$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft File: UmRCqpPf8MUTmmF7DeZFtznmvs0.mft (raw, json) Hash identifier: YSJrNO1t4tmRe8z52ucBEVbJ8dwN6Pfl+5iGVDcFu8A= Subject key identifier: 87:71:21:B0:D2:2D:53:AC:1D:74:2F:AA:5C:71:F5:99:88:A6:97:AE Authority key identifier: 52:64:42:AA:93:DF:F0:C5:13:9A:61:7B:0D:E6:45:B7:39:E6:BE:CD Certificate issuer: /CN=A9140D7D/serialNumber=526442AA93DFF0C5139A617B0DE645B739E6BECD Certificate serial: 0A7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft Manifest number: 0A70 Signing time: Mon 02 Mar 2026 00:19:35 +0000 Manifest this update: Mon 02 Mar 2026 00:19:33 +0000 Manifest next update: Mon 09 Mar 2026 00:19:33 +0000 Files and hashes: 1: UmRCqpPf8MUTmmF7DeZFtznmvs0.crl (hash: CrthVFR+tWdwALQ0SsQSN/xiJm/nZyn80WY8BItR6y4=) 2: 1C9AB3F67D6711EA90858415C4F9AE02.roa (hash: 3EUvPkX0SOOlZadKwQdE/Ttb0l8oKRF3mN8x9otpD/E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.crl rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:19:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2684 (0xa7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140D7D, serialNumber=526442AA93DFF0C5139A617B0DE645B739E6BECD Validity Not Before: Mar 2 00:19:33 2026 GMT Not After : Mar 9 00:19:33 2026 GMT Subject: CN=69a4d797-957e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:04:c6:b2:46:35:0d:d8:8e:10:61:7c:cc:4e: 71:84:0f:34:ff:6b:ba:ff:15:a4:b2:73:77:c3:fc: 8a:8d:48:e8:40:a0:01:9a:94:25:d4:44:de:d6:1e: 4f:9e:56:ac:83:9e:05:b7:f6:d1:80:8f:d9:ce:5d: 1b:47:b1:4e:0d:41:85:be:1c:a7:9f:f7:cd:7a:ee: 20:10:46:19:a3:59:d5:84:82:40:9e:56:eb:33:80: 0e:b0:f5:07:8e:84:18:7e:f4:1a:77:71:ae:58:19: 0e:ae:a8:3a:ba:21:a8:94:45:64:75:85:87:9a:a0: 95:98:19:80:2a:b3:ff:94:42:88:a3:7e:c8:d0:a8: 08:3d:78:e9:7e:5e:e2:10:98:04:7c:47:2e:1a:f1: 0d:54:b5:32:5a:0c:43:ff:0c:a2:8c:7e:f6:6e:02: 86:b0:96:20:41:26:40:d7:f2:4e:9e:e5:f2:0c:67: 35:bd:c8:b8:c0:c5:23:c5:41:ab:40:75:7f:30:75: ae:6b:b6:36:a4:16:90:15:5e:dc:b7:59:38:89:8b: 05:9c:a9:b4:8a:8e:24:65:a2:00:99:52:24:35:5f: 6f:fb:f6:ba:de:b9:a7:18:43:21:ea:ad:cf:a3:20: da:94:3e:31:77:8f:23:66:9a:ae:00:a5:c9:0a:6e: 18:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:71:21:B0:D2:2D:53:AC:1D:74:2F:AA:5C:71:F5:99:88:A6:97:AE X509v3 Authority Key Identifier: keyid:52:64:42:AA:93:DF:F0:C5:13:9A:61:7B:0D:E6:45:B7:39:E6:BE:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:ed:f3:6d:93:d5:49:ec:83:36:9d:05:78:85:66:03:3b:91: 