$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft File: UCfzGS691UlQo5w9EwlKcfHTMmY.mft (raw, json) Hash identifier: 9ATXLUsBVqd9fvl0fjp4vYpj0K6SVhNM6BmHIaOKpxY= Subject key identifier: 04:0F:7C:DE:05:50:A5:D8:DB:C7:25:A8:F0:2F:04:BB:AF:6C:12:61 Authority key identifier: 50:27:F3:19:2E:BD:D5:49:50:A3:9C:3D:13:09:4A:71:F1:D3:32:66 Certificate issuer: /CN=A91A3078/serialNumber=5027F3192EBDD54950A39C3D13094A71F1D33266 Certificate serial: 0BAE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft Manifest number: 0B86 Signing time: Tue 24 Mar 2026 18:57:53 +0000 Manifest this update: Tue 24 Mar 2026 18:57:52 +0000 Manifest next update: Tue 31 Mar 2026 18:57:52 +0000 Files and hashes: 1: UCfzGS691UlQo5w9EwlKcfHTMmY.crl (hash: 7FH5ccukVtnJ0rkoF3mtDxXkNHLde2OnajDDwiIr1HE=) 2: F3F7D2B0CE9711ECA2477C19C4F9AE02.roa (hash: GKFcFl36b7LnjNX4oCJ7zVjBqwtdvTCKUrd14r3mvVc=) 3: CEFEEFEA854E11EBA2CFDC87C4F9AE02.roa (hash: STVj2nhR43tdaUjvSJVzwF108t0kdD6iF4pS76haPJU=) 4: CDD62642854E11EBA2CFDC87C4F9AE02.roa (hash: y3tBCZ/zj5uXK4iELgDoXwmRBCPYOm3bLLdNGBDaIUc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.crl rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2990 (0xbae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3078, serialNumber=5027F3192EBDD54950A39C3D13094A71F1D33266 Validity Not Before: Mar 24 18:57:52 2026 GMT Not After : Mar 31 18:57:52 2026 GMT Subject: CN=69c2deb1-d51d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:62:90:d1:95:a5:d4:ab:bd:a6:47:dc:a8:51: 03:37:42:d9:fc:c0:3e:24:06:a2:ce:24:29:5e:20: a2:86:b2:83:64:c0:1d:59:4a:cf:50:96:d8:ed:ee: 60:7c:a2:32:df:00:12:47:d6:0c:e3:25:44:dd:34: 27:84:84:2d:50:fb:90:5a:69:c5:6a:e6:69:70:af: 88:bc:35:aa:b6:a7:fd:96:ca:78:e0:04:cb:e5:aa: d1:11:3c:50:05:f3:f9:3e:ac:d5:31:91:25:b7:54: 40:11:02:1e:a2:29:21:0f:28:34:de:e3:ed:48:54: e5:1f:84:d9:d8:c3:5a:6f:aa:94:33:22:a1:75:d0: dd:45:65:1f:8d:74:53:a9:bd:24:b1:2f:51:1b:62: c1:f1:85:f3:35:e1:3f:2a:ad:e1:56:11:7f:2c:a6: ed:64:73:64:61:de:eb:1f:75:40:8e:27:a6:f3:33: e5:6c:3c:ea:a5:b4:b6:c1:fd:b8:e3:57:90:4a:56: 6d:a2:b2:d6:9e:90:c2:57:62:84:d8:30:8d:ee:e0: 8a:e7:ba:62:7f:71:64:d1:be:ed:b6:e3:15:18:a3: 98:3b:a3:ae:e7:e5:db:4d:09:4e:e6:70:25:ec:c5: a5:0d:d4:24:37:68:c1:bd:09:ae:ed:6e:c1:83:70: 90:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:0F:7C:DE:05:50:A5:D8:DB:C7:25:A8:F0:2F:04:BB:AF:6C:12:61 X509v3 Authority Key Identifier: keyid:50:27:F3:19:2E:BD:D5:49:50:A3:9C:3D:13:09:4A:71:F1:D3:32:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:d1:8c:a4:1c:73:5f:ee:e6:26:87:84:2f:c9:85:0a:98:37: ff:6b:e6:35:8d:4b:54:ed:e7:cd:6d:b9:b8:73:0f:94:dc:9a: 3f:af:60:e0:d4:86:cf:51:76:d2:7b:76:fa:6b:36:7f:f0:30: 65:a2:2b:83:45:eb:01:0a:d8:73:a3:17:6e:8a:20:4e:87:6d: 52:60:cd:e4:f0:43:88:a6:7f:cd:38:6e:b1:5b:91:09:70:fb: 61:5c:36:38:0d:9f:7b:f7:ba:4d:76:3d:ec:cb:eb:87:57:7d: 55:32:06:09:a7:9c:0f:41:57:16:d5:cb:f0:39:4b:5e:5b:50: 89:5b:94:04:1b:42:5b:cd:72:3b:e4:2c:a9:da:02:a3:1a:23: 62:92:a3:b7:e8:44:fa:73:50:2f:3b:4d:d5:31:24:af:1a:c2: b9:61:8a:76:b7:68:ee:50:78:32:a2:2e:1d:5d:05:da:d0:ad: ad:fb:b2:9c:06:29:7f:ca:1d:01:08:b5:05:58:a1:ca:ae:47: 20:4b:99:fd:ba:49:a6:a0:d0:e9:f3:07:16:a0:cb:6c:32:f9: d2:db:dc:f7:05:9b:c6:5c:6e:b8:1c:56:1a:8b:ce:c7:b7:7d: ae:e0:1e:dd:41:27:53:21:bc:82:62:da:1c:32:fb:00:17:ee: 4e:d9:86:c7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC64wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTMwNzgxMTAvBgNVBAUTKDUwMjdGMzE5MkVCREQ1NDk1MEEzOUMzRDEzMDk0QTcx RjFEMzMyNjYwHhcNMjYwMzI0MTg1NzUyWhcNMjYwMzMxMTg1NzUyWjAYMRYwFAYD VQQDEw02OWMyZGViMS1kNTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2GKQ0ZWl1Ku9pkfcqFEDN0LZ/MA+JAaiziQpXiCihrKDZMAdWUrPUJbY7e5g fKIy3wASR9YM4yVE3TQnhIQtUPuQWmnFauZpcK+IvDWqtqf9lsp44ATL5arRETxQ BfP5PqzVMZElt1RAEQIeoikhDyg03uPtSFTlH4TZ2MNab6qUMyKhddDdRWUfjXRT qb0ksS9RG2LB8YXzNeE/Kq3hVhF/LKbtZHNkYd7rH3VAjiem8zPlbDzqpbS2wf24 41eQSlZtorLWnpDCV2KE2DCN7uCK57pif3Fk0b7ttuMVGKOYO6Ou5+XbTQlO5nAl 7MWlDdQkN2jBvQmu7W7Bg3CQbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAQPfN4F UKXY28clqPAvBLuvbBJhMB8GA1UdIwQYMBaAFFAn8xkuvdVJUKOcPRMJSnHx0zJm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzA3OC84NjMwQjFDODRD OEMxMUVBQjlFMjcwNTdDNEY5QUUwMi9VQ2Z6R1M2OTFVbFFvNXc5RXdsS2NmSFRN bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VDZnpHUzY5MVVsUW81dzlFd2xLY2ZIVE1tWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzA3OC84NjMwQjFDODRDOEMxMUVBQjlFMjcwNTdDNEY5QUUwMi9VQ2Z6R1M2OTFV bFFvNXc5RXdsS2NmSFRNbVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVtGMpBxzX+7mJoeEL8mFCpg3/2vmNY1LVO3nzW25uHMPlNyaP69g4NSGz1F2 0nt2+ms2f/AwZaIrg0XrAQrYc6MXboogTodtUmDN5PBDiKZ/zThusVuRCXD7YVw2 OA2fe/e6TXY97Mvrh1d9VTIGCaecD0FXFtXL8DlLXltQiVuUBBtCW81yO+QsqdoC oxojYpKjt+hE+nNQLztN1TEkrxrCuWGKdrdo7lB4MqIuHV0F2tCtrfuynAYpf8od AQi1BVihyq5HIEuZ/bpJpqDQ6fMHFqDLbDL50tvc9wWbxlxuuBxWGovOx7d9ruAe 3UEnUyG8gmLaHDL7ABfuTtmGxw== -----END CERTIFICATE-----Generated at Thu Mar 26 10:50:38 2026 by rpki-client