$ rpki-client -vvf rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft File: u3-5V71tGEoIkjFpTPg4nbaI_lM.mft (raw, json) Hash identifier: fWk1rFtCk92gEoSDr/SimlVieOnBE747FJJSrzFU13w= Subject key identifier: 9A:D8:62:4D:51:99:7A:29:FA:44:6F:6E:DC:25:E1:31:22:2C:F8:99 Authority key identifier: BB:7F:B9:57:BD:6D:18:4A:08:92:31:69:4C:F8:38:9D:B6:88:FE:53 Certificate issuer: /CN=A91F39A9/serialNumber=BB7FB957BD6D184A089231694CF8389DB688FE53 Certificate serial: 04F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3-5V71tGEoIkjFpTPg4nbaI_lM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft Manifest number: 04EC Signing time: Tue 24 Mar 2026 23:25:56 +0000 Manifest this update: Tue 24 Mar 2026 23:25:55 +0000 Manifest next update: Tue 31 Mar 2026 23:25:55 +0000 Files and hashes: 1: u3-5V71tGEoIkjFpTPg4nbaI_lM.crl (hash: X8aqD7Sx8zr10CcNweCL/u13KyKBlKw1JMgwvpdCMjo=) 2: 12702794577711ECB7FD0C6FC4F9AE02.roa (hash: E1ZhKxPEzQQ/QbldcIhGwEwKe1KS8Rg1yFxMH77UIsk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.crl rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3-5V71tGEoIkjFpTPg4nbaI_lM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:25:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1268 (0x4f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F39A9, serialNumber=BB7FB957BD6D184A089231694CF8389DB688FE53 Validity Not Before: Mar 24 23:25:55 2026 GMT Not After : Mar 31 23:25:55 2026 GMT Subject: CN=69c31d84-d5f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9b:b6:9f:0a:96:ff:e1:99:1c:ab:8b:a8:62: f6:d0:d4:bd:7b:a8:81:b0:0a:60:29:b9:1b:d6:c9: 39:6c:8f:82:81:6e:d8:ef:53:95:fe:9e:b6:dc:dc: 54:e6:e5:00:e5:38:1b:78:d8:ae:7a:8b:17:a7:22: 5f:af:f5:ce:97:e9:2f:c1:bc:2c:da:b7:db:d3:df: b7:ab:82:93:39:5b:dd:c6:bb:cd:69:ea:97:27:be: 5f:2e:a2:d7:8d:e7:bd:13:00:d3:55:3d:5c:8b:6e: cb:05:3c:06:19:68:2c:39:e3:bf:e3:de:0a:fb:6d: de:b4:fa:43:8c:3b:4c:c2:72:e0:56:19:66:e8:52: b6:1b:1d:e2:d0:51:8f:41:3e:1a:f6:17:9d:c9:f5: 15:9f:7a:a4:89:91:d5:00:ad:a2:32:72:ef:3f:e8: ad:37:0c:f1:96:b9:ca:8a:80:d7:fa:4d:5d:54:92: c3:5b:9d:4d:9e:40:21:ad:f1:16:6f:f3:03:a1:5a: ea:1f:ce:b1:7e:73:54:ad:7e:9b:16:99:a9:7d:7c: c3:43:d5:32:97:c9:13:ce:44:12:9a:24:f6:44:e0: c0:88:00:96:9e:34:f6:b8:7f:b3:87:f9:e6:ec:25: 61:06:84:9a:25:af:cb:17:b8:87:d3:15:8c:42:de: 7d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:D8:62:4D:51:99:7A:29:FA:44:6F:6E:DC:25:E1:31:22:2C:F8:99 X509v3 Authority Key Identifier: