$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.mft File: rUMyA4JywtsyFd2jrfsBU1QVaRM.mft (raw, json) Hash identifier: gH15pfTbNjgo8NvK+JuHoIk5CiTZxfKaCsQCqtG5Sos= Subject key identifier: F1:5E:A5:30:91:9A:6C:41:E6:D1:37:C4:32:DA:62:07:60:F2:1A:37 Authority key identifier: AD:43:32:03:82:72:C2:DB:32:15:DD:A3:AD:FB:01:53:54:15:69:13 Certificate issuer: /CN=A91CF064/serialNumber=AD4332038272C2DB3215DDA3ADFB015354156913 Certificate serial: 0149 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rUMyA4JywtsyFd2jrfsBU1QVaRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.mft Manifest number: 0142 Signing time: Wed 25 Mar 2026 04:34:31 +0000 Manifest this update: Wed 25 Mar 2026 04:34:31 +0000 Manifest next update: Wed 01 Apr 2026 04:34:31 +0000 Files and hashes: 1: rUMyA4JywtsyFd2jrfsBU1QVaRM.crl (hash: jHLpT4qjwCSn11fttaH1K2q5YO8Vra60/ftwsnLGbeo=) 2: F74324B0464511EFA4CCFA6DC4F9AE02.roa (hash: v94QlaW9ykb22h9/dU1Akauxi32ibsxNe0TAunHo/kA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.crl rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rUMyA4JywtsyFd2jrfsBU1QVaRM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:34:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 329 (0x149) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF064, serialNumber=AD4332038272C2DB3215DDA3ADFB015354156913 Validity Not Before: Mar 25 04:34:31 2026 GMT Not After : Apr 1 04:34:31 2026 GMT Subject: CN=69c365d7-8832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f7:85:99:81:7a:52:b9:52:6c:23:54:db:83: 80:d2:45:19:fc:de:5d:09:bc:86:14:56:db:aa:45: df:87:3e:5c:0d:36:27:6a:87:ba:99:5c:32:38:93: b1:87:75:83:3f:9e:b6:5c:d7:c5:d6:e5:a4:68:46: a6:0b:c6:78:54:08:f2:e3:33:b4:2f:c0:4e:4c:81: f2:a0:16:ee:04:c8:03:3a:c4:a2:a4:37:8e:65:f8: de:a8:9e:88:a0:44:2c:a1:28:ea:da:85:29:eb:23: d8:f8:5b:0b:07:a1:29:2c:49:1d:e2:54:4a:53:3c: 0d:87:39:02:bf:e9:19:6a:34:19:07:52:3d:e6:53: 5d:ff:de:d6:a7:9d:7f:d5:09:77:56:7a:f8:3a:17: 36:5e:d9:ae:cc:58:3a:f4:47:0d:a0:fc:db:1a:37: 57:cd:ec:68:62:cd:ed:b0:bc:af:86:20:df:20:35: 28:0e:01:c3:de:1d:e3:dc:b0:97:a8:2b:21:24:59: 36:84:db:e0:e6:63:61:e5:c6:a4:d8:4a:79:9d:1e: 92:ce:31:92:7d:54:06:65:c2:ae:b7:19:98:0a:be: 8f:62:90:6d:ca:be:c3:e4:a8:d1:67:a4:e3:be:a2: 9b:e4:3f:b9:49:e0:b6:b2:22:3f:4b:ea:c1:af:1f: c0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:5E:A5:30:91:9A:6C:41:E6:D1:37:C4:32:DA:62:07:60:F2:1A:37 X509v3 Authority Key Identifier: keyid:AD:43:32:03:82:72:C2:DB:32:15:DD:A3:AD:FB:01:53:54:15:69:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rUMyA4JywtsyFd2jrfsBU1QVaRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:86:6f:c6:4a:f3:41:b6:c2:8b:9b:31:95:c7:bd:63:01:95: ad:3b:b4:fd:44:9f:ba:61:62:cd:d7:28:c8:d6:65:42:58:c4: 21:e6:e6:42:1f:26:38:9c:5d:b6:b6:da:64:7c:94:be:e2:c7: 80:a3:b7:56:48:9f:b1:92:f5:00:44:03:56:18:a4:b6:99:77: 94:44:f9:c6:d6:8a:99:05:86:69:95:b7:11:af:2d:61:d5:6a: 35:d2:87:27:aa:bd:ff:d2:3b:d3:34:ff:81:bd:56:44:c8:d4: 99:91:50:40:9a:d0:21:73:ce:39:f7:5d:d8:ae:cb:68:08:40: ce:a1:18:97:44:a7:ec:64:85:97:d9:30:c4:f3:27:ce:22:77: 98:95:de:9b:75:a6:16:44:be:ee:69:ee:1b:1d:3d:7c:fd:aa: 7f:62:50:ad:e9:e5:d2:5e:f4:85:90:7b:3f:48:1c:22:2e:bc: cc:b0:7c:40:91:7b:79:6b:72:45:56:b2:38:ed:0b:16:c1:75: bd:43:5d:5a:41:3c:f1:71:4e:56:8e:7c:7e:f3:dc:e6:9a:6f: 6b:d6:ce:27:d8:28:ed:04:fe:e9:11:19:3c:f7:3a:07:da:15: 18:e5:f6:00:9a:dd:1f:0b:b5:70:aa:02:ab:69:74:48:42:62: f1:d4:02:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YwNjQxMTAvBgNVBAUTKEFENDMzMjAzODI3MkMyREIzMjE1RERBM0FERkIwMTUz NTQxNTY5MTMwHhcNMjYwMzI1MDQzNDMxWhcNMjYwNDAxMDQzNDMxWjAYMRYwFAYD VQQDEw02OWMzNjVkNy04ODMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4/eFmYF6UrlSbCNU24OA0kUZ/N5dCbyGFFbbqkXfhz5cDTYnaoe6mVwyOJOx h3WDP562XNfF1uWkaEamC8Z4VAjy4zO0L8BOTIHyoBbuBMgDOsSipDeOZfjeqJ6I oEQsoSjq2oUp6yPY+FsLB6EpLEkd4lRKUzwNhzkCv+kZajQZB1I95lNd/97Wp51/ 1Ql3Vnr4Ohc2XtmuzFg69EcNoPzbGjdXzexoYs3tsLyvhiDfIDUoDgHD3h3j3LCX qCshJFk2hNvg5mNh5cak2Ep5nR6SzjGSfVQGZcKutxmYCr6PYpBtyr7D5KjRZ6Tj vqKb5D+5SeC2siI/S+rBrx/AQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPFepTCR mmxB5tE3xDLaYgdg8ho3MB8GA1UdIwQYMBaAFK1DMgOCcsLbMhXdo637AVNUFWkT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjA2NC9GM0NBNjE3MjQ0 RTIxMUVGQjEzRjIyMTRDNEY5QUUwMi9yVU15QTRKeXd0c3lGZDJqcmZzQlUxUVZh Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JVTXlBNEp5d3RzeUZkMmpyZnNCVTFRVmFSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjA2NC9GM0NBNjE3MjQ0RTIxMUVGQjEzRjIyMTRDNEY5QUUwMi9yVU15QTRKeXd0 c3lGZDJqcmZzQlUxUVZhUk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACoZvxkrzQbbCi5sxlce9YwGVrTu0/USfumFizdcoyNZlQljEIebmQh8mOJxd trbaZHyUvuLHgKO3VkifsZL1AEQDVhiktpl3lET5xtaKmQWGaZW3Ea8tYdVqNdKH J6q9/9I70zT/gb1WRMjUmZFQQJrQIXPOOfdd2K7LaAhAzqEYl0Sn7GSFl9kwxPMn ziJ3mJXem3WmFkS+7mnuGx09fP2qf2JQrenl0l70hZB7P0gcIi68zLB8QJF7eWty RVayOO0LFsF1vUNdWkE88XFOVo58fvPc5ppva9bOJ9go7QT+6REZPPc6B9oVGOX2 AJrdHwu1cKoCq2l0SEJi8dQCPg== -----END CERTIFICATE-----Generated at Thu Mar 26 17:21:25 2026 by rpki-client