$ rpki-client -vvf rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.mft File: US2b3oE8t7x3GQqE-bGNuOtOIl8.mft (raw, json) Hash identifier: GGa2Bs1ah+5o5gcSGTu6HJz8CKsbzvGwgB3EodxgaJQ= Subject key identifier: 12:0E:58:A1:07:F3:0D:B4:16:23:8C:BB:22:A7:5D:76:B3:6B:30:B6 Authority key identifier: 51:2D:9B:DE:81:3C:B7:BC:77:19:0A:84:F9:B1:8D:B8:EB:4E:22:5F Certificate issuer: /CN=A91C956C/serialNumber=512D9BDE813CB7BC77190A84F9B18DB8EB4E225F Certificate serial: 05BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US2b3oE8t7x3GQqE-bGNuOtOIl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.mft Manifest number: 05AC Signing time: Sat 28 Mar 2026 23:04:31 +0000 Manifest this update: Sat 28 Mar 2026 23:04:31 +0000 Manifest next update: Sat 04 Apr 2026 23:04:31 +0000 Files and hashes: 1: US2b3oE8t7x3GQqE-bGNuOtOIl8.crl (hash: Qi/jP49ugpFfOGuJ0ou+YnAj+ONloQ/4DMJUpcS63ns=) 2: 2F3F56C42BB411EF8D887F3AC4F9AE02.roa (hash: u3v0nvDMzptv0Bv0++6upWHNRBc+BH3ns60gSH838+o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.crl rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US2b3oE8t7x3GQqE-bGNuOtOIl8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 Apr 2026 23:04:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1470 (0x5be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C956C, serialNumber=512D9BDE813CB7BC77190A84F9B18DB8EB4E225F Validity Not Before: Mar 28 23:04:31 2026 GMT Not After : Apr 4 23:04:31 2026 GMT Subject: CN=69c85e7f-a449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:db:ff:c3:e5:4b:1f:b0:40:3f:b0:4a:19:32: 5d:a7:23:e2:17:b0:0a:b9:3b:5a:90:66:15:25:bd: d4:eb:ba:c1:84:07:14:5c:5f:d2:09:d6:57:27:79: c4:04:29:c8:84:ed:9d:c1:d1:0b:64:55:a2:40:44: 9d:50:2a:c2:33:fd:a7:7b:6f:90:15:2d:2a:0b:52: 78:e4:8f:e2:c8:c4:86:39:4e:01:38:4f:54:2c:e7: 47:ae:de:4c:99:87:6c:5b:de:7c:d1:47:7b:d0:ba: c6:21:0b:99:0c:71:ad:fa:d6:0b:d0:58:f8:21:fe: 29:00:05:6b:08:9e:71:d3:b4:c7:6e:d9:5c:4d:4a: 24:67:d4:95:91:7c:cf:63:b2:34:aa:71:19:e2:2f: 6f:96:7b:fb:37:b7:5e:18:6e:08:3b:e7:02:11:c0: cb:d2:af:9f:02:25:32:dc:7a:d4:30:14:d9:4d:d7: 68:03:f2:1a:ca:f9:3d:49:c4:0f:9c:29:ff:b3:24: 74:c7:58:fd:0b:42:ec:6a:d3:71:65:5c:fb:c5:15: 34:74:92:f4:8a:93:d2:39:62:22:26:d7:92:6c:08: ee:da:ae:b1:5f:e3:df:f7:c8:04:63:19:07:f4:8a: 35:f4:f2:f8:65:09:85:69:20:e2:28:49:68:d7:95: 01:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:0E:58:A1:07:F3:0D:B4:16:23:8C:BB:22:A7:5D:76:B3:6B:30:B6 X509v3 Authority Key Identifier: keyid:51:2D:9B:DE:81:3C:B7:BC:77:19:0A:84:F9:B1:8D:B8:EB:4E:22:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US2b3oE8t7x3GQqE-bGNuOtOIl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:10:10:c6:9b:36:88:e5:e6:4c:a1:2c:e1:ac:11:d6:f9:9a: e0:4d:f1:73:7a:21:20:56:0d:1e:9d:fb:38:f5:c5:79:7c:c7: dd:83:08:54:95:4b:0c:d3:53:db:aa:b2:bb:49:0b:20:64:52: fe:c6:81:87:82:e1:f5:71:24:82:fc:42:ce:1a:29:a6:1e:a3: 22:8e:1c:6d:3e:b2:7d:05:55:fe:a3:b2:1b:e4:0d:83:1e:ff: f6:46:49:7d:cc:eb:ea:16:8e:94:54:63:4d:5c:06:ce:02:5a: 22:fe:b2:ea:15:3f:51:e8:f6:a8:a3:ee:db:9e:a0:f6:c4:c2: 67:8e:13:f6:26:42:d7:b7:22:cd:46:d7:4c:e9:6f:d3:b1:67: cc:4c:fd:be:d7:5e:12:b0:cc:e0:5a:af:4e:c6:1c:e1:0d:ba: e5:00:28:92:62:c1:9d:50:a5:0a:2c:a8:f1:23:87:b9:6c:cd: 16:1c:6d:0f:9b:09:19:db:f2:a8:84:76:03:74:e7:7d:1d:c9: c7:b9:e4:10:e6:a3:dd:92:58:25:17:1e:ea:0d:6e:5e:7c:6f: df:75:f8:72:93:0c:80:54:29:7d:3c:41:3e:ca:89:40:67:98: 3d:5e:fc:98:17:c1:fa:b0:01:5e:83:f1:4b:17:9d:d4:30:14: f2:68:67:27 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk1NkMxMTAvBgNVBAUTKDUxMkQ5QkRFODEzQ0I3QkM3NzE5MEE4NEY5QjE4REI4 RUI0RTIyNUYwHhcNMjYwMzI4MjMwNDMxWhcNMjYwNDA0MjMwNDMxWjAYMRYwFAYD VQQDEw02OWM4NWU3Zi1hNDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnNv/w+VLH7BAP7BKGTJdpyPiF7AKuTtakGYVJb3U67rBhAcUXF/SCdZXJ3nE BCnIhO2dwdELZFWiQESdUCrCM/2ne2+QFS0qC1J45I/iyMSGOU4BOE9ULOdHrt5M mYdsW9580Ud70LrGIQuZDHGt+tYL0Fj4If4pAAVrCJ5x07THbtlcTUokZ9SVkXzP Y7I0qnEZ4i9vlnv7N7deGG4IO+cCEcDL0q+fAiUy3HrUMBTZTddoA/Iayvk9ScQP nCn/syR0x1j9C0LsatNxZVz7xRU0dJL0ipPSOWIiJteSbAju2q6xX+Pf98gEYxkH 9Io19PL4ZQmFaSDiKElo15UBAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBIOWKEH 8w20FiOMuyKnXXazazC2MB8GA1UdIwQYMBaAFFEtm96BPLe8dxkKhPmxjbjrTiJf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTU2Qy9GQjMwNUE1RTBD OEExMUVDQTMxOTFCMENDNEY5QUUwMi9VUzJiM29FOHQ3eDNHUXFFLWJHTnVPdE9J bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VTMmIzb0U4dDd4M0dRcUUtYkdOdU90T0lsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTU2Qy9GQjMwNUE1RTBDOEExMUVDQTMxOTFCMENDNEY5QUUwMi9VUzJiM29FOHQ3 eDNHUXFFLWJHTnVPdE9JbDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXxAQxps2iOXmTKEs4awR1vma4E3xc3ohIFYNHp37OPXFeXzH3YMIVJVLDNNT 26qyu0kLIGRS/saBh4Lh9XEkgvxCzhopph6jIo4cbT6yfQVV/qOyG+QNgx7/9kZJ fczr6haOlFRjTVwGzgJaIv6y6hU/Uej2qKPu256g9sTCZ44T9iZC17cizUbXTOlv 07FnzEz9vtdeErDM4FqvTsYc4Q265QAokmLBnVClCiyo8SOHuWzNFhxtD5sJGdvy qIR2A3TnfR3Jx7nkEOaj3ZJYJRce6g1uXnxv33X4cpMMgFQpfTxBPsqJQGeYPV78 mBfB+rABXoPxSxed1DAU8mhnJw== -----END CERTIFICATE-----Generated at Mon Mar 30 13:59:26 2026 by rpki-client