$ rpki-client -vvf rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.mft File: UqHEINgnwWzqoEKD3Si2QKMVY00.mft (raw, json) Hash identifier: oIq0Vn8taKNBHE5vt83yijBy3nwwF4Z+lJ8U/QzD3bw= Subject key identifier: B6:A2:63:16:FE:D5:4E:6A:DF:7C:FF:2E:58:C1:E4:BC:16:94:41:E1 Authority key identifier: 52:A1:C4:20:D8:27:C1:6C:EA:A0:42:83:DD:28:B6:40:A3:15:63:4D Certificate issuer: /CN=A91B13FE/serialNumber=52A1C420D827C16CEAA04283DD28B640A315634D Certificate serial: 9E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UqHEINgnwWzqoEKD3Si2QKMVY00.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.mft Manifest number: 8E Signing time: Tue 03 Mar 2026 07:17:25 +0000 Manifest this update: Tue 03 Mar 2026 07:17:25 +0000 Manifest next update: Tue 10 Mar 2026 07:17:25 +0000 Files and hashes: 1: UqHEINgnwWzqoEKD3Si2QKMVY00.crl (hash: nJn0wuU08OVdyzNF3Gl+MaPtobH1ckzOPNcUP4066H0=) 2: E5E9F8B8D0F711F0ACA5A85AC4F9AE02.roa (hash: 2A+skZNc+t58OX570Zwo1EzMJmLkr10Krf1yFSd9VZs=) 3: C577E392D0F711F0BC02385AC4F9AE02.roa (hash: CTMuUuvm60iZOQvAcnHXAUj2ZzggetCmxOqsP+wF50w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.crl rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UqHEINgnwWzqoEKD3Si2QKMVY00.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 07:17:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B13FE, serialNumber=52A1C420D827C16CEAA04283DD28B640A315634D Validity Not Before: Mar 3 07:17:25 2026 GMT Not After : Mar 10 07:17:25 2026 GMT Subject: CN=69a68b05-3634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:54:1c:3b:a3:9b:cd:ec:ac:bb:15:c3:84:be: b3:69:58:89:18:81:24:1c:ab:25:5c:fb:55:3f:7c: 20:e3:1a:e2:fb:4c:25:77:b0:86:ee:da:ff:bb:e8: 58:33:51:1d:8c:2b:4b:78:7a:5f:29:5f:a4:c9:eb: 0e:68:43:7d:d8:83:a8:51:60:92:33:2b:82:0f:9b: ee:ae:56:ed:6a:80:96:2e:02:68:bf:98:93:4f:d9: 63:8b:7e:9d:b1:9c:bb:3d:8c:64:5a:10:a0:28:91: a4:a4:87:90:6e:38:d3:90:eb:82:1f:18:8b:48:03: ac:dc:7b:5e:d0:60:cc:d3:a0:38:96:6d:d7:5e:ae: 9a:9d:1a:f2:a3:0c:f4:dd:60:f7:36:fc:cc:b9:75: cf:e6:19:d3:ff:82:7b:67:fb:b9:ed:81:40:d8:4c: 7c:ea:4f:d6:e8:7e:68:03:d5:b4:c7:f4:7f:f2:82: f9:de:f4:4a:37:d2:e9:76:0d:81:97:e2:32:d2:67: b1:0f:68:14:09:7d:1d:0e:43:5a:3e:36:fe:49:7c: 23:c9:75:b0:e0:37:8d:75:f0:2a:73:39:99:4f:9c: 22:4d:67:5d:c9:7e:62:b1:bf:0c:e8:d3:4f:fe:ae: c6:6d:09:30:ed:b3:fd:47:82:09:49:5b:53:4b:42: 1a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:A2:63:16:FE:D5:4E:6A:DF:7C:FF:2E:58:C1:E4:BC:16:94:41:E1 X509v3 Authority Key Identifier: keyid:52:A1:C4:20:D8:27:C1:6C:EA:A0:42:83:DD:28:B6:40:A3:15:63:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UqHEINgnwWzqoEKD3Si2QKMVY00.