$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft File: Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft (raw, json) Hash identifier: 1TTuc6f/UMy0sTgY1rGlH+vq0JLQMnHuxK6E04BuLSE= Subject key identifier: 85:01:DB:2E:0F:10:46:95:DA:3F:77:08:26:B8:56:9C:65:9F:5D:BB Authority key identifier: 53:0D:29:AD:C0:FB:1C:F2:83:7D:39:BB:86:34:34:86:C1:C7:16:82 Certificate issuer: /CN=A91F3AF8/serialNumber=530D29ADC0FB1CF2837D39BB86343486C1C71682 Certificate serial: 0859 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft Manifest number: 0847 Signing time: Sun 22 Mar 2026 20:31:08 +0000 Manifest this update: Sun 22 Mar 2026 20:31:07 +0000 Manifest next update: Sun 29 Mar 2026 20:31:07 +0000 Files and hashes: 1: Uw0prcD7HPKDfTm7hjQ0hsHHFoI.crl (hash: BEmWZKGpEI9S2Sd26s5/c4TopetpfJQkNR2fMWvvbzQ=) 2: CC08667A7A6011EB9BC9937BC4F9AE02.roa (hash: 8w0OkkiQMesnqjsDX17pMHO1P+oif+rNa46fjPHMrwM=) 3: 3791632A030011EB909C3244C4F9AE02.roa (hash: XDxzL6lCljcaL+PFu7uqMJYwZnreyNdPjBF2CgcbiTk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.crl rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 20:31:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2137 (0x859) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3AF8, serialNumber=530D29ADC0FB1CF2837D39BB86343486C1C71682 Validity Not Before: Mar 22 20:31:07 2026 GMT Not After : Mar 29 20:31:07 2026 GMT Subject: CN=69c0518b-a64f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:50:9c:8a:fb:18:7e:60:87:27:87:8b:41:d2: 45:b5:46:cc:4d:6b:b4:bf:13:9f:df:bf:93:6d:6e: 7d:38:1c:6d:57:ec:ae:c7:22:09:21:a2:0d:53:fb: 52:7c:e1:aa:8f:8a:53:cd:94:c8:d0:e2:ec:5d:30: ce:e7:b1:a1:da:c9:73:cb:88:f7:d6:04:91:f1:3e: 59:f6:93:1f:fe:85:e2:bc:7a:24:75:da:7f:41:c3: e9:b9:61:25:1c:dc:69:7c:6d:35:ba:88:4b:43:71: c1:b2:4b:7f:43:ae:8c:81:9a:ba:f6:f6:1a:4e:a4: 9d:2e:1c:08:f8:82:fc:f3:ac:0c:61:67:b6:ea:1c: 69:c8:85:32:c5:f7:af:eb:e8:e5:86:cb:7a:35:ee: b2:b4:15:8a:e3:ba:60:d3:fe:b1:87:19:ae:2d:51: f6:f2:88:18:0c:e4:e4:2d:6c:04:01:78:f8:a8:57: 88:e1:49:b2:ea:11:3c:ee:b1:9c:30:24:21:7f:ba: 82:e1:13:0e:9f:14:17:29:f2:fe:fa:0d:42:26:11: 2d:63:7b:f4:e8:6b:6c:00:e4:25:1f:77:c8:86:76: a9:4a:44:af:52:47:24:77:a2:99:a7:b3:60:32:9c: 3f:45:e6:a9:fa:d4:a5:e7:ba:3a:ec:df:3a:92:15: b8:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:01:DB:2E:0F:10:46:95:DA:3F:77:08:26:B8:56:9C:65:9F:5D:BB X509v3 Authority Key Identifier: keyid:53:0D:29:AD:C0:FB:1C:F2:83:7D:39:BB:86:34:34:86:C1:C7:16:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:7d:08:48:f2:2b:ea:60:f2:5b:52:d3:9d:70:cf:de:1b:0d: 7e:a4:ab:4d:3e:99:93:4f:2c:95:a9:a1:8d:9a:43:ce:f2:99: 8f:50:13:35:c1:9b:b9:8e:6b:4d:69:5b:cf:0d:05:36:1a:04: 4b:4c:ae:10:e0:55:de:75:68:56:a6:6f:c1:8e:a5:f3:4b:0f: b6:d4:7e:de:be:b2:c3:f7:b2:df:8e:fa:f4:c5:ab:1c:62:9b: b2:67:72:d7:39:c2:25:aa:67:d1:7e:86:4d:1b:e3:08:fc:3f: fa:b3:b4:7b:38:e3:a2:11:56:9f:98:2d:3e:a3:02:41:bf:91: 0f:74:21:77:7e:ad:0f:18:f6:8a:95:18:6e:a6:d3:87:74:7c: 23:c2:5f:73:33:63:e5:23:3b:ed:00:a8:c9:b1:9c:55:a8:da: dc:13:b7:44:93:8d:b9:a0:8a:e4:95:fc:d8:b6:e2:36:09:6b: 41:13:88:7c:72:91:ed:48:83:d8:55:1a:fb:87:2c:a5:4e:d7: 37:12:81:a7:8e:85:e7:c7:df:7c:ed:dd:8b:8c:5e:9a:9b:57: 49:75:28:36:00:f9:61:12:8b:77:57:30:c7:6f:c9:80:1c:27: 34:ec:00:c9:3d:31:53:a1:c2:87:97:c6:6d:17:2c:57:4d:2d: ce:54:e0:26 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCFkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNBRjgxMTAvBgNVBAUTKDUzMEQyOUFEQzBGQjFDRjI4MzdEMzlCQjg2MzQzNDg2 QzFDNzE2ODIwHhcNMjYwMzIyMjAzMTA3WhcNMjYwMzI5MjAzMTA3WjAYMRYwFAYD VQQDEw02OWMwNTE4Yi1hNjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwlCcivsYfmCHJ4eLQdJFtUbMTWu0vxOf37+TbW59OBxtV+yuxyIJIaINU/tS fOGqj4pTzZTI0OLsXTDO57Gh2slzy4j31gSR8T5Z9pMf/oXivHokddp/QcPpuWEl HNxpfG01uohLQ3HBskt/Q66MgZq69vYaTqSdLhwI+IL886wMYWe26hxpyIUyxfev 6+jlhst6Ne6ytBWK47pg0/6xhxmuLVH28ogYDOTkLWwEAXj4qFeI4Umy6hE87rGc MCQhf7qC4RMOnxQXKfL++g1CJhEtY3v06GtsAOQlH3fIhnapSkSvUkckd6KZp7Ng Mpw/Reap+tSl57o67N86khW4GwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIUB2y4P EEaV2j93CCa4Vpxln127MB8GA1UdIwQYMBaAFFMNKa3A+xzyg305u4Y0NIbBxxaC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0FGOC80ODI5N0ZFRTAy RkUxMUVCQjcwNjY0M0VDNEY5QUUwMi9VdzBwcmNEN0hQS0RmVG03aGpRMGhzSEhG b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V3MHByY0Q3SFBLRGZUbTdoalEwaHNISEZvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0FGOC80ODI5N0ZFRTAyRkUxMUVCQjcwNjY0M0VDNEY5QUUwMi9VdzBwcmNEN0hQ S0RmVG03aGpRMGhzSEhGb0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANH0ISPIr6mDyW1LTnXDP3hsNfqSrTT6Zk08slamhjZpDzvKZj1ATNcGbuY5r TWlbzw0FNhoES0yuEOBV3nVoVqZvwY6l80sPttR+3r6yw/ey34769MWrHGKbsmdy 1znCJapn0X6GTRvjCPw/+rO0ezjjohFWn5gtPqMCQb+RD3Qhd36tDxj2ipUYbqbT h3R8I8JfczNj5SM77QCoybGcVaja3BO3RJONuaCK5JX82LbiNglrQROIfHKR7UiD 2FUa+4cspU7XNxKBp46F58fffO3di4xemptXSXUoNgD5YRKLd1cwx2/JgBwnNOwA yT0xU6HCh5fGbRcsV00tzlTgJg== -----END CERTIFICATE-----Generated at Mon Mar 23 00:21:14 2026 by rpki-client