$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.mft File: Ub6jYJQp2RscTkAi2mi9ZDwzw_s.mft (raw, json) Hash identifier: 3v/k2wYAosSRRCnaoeRBnQqSklkKtdzeVKlr4I5IZrQ= Subject key identifier: A9:93:F3:23:3F:46:E9:8B:59:2F:47:7D:EF:32:F6:96:72:EC:9F:CB Authority key identifier: 51:BE:A3:60:94:29:D9:1B:1C:4E:40:22:DA:68:BD:64:3C:33:C3:FB Certificate issuer: /CN=A91E9509/serialNumber=51BEA3609429D91B1C4E4022DA68BD643C33C3FB Certificate serial: 0287 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.mft Manifest number: 027D Signing time: Wed 25 Mar 2026 01:19:27 +0000 Manifest this update: Wed 25 Mar 2026 01:19:26 +0000 Manifest next update: Wed 01 Apr 2026 01:19:26 +0000 Files and hashes: 1: Ub6jYJQp2RscTkAi2mi9ZDwzw_s.crl (hash: +mJ1TGT4Z5F4oXKtJK3aP00N4ZMavmryyGods/YTcdw=) 2: F23AE0AE632D11ED8C102087C4F9AE02.roa (hash: r515GfkktRVsEjZ5VOujp3dI2GmJIY+xZnhY3UWMtM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.crl rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:19:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 647 (0x287) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9509, serialNumber=51BEA3609429D91B1C4E4022DA68BD643C33C3FB Validity Not Before: Mar 25 01:19:26 2026 GMT Not After : Apr 1 01:19:26 2026 GMT Subject: CN=69c3381f-e331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:bd:3f:0a:d3:3f:9b:0b:b4:29:ca:6e:ca:8d: 2b:72:19:be:7f:dc:1e:69:01:13:64:71:c0:8b:c6: 74:46:08:84:f9:31:e1:c3:d0:8d:16:aa:11:a9:d5: 78:72:31:b8:72:21:c4:80:33:dc:90:af:33:18:32: f1:33:83:8c:2c:7f:d0:2d:17:9b:37:e6:d4:03:8c: 36:fb:5f:87:a6:03:a1:04:e2:c5:59:ba:be:8b:57: 74:c1:27:b2:ea:d1:85:78:77:a1:98:85:2f:7c:9d: 34:88:63:7b:ec:6e:bb:f4:af:c0:36:61:69:b2:65: 53:f0:27:4c:ca:8f:b8:fa:80:cc:24:8c:59:34:05: d3:1b:c0:98:31:25:5a:2f:d7:05:e8:d0:5f:40:eb: 04:97:cb:ee:0f:d6:5e:03:e7:fc:4f:14:49:95:dd: 50:93:b4:0a:08:eb:ce:8d:11:cb:f0:10:63:e8:1b: 28:83:63:e3:a9:13:dd:c1:f0:7d:6c:be:58:8e:f1: 19:a7:46:5e:94:2e:ef:60:7d:d6:b7:40:d8:f7:d1: d8:0a:c8:4a:ba:3e:38:11:c3:8b:0c:a2:34:3a:0f: a9:a2:b0:15:c0:45:c5:3d:91:d1:df:19:3a:9f:16: fc:f9:40:b0:0f:e9:a0:82:1d:2d:53:a2:21:9c:b2: 1b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:93:F3:23:3F:46:E9:8B:59:2F:47:7D:EF:32:F6:96:72:EC:9F:CB X509v3 Authority Key Identifier: keyid:51:BE:A3:60:94:29:D9:1B:1C:4E:40:22:DA:68:BD:64:3C:33:C3:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:ff:a6:1e:da:48:4e:c3:0e:e0:3b:ec:e0:0f:7c:e1:da:d4: