$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft File: uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft (raw, json) Hash identifier: 51RsfkuUDgKyW+MxRQ7M2tPhfvdBcJBd17uiMpfs/G0= Subject key identifier: A6:8A:38:D9:0C:9F:B3:EF:C9:8A:1B:0D:29:6E:E7:23:AF:E9:40:E7 Authority key identifier: B9:25:0F:DE:3F:AB:D5:9F:A5:60:82:30:FE:A7:A2:3C:4B:4C:89:68 Certificate issuer: /CN=A91FA851/serialNumber=B9250FDE3FABD59FA5608230FEA7A23C4B4C8968 Certificate serial: 01A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft Manifest number: 019C Signing time: Wed 25 Mar 2026 03:35:06 +0000 Manifest this update: Wed 25 Mar 2026 03:35:06 +0000 Manifest next update: Wed 01 Apr 2026 03:35:06 +0000 Files and hashes: 1: uSUP3j-r1Z-lYIIw_qeiPEtMiWg.crl (hash: tra76gyn0xv+iq3HU8GZOQh6T1RrEngDktVoz0uymE4=) 2: 8FD49B16BAE411EE9198A471C4F9AE02.roa (hash: 0ESXESaf1Km8hU3mbKXTS2edVIPzUkaWWbUdYQNfwzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.crl rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:35:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 418 (0x1a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA851, serialNumber=B9250FDE3FABD59FA5608230FEA7A23C4B4C8968 Validity Not Before: Mar 25 03:35:06 2026 GMT Not After : Apr 1 03:35:06 2026 GMT Subject: CN=69c357ea-d914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c5:34:df:df:a1:2a:97:4c:6d:47:64:20:de: 04:cf:78:89:d7:61:68:0d:1f:db:28:52:58:8f:14: 2c:dc:8a:ec:95:55:bb:cf:3a:df:f0:5d:57:92:b5: a7:2b:2e:52:49:2a:9e:c8:89:b9:f5:9d:8b:cb:ea: b4:4f:b4:91:1c:3f:c5:1f:b0:92:ef:2a:07:65:fc: 02:83:87:89:76:60:b4:3b:b1:46:0f:79:0c:d6:28: 1c:d0:8b:1d:e9:a2:89:66:8f:2d:8d:b4:23:22:bc: e0:dd:a4:8a:a3:77:5d:1e:23:a6:a0:65:9e:66:9f: 41:3c:e2:cf:e2:1b:b8:33:86:49:22:52:23:2d:37: de:ff:18:7f:bb:1f:6d:0c:18:5e:bf:fd:29:80:7f: a0:12:09:48:9f:f6:1f:43:60:d6:3e:4c:1f:30:31: 2e:47:d4:e7:43:3d:aa:55:cb:db:15:b2:41:08:d5: 5c:0c:bf:86:23:c4:00:ef:a6:9b:78:8b:8a:d1:a9: eb:69:cc:8a:e1:9b:d5:7c:75:ed:37:50:9c:d5:66: 21:0b:26:33:c1:8a:89:50:cf:d7:e7:c8:2f:c5:85: ce:ab:97:95:c6:77:49:46:69:69:4e:84:53:e7:3a: f0:13:e9:67:05:2a:78:12:e4:69:4c:b7:09:31:fe: c6:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:8A:38:D9:0C:9F:B3:EF:C9:8A:1B:0D:29:6E:E7:23:AF:E9:40:E7 X509v3 Authority Key Identifier: keyid:B9:25:0F:DE:3F:AB:D5:9F:A5:60:82:30:FE:A7:A2:3C:4B:4C:89:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:06:79:fb:a7:66:38:ac:43:71:13:18:56:80:83:83:7e:30: