$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft File: uokBTrxJS2f9iz-C6LOO9vbFck0.mft (raw, json) Hash identifier: lWWzIQ1Iq63noQzr9IqvfHbkNs4aE6//AOs3Z7+pGWo= Subject key identifier: 31:14:FF:A4:0B:8E:5F:F9:D9:8B:CE:90:84:AF:88:02:74:CA:88:4F Authority key identifier: BA:89:01:4E:BC:49:4B:67:FD:8B:3F:82:E8:B3:8E:F6:F6:C5:72:4D Certificate issuer: /CN=A91C4EC7/serialNumber=BA89014EBC494B67FD8B3F82E8B38EF6F6C5724D Certificate serial: 01A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft Manifest number: 019C Signing time: Wed 25 Mar 2026 03:38:16 +0000 Manifest this update: Wed 25 Mar 2026 03:38:16 +0000 Manifest next update: Wed 01 Apr 2026 03:38:16 +0000 Files and hashes: 1: uokBTrxJS2f9iz-C6LOO9vbFck0.crl (hash: NZUh8wuenhpVLFMvPc2bFgFfXj9IfnyAqzb+zOqcFaA=) 2: ED352AAEBFE511EEBB3B4D25C4F9AE02.roa (hash: 92db4sEQBXgKR1xndwR6hGmE1/F52FkQLZCxaqtLE4U=) 3: 7FC61EDC2E1D11EF933E9981C4F9AE02.roa (hash: 8to8ysOqqFD6evQaOy6tyviqmwLWEUIY429pE2R6UEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.crl rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:38:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 424 (0x1a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4EC7, serialNumber=BA89014EBC494B67FD8B3F82E8B38EF6F6C5724D Validity Not Before: Mar 25 03:38:16 2026 GMT Not After : Apr 1 03:38:16 2026 GMT Subject: CN=69c358a8-19d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5b:76:dd:0a:90:02:c9:c2:fc:69:c9:4c:3f: 80:33:12:b7:18:bd:fc:4a:59:e2:88:69:bd:fd:f1: 8c:ad:f1:fc:ed:48:73:ad:30:4b:3e:60:23:c2:77: c4:51:c2:a1:89:73:39:e9:c7:75:40:fc:04:75:f6: e5:54:e2:e2:88:a0:80:c4:0f:fe:ed:6c:6a:82:2c: b2:82:4f:90:91:32:fe:d0:a7:f8:34:6b:71:a9:70: 56:31:db:94:25:d9:1d:25:0a:67:b8:21:8b:aa:3b: 23:40:66:0c:3d:cd:4a:e5:34:63:59:f5:c6:52:39: 70:30:29:81:c8:2e:33:6d:b4:d4:c5:0e:13:03:a9: ef:eb:40:95:eb:84:fe:97:96:2c:2b:01:b1:2f:19: 75:ba:24:a9:e7:ce:32:13:a5:d7:69:e2:60:39:c9: e4:3e:c7:1e:2e:1f:e7:27:44:6d:c0:be:f9:d1:9f: fd:42:20:b4:52:c0:80:70:66:ea:71:1d:5a:fe:e6: d4:8b:f4:d7:c4:42:7a:33:47:72:d0:32:25:8e:b3: b8:a5:10:7e:2e:65:d2:18:16:7f:ef:d7:1b:62:7a: 4c:95:37:de:8a:e1:6f:bc:9b:19:f6:98:87:80:28: 79:f6:77:13:ad:20:a8:7e:06:ee:38:ea:04:01:79: 8b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:14:FF:A4:0B:8E:5F:F9:D9:8B:CE:90:84:AF:88:02:74:CA:88:4F X509v3 Authority Key Identifier: keyid:BA:89:01:4E:BC:49:4B:67:FD:8B:3F:82:E8:B3:8E:F6:F6:C5:72:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:e3:0a:c2:86:fa:f4:7d:1e:25:e4:f8:b3:3f:a7:61:8a:72: a2:23:f2:d4:da:91:5d:6e:f7:a7:41:03:70:07:11:bc:ef:10: d6:6a:b8:7c:82:5f:92:23:e0:2f:a6:16:d8:56:aa:e6:16:d9: 9a:a9:06:24:54:c6:db:db:9c:e0:75:9d:93:9f:60:1d:71:be: 9a:a1:9e:42:bf:e4:df:0d:60:5a:4e:d4:64:68:58:dc:f5:89: b1:74:fd:9d:70:e8:4c:2e:01:52:80:48:1e:72:cd:78:13:57: e4:6f:a9:e2:3c:fe:40:29:1c:bf:ec:ed:87:fe:1e:59:31:8b: 9d:03:0a:fb:11:4a:61:cf:3e:a0:0a:d0:cb:d0:42:13:f9:23: 1e:b1:c1:b2:04:7b:43:16:99:cd:47:8d:ff:84:de:18:03:4c: 5d:eb:3e:27:c0:47:c5:f5:72:4b:70:27:e4:04:5f:61:14:33: 6f:36:5e:d9:50:ee:6b:f7:1a:30:55:71:16:ee:5c:cd:57:26: 2f:4c:a4:49:cf:9c:3e:16:60:42:12:73:6e:3d:6b:f1:d4:35: 24:ae:5e:af:81:44:86:93:4e:54:3c:25:8a:43:45:27:6f:2d: c0:f5:4d:62:2b:9b:68:0e:c0:88:08:4b:39:56:b6:77:3a:1d: 9e:50:85:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRFQzcxMTAvBgNVBAUTKEJBODkwMTRFQkM0OTRCNjdGRDhCM0Y4MkU4QjM4RUY2 RjZDNTcyNEQwHhcNMjYwMzI1MDMzODE2WhcNMjYwNDAxMDMzODE2WjAYMRYwFAYD VQQDEw02OWMzNThhOC0xOWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVt23QqQAsnC/GnJTD+AMxK3GL38SlniiGm9/fGMrfH87UhzrTBLPmAjwnfE UcKhiXM56cd1QPwEdfblVOLiiKCAxA/+7Wxqgiyygk+QkTL+0Kf4NGtxqXBWMduU JdkdJQpnuCGLqjsjQGYMPc1K5TRjWfXGUjlwMCmByC4zbbTUxQ4TA6nv60CV64T+ l5YsKwGxLxl1uiSp584yE6XXaeJgOcnkPsceLh/nJ0RtwL750Z/9QiC0UsCAcGbq cR1a/ubUi/TXxEJ6M0dy0DIljrO4pRB+LmXSGBZ/79cbYnpMlTfeiuFvvJsZ9piH gCh59ncTrSCofgbuOOoEAXmLRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDEU/6QL jl/52YvOkISviAJ0yohPMB8GA1UdIwQYMBaAFLqJAU68SUtn/Ys/guizjvb2xXJN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEVDNy83NTc1Nzg3MEJG RTUxMUVFQUFDRTQzMTJDNEY5QUUwMi91b2tCVHJ4SlMyZjlpei1DNkxPTzl2YkZj azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Vva0JUcnhKUzJmOWl6LUM2TE9POXZiRmNrMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEVDNy83NTc1Nzg3MEJGRTUxMUVFQUFDRTQzMTJDNEY5QUUwMi91b2tCVHJ4SlMy Zjlpei1DNkxPTzl2YkZjazAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALuMKwob69H0eJeT4sz+nYYpyoiPy1NqRXW73p0EDcAcRvO8Q1mq4fIJfkiPg L6YW2Faq5hbZmqkGJFTG29uc4HWdk59gHXG+mqGeQr/k3w1gWk7UZGhY3PWJsXT9 nXDoTC4BUoBIHnLNeBNX5G+p4jz+QCkcv+zth/4eWTGLnQMK+xFKYc8+oArQy9BC E/kjHrHBsgR7QxaZzUeN/4TeGANMXes+J8BHxfVyS3An5ARfYRQzbzZe2VDua/ca MFVxFu5czVcmL0ykSc+cPhZgQhJzbj1r8dQ1JK5er4FEhpNOVDwlikNFJ28twPVN YiubaA7AiAhLOVa2dzodnlCFjw== -----END CERTIFICATE-----Generated at Thu Mar 26 13:45:57 2026 by rpki-client