ac:e2:57:4d:0e:cd:17:58:47:f9:09:d7:c6:29:1c:7e:f7:c6: 7f:cf:78:3d:76:ae:63:63:ec:59:90:7f:9a:e2:ac:e8:e3:21: f6:a1:4d:d2:9c:56:f5:59:b6:3d:70:73:ec:c3:cd:69:b9:e5: cc:81:aa:43:c3:81:96:99:e8:fa:43:ea:f6:8b:b3:05:aa:48: 4c:44:24:eb:7a:c9:c1:2e:09:fc:28:a8:70:01:70:a4:aa:62: bb:d2:6c:65:9f:a3:39:f2:e7:6f:50:99:0e:8f:f3:c8:12:ae: 70:cc:c6:5e:84:b1:24:e5:be:97:59:43:ae:06:ba:f7:7c:97: f7:a9:ed:0a:0d:c0:d9:bc:95:02:1f:2f:20:b2:74:e3:9d:00: 5f:96:d7:0c:ba:f7:e4:4b:25:48:d7:79:ad:72:94:71:d3:ce: c4:b7:7d:12:47:97:46:d1:85:55:4c:8f:38:7c:8a:e7:e1:4e: 53:3c:c8:45:0b:4e:89:91:55:fc:88:70:05:fd:45:f8:6f:c6: 73:e0:c3:7f:c8:24:e5:79:b0:6b:57:48:ca:ef:fc:79:70:17: 25:8f:4d:cc:31:12:b5:61:7c:f9:6c:b7:ba:af:1c:13:c8:a1: 01:fc:ff:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk1MDkxMTAvBgNVBAUTKDUxQkVBMzYwOTQyOUQ5MUIxQzRFNDAyMkRBNjhCRDY0 M0MzM0MzRkIwHhcNMjYwMzI1MDExOTI2WhcNMjYwNDAxMDExOTI2WjAYMRYwFAYD VQQDEw02OWMzMzgxZi1lMzMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjr0/CtM/mwu0Kcpuyo0rchm+f9weaQETZHHAi8Z0RgiE+THhw9CNFqoRqdV4 cjG4ciHEgDPckK8zGDLxM4OMLH/QLRebN+bUA4w2+1+HpgOhBOLFWbq+i1d0wSey 6tGFeHehmIUvfJ00iGN77G679K/ANmFpsmVT8CdMyo+4+oDMJIxZNAXTG8CYMSVa L9cF6NBfQOsEl8vuD9ZeA+f8TxRJld1Qk7QKCOvOjRHL8BBj6Bsog2PjqRPdwfB9 bL5YjvEZp0ZelC7vYH3Wt0DY99HYCshKuj44EcOLDKI0Og+porAVwEXFPZHR3xk6 nxb8+UCwD+mggh0tU6IhnLIb8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKmT8yM/ RumLWS9Hfe8y9pZy7J/LMB8GA1UdIwQYMBaAFFG+o2CUKdkbHE5AItpovWQ8M8P7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTUwOS8yNzRFRDE1RTYw MUExMUVEQjc0MTZCNkNDNEY5QUUwMi9VYjZqWUpRcDJSc2NUa0FpMm1pOVpEd3p3 X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ViNmpZSlFwMlJzY1RrQWkybWk5WkR3endfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTUwOS8yNzRFRDE1RTYwMUExMUVEQjc0MTZCNkNDNEY5QUUwMi9VYjZqWUpRcDJS c2NUa0FpMm1pOVpEd3p3X3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA/+mHtpITsMO4Dvs4A984drUrOJXTQ7NF1hH+QnXxikcfvfGf894PXauY2Ps WZB/muKs6OMh9qFN0pxW9Vm2PXBz7MPNabnlzIGqQ8OBlpno+kPq9ouzBapITEQk 63rJwS4J/CiocAFwpKpiu9JsZZ+jOfLnb1CZDo/zyBKucMzGXoSxJOW+l1lDrga6 93yX96ntCg3A2byVAh8vILJ0450AX5bXDLr35EslSNd5rXKUcdPOxLd9EkeXRtGF VUyPOHyK5+FOUzzIRQtOiZFV/IhwBf1F+G/Gc+DDf8gk5Xmwa1dIyu/8eXAXJY9N zDEStWF8+Wy3uq8cE8ihAfz/Gw== -----END CERTIFICATE-----Generated at Thu Mar 26 02:43:53 2026 by rpki-client