$ rpki-client -vvf rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft File: 25LUPJBhJQWzr0bpZKaMyfXzsq8.mft (raw, json) Hash identifier: LAz7wvttRpNCK4ekwB3AHCLmToIYGfaksBqxZC5kwYw= Subject key identifier: 4A:A0:87:89:23:0D:5F:E0:64:B0:87:FE:4D:2A:E3:E6:3D:20:85:89 Authority key identifier: DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF Certificate issuer: /CN=A918213B/serialNumber=DB92D43C90612505B3AF46E964A68CC9F5F3B2AF Certificate serial: 03D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft Manifest number: 03B3 Signing time: Fri 13 Mar 2026 00:18:55 +0000 Manifest this update: Fri 13 Mar 2026 00:18:54 +0000 Manifest next update: Fri 20 Mar 2026 00:18:54 +0000 Files and hashes: 1: 25LUPJBhJQWzr0bpZKaMyfXzsq8.crl (hash: m86rz2jeFmr6SHnKFe9wM/WFoBStnp7UePTYVDeAucs=) 2: 9ABE08C606F311F08407D351C4F9AE02.roa (hash: mJ+4aNLfvZt4Gxz5lM68lm7uHN4nwmUYx/R+WnSzyKo=) 3: B2FCF1C07FF911F08FAAC57FC4F9AE02.roa (hash: jNzbZDAmJi3yGAnoraLhyCZK40ZfYa1fB/jtVGeYRGI=) 4: 299F07F2E15611EFA15DF23DC4F9AE02.roa (hash: xB0/pb5I5xHP02aSQCO9upGknx6BvV6q4THXB9XtRB8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.crl rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 00:18:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 978 (0x3d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918213B, serialNumber=DB92D43C90612505B3AF46E964A68CC9F5F3B2AF Validity Not Before: Mar 13 00:18:54 2026 GMT Not After : Mar 20 00:18:54 2026 GMT Subject: CN=69b357ee-88e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:93:6a:ff:d1:5e:0c:85:b2:a0:00:58:b8:7b: 85:ac:c1:92:83:b9:3d:77:30:ad:44:4b:3c:6c:80: d1:d7:66:a1:2a:94:e3:4f:fd:cc:d2:62:ea:29:06: b5:90:d9:a9:e9:43:cd:f1:00:46:64:0b:7c:9c:c2: 41:9a:38:d0:ea:5d:e3:d2:c5:f9:00:78:66:d5:48: e4:1c:24:da:f8:50:c1:ae:d5:12:48:9a:11:a1:27: d8:f7:bb:3f:96:f7:ab:50:2b:e7:12:0b:63:a7:70: 89:77:51:1b:18:03:28:0e:fb:1c:7f:a9:1a:6c:0a: 91:ef:5a:b8:13:72:c4:03:45:e6:a5:a9:bd:2f:f1: eb:58:ee:f5:b5:a0:45:b6:34:37:a0:15:99:9f:ba: eb:8f:d7:da:d9:5d:93:65:f5:94:60:5d:6c:1d:c1: 5c:33:7d:35:49:40:5f:92:cf:c6:81:b6:bc:25:4b: 65:48:0f:89:f0:d0:3a:2c:e2:1d:48:83:19:ca:52: 6a:90:53:49:dc:0c:74:89:e2:59:66:d8:dc:5c:23: 5f:bf:84:a4:b2:7c:d6:a6:c3:8c:71:bc:70:cf:e7: d2:5d:08:a1:77:a3:af:94:06:d7:0f:a1:bb:43:06: dc:8d:1e:37:3b:27:d2:a1:f1:2f:ce:bf:84:62:4f: c2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:A0:87:89:23:0D:5F:E0:64:B0:87:FE:4D:2A:E3:E6:3D:20:85:89 X509v3 