8e:ec:11:70:b4:0b:e9:67:a1:6c:5c:64:76:be:f5:9a:dd:ea: e8:ae:06:3d:57:ff:61:c1:23:38:84:b7:51:c3:b0:06:42:e6: 36:34:8a:ec:6c:af:55:a0:42:47:77:25:be:54:43:3e:10:b4: 13:83:57:d3:48:28:2f:c8:75:b3:30:78:0b:fd:d9:a6:6b:05: 5c:25:6e:7d:2c:15:5d:60:40:5e:b3:0a:8e:cb:eb:dd:92:bb: a7:52:f1:81:2d:94:37:fc:5f:16:f9:06:43:df:96:1b:f0:72: 55:07:49:65:88:23:5a:2d:11:4e:8b:e0:83:18:94:c3:c7:f0: 1c:43:3a:df:7d:32:68:96:a0:33:36:7d:9a:56:fe:ed:0f:87: 39:0f:82:08:14:04:6e:d7:0a:6b:80:61:9f:72:5c:00:ea:3a: 71:24:94:86:df:a1:01:ce:af:d7:15:d4:3a:31:5d:53:04:d9: 20:18:3f:98:f4:8c:33:7d:38:94:a2:2d:d2:a3:8c:56:e4:de: b6:37:33:3f:91:e2:94:9f:f7:9f:4d:e5:15:6b:cf:3d:b1:ba: a9:e9:d3:dc:3d:2a:b2:ad:8f:41:cc:13:6f:a0:a0:ba:e8:0d: da:24:62:15 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBEN0QxMTAvBgNVBAUTKDUyNjQ0MkFBOTNERkYwQzUxMzlBNjE3QjBERTY0NUI3 MzlFNkJFQ0QwHhcNMjYwMzAyMDAxOTMzWhcNMjYwMzA5MDAxOTMzWjAYMRYwFAYD VQQDEw02OWE0ZDc5Ny05NTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlwTGskY1DdiOEGF8zE5xhA80/2u6/xWksnN3w/yKjUjoQKABmpQl1ETe1h5P nlasg54Ft/bRgI/Zzl0bR7FODUGFvhynn/fNeu4gEEYZo1nVhIJAnlbrM4AOsPUH joQYfvQad3GuWBkOrqg6uiGolEVkdYWHmqCVmBmAKrP/lEKIo37I0KgIPXjpfl7i EJgEfEcuGvENVLUyWgxD/wyijH72bgKGsJYgQSZA1/JOnuXyDGc1vci4wMUjxUGr QHV/MHWua7Y2pBaQFV7ct1k4iYsFnKm0io4kZaIAmVIkNV9v+/a63rmnGEMh6q3P oyDalD4xd48jZpquAKXJCm4Y5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIdxIbDS LVOsHXQvqlxx9ZmIppeuMB8GA1UdIwQYMBaAFFJkQqqT3/DFE5phew3mRbc55r7N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEQ3RC83MTZEMkYzNjdE NjYxMUVBQjMyQjNCMTVDNEY5QUUwMi9VbVJDcXBQZjhNVVRtbUY3RGVaRnR6bm12 czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VtUkNxcFBmOE1VVG1tRjdEZVpGdHpubXZzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEQ3RC83MTZEMkYzNjdENjYxMUVBQjMyQjNCMTVDNEY5QUUwMi9VbVJDcXBQZjhN VVRtbUY3RGVaRnR6bm12czAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmu3zbZPVSeyDNp0FeIVmAzuRjuwRcLQL6WehbFxkdr71mt3q6K4GPVf/YcEj OIS3UcOwBkLmNjSK7GyvVaBCR3clvlRDPhC0E4NX00goL8h1szB4C/3ZpmsFXCVu fSwVXWBAXrMKjsvr3ZK7p1LxgS2UN/xfFvkGQ9+WG/ByVQdJZYgjWi0RTovggxiU w8fwHEM6330yaJagMzZ9mlb+7Q+HOQ+CCBQEbtcKa4Bhn3JcAOo6cSSUht+hAc6v 1xXUOjFdUwTZIBg/mPSMM304lKIt0qOMVuTetjczP5HilJ/3n03lFWvPPbG6qenT 3D0qsq2PQcwTb6CguugN2iRiFQ== -----END CERTIFICATE-----Generated at Mon Mar 2 09:01:32 2026 by rpki-client