f5:56:54:1b:dc:26:61:cf:da:46:df:c9:bf:51:49:b9:75:7a: 78:38:df:6d:fb:be:15:33:76:c6:16:dc:1b:8a:2a:6d:e9:2c: 2e:2a:07:9c:d5:b2:22:cd:ec:ae:ff:82:e9:fe:51:c4:fb:0a: dd:3a:9a:ea:cb:78:10:75:14:7f:5c:37:74:86:0b:20:af:ac: fe:52:33:dc:2f:69:98:7b:cf:82:2f:3b:8c:ee:6d:a7:04:e1: 09:05:52:44:16:75:8d:f8:af:20:2f:b4:fb:30:62:e0:a2:b8: ee:1e:51:1d:f9:49:3c:5d:bd:ea:f1:a1:b0:4a:12:8a:df:65: a3:bd:29:2e:b3:55:da:00:fd:f5:db:d4:79:8c:2d:94:d0:7d: 20:d0:64:32:3e:f0:db:14:7f:95:31:2d:1f:01:f3:b8:14:3b: bb:d7:1a:cf:12:de:0e:31:b9:90:04:3f:d3:24:ca:4c:93:ac: 6f:4e:de:a1:38:5c:a4:74:30:6e:79:2e:46:cd:f8:ff:11:1e: fa:2a:6f:38:af:1a:27:29:15:68:47:c3:53:f2:a5:f9:01:43: 3c:2f:33:ad:88:5f:26:4a:1e:45:9c:39:86:94:19:e3:6e:ed: c0:e4:ca:2b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE4NTExMTAvBgNVBAUTKEI5MjUwRkRFM0ZBQkQ1OUZBNTYwODIzMEZFQTdBMjND NEI0Qzg5NjgwHhcNMjYwMzI1MDMzNTA2WhcNMjYwNDAxMDMzNTA2WjAYMRYwFAYD VQQDEw02OWMzNTdlYS1kOTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAosU039+hKpdMbUdkIN4Ez3iJ12FoDR/bKFJYjxQs3IrslVW7zzrf8F1XkrWn Ky5SSSqeyIm59Z2Ly+q0T7SRHD/FH7CS7yoHZfwCg4eJdmC0O7FGD3kM1igc0Isd 6aKJZo8tjbQjIrzg3aSKo3ddHiOmoGWeZp9BPOLP4hu4M4ZJIlIjLTfe/xh/ux9t DBhev/0pgH+gEglIn/YfQ2DWPkwfMDEuR9TnQz2qVcvbFbJBCNVcDL+GI8QA76ab eIuK0anracyK4ZvVfHXtN1Cc1WYhCyYzwYqJUM/X58gvxYXOq5eVxndJRmlpToRT 5zrwE+lnBSp4EuRpTLcJMf7GmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKaKONkM n7PvyYobDSlu5yOv6UDnMB8GA1UdIwQYMBaAFLklD94/q9WfpWCCMP6nojxLTIlo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTg1MS85NUE2MTE5Q0I5 REYxMUVFOTRCNDI0MkFDNEY5QUUwMi91U1VQM2otcjFaLWxZSUl3X3FlaVBFdE1p V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VTVVAzai1yMVotbFlJSXdfcWVpUEV0TWlXZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTg1MS85NUE2MTE5Q0I5REYxMUVFOTRCNDI0MkFDNEY5QUUwMi91U1VQM2otcjFa LWxZSUl3X3FlaVBFdE1pV2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdwZ5+6dmOKxDcRMYVoCDg34w9VZUG9wmYc/aRt/Jv1FJuXV6eDjfbfu+FTN2 xhbcG4oqbeksLioHnNWyIs3srv+C6f5RxPsK3Tqa6st4EHUUf1w3dIYLIK+s/lIz 3C9pmHvPgi87jO5tpwThCQVSRBZ1jfivIC+0+zBi4KK47h5RHflJPF296vGhsEoS it9lo70pLrNV2gD99dvUeYwtlNB9INBkMj7w2xR/lTEtHwHzuBQ7u9cazxLeDjG5 kAQ/0yTKTJOsb07eoThcpHQwbnkuRs34/xEe+ipvOK8aJykVaEfDU/Kl+QFDPC8z rYhfJkoeRZw5hpQZ427twOTKKw== -----END CERTIFICATE-----Generated at Thu Mar 26 14:33:43 2026 by rpki-client