$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.mft File: UjNwqBpuUUYYrnypeV_dEQs1Djc.mft (raw, json) Hash identifier: 55aL9AFgMryhYUheZ47rX1E+FHWKZRLPJxJ9Bv+yDpY= Subject key identifier: 4E:89:47:42:02:C6:D1:3A:80:2D:91:2E:58:56:73:51:41:1A:F7:68 Authority key identifier: 52:33:70:A8:1A:6E:51:46:18:AE:7C:A9:79:5F:DD:11:0B:35:0E:37 Certificate issuer: /CN=A91C6CB6/serialNumber=523370A81A6E514618AE7CA9795FDD110B350E37 Certificate serial: 0D28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjNwqBpuUUYYrnypeV_dEQs1Djc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.mft Manifest number: 0D10 Signing time: Tue 24 Mar 2026 17:57:38 +0000 Manifest this update: Tue 24 Mar 2026 17:57:38 +0000 Manifest next update: Tue 31 Mar 2026 17:57:38 +0000 Files and hashes: 1: UjNwqBpuUUYYrnypeV_dEQs1Djc.crl (hash: M8pMzJEHCxIJSKNSaPht4IuqVtGx4rZ34Lo8KYVarck=) 2: E683FA78277E11EE9D54C13AC4F9AE02.roa (hash: Q69Jd2CKv3N0hKhfT8WmhRK6BPn1TZKEbmyBCHn0IFQ=) 3: 04E274DA27CB11EE8FA6F46CC4F9AE02.roa (hash: 2FM7UhHr/ZDRqEiWatC8KOzWFvNSzp8ypiKcL8pILVY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.crl rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjNwqBpuUUYYrnypeV_dEQs1Djc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:57:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3368 (0xd28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6CB6, serialNumber=523370A81A6E514618AE7CA9795FDD110B350E37 Validity Not Before: Mar 24 17:57:38 2026 GMT Not After : Mar 31 17:57:38 2026 GMT Subject: CN=69c2d092-2cc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:92:2a:bf:ee:eb:2c:64:3d:08:78:35:11:a8: f3:37:37:b0:c3:03:0b:87:fb:f0:9f:6a:88:a8:46: bb:8b:c4:b9:8d:75:31:ce:59:0a:49:97:bc:30:00: 7a:06:fe:e9:ef:83:f8:f2:11:3c:1f:83:38:5a:f3: ec:46:30:ae:e7:3e:d3:4a:06:0e:c3:29:a4:b0:00: 7b:51:73:c1:7d:45:80:73:90:eb:06:d9:84:d5:06: d6:e6:77:7b:e4:95:fd:b6:83:9e:06:2d:55:08:fe: ed:ac:92:3d:30:78:47:67:01:f0:56:f9:5a:d1:60: a5:b0:f3:1e:b1:ce:5d:0b:97:7f:59:a9:c6:69:f2: 3c:d0:3a:e2:6e:c0:ed:37:b6:cf:de:ac:17:51:a8: 9c:c6:c0:cd:c6:0d:23:fc:ee:02:23:19:2e:b3:02: 50:8d:34:1b:b5:73:ef:45:ab:3f:5a:8f:fc:3c:64: eb:94:05:e7:e6:04:ae:8e:56:63:ca:5d:3a:1f:fe: 67:11:9f:f3:3c:1e:c0:4a:da:d8:32:6a:e8:99:75: 69:0a:67:a9:26:04:e8:e3:b7:ac:20:bb:33:82:c2: f7:b9:15:c7:0d:b7:a5:41:7a:0c:99:29:30:1a:16: f0:b2:7e:be:f3:3e:87:45:ea:af:0b:cb:27:15:d1: 57:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:89:47:42:02:C6:D1:3A:80:2D:91:2E:58:56:73:51:41:1A:F7:68 X509v3 Authority Key Identifier: keyid:52:33:70:A8:1A:6E:51:46:18:AE:7C:A9:79:5F:DD:11:0B:35:0E:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjNwqBpuUUYYrnypeV_dEQs1Djc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6CB6/2A4F575EFE1411E981C26559C4F9AE02/UjNwqBpuUUYYrnypeV_dEQs1Djc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:70:4c:b0:db:4e:ab:21:92:e8:bf:d1:02:85:29:7e:06:97: cd:40:38:09:0e:b2:06:ca:d0:e5:a3:3d:26:0c:89:82:83:49: 6c:33:c9:09:25:b5:02:85:f6:f3:d5:d4:d0:0d:f7:eb:50:0d: 22:15:2f:ce:b9:24:de:ea:54:f7:ee:35:57:61:84:3d:a5:21: 24:77:a2:fd:8b:60:da:ed:63:e6:ca:86:cd:22:d7:4d:f8:50: a7:a9:18:dd:e5:42:a6:73:e6:05:2f:76:38:ef:c2:73:9e:40: 5b:66:79:83:57:14:0b:71:82:4e:66:3c:20:7f:3d:16:39:94: c9:1b:04:0e:70:29:06:22:c6:8b:33:5b:21:66:fe:75:31:68: 72:b6:3c:87:1c:12:fb:76:80:5e:db:a9:0f:d7:80:cc:9b:c5: 3b:2c:c8:ab:89:50:a5:4d:14:bc:c6:e7:4f:d5:87:a2:53:52: 3b:f8:be:bc:ce:30:66:09:f0:70:35:2f:80:48:44:08:21:03: 77:98:4e:64:68:45:9a:f4:ee:62:bf:61:f1:fb:ad:77:a7:fa: 41:10:5e:ad:75:69:0d:16:f9:41:3d:44:26:38:76:2d:72:30: 69:c4:70:56:56:6c:e0:ae:b5:91:85:4b:ea:aa:92:46:d0:9e: 55:61:32:e3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDSgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZDQjYxMTAvBgNVBAUTKDUyMzM3MEE4MUE2RTUxNDYxOEFFN0NBOTc5NUZERDEx MEIzNTBFMzcwHhcNMjYwMzI0MTc1NzM4WhcNMjYwMzMxMTc1NzM4WjAYMRYwFAYD VQQDEw02OWMyZDA5Mi0yY2M5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp5Iqv+7rLGQ9CHg1EajzNzewwwMLh/vwn2qIqEa7i8S5jXUxzlkKSZe8MAB6 Bv7p74P48hE8H4M4WvPsRjCu5z7TSgYOwymksAB7UXPBfUWAc5DrBtmE1QbW5nd7 5JX9toOeBi1VCP7trJI9MHhHZwHwVvla0WClsPMesc5dC5d/WanGafI80DribsDt N7bP3qwXUaicxsDNxg0j/O4CIxkuswJQjTQbtXPvRas/Wo/8PGTrlAXn5gSujlZj yl06H/5nEZ/zPB7AStrYMmromXVpCmepJgTo47esILszgsL3uRXHDbelQXoMmSkw Ghbwsn6+8z6HReqvC8snFdFXZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE6JR0IC xtE6gC2RLlhWc1FBGvdoMB8GA1UdIwQYMBaAFFIzcKgablFGGK58qXlf3RELNQ43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkNCNi8yQTRGNTc1RUZF MTQxMUU5ODFDMjY1NTlDNEY5QUUwMi9Vak53cUJwdVVVWVlybnlwZVZfZEVRczFE amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VqTndxQnB1VVVZWXJueXBlVl9kRVFzMURqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkNCNi8yQTRGNTc1RUZFMTQxMUU5ODFDMjY1NTlDNEY5QUUwMi9Vak53cUJwdVVV WVlybnlwZVZfZEVRczFEamMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADHBMsNtOqyGS6L/RAoUpfgaXzUA4CQ6yBsrQ5aM9JgyJgoNJbDPJCSW1AoX2 89XU0A3361ANIhUvzrkk3upU9+41V2GEPaUhJHei/Ytg2u1j5sqGzSLXTfhQp6kY 3eVCpnPmBS92OO/Cc55AW2Z5g1cUC3GCTmY8IH89FjmUyRsEDnApBiLGizNbIWb+ dTFocrY8hxwS+3aAXtupD9eAzJvFOyzIq4lQpU0UvMbnT9WHolNSO/i+vM4wZgnw cDUvgEhECCEDd5hOZGhFmvTuYr9h8futd6f6QRBerXVpDRb5QT1EJjh2LXIwacRw VlZs4K61kYVL6qqSRtCeVWEy4w== -----END CERTIFICATE-----Generated at Thu Mar 26 00:54:35 2026 by rpki-client