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:31:6c:53:da:fd:cf:fa:55:57:aa:dc:70:2c:70:b5:05:51: f3:64:b0:4c:9c:bc:85:b6:70:f3:11:a5:4e:22:1d:f3:3a:b0: fb:22:b7:57:30:2a:e7:12:13:89:7e:e0:d6:ba:91:35:6c:d5: bf:e5:c6:fd:c9:26:d6:37:38:6a:7e:3d:42:e7:ab:28:a5:f7: 73:0f:7e:3d:39:5a:c1:c8:b0:b7:32:ef:92:b4:5d:62:1c:09: eb:63:55:3a:5b:0a:7e:71:93:25:c2:d8:07:f1:8e:1c:a5:3d: ae:28:b0:4c:1e:e0:9e:89:51:4e:11:4e:b7:3f:15:ea:99:00: 01:39:0e:f3:cc:95:0d:08:6a:33:ce:22:55:00:37:83:81:62: 50:ea:5a:8f:fb:29:5b:d6:8e:ea:21:cf:ce:33:44:96:02:af: 7b:a4:ad:1f:71:f1:85:a0:e8:8d:09:d0:16:89:4e:ef:09:d5: c2:09:c9:0f:be:3c:32:ee:1e:ac:a4:d5:6e:f9:43:da:4b:32: 36:ce:e7:9e:b9:21:ee:62:cd:5a:d5:ad:2c:1a:9f:e5:ba:7a: 95:ee:25:a5:8f:72:42:83:4b:96:14:fd:b2:0a:70:bf:02:6f: 1c:88:4a:2d:c5:a8:6b:38:b5:b8:fd:6c:8e:ac:eb:c0:22:75: 89:f3:1a:02 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjEzRkUxMTAvBgNVBAUTKDUyQTFDNDIwRDgyN0MxNkNFQUEwNDI4M0REMjhCNjQw QTMxNTYzNEQwHhcNMjYwMzAzMDcxNzI1WhcNMjYwMzEwMDcxNzI1WjAYMRYwFAYD VQQDEw02OWE2OGIwNS0zNjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm1QcO6ObzeysuxXDhL6zaViJGIEkHKslXPtVP3wg4xri+0wld7CG7tr/u+hY M1EdjCtLeHpfKV+kyesOaEN92IOoUWCSMyuCD5vurlbtaoCWLgJov5iTT9lji36d sZy7PYxkWhCgKJGkpIeQbjjTkOuCHxiLSAOs3Hte0GDM06A4lm3XXq6anRryowz0 3WD3NvzMuXXP5hnT/4J7Z/u57YFA2Ex86k/W6H5oA9W0x/R/8oL53vRKN9Lpdg2B l+Iy0mexD2gUCX0dDkNaPjb+SXwjyXWw4DeNdfAqczmZT5wiTWddyX5isb8M6NNP /q7GbQkw7bP9R4IJSVtTS0IaywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLaiYxb+ 1U5q33z/LljB5LwWlEHhMB8GA1UdIwQYMBaAFFKhxCDYJ8Fs6qBCg90otkCjFWNN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTNGRS84RDhFMjJDMjU2 NDMxMUYwQjE2MjdBMTVDNEY5QUUwMi9VcUhFSU5nbndXenFvRUtEM1NpMlFLTVZZ MDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1VxSEVJTmdud1d6cW9FS0QzU2kyUUtNVlkwMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTNGRS84RDhFMjJDMjU2NDMxMUYwQjE2MjdBMTVDNEY5QUUwMi9VcUhFSU5nbndX enFvRUtEM1NpMlFLTVZZMDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEjFsU9r9z/pVV6rccCxwtQVR82SwTJy8hbZw8xGlTiId8zqw+yK3VzAq5xIT iX7g1rqRNWzVv+XG/ckm1jc4an49QuerKKX3cw9+PTlawciwtzLvkrRdYhwJ62NV OlsKfnGTJcLYB/GOHKU9riiwTB7gnolRThFOtz8V6pkAATkO88yVDQhqM84iVQA3 g4FiUOpaj/spW9aO6iHPzjNElgKve6StH3HxhaDojQnQFolO7wnVwgnJD748Mu4e rKTVbvlD2ksyNs7nnrkh7mLNWtWtLBqf5bp6le4lpY9yQoNLlhT9sgpwvwJvHIhK LcWoazi1uP1sjqzrwCJ1ifMaAg== -----END CERTIFICATE-----Generated at Wed Mar 4 08:42:11 2026 by rpki-client