$ rpki-client -vvf rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft File: lUpwG6oMkx0BduSFt6KHwTFlJg4.mft (raw, json) Hash identifier: 5aLZ4U6Fn8PO382JgTU/I+dEs/YHGLG7ebUGjF0TEPY= Subject key identifier: 0D:56:C1:92:9F:BB:58:37:48:D6:F5:8C:48:DC:AE:C4:38:D8:63:64 Authority key identifier: 95:4A:70:1B:AA:0C:93:1D:01:76:E4:85:B7:A2:87:C1:31:65:26:0E Certificate issuer: /CN=A9185CED/serialNumber=954A701BAA0C931D0176E485B7A287C13165260E Certificate serial: 06D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUpwG6oMkx0BduSFt6KHwTFlJg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft Manifest number: 06D2 Signing time: Tue 24 Mar 2026 21:56:12 +0000 Manifest this update: Tue 24 Mar 2026 21:56:11 +0000 Manifest next update: Tue 31 Mar 2026 21:56:11 +0000 Files and hashes: 1: lUpwG6oMkx0BduSFt6KHwTFlJg4.crl (hash: KPOJH7Cu/cmfFU6zMbb2B4mTK2LTMToNmlycwcWOxqg=) 2: 3A84DC2C44E411EFB0C1A135C4F9AE02.roa (hash: ANO9ATvmrYILQmlhem8z7fcbouBAL7kvJgnxQnAu8ss=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.crl rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUpwG6oMkx0BduSFt6KHwTFlJg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:56:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1751 (0x6d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185CED, serialNumber=954A701BAA0C931D0176E485B7A287C13165260E Validity Not Before: Mar 24 21:56:11 2026 GMT Not After : Mar 31 21:56:11 2026 GMT Subject: CN=69c3087c-8ce1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:11:c5:b0:3b:be:c1:06:12:3e:69:56:39:cd: 63:3f:d3:39:c2:65:d1:93:a1:39:f2:38:8d:af:cd: ef:ae:bf:05:ba:e4:7a:00:6d:29:95:3b:39:9f:1c: 31:93:fc:e5:e6:2b:c4:69:6f:b7:66:c7:ac:9c:18: 65:5c:c0:bc:da:81:8e:66:29:b4:b5:8a:70:4d:37: f6:97:e4:e6:4a:fb:7a:2a:35:e9:93:e3:34:80:d4: 99:56:48:f3:67:12:20:7d:4a:10:44:bd:b8:6f:da: 22:9e:a3:9f:3a:d5:6e:3f:9a:c9:6c:8f:57:a0:d1: 85:56:15:e1:e7:cd:fe:3e:2c:8c:10:a3:81:56:8a: 6e:c9:c1:e0:56:93:d2:cd:ae:2a:52:ec:43:f8:1f: d5:26:3b:69:b6:12:4f:69:3f:a5:2e:6f:75:0a:e7: b4:30:ba:67:98:45:50:e7:7e:48:5b:44:81:2b:ed: 91:d3:79:15:b8:c1:12:39:1e:e8:da:cf:6e:33:80: 35:cd:d6:47:90:8f:b1:94:a3:4f:63:e0:ab:b3:46: 89:ec:92:47:c8:a5:40:44:1c:65:8e:34:f6:88:79: 14:f5:b5:c3:60:59:18:b4:65:38:df:43:0f:f0:8f: 6c:f9:82:53:e5:69:43:be:51:47:54:a4:20:ea:4a: 40:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:56:C1:92:9F:BB:58:37:48:D6:F5:8C:48:DC:AE:C4:38:D8:63:64 X509v3 Authority Key Identifier: keyid:95:4A:70:1B:AA:0C:93:1D:01:76:E4:85:B7:A2:87:C1:31:65:26:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUpwG6oMkx0BduSFt6KHwTFlJg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:ce:6b:b8:60:c9:46:7c:46:3d:69:43:66:89:d8:4f:b4:c6: a1:93:ef:a7:1e:95:4b:57:36:fc:2d:7f:80:b4:57:28:34:82: 69:d3:68:fd:9b:02:9f:15:56:fe:b4:b3:42:d2:c0:0c:61:7c: 1d:7e:16:21:6a:53:59:dc:15:12:ae:ad:2c:d6:fd:4f:17:3f: 94:45:5d:48:e4:b2:8a:1d:c2:af:a8:b8:23:3e:14:fc:6e:36: d2:bc:f5:28:78:24:ba:88:b5:a0:ec:bc:4b:64:22:8f:9d:a5: b6:56:43:ce:17:a1:9b:50:12:ce:38:0f:3e:90:77:95:01:65: 61:12:14:ed:89:90:67:13:cc:18:2f:fb:fb:16:0b:12:4f:05: 4e:d7:e6:ca:52:be:65:1a:d8:8f:b2:7c:90:db:08:47:9b:fc: 51:df:93:58:8b:e8:3e:d8:ee:6a:55:8e:d6:9b:42:d9:f5:6f: a0:e1:b6:fe:b8:c1:7e:f0:ae:80:8a:55:1e:cf:99:56:3b:19: 91:e4:d4:9e:7e:58:ef:f1:c5:de:62:75:31:4f:d8:67:4e:da: 13:e3:f8:fe:4d:aa:ec:7d:82:d5:38:f5:a0:28:1c:66:77:3a: e6:7d:4e:75:c3:ba:82:ae:7f:a0:89:48:32:4d:d9:8a:3c:d4: 6a:15:58:08 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBtcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVDRUQxMTAvBgNVBAUTKDk1NEE3MDFCQUEwQzkzMUQwMTc2RTQ4NUI3QTI4N0Mx MzE2NTI2MEUwHhcNMjYwMzI0MjE1NjExWhcNMjYwMzMxMjE1NjExWjAYMRYwFAYD VQQDEw02OWMzMDg3Yy04Y2UxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAixHFsDu+wQYSPmlWOc1jP9M5wmXRk6E58jiNr83vrr8FuuR6AG0plTs5nxwx k/zl5ivEaW+3ZsesnBhlXMC82oGOZim0tYpwTTf2l+TmSvt6KjXpk+M0gNSZVkjz ZxIgfUoQRL24b9oinqOfOtVuP5rJbI9XoNGFVhXh583+PiyMEKOBVopuycHgVpPS za4qUuxD+B/VJjtpthJPaT+lLm91Cue0MLpnmEVQ535IW0SBK+2R03kVuMESOR7o 2s9uM4A1zdZHkI+xlKNPY+Crs0aJ7JJHyKVARBxljjT2iHkU9bXDYFkYtGU430MP 8I9s+YJT5WlDvlFHVKQg6kpAXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA1WwZKf u1g3SNb1jEjcrsQ42GNkMB8GA1UdIwQYMBaAFJVKcBuqDJMdAXbkhbeih8ExZSYO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUNFRC8xQUFGN0Q5NDky MjcxMUVCQkU3MzRGNDBDNEY5QUUwMi9sVXB3RzZvTWt4MEJkdVNGdDZLSHdURmxK ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xVcHdHNm9Na3gwQmR1U0Z0NktId1RGbEpnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUNFRC8xQUFGN0Q5NDkyMjcxMUVCQkU3MzRGNDBDNEY5QUUwMi9sVXB3RzZvTWt4 MEJkdVNGdDZLSHdURmxKZzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVc5ruGDJRnxGPWlDZonYT7TGoZPvpx6VS1c2/C1/gLRXKDSCadNo/ZsCnxVW /rSzQtLADGF8HX4WIWpTWdwVEq6tLNb9Txc/lEVdSOSyih3Cr6i4Iz4U/G420rz1 KHgkuoi1oOy8S2Qij52ltlZDzhehm1ASzjgPPpB3lQFlYRIU7YmQZxPMGC/7+xYL Ek8FTtfmylK+ZRrYj7J8kNsIR5v8Ud+TWIvoPtjualWO1ptC2fVvoOG2/rjBfvCu gIpVHs+ZVjsZkeTUnn5Y7/HF3mJ1MU/YZ07aE+P4/k2q7H2C1Tj1oCgcZnc65n1O dcO6gq5/oIlIMk3ZijzUahVYCA== -----END CERTIFICATE-----Generated at Thu Mar 26 14:55:32 2026 by rpki-client