Authority Key Identifier: keyid:DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:77:7e:84:32:6e:76:43:04:40:75:3c:b3:8a:6d:6d:ea:d7: c4:81:08:a2:40:ea:65:c6:dc:87:66:14:85:1c:c0:f4:d0:c7: 8b:7d:f4:28:f8:47:86:15:de:e7:6f:03:95:fa:88:61:b2:be: 15:dc:3a:87:ac:22:a5:e0:a6:80:eb:43:12:d3:34:43:10:bb: fb:0e:ce:0c:cf:9b:2d:7f:36:50:07:92:3f:e2:41:c8:76:bd: 20:cd:cc:52:aa:89:cc:16:df:be:ba:99:60:48:e4:b3:ca:d0: 96:c7:81:84:d3:f2:85:85:8e:cc:f8:7a:23:c0:b2:e3:35:bd: ef:3f:6d:c1:b5:0a:4f:3b:f4:25:44:7e:6a:77:94:ba:27:19: d2:b4:e8:e8:f5:b4:f2:c8:ba:dc:d2:33:5a:82:df:6c:f0:f6: cf:94:71:9f:5a:1a:e3:36:77:dd:8a:cb:cd:af:43:10:1c:fa: 48:6f:50:e7:c5:e9:14:2e:21:0e:c6:e9:48:1f:61:0d:c7:d1: 29:2a:e2:12:4e:7e:6e:e8:9f:e5:1f:32:20:8c:dd:be:8e:3b: bd:68:92:41:66:09:90:d8:c3:b4:99:85:7d:eb:ee:9a:3c:5d: 1f:fd:58:aa:ff:c5:86:d0:68:4f:0d:f2:05:52:4f:11:d0:2f: ff:c5:1d:61 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIxM0IxMTAvBgNVBAUTKERCOTJENDNDOTA2MTI1MDVCM0FGNDZFOTY0QTY4Q0M5 RjVGM0IyQUYwHhcNMjYwMzEzMDAxODU0WhcNMjYwMzIwMDAxODU0WjAYMRYwFAYD VQQDEw02OWIzNTdlZS04OGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxJNq/9FeDIWyoABYuHuFrMGSg7k9dzCtREs8bIDR12ahKpTjT/3M0mLqKQa1 kNmp6UPN8QBGZAt8nMJBmjjQ6l3j0sX5AHhm1UjkHCTa+FDBrtUSSJoRoSfY97s/ lverUCvnEgtjp3CJd1EbGAMoDvscf6kabAqR71q4E3LEA0Xmpam9L/HrWO71taBF tjQ3oBWZn7rrj9fa2V2TZfWUYF1sHcFcM301SUBfks/Ggba8JUtlSA+J8NA6LOId SIMZylJqkFNJ3Ax0ieJZZtjcXCNfv4SksnzWpsOMcbxwz+fSXQihd6OvlAbXD6G7 QwbcjR43OyfSofEvzr+EYk/C7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEqgh4kj DV/gZLCH/k0q4+Y9IIWJMB8GA1UdIwQYMBaAFNuS1DyQYSUFs69G6WSmjMn187Kv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjEzQi8wNzA3NkZBMEQ5 QzkxMUVDQkUwMDdGNkFDNEY5QUUwMi8yNUxVUEpCaEpRV3pyMGJwWkthTXlmWHpz cTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI1TFVQSkJoSlFXenIwYnBaS2FNeWZYenNxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjEzQi8wNzA3NkZBMEQ5QzkxMUVDQkUwMDdGNkFDNEY5QUUwMi8yNUxVUEpCaEpR V3pyMGJwWkthTXlmWHpzcTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAnd+hDJudkMEQHU8s4ptberXxIEIokDqZcbch2YUhRzA9NDHi330KPhHhhXe 528DlfqIYbK+Fdw6h6wipeCmgOtDEtM0QxC7+w7ODM+bLX82UAeSP+JByHa9IM3M UqqJzBbfvrqZYEjks8rQlseBhNPyhYWOzPh6I8Cy4zW97z9twbUKTzv0JUR+aneU uicZ0rTo6PW08si63NIzWoLfbPD2z5Rxn1oa4zZ33YrLza9DEBz6SG9Q58XpFC4h DsbpSB9hDcfRKSriEk5+buif5R8yIIzdvo47vWiSQWYJkNjDtJmFfevumjxdH/1Y qv/FhtBoTw3yBVJPEdAv/8UdYQ== -----END CERTIFICATE-----Generated at Fri Mar 13 20:49:58 2026 by rpki-client