$ rpki-client -vvf rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft File: U3TG518YYFJFWi2NpSkv7wCcya8.mft (raw, json) Hash identifier: qp3c+zXxX8Gn9pjoeA+lH4tyTS3F7+BIGxstsXbEams= Subject key identifier: AA:5D:28:42:1B:AE:F4:B4:D3:2E:36:F9:9F:F7:79:0C:FE:2F:C8:D2 Authority key identifier: 53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF Certificate issuer: /CN=A91B885C/serialNumber=5374C6E75F186052455A2D8DA5292FEF009CC9AF Certificate serial: 0DF4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft Manifest number: 0D88 Signing time: Wed 18 Mar 2026 17:48:43 +0000 Manifest this update: Wed 18 Mar 2026 17:48:43 +0000 Manifest next update: Wed 25 Mar 2026 17:48:43 +0000 Files and hashes: 1: U3TG518YYFJFWi2NpSkv7wCcya8.crl (hash: KYXUZWQMxrFwpMaL4S7CHtghA/XnxP17xGJne4e9TI8=) 2: 8D3BB78A3AEA11EC84E6634EC4F9AE02.roa (hash: 42dKv4sjx0XRqkeI33DpCxr1YPHwmnsJzTMy3OeU/bA=) 3: 8BFEF29C3AEA11EC84E6634EC4F9AE02.roa (hash: /mnlEhnqqNNmaXEyoXT4uNGbhSnUFbs7WLtZHVUC6k0=) 4: 8F6D3D583AEA11EC84E6634EC4F9AE02.roa (hash: +ssH2defg7geLitGvHOS2gEb7jt8aMnauRLoSwyGqos=) 5: 8E61229E3AEA11EC84E6634EC4F9AE02.roa (hash: fFNn+D8a+9BaecelYFnpv1pf8zkcnuV1ywYcbNcNMB4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.crl rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Mar 2026 17:48:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3572 (0xdf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B885C, serialNumber=5374C6E75F186052455A2D8DA5292FEF009CC9AF Validity Not Before: Mar 18 17:48:43 2026 GMT Not After : Mar 25 17:48:43 2026 GMT Subject: CN=69bae57b-15b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7a:49:87:73:15:5f:47:7c:55:da:06:f9:ca: cf:21:54:18:24:34:cb:f8:55:82:14:1c:51:d4:3a: 00:75:48:14:39:c3:56:38:07:d3:e5:46:c5:5d:b0: 58:5c:1c:dc:dc:b0:50:23:ed:c3:7a:fa:15:a9:28: cc:24:69:a7:96:59:b8:8d:9e:df:78:74:f4:5c:d6: 52:87:8b:92:71:fe:b1:54:f3:d7:e2:50:32:54:13: 12:0e:b9:4d:c5:16:76:98:14:f8:d7:79:d0:6f:01: c7:44:fe:5f:2a:e2:26:c3:c5:3c:0d:98:78:bc:cc: 02:d8:6a:cc:0e:63:29:de:29:5b:cb:7c:e4:eb:f6: a4:5e:81:43:5e:e6:bf:3a:6c:74:66:c4:c6:1d:65: 22:ff:d3:5f:48:78:ce:3e:b3:18:b4:c6:4d:0c:9c: b8:6d:8a:87:1e:81:78:0f:ee:ff:e4:67:73:bb:bc: 37:5c:ca:7e:e0:56:79:3e:ce:a7:92:6b:f3:28:e3: cd:71:a8:c8:01:bb:28:4a:83:87:67:8a:33:59:2a: 07:4b:1a:8a:60:f9:b2:b5:5b:c4:a7:fc:a1:5c:a2: 11:35:3d:e3:67:2c:21:c7:0a:dc:1d:5f:96:97:7c: c2:3a:52:d3:e4:21:45:19:aa:b9:07:b5:dc:08:1c: 1e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:5D:28:42:1B:AE:F4:B4:D3:2E:36:F9:9F:F7:79:0C:FE:2F:C8:D2 