$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.mft File: uXgEM1AwWT1tlle8RdvRFLEpHSg.mft (raw, json) Hash identifier: kY3nHvQNOI8enBGWEO0ngZd1iEwg/xAngYgVD2RLhwk= Subject key identifier: 54:16:5E:D2:19:96:41:26:D2:A2:15:62:E8:11:47:7E:C7:7E:85:76 Authority key identifier: B9:78:04:33:50:30:59:3D:6D:96:57:BC:45:DB:D1:14:B1:29:1D:28 Certificate issuer: /CN=A91E9310/serialNumber=B97804335030593D6D9657BC45DBD114B1291D28 Certificate serial: 0501 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXgEM1AwWT1tlle8RdvRFLEpHSg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.mft Manifest number: 04F3 Signing time: Thu 26 Mar 2026 23:31:27 +0000 Manifest this update: Thu 26 Mar 2026 23:31:27 +0000 Manifest next update: Thu 02 Apr 2026 23:31:27 +0000 Files and hashes: 1: uXgEM1AwWT1tlle8RdvRFLEpHSg.crl (hash: ww+3Fe0JdB0n4N4BKgsPSEPfExtFydvu/D49jgyMMs0=) 2: E985185E773D11F0B023A932C4F9AE02.roa (hash: cKsWDyjFPx2klIzShbX3cif8qcZohuUF2aGywpw3pTY=) 3: 785EB284773D11F0AB969921C4F9AE02.roa (hash: UY+luSh8qqHRaZPEfACesKw31O/0kf+TUsBSx9+pJiY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.crl rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXgEM1AwWT1tlle8RdvRFLEpHSg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 23:31:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1281 (0x501) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9310, serialNumber=B97804335030593D6D9657BC45DBD114B1291D28 Validity Not Before: Mar 26 23:31:27 2026 GMT Not After : Apr 2 23:31:27 2026 GMT Subject: CN=69c5c1cf-5332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9c:ad:68:bd:ac:36:1a:a3:59:d6:71:03:44: 74:de:92:8f:80:9d:2f:09:0f:9c:1e:df:de:20:dc: fb:7e:00:b8:da:37:9a:f9:af:e8:ac:78:a0:8e:34: 72:80:49:73:0e:57:8f:90:89:d6:27:22:80:4e:ed: 47:3b:7f:69:25:6c:45:95:8d:8b:e5:5c:f7:1d:f9: 19:83:20:db:60:f5:6f:dd:37:6e:cf:38:1f:63:13: 66:11:d6:01:df:80:9e:41:6b:da:c9:57:68:35:94: b3:84:46:e2:30:5e:af:7e:81:78:23:6a:13:63:e1: aa:80:1f:a5:74:82:23:bf:34:42:d2:b8:8d:f4:05: bc:56:c7:50:03:f1:29:27:8c:cf:1b:5a:dd:76:3e: 54:74:37:38:99:e6:3b:f1:5b:24:71:cd:01:94:20: a2:3b:9b:9a:25:ba:5c:97:e7:a8:e6:11:95:7f:3f: da:e5:7b:ed:46:9d:4f:8a:29:ae:9b:fb:db:8b:1d: 20:91:34:de:3d:ac:cb:0e:6c:83:71:e2:5a:58:8a: 0f:31:a8:3f:ba:f8:3b:40:72:ec:e8:14:cc:c6:58: aa:4d:e7:59:1a:b9:d2:be:e4:11:85:88:f5:e1:e5: f1:e0:85:89:e8:f8:bd:b9:26:53:c1:0a:3c:9c:b5: 1b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:16:5E:D2:19:96:41:26:D2:A2:15:62:E8:11:47:7E:C7:7E:85:76 X509v3 Authority Key Identifier: keyid:B9:78:04:33:50:30:59:3D:6D:96:57:BC:45:DB:D1:14:B1:29:1D:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXgEM1AwWT1tlle8RdvRFLEpHSg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:a5:ac:5e:08:36:0b:11:6d:22:5e:2f:2c:85:07:3b:bc:13: c1:76:cf:8c:da:59:f6:7b:4c:67:a5:f9:6f:16:6e:b5:12:d8: a3:94:4f:27:b6:02:5b:8d:f9:d2:21:66:5b:e6:77:c0:ad:67: 04:64:8e:0a:1e:90:6a:81:9b:8d:73:61:68:15:0f:4e:7d:fb: 2f:d4:8f:a0:a6:3d:d2:4a:67:59:5c:ce:db:8f:76:f1:3a:38: 66:59:70:e4:fa:33:dc:20:e6:b9:d4:1b:4d:34:f1:4f:df:d1: e4:18:a4:84:7b:a3:bb:2e:4b:d3:1d:6f:60:76:e5:2e:d6:db: c8:f4:c0:3d:da:9f:46:f8:c9:53:55:71:d3:36:64:a2:bb:63: 09:b5:41:f8:67:b9:ea:1f:d9:80:f7:da:72:4f:0d:7e:45:d6: 16:4a:17:52:00:05:51:24:76:a5:5d:66:e9:2e:e8:c2:9a:06: c5:1b:1d:ca:0e:9b:91:85:ec:98:c0:6b:18:c2:e5:4b:06:5c: 48:31:0b:b7:58:eb:63:63:0a:61:74:fe:b8:e6:b1:7e:f2:9e: 66:d5:d4:5d:f6:bf:37:38:fb:de:5f:45:a1:3b:6d:cb:d8:e0: 90:c6:a6:89:95:d1:38:9a:0d:fd:5d:e4:ac:ca:0e:f1:7f:0a: b8:4f:f6:bb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkzMTAxMTAvBgNVBAUTKEI5NzgwNDMzNTAzMDU5M0Q2RDk2NTdCQzQ1REJEMTE0 QjEyOTFEMjgwHhcNMjYwMzI2MjMzMTI3WhcNMjYwNDAyMjMzMTI3WjAYMRYwFAYD VQQDEw02OWM1YzFjZi01MzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqJytaL2sNhqjWdZxA0R03pKPgJ0vCQ+cHt/eINz7fgC42jea+a/orHigjjRy gElzDlePkInWJyKATu1HO39pJWxFlY2L5Vz3HfkZgyDbYPVv3TduzzgfYxNmEdYB 34CeQWvayVdoNZSzhEbiMF6vfoF4I2oTY+GqgB+ldIIjvzRC0riN9AW8VsdQA/Ep J4zPG1rddj5UdDc4meY78Vskcc0BlCCiO5uaJbpcl+eo5hGVfz/a5XvtRp1Piimu m/vbix0gkTTePazLDmyDceJaWIoPMag/uvg7QHLs6BTMxliqTedZGrnSvuQRhYj1 4eXx4IWJ6Pi9uSZTwQo8nLUb8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFQWXtIZ lkEm0qIVYugRR37HfoV2MB8GA1UdIwQYMBaAFLl4BDNQMFk9bZZXvEXb0RSxKR0o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTMxMC9EMUIxRDM0NDU0 NjMxMUVDQThGQTQ5NkFDNEY5QUUwMi91WGdFTTFBd1dUMXRsbGU4UmR2UkZMRXBI U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VYZ0VNMUF3V1QxdGxsZThSZHZSRkxFcEhTZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTMxMC9EMUIxRDM0NDU0NjMxMUVDQThGQTQ5NkFDNEY5QUUwMi91WGdFTTFBd1dU MXRsbGU4UmR2UkZMRXBIU2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFKWsXgg2CxFtIl4vLIUHO7wTwXbPjNpZ9ntMZ6X5bxZutRLYo5RPJ7YCW435 0iFmW+Z3wK1nBGSOCh6QaoGbjXNhaBUPTn37L9SPoKY90kpnWVzO24928To4Zllw 5Poz3CDmudQbTTTxT9/R5BikhHujuy5L0x1vYHblLtbbyPTAPdqfRvjJU1Vx0zZk ortjCbVB+Ge56h/ZgPfack8NfkXWFkoXUgAFUSR2pV1m6S7owpoGxRsdyg6bkYXs mMBrGMLlSwZcSDELt1jrY2MKYXT+uOaxfvKeZtXUXfa/Nzj73l9FoTtty9jgkMam iZXROJoN/V3krMoO8X8KuE/2uw== -----END CERTIFICATE-----Generated at Sat Mar 28 10:35:35 2026 by rpki-client