$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft File: mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft (raw, json) Hash identifier: QtOgJnkwGWrxg2qg4eUgqR/4NaIY18cHI7SBK6QPOxI= Subject key identifier: 20:40:D0:6A:35:4D:C9:B2:EF:9B:26:30:87:48:09:13:2E:59:C1:6D Authority key identifier: 99:4D:9B:2D:97:CB:CC:B5:D5:24:4D:E0:A7:E5:39:74:1F:88:8A:23 Certificate issuer: /CN=A91E9EA9/serialNumber=994D9B2D97CBCCB5D5244DE0A7E539741F888A23 Certificate serial: 06D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft Manifest number: 06CE Signing time: Tue 24 Mar 2026 21:58:15 +0000 Manifest this update: Tue 24 Mar 2026 21:58:15 +0000 Manifest next update: Tue 31 Mar 2026 21:58:15 +0000 Files and hashes: 1: mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl (hash: +BsrC2gQi/MWmTMaNXg6MFrqH3FnIlEgOZLt9A20Rmc=) 2: 2CB68FE8943211F0B1116B74C4F9AE02.roa (hash: 3MyKsLacs+jSNFLg0g6siYMmeYjfiDOjgCzdQeB8N4A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:58:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1753 (0x6d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9EA9, serialNumber=994D9B2D97CBCCB5D5244DE0A7E539741F888A23 Validity Not Before: Mar 24 21:58:15 2026 GMT Not After : Mar 31 21:58:15 2026 GMT Subject: CN=69c308f7-79e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a0:11:6d:30:b5:d1:41:b3:60:8d:99:aa:c8: bc:01:ce:d0:4a:d5:96:c2:99:e4:d2:c9:fc:50:d3: 35:99:1f:3b:e7:0f:0f:b6:ff:dd:10:11:f3:46:3e: 06:7b:c6:23:da:8e:ff:34:7d:be:35:0c:da:27:61: 7e:f1:30:a5:37:46:0f:11:6c:cd:8c:2c:2f:85:35: c7:46:df:ee:75:af:44:4a:97:3e:ee:77:46:a7:3e: 40:77:d9:5f:bc:07:b1:26:f5:c0:5f:6a:bd:e7:c9: fa:f2:2f:89:4e:90:8d:02:72:96:45:a0:52:81:0d: a0:7f:5c:41:d3:e6:de:47:1d:32:89:25:e9:5f:03: 80:db:42:43:13:98:a8:b3:97:94:c5:94:b7:97:57: 1f:50:0d:e6:9b:bb:98:61:ec:57:82:33:0a:c8:56: 07:bc:5e:00:86:e9:b9:96:5d:3d:4e:bb:37:c0:05: 17:5a:b9:18:f3:52:c7:20:e5:de:d2:e0:48:6d:30: 9a:54:a3:d9:29:a0:7c:f7:7a:b5:5e:41:7c:50:a7: 9e:47:f9:d0:8e:ad:b2:68:3a:7d:8b:3d:32:56:c4: 68:6a:10:e5:b7:c0:6b:8c:e7:13:d6:dd:9c:da:35: 6b:8b:c0:ed:71:2d:0f:57:3c:22:e3:0e:91:eb:8c: 9d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:40:D0:6A:35:4D:C9:B2:EF:9B:26:30:87:48:09:13:2E:59:C1:6D X509v3 Authority Key Identifier: keyid:99:4D:9B:2D:97:CB:CC:B5:D5:24:4D:E0:A7:E5:39:74:1F:88:8A:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:b6:fa:f7:42:4a:ab:24:9a:a6:89:ab:56:55:ad:1a:8c:ca: 