keyid:BB:7F:B9:57:BD:6D:18:4A:08:92:31:69:4C:F8:38:9D:B6:88:FE:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3-5V71tGEoIkjFpTPg4nbaI_lM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:1f:61:1d:c7:0e:c2:6f:a8:59:6e:b0:ee:f9:2c:c3:05:a4: 8b:b6:86:87:62:53:01:06:3f:56:88:c9:35:b5:3f:37:c7:9e: 39:c8:27:33:ea:ec:18:96:e4:c8:8a:af:95:5e:1e:a1:73:c5: 42:7d:5d:f1:88:8f:f6:67:1f:a4:90:7d:46:fe:80:85:08:96: 79:54:ba:d7:7d:0a:1d:aa:3d:71:8a:9f:f4:f2:bc:78:8b:c7: 21:38:dd:72:78:ed:c6:ea:9c:6a:36:8e:d9:67:d6:5d:e7:2c: 46:71:cf:78:31:b2:f3:22:f4:af:b3:11:b5:f7:41:bc:55:4e: 95:66:e0:8b:1b:bd:6f:49:df:46:e4:81:6b:78:ba:63:9c:9f: cd:22:2a:03:86:ae:fa:cf:55:fa:25:87:c5:ab:ff:52:46:df: f9:c7:44:1a:db:12:fd:f3:74:75:66:2e:22:16:bd:8f:02:79: 7d:75:d3:39:72:4d:61:40:f5:3c:cc:3a:83:09:93:e8:ef:3a: 66:ba:8b:47:4f:00:5a:1f:01:c7:4b:b5:ad:6e:06:d6:d0:57: f5:06:02:86:28:90:32:db:00:ff:19:61:2d:1f:20:69:51:74: bc:a3:30:68:32:fc:c7:94:4a:38:29:72:52:b3:16:52:88:64: c6:ac:99:87 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM5QTkxMTAvBgNVBAUTKEJCN0ZCOTU3QkQ2RDE4NEEwODkyMzE2OTRDRjgzODlE QjY4OEZFNTMwHhcNMjYwMzI0MjMyNTU1WhcNMjYwMzMxMjMyNTU1WjAYMRYwFAYD VQQDEw02OWMzMWQ4NC1kNWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwZu2nwqW/+GZHKuLqGL20NS9e6iBsApgKbkb1sk5bI+CgW7Y71OV/p623NxU 5uUA5TgbeNiueosXpyJfr/XOl+kvwbws2rfb09+3q4KTOVvdxrvNaeqXJ75fLqLX jee9EwDTVT1ci27LBTwGGWgsOeO/494K+23etPpDjDtMwnLgVhlm6FK2Gx3i0FGP QT4a9hedyfUVn3qkiZHVAK2iMnLvP+itNwzxlrnKioDX+k1dVJLDW51NnkAhrfEW b/MDoVrqH86xfnNUrX6bFpmpfXzDQ9Uyl8kTzkQSmiT2RODAiACWnjT2uH+zh/nm 7CVhBoSaJa/LF7iH0xWMQt593QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJrYYk1R mXop+kRvbtwl4TEiLPiZMB8GA1UdIwQYMBaAFLt/uVe9bRhKCJIxaUz4OJ22iP5T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzlBOS81MjU0ODZCODU2 NjIxMUVDQjhFQzczMzFDNEY5QUUwMi91My01VjcxdEdFb0lrakZwVFBnNG5iYUlf bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UzLTVWNzF0R0VvSWtqRnBUUGc0bmJhSV9sTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzlBOS81MjU0ODZCODU2NjIxMUVDQjhFQzczMzFDNEY5QUUwMi91My01VjcxdEdF b0lrakZwVFBnNG5iYUlfbE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACR9hHccOwm+oWW6w7vkswwWki7aGh2JTAQY/VojJNbU/N8eeOcgnM+rsGJbk yIqvlV4eoXPFQn1d8YiP9mcfpJB9Rv6AhQiWeVS6130KHao9cYqf9PK8eIvHITjd cnjtxuqcajaO2WfWXecsRnHPeDGy8yL0r7MRtfdBvFVOlWbgixu9b0nfRuSBa3i6 Y5yfzSIqA4au+s9V+iWHxav/Ukbf+cdEGtsS/fN0dWYuIha9jwJ5fXXTOXJNYUD1 PMw6gwmT6O86ZrqLR08AWh8Bx0u1rW4G1tBX9QYChiiQMtsA/xlhLR8gaVF0vKMw aDL8x5RKOClyUrMWUohkxqyZhw== -----END CERTIFICATE-----Generated at Thu Mar 26 02:33:26 2026 by rpki-client