$ rpki-client -vvf rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft File: 25LUPJBhJQWzr0bpZKaMyfXzsq8.mft (raw, json) Hash identifier: YtIoh6cgaSaaURlduji1l+TDaRKtJ51mjLhd/9JZFTM= Subject key identifier: D9:97:12:72:B8:69:81:A7:FB:91:88:E5:3D:AB:57:15:8C:A1:2C:B5 Authority key identifier: DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF Certificate issuer: /CN=A918213B/serialNumber=DB92D43C90612505B3AF46E964A68CC9F5F3B2AF Certificate serial: 03D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft Manifest number: 03B9 Signing time: Wed 25 Mar 2026 00:24:59 +0000 Manifest this update: Wed 25 Mar 2026 00:24:59 +0000 Manifest next update: Wed 01 Apr 2026 00:24:59 +0000 Files and hashes: 1: 25LUPJBhJQWzr0bpZKaMyfXzsq8.crl (hash: k0iqnxCVvaxCc0P+8VAzFjYiez2TuQihK0HDP8kqLMw=) 2: 9ABE08C606F311F08407D351C4F9AE02.roa (hash: mJ+4aNLfvZt4Gxz5lM68lm7uHN4nwmUYx/R+WnSzyKo=) 3: B2FCF1C07FF911F08FAAC57FC4F9AE02.roa (hash: jNzbZDAmJi3yGAnoraLhyCZK40ZfYa1fB/jtVGeYRGI=) 4: 299F07F2E15611EFA15DF23DC4F9AE02.roa (hash: xB0/pb5I5xHP02aSQCO9upGknx6BvV6q4THXB9XtRB8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.crl rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:24:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 984 (0x3d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918213B, serialNumber=DB92D43C90612505B3AF46E964A68CC9F5F3B2AF Validity Not Before: Mar 25 00:24:59 2026 GMT Not After : Apr 1 00:24:59 2026 GMT Subject: CN=69c32b5b-3459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:62:4c:29:b9:17:c5:76:b0:44:01:c5:2c:9f: 33:80:95:de:57:a2:7f:82:f5:5f:13:ec:97:29:7b: 0d:d1:a2:9e:82:0f:26:e6:db:26:da:0b:dc:51:79: d1:8d:25:7c:5d:7f:66:b2:0c:75:71:74:7b:78:d3: c0:28:60:90:a7:52:c8:72:7f:de:74:04:93:53:57: 11:a9:45:9e:c6:be:a6:2c:4d:b1:32:82:9c:87:41: 44:d7:33:18:88:26:02:2c:65:22:e8:74:24:ba:6b: 05:10:a7:0f:e5:ba:10:a7:5f:1c:06:de:00:70:19: ee:ff:7b:5a:17:ad:bd:fe:5c:f0:1b:cc:a6:db:b2: 9e:b5:8d:ed:d7:90:31:bf:54:dd:52:18:fa:e1:a7: 27:68:ff:bd:ab:69:6c:a6:ee:fa:00:ce:84:27:64: 0b:7e:cb:25:90:6c:0f:7d:bd:cb:45:18:03:cf:d5: ad:51:7c:6a:cb:e4:f2:3f:68:40:72:29:09:31:ef: 88:62:32:37:d0:77:eb:94:15:e5:22:71:f8:00:2c: 4d:9b:fd:ef:54:d0:4d:79:d8:e2:72:bf:e1:ea:7a: c5:68:25:f0:8d:be:f8:9d:4d:e7:50:e4:23:c6:0d: 34:c5:5e:e2:26:d4:91:df:c2:61:1b:3b:97:a7:f8: c3:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:97:12:72:B8:69:81:A7:FB:91:88:E5:3D:AB:57:15:8C:A1:2C:B5 X509v3 