$ rpki-client -vvf rpki.apnic.net/member_repository/A9123E38/A1087D3600EA11E8BC93B16BC4F9AE02/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.mft File: 1Uvzmb4bZZsTIxS4IZM6ILo4uWo.mft (raw, json) Hash identifier: lJ3/ck7B78UbD/ybdLiue6TNNAcHRnSKSSOlBHWhDog= Subject key identifier: 49:D7:DB:F5:B5:FD:56:61:A4:AC:13:9A:F3:1E:74:84:D1:CC:11:3A Authority key identifier: D5:4B:F3:99:BE:1B:65:9B:13:23:14:B8:21:93:3A:20:BA:38:B9:6A Certificate issuer: /CN=A9123E38/serialNumber=D54BF399BE1B659B132314B821933A20BA38B96A Certificate serial: 1767 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123E38/A1087D3600EA11E8BC93B16BC4F9AE02/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.mft Manifest number: 173C Signing time: Mon 02 Mar 2026 00:34:55 +0000 Manifest this update: Mon 02 Mar 2026 00:34:53 +0000 Manifest next update: Mon 09 Mar 2026 00:34:53 +0000 Files and hashes: 1: 1Uvzmb4bZZsTIxS4IZM6ILo4uWo.crl (hash: nXnpfYe0SYxog1LkvtK8DJCsWyB72iNlXLUNNwAa5is=) 2: 24CFDABE00EC11E8AAC4DD6EC4F9AE02.roa (hash: FXCVIBZtmzju9cWOxPkZCfQlYGeqv1UjQpOEkpTPeD4=) 3: 0F2AF0F0AFDA11EAAED1C066C4F9AE02.roa (hash: LprT5cim2RrsHbGQk7NGd6J/lGXNUlFqt+FKrUc9WWA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123E38/A1087D3600EA11E8BC93B16BC4F9AE02/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.crl rsync://rpki.apnic.net/member_repository/A9123E38/A1087D3600EA11E8BC93B16BC4F9AE02/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:34:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5991 (0x1767) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123E38, serialNumber=D54BF399BE1B659B132314B821933A20BA38B96A Validity Not Before: Mar 2 00:34:53 2026 GMT Not After : Mar 9 00:34:53 2026 GMT Subject: CN=69a4db2e-a2de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fc:94:21:d8:9b:91:fa:33:6e:1b:d3:1a:bc: f6:22:8c:eb:93:a9:88:bf:d8:df:c8:5e:d2:cf:e9: 2e:1e:69:cd:da:94:8f:ea:5d:90:31:85:ba:0a:97: 04:aa:74:5a:db:8d:78:a4:72:a7:24:01:db:4e:1c: a1:4c:4c:32:d6:ea:5e:4d:f2:bc:de:cb:fe:52:d0: ea:d5:e6:82:22:ca:a8:2d:ba:30:2e:ef:c0:1b:34: d2:15:59:0d:20:30:7e:9b:d8:83:55:f9:19:a2:a7: d0:ad:e8:ed:ea:83:5c:31:6e:28:10:22:91:f4:c5: bb:84:27:ab:c8:0f:99:1c:36:76:a8:24:44:83:1c: 08:ab:e6:de:3d:fd:be:c5:e9:a7:54:4f:99:d9:d9: 0c:2e:a2:f0:35:03:cb:9f:16:68:17:4b:a2:f1:39: ed:6a:8b:a0:0d:9b:09:05:b6:13:fb:93:47:ca:3e: c5:9f:30:1f:ad:eb:6d:f1:fa:12:26:7f:94:7e:a0: 2b:6e:07:ab:9b:cc:74:b1:2b:b8:6e:fb:01:42:be: 17:49:0f:99:67:c2:75:43:26:9a:cd:40:dd:32:d4: 73:f7:5c:a2:94:84:b5:60:c6:3e:f3:16:a7:7c:01: fc:be:18:0a:28:23:2a:72:de:55:b5:10:56:50:8f: 15:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:D7:DB:F5:B5:FD:56:61:A4:AC:13:9A:F3:1E:74:84:D1:CC:11:3A X509v3 Authority Key Identifier: keyid:D5:4B:F3:99:BE:1B:65:9B:13:23:14:B8:21:93:3A:20:BA:38:B9:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123E38/A1087D3600EA11E8BC93B16BC4F9AE02/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123E38/A1087D3600EA11E8BC93B16BC4F9AE02/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:2e:4a:ca:26:f8:06:57:d0:cd:82:13:26:d5:ba:59:0f:c1: e6:19:83:47:ad:67:91:fc:03:d6:ef:bc:e3:2d:25:14:3a:57: e2:cf:26:db:ec:dd:c3:f3:5a:9e:57:57:de:75:0b:3d:4c:a3: 59:dd:a2:43:75:78:25:5e:b0:27:47:21:60:43:a7:75:37:53: 9e:0b:58:4d:28:bb:d5:56:68:eb:76:56:ee:15:a3:c9:83:c3: 45:3d:e2:d6:f8:dc:cb:c2:1b:4d:61:9b:22:f6:aa:6a:e0:08: 85:b9:16:5a:f7:53:e6:ed:ba:b6:b4:61:d7:bd:56:3c:97:4a: cd:92:ed:e6:d0:23:f2:19:44:c0:52:b9:18:ce:af:01:73:87: 86:a6:f1:72:91:3a:e9:90:03:90:26:e3:69:4f:e7:ed:bb:ba: eb:df:c9:70:ec:eb:88:f7:a4:8d:5f:ad:1a:59:d2:12:6c:e2: 5e:2c:96:18:1f:8e:d8:4f:17:25:72:2d:aa:4c:07:c8:c0:5f: 35:a2:96:67:2d:79:d6:92:d5:fe:a3:11:73:f0:55:0c:d9:54: 0e:fc:3a:91:18:61:41:e1:f8:c8:83:6d:cc:d5:70:7b:be:b3: 96:79:07:79:33:2c:5a:73:f5:04:4f:2d:5b:a3:5c:48:15:64: 1c:f8:66:01 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICF2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNFMzgxMTAvBgNVBAUTKEQ1NEJGMzk5QkUxQjY1OUIxMzIzMTRCODIxOTMzQTIw QkEzOEI5NkEwHhcNMjYwMzAyMDAzNDUzWhcNMjYwMzA5MDAzNDUzWjAYMRYwFAYD VQQDEw02OWE0ZGIyZS1hMmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyfyUIdibkfozbhvTGrz2Iozrk6mIv9jfyF7Sz+kuHmnN2pSP6l2QMYW6CpcE qnRa2414pHKnJAHbThyhTEwy1upeTfK83sv+UtDq1eaCIsqoLbowLu/AGzTSFVkN IDB+m9iDVfkZoqfQrejt6oNcMW4oECKR9MW7hCeryA+ZHDZ2qCREgxwIq+bePf2+ xemnVE+Z2dkMLqLwNQPLnxZoF0ui8TntaougDZsJBbYT+5NHyj7FnzAfrett8foS Jn+UfqArbgerm8x0sSu4bvsBQr4XSQ+ZZ8J1QyaazUDdMtRz91yilIS1YMY+8xan fAH8vhgKKCMqct5VtRBWUI8V0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEnX2/W1 /VZhpKwTmvMedITRzBE6MB8GA1UdIwQYMBaAFNVL85m+G2WbEyMUuCGTOiC6OLlq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0UzOC9BMTA4N0QzNjAw RUExMUU4QkM5M0IxNkJDNEY5QUUwMi8xVXZ6bWI0Ylpac1RJeFM0SVpNNklMbzR1 V28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFVdnptYjRiWlpzVEl4UzRJWk02SUxvNHVXby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0UzOC9BMTA4N0QzNjAwRUExMUU4QkM5M0IxNkJDNEY5QUUwMi8xVXZ6bWI0Ylpa c1RJeFM0SVpNNklMbzR1V28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHC5Kyib4BlfQzYITJtW6WQ/B5hmDR61nkfwD1u+84y0lFDpX4s8m2+zdw/Na nldX3nULPUyjWd2iQ3V4JV6wJ0chYEOndTdTngtYTSi71VZo63ZW7hWjyYPDRT3i 1vjcy8IbTWGbIvaqauAIhbkWWvdT5u26trRh171WPJdKzZLt5tAj8hlEwFK5GM6v AXOHhqbxcpE66ZADkCbjaU/n7bu669/JcOzriPekjV+tGlnSEmziXiyWGB+O2E8X JXItqkwHyMBfNaKWZy151pLV/qMRc/BVDNlUDvw6kRhhQeH4yINtzNVwe76zlnkH eTMsWnP1BE8tW6NcSBVkHPhmAQ== -----END CERTIFICATE-----Generated at Mon Mar 2 15:56:11 2026 by rpki-client