$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.mft File: up0rragmh4TwCuhYcC744p5ytLw.mft (raw, json) Hash identifier: LoqkUoTuRZrpg/0yj30AsdCxm+Uazs5I9sJy7+89m7E= Subject key identifier: E9:9C:70:F2:60:F5:F5:30:31:F8:86:92:56:21:04:16:DF:73:87:9F Authority key identifier: BA:9D:2B:AD:A8:26:87:84:F0:0A:E8:58:70:2E:F8:E2:9E:72:B4:BC Certificate issuer: /CN=A91A9EE2/serialNumber=BA9D2BADA8268784F00AE858702EF8E29E72B4BC Certificate serial: 3555 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0rragmh4TwCuhYcC744p5ytLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.mft Manifest number: 353B Signing time: Tue 24 Mar 2026 14:29:43 +0000 Manifest this update: Tue 24 Mar 2026 14:29:42 +0000 Manifest next update: Tue 31 Mar 2026 14:29:42 +0000 Files and hashes: 1: up0rragmh4TwCuhYcC744p5ytLw.crl (hash: 6s3NtnbP4K2nF8EkxIW5/B8dk6o7UsuEjLUH5d53g1w=) 2: D4A8FF0273ED11F08E63C02DC4F9AE02.roa (hash: tHMeyTgXVjqu1F3xAY8dG3i7T9LkiFUkLAwr5V1RAGo=) 3: 58D5764A683311ECB9C17757C4F9AE02.roa (hash: y6Cb0qWIx1yRlu9RsKzzdkQCpXsOgAgmZ5vTiuWgcQo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.crl rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0rragmh4TwCuhYcC744p5ytLw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 14:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13653 (0x3555) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9EE2, serialNumber=BA9D2BADA8268784F00AE858702EF8E29E72B4BC Validity Not Before: Mar 24 14:29:42 2026 GMT Not After : Mar 31 14:29:42 2026 GMT Subject: CN=69c29fd7-ab3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:69:17:70:59:a8:f3:8f:95:ed:3b:2d:f1:36: 31:3b:b6:96:e0:60:3a:9b:b6:98:90:43:f8:00:0b: 97:11:98:b4:77:af:6d:60:a1:ea:fa:fb:b6:bc:51: d4:a7:a6:31:72:93:2f:11:de:ef:e5:ef:47:28:aa: 6c:68:b8:4f:6c:27:2b:db:d1:2f:58:d9:dc:91:da: 46:88:d4:77:e2:c6:3a:e7:23:62:5b:7c:70:38:35: dc:30:b4:54:d6:6a:cf:6e:0a:da:19:69:fe:ce:d3: 17:04:3f:8b:48:ec:0b:d2:83:2e:9d:5a:5e:05:76: 17:ed:d2:84:ec:89:cc:6c:a0:3e:56:e3:a7:0d:df: 68:30:28:0d:dd:8e:ae:21:3a:b2:4b:df:44:26:12: a0:07:8e:9c:10:db:17:63:52:56:2a:be:3b:44:a4: a3:14:69:27:13:38:51:de:40:00:dc:2e:8e:15:53: 87:bc:de:ce:13:5d:f8:ed:a9:68:67:9d:a4:7b:69: 4e:2c:c2:83:0a:fb:6c:03:06:6d:36:fc:7b:4c:48: 55:11:5f:99:9f:22:02:9e:43:98:50:63:64:e4:ac: ba:48:c2:c4:93:d8:ad:46:0b:d8:e8:54:c9:48:58: 0a:03:57:e6:cb:a8:22:ca:98:a0:3e:b9:2e:20:56: 7e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:9C:70:F2:60:F5:F5:30:31:F8:86:92:56:21:04:16:DF:73:87:9F X509v3 Authority Key Identifier: keyid:BA:9D:2B:AD:A8:26:87:84:F0:0A:E8:58:70:2E:F8:E2:9E:72:B4:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0rragmh4TwCuhYcC744p5ytLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:0a:77:93:eb:5e:b0:05:1f:3b:30:57:17:36:2c:fe:48:69: 7c:46:a1:0d:79:c5:19:da:be:cb:39:07:17:cd:99:2f:99:fb: 16:89:89:0c:a0:16:5e:16:20:1d:ab:c8:90:f9:2f:48:f3:05: cb:43:b8:46:87:43:57:a0:8b:d6:64:6b:21:60:f0:7c:cb:eb: 22:bb:e4:4f:4b:de:c7:7a:d9:ae:8b:5b:6a:40:0b:d0:46:23: e8:21:87:01:c5:71:54:32:87:a8:ad:10:27:e4:35:1e:f1:0a: 95:68:3a:11:43:2a:7b:de:fd:58:78:68:f1:be:8e:1f:b4:a2: 95:3d:1a:dd:ca:d1:42:14:01:60:b2:f1:6c:4f:be:c0:77:d2: c2:be:8a:58:f8:88:60:b8:e8:be:78:f0:c9:41:7e:c0:0a:14: 97:3d:cc:63:61:c8:ea:13:3a:57:cc:41:20:76:a2:24:0e:fe: e0:49:b3:b5:22:8a:e6:45:25:97:85:49:88:2c:41:d5:25:6e: 57:82:1c:e0:ec:00:e3:9f:36:fd:ff:f0:07:ca:7d:d6:7c:10: e6:c4:3a:62:5c:64:5d:9d:4c:f0:6c:e3:1f:27:97:e7:8f:98: bd:fb:fe:59:4e:8e:d2:d4:11:d0:84:7b:13:28:69:71:bf:c9: bf:4f:b2:02 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlFRTIxMTAvBgNVBAUTKEJBOUQyQkFEQTgyNjg3ODRGMDBBRTg1ODcwMkVGOEUy OUU3MkI0QkMwHhcNMjYwMzI0MTQyOTQyWhcNMjYwMzMxMTQyOTQyWjAYMRYwFAYD VQQDEw02OWMyOWZkNy1hYjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsWkXcFmo84+V7Tst8TYxO7aW4GA6m7aYkEP4AAuXEZi0d69tYKHq+vu2vFHU p6YxcpMvEd7v5e9HKKpsaLhPbCcr29EvWNnckdpGiNR34sY65yNiW3xwODXcMLRU 1mrPbgraGWn+ztMXBD+LSOwL0oMunVpeBXYX7dKE7InMbKA+VuOnDd9oMCgN3Y6u ITqyS99EJhKgB46cENsXY1JWKr47RKSjFGknEzhR3kAA3C6OFVOHvN7OE1347alo Z52ke2lOLMKDCvtsAwZtNvx7TEhVEV+ZnyICnkOYUGNk5Ky6SMLEk9itRgvY6FTJ SFgKA1fmy6giypigPrkuIFZ+hwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOmccPJg 9fUwMfiGklYhBBbfc4efMB8GA1UdIwQYMBaAFLqdK62oJoeE8AroWHAu+OKecrS8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUVFMi82NDMyNEREODFE ODgxMUUyQkRFRjE0RTEwOEIwMkNEMi91cDBycmFnbWg0VHdDdWhZY0M3NDRwNXl0 THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VwMHJyYWdtaDRUd0N1aFljQzc0NHA1eXRMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUVFMi82NDMyNEREODFEODgxMUUyQkRFRjE0RTEwOEIwMkNEMi91cDBycmFnbWg0 VHdDdWhZY0M3NDRwNXl0THcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARQp3k+tesAUfOzBXFzYs/khpfEahDXnFGdq+yzkHF82ZL5n7FomJDKAWXhYg HavIkPkvSPMFy0O4RodDV6CL1mRrIWDwfMvrIrvkT0vex3rZrotbakAL0EYj6CGH AcVxVDKHqK0QJ+Q1HvEKlWg6EUMqe979WHho8b6OH7SilT0a3crRQhQBYLLxbE++ wHfSwr6KWPiIYLjovnjwyUF+wAoUlz3MY2HI6hM6V8xBIHaiJA7+4EmztSKK5kUl l4VJiCxB1SVuV4Ic4OwA4582/f/wB8p91nwQ5sQ6YlxkXZ1M8GzjHyeX54+Yvfv+ WU6O0tQR0IR7Eyhpcb/Jv0+yAg== -----END CERTIFICATE-----Generated at Thu Mar 26 02:37:01 2026 by rpki-client