Authority Key Identifier: keyid:DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:af:67:90:15:c6:1b:1b:9b:01:58:0c:72:0f:b8:ee:76:26: 79:82:d8:ec:f3:97:be:db:c9:ca:2b:1e:00:15:26:c3:14:83: 3a:65:27:bc:15:e2:8c:75:2e:8c:76:3b:e4:d3:f1:a4:68:bb: 7e:69:e7:80:3b:88:17:c8:e5:90:ed:88:8f:94:6c:fd:8c:d3: df:b1:7b:5c:69:71:90:a0:1c:09:90:d2:88:06:56:a8:b9:03: 81:89:65:11:02:c9:13:2c:60:fc:65:56:90:26:47:a0:8e:4d: cb:9b:62:d4:ee:94:58:80:56:72:84:9f:fc:ee:fc:84:0d:14: c0:9e:98:2d:65:0d:8c:67:7b:bf:f5:1f:93:6b:12:3b:48:f1: 4f:30:e4:30:df:6f:32:22:e2:0c:db:57:fb:83:9d:8e:f9:13: 26:aa:c3:2d:5e:25:7d:22:05:8d:e0:4c:28:51:fd:fd:9d:62: 58:b3:d3:f6:88:35:e6:03:66:9e:86:6f:d5:c7:11:4d:9c:98: c4:7e:e7:7e:78:8b:b3:f9:4b:c7:f9:5b:9d:63:6e:df:71:aa: c9:ab:4f:0f:21:b6:23:b2:b8:d9:c6:9d:dd:3c:27:f0:c1:ff: 4b:37:e1:7c:10:fb:b8:87:c0:66:3f:4e:09:13:7d:46:d7:1b: cf:9c:9a:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIxM0IxMTAvBgNVBAUTKERCOTJENDNDOTA2MTI1MDVCM0FGNDZFOTY0QTY4Q0M5 RjVGM0IyQUYwHhcNMjYwMzI1MDAyNDU5WhcNMjYwNDAxMDAyNDU5WjAYMRYwFAYD VQQDEw02OWMzMmI1Yi0zNDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkmJMKbkXxXawRAHFLJ8zgJXeV6J/gvVfE+yXKXsN0aKegg8m5tsm2gvcUXnR jSV8XX9msgx1cXR7eNPAKGCQp1LIcn/edASTU1cRqUWexr6mLE2xMoKch0FE1zMY iCYCLGUi6HQkumsFEKcP5boQp18cBt4AcBnu/3taF629/lzwG8ym27KetY3t15Ax v1TdUhj64acnaP+9q2lspu76AM6EJ2QLfsslkGwPfb3LRRgDz9WtUXxqy+TyP2hA cikJMe+IYjI30HfrlBXlInH4ACxNm/3vVNBNedjicr/h6nrFaCXwjb74nU3nUOQj xg00xV7iJtSR38JhGzuXp/jDvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNmXEnK4 aYGn+5GI5T2rVxWMoSy1MB8GA1UdIwQYMBaAFNuS1DyQYSUFs69G6WSmjMn187Kv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjEzQi8wNzA3NkZBMEQ5 QzkxMUVDQkUwMDdGNkFDNEY5QUUwMi8yNUxVUEpCaEpRV3pyMGJwWkthTXlmWHpz cTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI1TFVQSkJoSlFXenIwYnBaS2FNeWZYenNxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjEzQi8wNzA3NkZBMEQ5QzkxMUVDQkUwMDdGNkFDNEY5QUUwMi8yNUxVUEpCaEpR V3pyMGJwWkthTXlmWHpzcTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAda9nkBXGGxubAVgMcg+47nYmeYLY7POXvtvJyiseABUmwxSDOmUnvBXijHUu jHY75NPxpGi7fmnngDuIF8jlkO2Ij5Rs/YzT37F7XGlxkKAcCZDSiAZWqLkDgYll EQLJEyxg/GVWkCZHoI5Ny5ti1O6UWIBWcoSf/O78hA0UwJ6YLWUNjGd7v/Ufk2sS O0jxTzDkMN9vMiLiDNtX+4OdjvkTJqrDLV4lfSIFjeBMKFH9/Z1iWLPT9og15gNm noZv1ccRTZyYxH7nfniLs/lLx/lbnWNu33GqyatPDyG2I7K42cad3Twn8MH/Szfh fBD7uIfAZj9OCRN9Rtcbz5yaDg== -----END CERTIFICATE-----Generated at Thu Mar 26 07:31:46 2026 by rpki-client