X509v3 Authority Key Identifier: keyid:53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:a0:da:75:dd:d4:69:c1:2b:a9:ca:6c:91:e9:f4:5a:a5:b7: 48:c4:88:e6:55:4e:6b:0a:94:47:a7:e4:a4:49:9f:4a:50:fe: b8:6f:ec:69:b0:6d:ee:7f:67:ff:7a:ed:8d:ec:de:d7:88:55: cf:2c:ff:1e:25:1b:f5:27:96:9c:84:8f:e8:60:49:81:84:04: 45:62:aa:f8:23:e9:6d:94:61:54:81:b1:c0:7b:b8:f4:8e:17: cc:91:66:7b:78:dc:8a:14:34:48:5a:ab:45:4c:c1:c4:bd:58: bc:dd:f5:b0:17:f3:75:be:e6:54:7c:c0:b1:8d:2f:53:ed:2a: e9:81:46:5e:e6:c8:5f:72:78:dc:bb:5e:7e:be:fa:2b:cc:14: fe:c9:f1:d9:aa:b6:13:ba:8a:9d:1a:a7:7f:89:c0:d2:16:ae: 1b:62:4c:d8:5f:6b:36:f9:81:53:37:b6:87:6a:72:51:9d:02: d6:7b:ef:87:6e:12:62:29:4a:fc:b6:ad:38:f1:15:d5:99:74: a9:74:5f:91:41:96:16:ee:cb:c2:45:49:b2:fe:2a:06:dd:61: 3e:ef:a8:35:d1:b7:7a:e7:e4:3c:80:b6:c7:ce:14:12:7d:99: 0d:0f:e3:77:91:d7:dd:ef:c1:dd:fb:28:d2:a8:e7:32:3e:c3: 07:ee:64:d3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg4NUMxMTAvBgNVBAUTKDUzNzRDNkU3NUYxODYwNTI0NTVBMkQ4REE1MjkyRkVG MDA5Q0M5QUYwHhcNMjYwMzE4MTc0ODQzWhcNMjYwMzI1MTc0ODQzWjAYMRYwFAYD VQQDEw02OWJhZTU3Yi0xNWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlXpJh3MVX0d8VdoG+crPIVQYJDTL+FWCFBxR1DoAdUgUOcNWOAfT5UbFXbBY XBzc3LBQI+3DevoVqSjMJGmnllm4jZ7feHT0XNZSh4uScf6xVPPX4lAyVBMSDrlN xRZ2mBT413nQbwHHRP5fKuImw8U8DZh4vMwC2GrMDmMp3ilby3zk6/akXoFDXua/ Omx0ZsTGHWUi/9NfSHjOPrMYtMZNDJy4bYqHHoF4D+7/5Gdzu7w3XMp+4FZ5Ps6n kmvzKOPNcajIAbsoSoOHZ4ozWSoHSxqKYPmytVvEp/yhXKIRNT3jZywhxwrcHV+W l3zCOlLT5CFFGaq5B7XcCBweTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKpdKEIb rvS00y42+Z/3eQz+L8jSMB8GA1UdIwQYMBaAFFN0xudfGGBSRVotjaUpL+8AnMmv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODg1Qy81QzE5Rjg0MkYy NjcxMUU5ODdDNzEzMUZDNEY5QUUwMi9VM1RHNTE4WVlGSkZXaTJOcFNrdjd3Q2N5 YTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1UzVEc1MThZWUZKRldpMk5wU2t2N3dDY3lhOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODg1Qy81QzE5Rjg0MkYyNjcxMUU5ODdDNzEzMUZDNEY5QUUwMi9VM1RHNTE4WVlG SkZXaTJOcFNrdjd3Q2N5YTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmaDadd3UacErqcpsken0WqW3SMSI5lVOawqUR6fkpEmfSlD+uG/sabBt7n9n /3rtjeze14hVzyz/HiUb9SeWnISP6GBJgYQERWKq+CPpbZRhVIGxwHu49I4XzJFm e3jcihQ0SFqrRUzBxL1YvN31sBfzdb7mVHzAsY0vU+0q6YFGXubIX3J43Ltefr76 K8wU/snx2aq2E7qKnRqnf4nA0hauG2JM2F9rNvmBUze2h2pyUZ0C1nvvh24SYilK /LatOPEV1Zl0qXRfkUGWFu7LwkVJsv4qBt1hPu+oNdG3eufkPIC2x84UEn2ZDQ/j d5HX3e/B3fso0qjnMj7DB+5k0w== -----END CERTIFICATE-----Generated at Fri Mar 20 14:20:31 2026 by rpki-client