$ rpki-client -vvf rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.mft File: uRm6CzrV4m_DHTlL4TK7yof8yFI.mft (raw, json) Hash identifier: qZ8Peo8d6enpQPUWXaK34Eo3ecDO1S59HiHkrASAWJI= Subject key identifier: 9F:23:E1:02:51:9E:38:1D:6D:C9:43:46:A3:E5:F5:EE:BA:CF:7E:31 Authority key identifier: B9:19:BA:0B:3A:D5:E2:6F:C3:1D:39:4B:E1:32:BB:CA:87:FC:C8:52 Certificate issuer: /CN=A919E4C6/serialNumber=B919BA0B3AD5E26FC31D394BE132BBCA87FCC852 Certificate serial: 02F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRm6CzrV4m_DHTlL4TK7yof8yFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.mft Manifest number: 02EB Signing time: Wed 25 Mar 2026 00:58:09 +0000 Manifest this update: Wed 25 Mar 2026 00:58:08 +0000 Manifest next update: Wed 01 Apr 2026 00:58:08 +0000 Files and hashes: 1: uRm6CzrV4m_DHTlL4TK7yof8yFI.crl (hash: BUKA9OS16V5HiitN0L3rMCKPh+ZUZ/GXlptPhWf7J+s=) 2: 4C0F405E1E1C11EDA19CF560C4F9AE02.roa (hash: z6B80o610gzveHmOz46h0MViWPRDNqbgDfSiN3K9epw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.crl rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRm6CzrV4m_DHTlL4TK7yof8yFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:58:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 755 (0x2f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E4C6, serialNumber=B919BA0B3AD5E26FC31D394BE132BBCA87FCC852 Validity Not Before: Mar 25 00:58:08 2026 GMT Not After : Apr 1 00:58:08 2026 GMT Subject: CN=69c33321-8bdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:56:27:c1:b2:ae:8a:4a:2a:1d:35:b9:30:50: 3b:dc:8c:22:43:4a:19:84:45:b0:a7:b6:b2:0c:ad: 12:c5:50:52:5f:f6:2d:e7:27:c0:b4:5c:61:02:2d: ad:49:38:66:b2:1f:d6:f5:d6:bb:8a:2f:ef:ed:c1: f3:41:ee:6c:0a:61:5c:79:aa:79:dc:02:3b:85:f2: 8a:0a:51:43:bc:90:53:7e:5d:bf:b5:10:2e:a1:57: 2a:66:55:52:63:e3:c6:cd:73:e0:76:bb:db:f5:4b: 54:5a:39:68:19:47:c8:28:64:b7:e6:39:f5:e3:66: 39:b6:d8:d6:08:5a:bc:00:ad:3b:b8:d0:66:19:7b: 3c:9d:55:4e:d8:cb:cf:da:33:89:2c:bb:c0:9e:29: d1:a4:23:f3:1d:8e:84:37:3e:1b:20:62:ff:a7:59: 2c:dd:e4:5b:bb:90:37:4a:24:28:94:f7:80:a9:41: e7:39:c0:e8:9d:53:25:a8:28:f6:5e:7f:76:54:a7: 95:d9:06:d4:85:57:c3:45:84:12:8f:d3:df:66:cd: 32:fb:f3:71:6a:8b:a5:6b:2a:1f:86:de:df:94:ea: f2:0d:80:4b:e2:6a:1a:73:fd:6f:eb:ec:e0:35:96: 75:86:05:ef:0c:63:67:d8:53:b1:55:1f:f2:50:69: 7f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:23:E1:02:51:9E:38:1D:6D:C9:43:46:A3:E5:F5:EE:BA:CF:7E:31 X509v3 Authority Key Identifier: keyid:B9:19:BA:0B:3A:D5:E2:6F:C3:1D:39:4B:E1:32:BB:CA:87:FC:C8:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRm6CzrV4m_DHTlL4TK7yof8yFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:d7:d5:1d:7d:d8:87:c3:b6:05:b6:c7:d3:c8:92:82:3d:05: a0:b8:cd:d1:2a:8e:4f:77:43:0a:36:0d:7b:21:dc:87:08:da: 47:f1:b9:68:33:88:3b:ca:48:69:60:86:f7:ba:df:e6:b3:ab: 3c:fd:73:b7:8f:34:0a:34:07:c1:98:19:7d:48:ef:40:1f:6c: 39:a5:ad:f2:76:fe:a3:51:53:c8:d6:94:ce:1d:ba:e9:93:5b: d1:7a:a9:8d:29:0a:a2:68:9d:86:a8:d3:8c:ae:3f:6b:d6:57: 52:9b:bc:3e:39:b7:d8:a7:31:47:e5:d0:c0:7d:51:e1:58:74: 3f:7d:78:c9:2d:81:29:0d:9d:8f:88:5a:ef:dc:ff:1a:d5:ba: 2f:bf:93:5e:9c:eb:1c:4b:54:6c:8c:6c:85:2a:55:88:f5:cb: e7:a3:e8:47:58:39:45:cc:43:a8:88:4c:a4:5c:2b:6c:e7:05: 20:4b:03:5c:a8:f2:91:c6:84:2c:6b:ca:ff:88:c4:42:bf:4f: 1a:ca:ae:10:5d:cf:99:0c:75:bc:46:0c:a4:d0:c4:5c:f7:09: 33:15:08:c0:3b:9b:76:ad:d7:8e:ce:f2:c0:bc:74:2d:40:e9: 36:2b:f9:d1:dd:a1:c8:2d:b2:59:92:ba:8f:58:68:54:2f:bc: 9a:44:98:13 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAvMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUU0QzYxMTAvBgNVBAUTKEI5MTlCQTBCM0FENUUyNkZDMzFEMzk0QkUxMzJCQkNB ODdGQ0M4NTIwHhcNMjYwMzI1MDA1ODA4WhcNMjYwNDAxMDA1ODA4WjAYMRYwFAYD VQQDEw02OWMzMzMyMS04YmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA01YnwbKuikoqHTW5MFA73IwiQ0oZhEWwp7ayDK0SxVBSX/Yt5yfAtFxhAi2t SThmsh/W9da7ii/v7cHzQe5sCmFceap53AI7hfKKClFDvJBTfl2/tRAuoVcqZlVS Y+PGzXPgdrvb9UtUWjloGUfIKGS35jn142Y5ttjWCFq8AK07uNBmGXs8nVVO2MvP 2jOJLLvAninRpCPzHY6ENz4bIGL/p1ks3eRbu5A3SiQolPeAqUHnOcDonVMlqCj2 Xn92VKeV2QbUhVfDRYQSj9PfZs0y+/Nxaoulayofht7flOryDYBL4moac/1v6+zg NZZ1hgXvDGNn2FOxVR/yUGl/nwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ8j4QJR njgdbclDRqPl9e66z34xMB8GA1UdIwQYMBaAFLkZugs61eJvwx05S+Eyu8qH/MhS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTRDNi9FQUI5NDdBODFF MTgxMUVEOTQ3OTM2NURDNEY5QUUwMi91Um02Q3pyVjRtX0RIVGxMNFRLN3lvZjh5 RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VSbTZDenJWNG1fREhUbEw0VEs3eW9mOHlGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RTRDNi9FQUI5NDdBODFFMTgxMUVEOTQ3OTM2NURDNEY5QUUwMi91Um02Q3pyVjRt X0RIVGxMNFRLN3lvZjh5RkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwtfVHX3Yh8O2BbbH08iSgj0FoLjN0SqOT3dDCjYNeyHchwjaR/G5aDOIO8pI aWCG97rf5rOrPP1zt480CjQHwZgZfUjvQB9sOaWt8nb+o1FTyNaUzh266ZNb0Xqp jSkKomidhqjTjK4/a9ZXUpu8Pjm32KcxR+XQwH1R4Vh0P314yS2BKQ2dj4ha79z/ GtW6L7+TXpzrHEtUbIxshSpViPXL56PoR1g5RcxDqIhMpFwrbOcFIEsDXKjykcaE LGvK/4jEQr9PGsquEF3PmQx1vEYMpNDEXPcJMxUIwDubdq3Xjs7ywLx0LUDpNiv5 0d2hyC2yWZK6j1hoVC+8mkSYEw== -----END CERTIFICATE-----Generated at Thu Mar 26 18:03:00 2026 by rpki-client