$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.mft File: uLRz022lJgglzQu_YvbsGQ00Ahg.mft (raw, json) Hash identifier: gg12KboyXswYWahgrxvVV0gCj9r1iLk1M4dMNjPQldQ= Subject key identifier: 19:8E:23:35:20:41:2E:00:00:D1:E0:CD:C3:C2:B4:94:03:0E:8C:5B Authority key identifier: B8:B4:73:D3:6D:A5:26:08:25:CD:0B:BF:62:F6:EC:19:0D:34:02:18 Certificate issuer: /CN=A91C5D81/serialNumber=B8B473D36DA5260825CD0BBF62F6EC190D340218 Certificate serial: 3536 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLRz022lJgglzQu_YvbsGQ00Ahg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.mft Manifest number: 352D Signing time: Tue 24 Mar 2026 14:18:19 +0000 Manifest this update: Tue 24 Mar 2026 14:18:18 +0000 Manifest next update: Tue 31 Mar 2026 14:18:18 +0000 Files and hashes: 1: uLRz022lJgglzQu_YvbsGQ00Ahg.crl (hash: ghIXapB4tV7pMFrxrDvmcAroHkwDqac1inIu/H7RDew=) 2: 75C18F96305811EB94E3192FC4F9AE02.roa (hash: JLGn76090XO49GxPAgwtd2MTIbWpDSO85D1g5CnOfe8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.crl rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLRz022lJgglzQu_YvbsGQ00Ahg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 14:18:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13622 (0x3536) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5D81, serialNumber=B8B473D36DA5260825CD0BBF62F6EC190D340218 Validity Not Before: Mar 24 14:18:18 2026 GMT Not After : Mar 31 14:18:18 2026 GMT Subject: CN=69c29d2a-a79d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d0:c0:8a:cc:b7:9a:ca:68:24:58:ed:6d:73: d0:c0:d0:6a:26:a1:aa:3d:21:87:f7:51:91:72:eb: dd:54:1e:41:9b:a9:f9:d4:06:9f:49:d0:e6:56:9d: 6b:fb:3f:de:a0:25:0a:4e:7a:bb:86:87:4f:55:7e: 82:a8:e2:85:6e:ad:e8:6c:66:e4:e4:27:6b:13:7e: 65:5a:84:d3:ef:94:14:5a:50:25:74:1e:f5:79:14: f9:cd:07:a6:1a:a8:45:e4:e8:c1:de:51:81:1a:f7: f5:f9:5c:b0:0d:1d:62:56:f8:c2:d1:ce:26:95:a8: 51:be:6f:5e:c3:03:59:62:95:d7:18:10:d7:58:08: db:82:a6:50:bc:6a:6d:8a:e0:91:3a:cd:34:c0:8d: 9f:3f:56:26:e7:bc:13:b6:21:5f:d9:14:33:01:c5: 53:11:c4:90:e8:23:f0:c7:b7:23:f7:95:42:f4:3b: 7f:5d:9b:f0:65:bd:8e:d0:5f:80:94:b3:6d:5e:82: 7d:3e:db:be:a4:e7:f5:bd:b7:16:7c:18:60:50:19: 70:2b:cf:57:00:46:ab:85:d2:3e:11:a6:fc:65:88: eb:b8:c1:54:77:c9:42:28:a3:98:55:c1:2b:0c:ca: e1:19:a0:ff:19:9b:b4:a1:61:32:14:ad:79:c0:01: 28:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:8E:23:35:20:41:2E:00:00:D1:E0:CD:C3:C2:B4:94:03:0E:8C:5B X509v3 Authority Key Identifier: