$ rpki-client -vvf rpki.apnic.net/member_repository/A91352D1/DDF4226CC04111F0BC256F15C4F9AE02/2UVIdZZlg2gUctzDnfIkqtSon6o.mft File: 2UVIdZZlg2gUctzDnfIkqtSon6o.mft (raw, json) Hash identifier: DlwMYPLvC33873ZXXt0BuqxakyaImNknv/htjk5XpVs= Subject key identifier: 78:6E:3B:A3:61:F3:69:CB:0E:E0:68:11:A7:0F:6F:85:3A:49:9A:42 Authority key identifier: D9:45:48:75:96:65:83:68:14:72:DC:C3:9D:F2:24:AA:D4:A8:9F:AA Certificate issuer: /CN=A91352D1/serialNumber=D9454875966583681472DCC39DF224AAD4A89FAA Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UVIdZZlg2gUctzDnfIkqtSon6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91352D1/DDF4226CC04111F0BC256F15C4F9AE02/2UVIdZZlg2gUctzDnfIkqtSon6o.mft Manifest number: 3E Signing time: Tue 03 Mar 2026 08:07:22 +0000 Manifest this update: Tue 03 Mar 2026 08:07:22 +0000 Manifest next update: Tue 10 Mar 2026 08:07:22 +0000 Files and hashes: 1: 2UVIdZZlg2gUctzDnfIkqtSon6o.crl (hash: 5nMt3MZIJOhba62mI6hf3Xw4N50HrVaEoOvwQKPugHE=) 2: 63AFC09EC10C11F08F1AFF7FC4F9AE02.roa (hash: qoQvhlZYfW1wf6kMzBPQtPbBr/Oim0Lh0bB1O4IEF6Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91352D1/DDF4226CC04111F0BC256F15C4F9AE02/2UVIdZZlg2gUctzDnfIkqtSon6o.crl rsync://rpki.apnic.net/member_repository/A91352D1/DDF4226CC04111F0BC256F15C4F9AE02/2UVIdZZlg2gUctzDnfIkqtSon6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UVIdZZlg2gUctzDnfIkqtSon6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 08:07:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91352D1, serialNumber=D9454875966583681472DCC39DF224AAD4A89FAA Validity Not Before: Mar 3 08:07:22 2026 GMT Not After : Mar 10 08:07:22 2026 GMT Subject: CN=69a696ba-51e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:85:bd:a0:05:07:4a:e1:21:af:a0:74:6f:db: ab:4b:4c:70:08:77:bd:bf:21:29:e8:6b:af:db:b5: f4:6a:d6:a1:4a:e2:81:8a:48:87:e4:7c:e6:e0:7f: 5b:04:19:e6:3f:24:75:da:3b:00:b7:e4:89:dd:20: 0c:15:a9:e2:56:6b:60:d8:e6:20:fd:b9:a6:31:29: 36:18:2a:48:f9:fb:da:fc:c2:a1:5c:4f:b4:76:de: 94:15:37:b3:2c:2d:d7:83:1a:9e:35:ef:3f:b1:99: ab:81:d6:c2:ed:4a:21:27:97:23:65:c2:7d:19:71: 46:83:0e:bb:8c:5f:e7:46:6c:8b:47:bf:85:8f:87: 28:cf:a4:66:ba:b6:df:a9:94:a2:fb:b7:41:21:9a: 96:28:15:e1:7a:77:60:ab:de:22:b5:89:92:48:e2: 8f:e3:d6:6b:75:f9:36:23:bc:c5:6a:a7:62:2b:28: 04:36:25:17:f9:86:24:3e:bb:51:b5:19:89:2c:a2: bf:5a:52:5a:94:63:1c:15:f1:3d:2b:1d:40:0d:89: bc:9c:92:45:99:ce:22:c2:ac:32:f4:d1:05:42:e9: 3c:09:bc:b6:59:4b:40:f3:04:8d:eb:54:0a:1c:06: ed:fd:b0:5b:a5:6e:be:ff:b2:c2:cc:77:27:47:69: 3c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:6E:3B:A3:61:F3:69:CB:0E:E0:68:11:A7:0F:6F:85:3A:49:9A:42 X509v3 Authority Key Identifier: keyid:D9:45:48:75:96:65:83:68:14:72:DC:C3:9D:F2:24:AA:D4:A8:9F:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91352D1/DDF4226CC04111F0BC256F15C4F9AE02/2UVIdZZlg2gUctzDnfIkqtSon6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UVIdZZlg2gUctzDnfIkqtSon6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91352D1/DDF4226CC04111F0BC256F15C4F9AE02/2UVIdZZlg2gUctzDnfIkqtSon6o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:53:2a:9e:d2:55:db:7d:b8:31:ad:7c:e2:ff:63:7d:03:7a: 9f:00:5b:fc:04:f8:29:a7:3d:a6:e2:91:1a:87:64:94:b0:b5: 53:4d:6b:40:17:6d:fc:c0:97:8f:f0:cb:56:2e:b3:0c:8b:77: f7:cf:55:b9:4b:01:3d:32:13:14:6b:d2:92:de:34:0f:cb:f8: 04:19:e9:30:1b:e6:7c:5e:ff:05:c6:36:7c:e6:59:f9:db:5a: 5d:9b:75:58:48:9a:19:38:f7:21:f6:1a:68:1f:50:ec:6f:eb: a7:d3:ef:36:75:ea:20:99:8f:8e:91:c6:46:7d:07:3d:ab:ec: a9:67:bf:e9:9d:53:cb:ad:4b:1a:5a:8a:9e:61:46:16:98:b0: 21:1d:a3:ba:a5:a5:8d:79:f1:c6:ba:41:17:29:c6:6e:d2:35: 0e:45:a7:d8:8e:15:e9:8b:0c:d2:d9:0d:ed:0d:ea:c8:9f:16: e4:15:0b:3b:ac:e0:46:3c:76:31:76:b3:2a:86:dc:e2:35:f1: d1:98:05:b1:7f:92:0f:84:64:47:d8:b8:6b:e1:fd:df:79:8a: 02:86:d1:c6:5a:f0:5a:ec:1d:81:2e:42:fb:9f:51:63:8b:cb: 46:cd:52:99:5a:f5:44:d9:a1:09:b0:c5:ee:f3:7e:04:4f:70: 83:be:70:f4 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NTJEMTExMC8GA1UEBRMoRDk0NTQ4NzU5NjY1ODM2ODE0NzJEQ0MzOURGMjI0QUFE NEE4OUZBQTAeFw0yNjAzMDMwODA3MjJaFw0yNjAzMTAwODA3MjJaMBgxFjAUBgNV BAMTDTY5YTY5NmJhLTUxZTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCthb2gBQdK4SGvoHRv26tLTHAId72/ISnoa6/btfRq1qFK4oGKSIfkfObgf1sE GeY/JHXaOwC35IndIAwVqeJWa2DY5iD9uaYxKTYYKkj5+9r8wqFcT7R23pQVN7Ms LdeDGp417z+xmauB1sLtSiEnlyNlwn0ZcUaDDruMX+dGbItHv4WPhyjPpGa6tt+p lKL7t0EhmpYoFeF6d2Cr3iK1iZJI4o/j1mt1+TYjvMVqp2IrKAQ2JRf5hiQ+u1G1 GYksor9aUlqUYxwV8T0rHUANibyckkWZziLCrDL00QVC6TwJvLZZS0DzBI3rVAoc Bu39sFulbr7/ssLMdydHaTxHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUeG47o2Hz acsO4GgRpw9vhTpJmkIwHwYDVR0jBBgwFoAU2UVIdZZlg2gUctzDnfIkqtSon6ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1MkQxL0RERjQyMjZDQzA0 MTExRjBCQzI1NkYxNUM0RjlBRTAyLzJVVklkWlpsZzJnVWN0ekRuZklrcXRTb242 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMlVWSWRaWmxnMmdVY3R6RG5mSWtxdFNvbjZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1 MkQxL0RERjQyMjZDQzA0MTExRjBCQzI1NkYxNUM0RjlBRTAyLzJVVklkWlpsZzJn VWN0ekRuZklrcXRTb242by5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAlUyqe0lXbfbgxrXzi/2N9A3qfAFv8BPgppz2m4pEah2SUsLVTTWtAF238wJeP 8MtWLrMMi3f3z1W5SwE9MhMUa9KS3jQPy/gEGekwG+Z8Xv8FxjZ85ln521pdm3VY SJoZOPch9hpoH1Dsb+un0+82deogmY+OkcZGfQc9q+ypZ7/pnVPLrUsaWoqeYUYW mLAhHaO6paWNefHGukEXKcZu0jUORafYjhXpiwzS2Q3tDerInxbkFQs7rOBGPHYx drMqhtziNfHRmAWxf5IPhGRH2Lhr4f3feYoChtHGWvBa7B2BLkL7n1Fji8tGzVKZ WvVE2aEJsMXu834ET3CDvnD0 -----END CERTIFICATE-----Generated at Wed Mar 4 14:39:09 2026 by rpki-client