34:bf:74:bf:bf:20:90:b1:55:93:b2:d9:da:85:11:a7:05:64: 80:26:80:2b:d9:b1:d0:39:fd:fa:36:51:cf:a4:32:01:27:e6: 3d:ff:2f:f6:bb:3a:a7:80:9b:54:b2:91:a3:81:6d:76:77:d3: 09:36:34:ae:44:e7:a8:28:44:e8:cc:07:44:4a:88:b8:62:95: d7:0b:fc:33:b8:18:9a:0c:85:8d:2d:5e:6a:c6:b4:31:01:c7: 13:71:16:2d:a1:84:88:9d:26:a3:d5:9a:10:bf:e2:70:13:ad: c2:06:e1:ff:17:9a:94:3a:51:f0:87:d3:b9:74:ed:47:7b:2e: bb:40:db:27:cd:9f:b7:03:31:bf:30:f6:e5:9e:8f:2b:10:f1: 8c:42:b3:96:aa:d5:f7:7f:35:69:48:5c:42:5c:fb:1c:d7:59: 35:80:ea:05:a0:a4:b7:c8:cc:ae:76:e5:c6:d6:e7:eb:94:00: 19:8e:fa:e9:4e:b1:27:57:c6:8a:30:9d:3d:e6:e8:74:39:ca: af:44:52:f8:71:8b:bc:45:7c:c1:2a:a3:93:bc:fa:e6:b1:47: 6f:5e:cd:1f:0c:2d:1d:53:a8:a1:6f:13:f3:8a:34:8e:8e:c0: ba:40:d1:94 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlFQTkxMTAvBgNVBAUTKDk5NEQ5QjJEOTdDQkNDQjVENTI0NERFMEE3RTUzOTc0 MUY4ODhBMjMwHhcNMjYwMzI0MjE1ODE1WhcNMjYwMzMxMjE1ODE1WjAYMRYwFAYD VQQDEw02OWMzMDhmNy03OWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsaARbTC10UGzYI2Zqsi8Ac7QStWWwpnk0sn8UNM1mR875w8Ptv/dEBHzRj4G e8Yj2o7/NH2+NQzaJ2F+8TClN0YPEWzNjCwvhTXHRt/uda9ESpc+7ndGpz5Ad9lf vAexJvXAX2q958n68i+JTpCNAnKWRaBSgQ2gf1xB0+beRx0yiSXpXwOA20JDE5io s5eUxZS3l1cfUA3mm7uYYexXgjMKyFYHvF4Ahum5ll09Trs3wAUXWrkY81LHIOXe 0uBIbTCaVKPZKaB893q1XkF8UKeeR/nQjq2yaDp9iz0yVsRoahDlt8BrjOcT1t2c 2jVri8DtcS0PVzwi4w6R64ydjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCBA0Go1 Tcmy75smMIdICRMuWcFtMB8GA1UdIwQYMBaAFJlNmy2Xy8y11SRN4KflOXQfiIoj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUVBOS9FNjQ2QkYxRTk2 ODAxMUVCQUE2NEZBNTZDNEY5QUUwMi9tVTJiTFpmTHpMWFZKRTNncC1VNWRCLUlp aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21VMmJMWmZMekxYVkpFM2dwLVU1ZEItSWlpTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUVBOS9FNjQ2QkYxRTk2ODAxMUVCQUE2NEZBNTZDNEY5QUUwMi9tVTJiTFpmTHpM WFZKRTNncC1VNWRCLUlpaU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZbb690JKqySapomrVlWtGozKNL90v78gkLFVk7LZ2oURpwVkgCaAK9mx0Dn9 +jZRz6QyASfmPf8v9rs6p4CbVLKRo4FtdnfTCTY0rkTnqChE6MwHREqIuGKV1wv8 M7gYmgyFjS1easa0MQHHE3EWLaGEiJ0mo9WaEL/icBOtwgbh/xealDpR8IfTuXTt R3suu0DbJ82ftwMxvzD25Z6PKxDxjEKzlqrV9381aUhcQlz7HNdZNYDqBaCkt8jM rnblxtbn65QAGY766U6xJ1fGijCdPebodDnKr0RS+HGLvEV8wSqjk7z65rFHb17N HwwtHVOooW8T84o0jo7AukDRlA== -----END CERTIFICATE-----Generated at Thu Mar 26 08:54:18 2026 by rpki-client