keyid:B8:B4:73:D3:6D:A5:26:08:25:CD:0B:BF:62:F6:EC:19:0D:34:02:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLRz022lJgglzQu_YvbsGQ00Ahg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:a4:dc:3a:e4:59:c9:45:30:2d:8f:e3:f3:2b:e9:86:e6:42: 35:7a:3d:b9:5d:3e:17:20:93:bd:39:42:59:d2:2c:f4:44:de: d7:9a:60:17:82:73:20:7e:20:5a:48:a7:54:2b:65:31:c1:cc: 25:0d:e0:73:cb:53:eb:d0:91:b3:fa:2a:5c:60:4b:cb:f4:35: d4:7a:b4:a6:8c:0b:f2:5a:21:67:cd:df:3e:50:26:0c:81:42: 55:e1:03:12:1c:b3:bc:43:1b:10:25:0e:bf:f8:70:3d:34:57: 34:28:ec:5f:27:fa:8c:e4:7d:81:72:13:5e:89:7a:89:fa:2b: a2:c8:96:b8:c5:8b:c8:db:19:a1:db:23:3d:5c:8a:eb:e5:b7: 99:ed:a7:64:25:b8:e2:08:9e:df:e0:c1:77:8c:cc:22:9b:56: 70:5f:65:f2:f9:2f:5e:f2:37:4e:9e:bb:5d:68:8c:20:d4:02: a0:90:67:ce:b0:49:d4:3d:89:e0:cc:32:97:f8:92:58:0f:97: 6a:a6:6a:5b:42:9c:46:9b:d8:d3:4e:ce:e6:a7:9f:5d:cb:f1: 2f:a3:75:97:dc:ad:76:2f:91:8f:52:3b:e6:b7:d4:54:16:2b: f6:09:03:03:5e:85:c9:87:d8:4c:28:ad:1d:56:ee:02:be:02: 81:78:e8:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNTYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVEODExMTAvBgNVBAUTKEI4QjQ3M0QzNkRBNTI2MDgyNUNEMEJCRjYyRjZFQzE5 MEQzNDAyMTgwHhcNMjYwMzI0MTQxODE4WhcNMjYwMzMxMTQxODE4WjAYMRYwFAYD VQQDEw02OWMyOWQyYS1hNzlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtNDAisy3mspoJFjtbXPQwNBqJqGqPSGH91GRcuvdVB5Bm6n51AafSdDmVp1r +z/eoCUKTnq7hodPVX6CqOKFbq3obGbk5CdrE35lWoTT75QUWlAldB71eRT5zQem GqhF5OjB3lGBGvf1+VywDR1iVvjC0c4mlahRvm9ewwNZYpXXGBDXWAjbgqZQvGpt iuCROs00wI2fP1Ym57wTtiFf2RQzAcVTEcSQ6CPwx7cj95VC9Dt/XZvwZb2O0F+A lLNtXoJ9Ptu+pOf1vbcWfBhgUBlwK89XAEarhdI+Eab8ZYjruMFUd8lCKKOYVcEr DMrhGaD/GZu0oWEyFK15wAEoywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBmOIzUg QS4AANHgzcPCtJQDDoxbMB8GA1UdIwQYMBaAFLi0c9NtpSYIJc0Lv2L27BkNNAIY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUQ4MS80NzA1OUREODFE NkUxMUUyOUI3NkFBQUYwOEIwMkNEMi91TFJ6MDIybEpnZ2x6UXVfWXZic0dRMDBB aGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VMUnowMjJsSmdnbHpRdV9ZdmJzR1EwMEFoZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUQ4MS80NzA1OUREODFENkUxMUUyOUI3NkFBQUYwOEIwMkNEMi91TFJ6MDIybEpn Z2x6UXVfWXZic0dRMDBBaGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgKTcOuRZyUUwLY/j8yvphuZCNXo9uV0+FyCTvTlCWdIs9ETe15pgF4JzIH4g WkinVCtlMcHMJQ3gc8tT69CRs/oqXGBLy/Q11Hq0powL8lohZ83fPlAmDIFCVeED EhyzvEMbECUOv/hwPTRXNCjsXyf6jOR9gXITXol6iforosiWuMWLyNsZodsjPVyK 6+W3me2nZCW44gie3+DBd4zMIptWcF9l8vkvXvI3Tp67XWiMINQCoJBnzrBJ1D2J 4Mwyl/iSWA+XaqZqW0KcRpvY007O5qefXcvxL6N1l9ytdi+Rj1I75rfUVBYr9gkD A16FyYfYTCitHVbuAr4CgXjoHg== -----END CERTIFICATE-----Generated at Thu Mar 26 02:45:45 2026 by rpki-client