$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft File: uOVJaYlT9l5x-4S20zjAisF4Glo.mft (raw, json) Hash identifier: cHzmJjsN0D/pa9UnWtzVNmC8SLLVg+IlVUCqO1HNEJU= Subject key identifier: 4D:B9:1F:21:3F:92:87:93:91:C1:2B:A9:74:65:8A:EB:70:46:D1:AE Authority key identifier: B8:E5:49:69:89:53:F6:5E:71:FB:84:B6:D3:38:C0:8A:C1:78:1A:5A Certificate issuer: /CN=A91B5C70/serialNumber=B8E549698953F65E71FB84B6D338C08AC1781A5A Certificate serial: 0A40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft Manifest number: 0A22 Signing time: Thu 26 Mar 2026 19:42:05 +0000 Manifest this update: Thu 26 Mar 2026 19:42:05 +0000 Manifest next update: Thu 02 Apr 2026 19:42:05 +0000 Files and hashes: 1: uOVJaYlT9l5x-4S20zjAisF4Glo.crl (hash: eAhl7qEs+4Tiq6AKO39OLY0dDvbcY+g2jOjtbxrQC70=) 2: 561D611CF05411F083286E06586F56BC.roa (hash: Pzy68Gxe7Cgy7ZMSa/XSvfRVRJvhlPPH9RiVHUl4ol0=) 3: 658C5D24A76B11F0A66F9138C4F9AE02.roa (hash: 2uGGeM3o+9HOMBburEinst6rKDlTwPz5fuWAGefFfio=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.crl rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 19:42:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2624 (0xa40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5C70, serialNumber=B8E549698953F65E71FB84B6D338C08AC1781A5A Validity Not Before: Mar 26 19:42:05 2026 GMT Not After : Apr 2 19:42:05 2026 GMT Subject: CN=69c58c0d-3f3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:70:f3:b3:58:86:71:47:c2:4f:e1:4c:43:7a: c1:46:2c:41:6c:a2:ef:0d:bc:47:39:27:e8:8c:00: d3:9f:02:1a:ab:ea:a4:fa:87:e3:70:81:ac:6c:2e: 87:e2:80:68:6a:9f:17:14:82:9d:85:2b:c8:ef:6c: d5:30:19:1f:7d:73:1c:3e:66:ca:89:cc:aa:f6:84: d8:51:c5:66:62:44:9a:26:25:52:be:ae:7f:f6:45: 03:89:35:dc:2b:2b:ba:b2:8c:8f:1e:c5:5c:29:22: e0:fe:59:c5:83:f6:c9:de:7f:78:ba:86:92:54:6c: fd:f4:f0:e8:97:5e:bb:d7:77:42:3b:30:9b:bd:82: f3:e9:8a:55:fb:07:26:3f:da:4e:5a:f8:6a:67:f9: ec:c2:23:83:81:b6:71:09:0c:5f:43:ba:63:ec:fb: 59:ba:b8:3e:38:47:6f:8f:de:3d:23:cb:a6:7d:7a: be:24:23:c4:3b:aa:f7:aa:a7:c8:7e:05:d9:45:a0: 3e:19:e5:64:b6:0c:e9:00:ed:9c:1c:b8:42:1a:bf: dc:aa:89:ce:6f:cf:42:7d:65:a4:6b:1d:e6:db:7d: 70:95:ef:f7:47:80:8d:bb:73:ac:e5:66:1d:a6:78: 5e:4f:04:13:91:b1:b4:0b:07:9a:91:a4:3d:f0:7a: d6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:B9:1F:21:3F:92:87:93:91:C1:2B:A9:74:65:8A:EB:70:46:D1:AE X509v3 Authority Key Identifier: keyid:B8:E5:49:69:89:53:F6:5E:71:FB:84:B6:D3:38:C0:8A:C1:78:1A:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:12:e7:9c:89:e6:c0:f5:17:c8:9b:98:7d:d0:02:ff:e5:fd: 91:17:6c:5a:11:79:2f:91:c4:12:5a:08:da:3b:e8:a9:ba:91: 64:0f:38:2b:ed:b6:6d:0e:5d:62:bc:fc:3c:af:4e:24:b5:f5: 41:1b:ce:ec:cd:a6:56:0c:02:b8:c2:2f:e6:d6:b7:39:e4:c9: 53:df:df:6d:d5:e5:69:47:75:51:f8:d0:74:db:be:44:24:a8: ed:1c:ff:83:b3:de:3d:a8:bf:86:77:ca:bc:c7:16:77:51:1a: 57:12:c4:e2:3b:43:18:62:07:fd:b4:c6:89:0c:1b:c8:9b:89: 84:05:83:8a:36:4f:74:4e:75:c4:ef:93:0a:e2:fe:c1:4b:38: 1a:e0:9f:4a:2a:45:df:58:41:61:b3:52:21:b3:86:6b:96:cd: 81:9d:8e:66:27:d0:16:87:4c:88:da:64:61:bc:90:f7:2b:2f: 87:ea:76:68:08:cd:b0:c9:f6:0c:83:41:9a:09:02:6c:f3:10: 6a:c2:70:81:b9:83:46:de:25:9d:cb:f4:e2:4f:90:9a:fc:36: 2e:a8:73:05:db:e0:fe:f2:2d:b6:3a:60:3f:f1:4d:a1:50:d5: 08:c9:b1:a9:a2:6d:40:65:4b:3d:4f:0f:52:a9:dc:03:7c:46: f3:5f:9f:ba -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVDNzAxMTAvBgNVBAUTKEI4RTU0OTY5ODk1M0Y2NUU3MUZCODRCNkQzMzhDMDhB QzE3ODFBNUEwHhcNMjYwMzI2MTk0MjA1WhcNMjYwNDAyMTk0MjA1WjAYMRYwFAYD VQQDEw02OWM1OGMwZC0zZjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApnDzs1iGcUfCT+FMQ3rBRixBbKLvDbxHOSfojADTnwIaq+qk+ofjcIGsbC6H 4oBoap8XFIKdhSvI72zVMBkffXMcPmbKicyq9oTYUcVmYkSaJiVSvq5/9kUDiTXc Kyu6soyPHsVcKSLg/lnFg/bJ3n94uoaSVGz99PDol16713dCOzCbvYLz6YpV+wcm P9pOWvhqZ/nswiODgbZxCQxfQ7pj7PtZurg+OEdvj949I8umfXq+JCPEO6r3qqfI fgXZRaA+GeVktgzpAO2cHLhCGr/cqonOb89CfWWkax3m231wle/3R4CNu3Os5WYd pnheTwQTkbG0CweakaQ98HrWawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE25HyE/ koeTkcErqXRliutwRtGuMB8GA1UdIwQYMBaAFLjlSWmJU/ZecfuEttM4wIrBeBpa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUM3MC8yM0EwQUMwNjkx MDcxMUVBQTNFOTNBNUJDNEY5QUUwMi91T1ZKYVlsVDlsNXgtNFMyMHpqQWlzRjRH bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VPVkphWWxUOWw1eC00UzIwempBaXNGNEdsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUM3MC8yM0EwQUMwNjkxMDcxMUVBQTNFOTNBNUJDNEY5QUUwMi91T1ZKYVlsVDls NXgtNFMyMHpqQWlzRjRHbG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaBLnnInmwPUXyJuYfdAC/+X9kRdsWhF5L5HEEloI2jvoqbqRZA84K+22bQ5d Yrz8PK9OJLX1QRvO7M2mVgwCuMIv5ta3OeTJU9/fbdXlaUd1UfjQdNu+RCSo7Rz/ g7PePai/hnfKvMcWd1EaVxLE4jtDGGIH/bTGiQwbyJuJhAWDijZPdE51xO+TCuL+ wUs4GuCfSipF31hBYbNSIbOGa5bNgZ2OZifQFodMiNpkYbyQ9ysvh+p2aAjNsMn2 DINBmgkCbPMQasJwgbmDRt4lncv04k+Qmvw2LqhzBdvg/vIttjpgP/FNoVDVCMmx qaJtQGVLPU8PUqncA3xG81+fug== -----END CERTIFICATE-----Generated at Fri Mar 27 03:51:15 2026 by rpki-client