtiilIJ2ASt17dhd4slp79pmVwhTwa2pv780GYRR6dFoOoIvtY y8Z+cDKKYk0lgXTcnr5GnXwrM4rz2xibDbLwvaFNIbEnInuVvSzZ+dTrfVQcVZc+ RfDL6WgUmPimX4aKm5RC2d9n9IkeqIEPxLjNkyhDE+5jZyigIiuR4cch6PCehayt OABhZR0wBY0J7SZ3QrCJ7LkZiC3C6+ozSwwGmzosi6lAf4qrbTdKuQbwPcOWJTHw 5/SpPv5hxSCPbdDeerO/CsQU -----END CERTIFICATE-----Generated at Thu Mar 26 21:28:19 2026 by rpki-client