$ rpki-client -vvf rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft File: u-KUkERtaHB2W05h1-ubIsYARjg.mft (raw, json) Hash identifier: ce3F++Bfsi/ENcSM5Z1gD+o4a5Me1MEGjCR05RhXkEQ= Subject key identifier: F0:FD:02:6C:86:18:01:6F:3D:98:D8:6E:DE:C7:4B:C5:CF:D8:76:5F Authority key identifier: BB:E2:94:90:44:6D:68:70:76:5B:4E:61:D7:EB:9B:22:C6:00:46:38 Certificate issuer: /CN=A9186D83/serialNumber=BBE29490446D6870765B4E61D7EB9B22C6004638 Certificate serial: 0D11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-KUkERtaHB2W05h1-ubIsYARjg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft Manifest number: 0CF6 Signing time: Tue 24 Mar 2026 18:08:13 +0000 Manifest this update: Tue 24 Mar 2026 18:08:12 +0000 Manifest next update: Tue 31 Mar 2026 18:08:12 +0000 Files and hashes: 1: u-KUkERtaHB2W05h1-ubIsYARjg.crl (hash: iVoE+5+STEHvdJs7WGAGzxE80kUUZe5puFUCFc1tNWQ=) 2: 8BA504FCB27911EB978CE10AC4F9AE02.roa (hash: hBVlKog5sRwEaP/MDsz0qoe8RZcUtfVi0W/VBym4um0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.crl rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-KUkERtaHB2W05h1-ubIsYARjg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:08:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3345 (0xd11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186D83, serialNumber=BBE29490446D6870765B4E61D7EB9B22C6004638 Validity Not Before: Mar 24 18:08:12 2026 GMT Not After : Mar 31 18:08:12 2026 GMT Subject: CN=69c2d30d-fa52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:48:99:c8:52:48:76:a9:2a:9d:72:84:75:ab: 4a:7b:44:80:bc:7e:6e:46:b4:20:fa:f0:e2:db:62: a2:b5:62:ad:31:e2:b9:cb:4b:ba:8c:80:c1:c0:bf: 0b:68:ea:3e:46:3b:8d:af:04:e2:f7:1b:d5:e8:ae: e4:52:c7:b8:ce:38:07:1a:37:77:cc:ef:8a:83:1e: 4a:7a:ce:78:cd:e6:3c:01:6d:d8:2a:43:c9:1a:bb: 40:2a:5c:2d:a6:4a:0a:8e:a1:c8:29:49:d2:5f:a0: 18:59:ca:29:e2:63:8c:a5:a5:48:0f:ae:36:28:dd: fc:5c:00:fd:32:7c:11:32:49:01:ae:c8:3f:dd:02: 58:1b:50:a8:16:4e:da:32:12:a4:af:49:e3:12:b7: 11:f2:98:d8:c5:07:f4:cd:f2:75:56:2d:13:3c:a6: 9d:17:b0:72:f5:47:d6:69:eb:40:15:5b:ef:61:cb: 4f:4b:2d:75:04:d0:c7:4f:31:1e:47:e4:31:c2:a6: 19:1a:8b:2d:a3:10:96:c9:72:db:19:01:77:1b:51: 1c:cd:1a:ee:e9:09:78:1c:24:d4:61:0b:3b:e4:44: 27:f2:08:d4:8a:65:dd:aa:ab:ff:10:71:5c:a3:de: 87:85:ec:59:9f:54:3f:55:b9:57:f6:86:c5:7f:90: 65:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:FD:02:6C:86:18:01:6F:3D:98:D8:6E:DE:C7:4B:C5:CF:D8:76:5F X509v3 Authority Key Identifier: keyid:BB:E2:94:90:44:6D:68:70:76:5B:4E:61:D7:EB:9B:22:C6:00:46:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-KUkERtaHB2W05h1-ubIsYARjg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:ce:4d:e8:2e:e7:1e:bb:d4:6c:69:3d:59:57:14:26:25:f5: 7f:40:7f:fa:55:bc:fc:70:59:09:cb:6e:61:57:fa:11:f5:4f: 14:19:40:c9:be:41:0c:30:04:a7:b2:d5:fd:3d:72:fd:95:69: 7f:4e:37:bf:0b:ec:2a:ba:65:ef:b1:73:bc:ea:df:64:46:0e: 9e:f4:d8:9a:d3:d3:0f:e4:ef:e6:86:17:9b:44:52:07:67:45: 70:0f:74:7d:86:de:69:c2:7e:b1:d0:07:f8:a4:cd:73:96:b3: 99:c5:b3:d1:c0:f8:57:0f:25:ea:f2:01:8d:63:78:84:a1:8a: 37:f1:e3:90:10:d4:97:38:54:c4:a0:34:c1:c3:a7:b6:17:23: b1:dd:48:b2:6d:28:8f:5e:f6:3a:a7:c1:52:7f:10:b0:04:d9: d6:e7:6f:f8:84:4d:b0:94:28:7d:25:a4:56:bc:fa:ee:e8:52: de:8a:75:95:a0:59:f6:b5:7b:2c:02:c2:2b:ab:61:e8:71:8a: 41:f4:6e:bb:38:7d:07:b8:56:14:88:d0:ff:d4:89:9e:ac:a0: 6c:23:39:a7:f5:ce:f8:72:4f:81:41:ef:c6:c3:99:8d:ef:59: 6f:e6:7e:1c:84:66:42:2f:30:6e:ec:6b:e5:a0:d6:b1:e5:76: ed:71:cd:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZEODMxMTAvBgNVBAUTKEJCRTI5NDkwNDQ2RDY4NzA3NjVCNEU2MUQ3RUI5QjIy QzYwMDQ2MzgwHhcNMjYwMzI0MTgwODEyWhcNMjYwMzMxMTgwODEyWjAYMRYwFAYD VQQDEw02OWMyZDMwZC1mYTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAokiZyFJIdqkqnXKEdatKe0SAvH5uRrQg+vDi22KitWKtMeK5y0u6jIDBwL8L aOo+RjuNrwTi9xvV6K7kUse4zjgHGjd3zO+Kgx5Kes54zeY8AW3YKkPJGrtAKlwt pkoKjqHIKUnSX6AYWcop4mOMpaVID642KN38XAD9MnwRMkkBrsg/3QJYG1CoFk7a MhKkr0njErcR8pjYxQf0zfJ1Vi0TPKadF7By9UfWaetAFVvvYctPSy11BNDHTzEe R+QxwqYZGostoxCWyXLbGQF3G1EczRru6Ql4HCTUYQs75EQn8gjUimXdqqv/EHFc o96HhexZn1Q/VblX9obFf5BlMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPD9AmyG GAFvPZjYbt7HS8XP2HZfMB8GA1UdIwQYMBaAFLvilJBEbWhwdltOYdfrmyLGAEY4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkQ4My8xNDk3NDdCRTA2 MkExMUVBOEM5QTc0NDRDNEY5QUUwMi91LUtVa0VSdGFIQjJXMDVoMS11YklzWUFS amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UtS1VrRVJ0YUhCMlcwNWgxLXViSXNZQVJqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkQ4My8xNDk3NDdCRTA2MkExMUVBOEM5QTc0NDRDNEY5QUUwMi91LUtVa0VSdGFI QjJXMDVoMS11YklzWUFSamcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAj85N6C7nHrvUbGk9WVcUJiX1f0B/+lW8/HBZCctuYVf6EfVPFBlAyb5BDDAE p7LV/T1y/ZVpf043vwvsKrpl77FzvOrfZEYOnvTYmtPTD+Tv5oYXm0RSB2dFcA90 fYbeacJ+sdAH+KTNc5azmcWz0cD4Vw8l6vIBjWN4hKGKN/HjkBDUlzhUxKA0wcOn thcjsd1Ism0oj172OqfBUn8QsATZ1udv+IRNsJQofSWkVrz67uhS3op1laBZ9rV7 LALCK6th6HGKQfRuuzh9B7hWFIjQ/9SJnqygbCM5p/XO+HJPgUHvxsOZje9Zb+Z+ HIRmQi8wbuxr5aDWseV27XHNcw== -----END CERTIFICATE-----Generated at Thu Mar 26 17:26:21 2026 by rpki-client