$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5778/3DDC1AC014EC11EAA8BAAE5AC4F9AE02/uLVa9atmqP-naRykPaKmtJuiRUA.mft File: uLVa9atmqP-naRykPaKmtJuiRUA.mft (raw, json) Hash identifier: /Vyez8PN1Rie0Vqw1CJiuEzG4vCP4BhZIWjt1/kHH/k= Subject key identifier: 19:87:98:4D:FA:A7:6D:F0:44:E9:AD:1D:6B:02:6F:4B:B0:17:05:C2 Authority key identifier: B8:B5:5A:F5:AB:66:A8:FF:A7:69:1C:A4:3D:A2:A6:B4:9B:A2:45:40 Certificate issuer: /CN=A91C5778/serialNumber=B8B55AF5AB66A8FFA7691CA43DA2A6B49BA24540 Certificate serial: 0C99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLVa9atmqP-naRykPaKmtJuiRUA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5778/3DDC1AC014EC11EAA8BAAE5AC4F9AE02/uLVa9atmqP-naRykPaKmtJuiRUA.mft Manifest number: 0C8F Signing time: Tue 24 Mar 2026 18:23:38 +0000 Manifest this update: Tue 24 Mar 2026 18:23:37 +0000 Manifest next update: Tue 31 Mar 2026 18:23:37 +0000 Files and hashes: 1: uLVa9atmqP-naRykPaKmtJuiRUA.crl (hash: kr2iZlDduuDFqfSD8AWK+54aXuCBzWv71G+qzCMkiJM=) 2: B3E5DF2A14ED11EAACAB5E5DC4F9AE02.roa (hash: 3OqTGjIgsHVDPUYnbHar2FaPmlN2uunJHFoJ3j2NcEg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5778/3DDC1AC014EC11EAA8BAAE5AC4F9AE02/uLVa9atmqP-naRykPaKmtJuiRUA.crl rsync://rpki.apnic.net/member_repository/A91C5778/3DDC1AC014EC11EAA8BAAE5AC4F9AE02/uLVa9atmqP-naRykPaKmtJuiRUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLVa9atmqP-naRykPaKmtJuiRUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3225 (0xc99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5778, serialNumber=B8B55AF5AB66A8FFA7691CA43DA2A6B49BA24540 Validity Not Before: Mar 24 18:23:37 2026 GMT Not After : Mar 31 18:23:37 2026 GMT Subject: CN=69c2d6aa-8c17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:ca:1d:06:a8:b0:0a:3c:f4:25:44:3b:b0:bb: f5:ba:bd:13:d0:1f:86:8f:bb:4f:81:10:30:4c:b9: b4:be:84:08:18:1c:4b:eb:dd:72:75:93:c9:de:7b: ec:44:4b:c4:31:25:64:0c:20:18:c8:10:3c:b0:4a: c5:c6:04:c2:56:0c:6e:f3:93:b7:82:13:5e:f8:d9: 19:ca:7c:b3:6f:60:f0:94:7a:02:5e:15:2a:58:47: eb:99:11:85:61:07:a8:a0:6c:ca:fb:ad:e6:4b:29: 75:e9:fd:23:ce:11:b6:ee:63:c2:4d:47:85:21:65: a1:1e:de:1f:b1:c3:11:af:0b:e9:22:fd:a9:40:d9: 35:dd:39:0e:36:a2:e1:b5:c0:22:e2:2b:37:97:81: 03:14:75:d6:76:ed:15:5e:5d:b7:33:ec:e9:18:19: 9f:4c:2a:f1:ee:57:a9:40:bd:1b:e2:35:bd:bc:ce: df:56:4b:b7:d0:e3:9d:9c:9b:ed:a8:25:5f:3f:d4: ee:36:ba:db:eb:87:d9:ac:43:f8:97:4a:9e:29:94: f7:86:7b:5c:7a:64:c4:9b:85:95:9f:3b:ad:87:b1: e9:43:a4:54:31:c9:4c:37:91:1b:40:08:e1:47:8c: 3e:6f:14:54:df:3a:d3:62:3a:a5:c2:d7:cb:39:91: ba:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:87:98:4D:FA:A7:6D:F0:44:E9:AD:1D:6B:02:6F:4B:B0:17:05:C2 X509v3 Authority Key Identifier: keyid:B8:B5:5A:F5:AB:66:A8:FF:A7:69:1C:A4:3D:A2:A6:B4:9B:A2:45:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5778/3DDC1AC014EC11EAA8BAAE5AC4F9AE02/uLVa9atmqP-naRykPaKmtJuiRUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLVa9atmqP-naRykPaKmtJuiRUA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5778/3DDC1AC014EC11EAA8BAAE5AC4F9AE02/uLVa9atmqP-naRykPaKmtJuiRUA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:bf:5e:f2:e5:84:5f:f0:1a:2a:20:f6:eb:fc:75:b8:51:bf: 84:d7:71:22:db:8c:f7:2c:14:90:16:aa:8f:b3:e1:06:ef:7b: 77:f4:c2:94:94:e5:03:5d:c2:22:6c:29:eb:4b:72:0b:67:62: 58:33:9e:6d:a8:25:d0:ac:87:02:35:ac:90:97:84:be:81:26: 8d:fd:bc:12:a0:f8:49:2d:cd:3d:f4:c3:40:6b:3d:c1:ba:1f: 15:ec:5e:ec:54:6d:c6:bb:f1:29:16:ec:dc:b1:b8:5d:e4:4e: 67:61:aa:97:56:32:a0:cc:ad:2e:f9:36:63:5b:08:d7:e1:34: 44:e0:18:b2:39:94:76:63:2c:5d:58:e2:6b:89:bd:b9:f2:27: a4:6d:4b:a8:8a:8b:61:02:e8:f6:a8:c1:3e:00:fd:3e:4e:bf: cb:22:82:78:ef:73:ba:bb:3c:5c:a4:c3:8f:28:d6:55:d1:e7: d1:6c:21:07:f4:6b:de:b0:45:d4:f7:31:37:47:9d:b6:0b:e0: cc:87:68:f4:9b:45:a2:b0:23:44:5c:20:fb:50:a3:59:6c:01: 88:a2:0a:bb:c3:1c:35:be:7c:b5:4b:75:3a:da:99:cd:46:a7: 0e:af:99:4d:cc:7e:e9:8d:4a:b5:ef:e1:c5:a8:ee:f2:9b:d6: 65:d9:dd:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU3NzgxMTAvBgNVBAUTKEI4QjU1QUY1QUI2NkE4RkZBNzY5MUNBNDNEQTJBNkI0 OUJBMjQ1NDAwHhcNMjYwMzI0MTgyMzM3WhcNMjYwMzMxMTgyMzM3WjAYMRYwFAYD VQQDEw02OWMyZDZhYS04YzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6sodBqiwCjz0JUQ7sLv1ur0T0B+Gj7tPgRAwTLm0voQIGBxL691ydZPJ3nvs REvEMSVkDCAYyBA8sErFxgTCVgxu85O3ghNe+NkZynyzb2DwlHoCXhUqWEfrmRGF YQeooGzK+63mSyl16f0jzhG27mPCTUeFIWWhHt4fscMRrwvpIv2pQNk13TkONqLh tcAi4is3l4EDFHXWdu0VXl23M+zpGBmfTCrx7lepQL0b4jW9vM7fVku30OOdnJvt qCVfP9TuNrrb64fZrEP4l0qeKZT3hntcemTEm4WVnzuth7HpQ6RUMclMN5EbQAjh R4w+bxRU3zrTYjqlwtfLOZG6ZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBmHmE36 p23wROmtHWsCb0uwFwXCMB8GA1UdIwQYMBaAFLi1WvWrZqj/p2kcpD2iprSbokVA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTc3OC8zRERDMUFDMDE0 RUMxMUVBQThCQUFFNUFDNEY5QUUwMi91TFZhOWF0bXFQLW5hUnlrUGFLbXRKdWlS VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VMVmE5YXRtcVAtbmFSeWtQYUttdEp1aVJVQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTc3OC8zRERDMUFDMDE0RUMxMUVBQThCQUFFNUFDNEY5QUUwMi91TFZhOWF0bXFQ LW5hUnlrUGFLbXRKdWlSVUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdL9e8uWEX/AaKiD26/x1uFG/hNdxItuM9ywUkBaqj7PhBu97d/TClJTlA13C Imwp60tyC2diWDOebagl0KyHAjWskJeEvoEmjf28EqD4SS3NPfTDQGs9wbofFexe 7FRtxrvxKRbs3LG4XeROZ2Gql1YyoMytLvk2Y1sI1+E0ROAYsjmUdmMsXVjia4m9 ufInpG1LqIqLYQLo9qjBPgD9Pk6/yyKCeO9zurs8XKTDjyjWVdHn0WwhB/Rr3rBF 1PcxN0edtgvgzIdo9JtForAjRFwg+1CjWWwBiKIKu8McNb58tUt1OtqZzUanDq+Z Tcx+6Y1Kte/hxaju8pvWZdnd9w== -----END CERTIFICATE-----Generated at Thu Mar 26 06:22:02 2026 by rpki-client