$ rpki-client -vvf rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/U-fOlDUz-NPAVknylGgqJvgU8V8.mft File: U-fOlDUz-NPAVknylGgqJvgU8V8.mft (raw, json) Hash identifier: r0c5eu8j+MJbUWCAjwUtXb99QRSOYwqtxbQ6cszP7mw= Subject key identifier: 9D:F2:E9:F2:AC:74:E3:AC:F7:19:1D:85:3A:DD:7E:89:3B:83:F2:B1 Authority key identifier: 53:E7:CE:94:35:33:F8:D3:C0:56:49:F2:94:68:2A:26:F8:14:F1:5F Certificate issuer: /CN=A9144391/serialNumber=53E7CE943533F8D3C05649F294682A26F814F15F Certificate serial: 0121 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-fOlDUz-NPAVknylGgqJvgU8V8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/U-fOlDUz-NPAVknylGgqJvgU8V8.mft Manifest number: 0118 Signing time: Mon 02 Mar 2026 14:05:52 +0000 Manifest this update: Mon 02 Mar 2026 14:05:51 +0000 Manifest next update: Mon 09 Mar 2026 14:05:51 +0000 Files and hashes: 1: U-fOlDUz-NPAVknylGgqJvgU8V8.crl (hash: +jkVpjrsLtc1z4Ykozz7S1NKfpsQvq/RnJEFrTegMdI=) 2: BC213E3C70AF11EF9C9B2C0EC4F9AE02.roa (hash: i6ZlnAPU3uWxh5AMrqKrLRC7uPLe5azEThc7wGn+rD4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/U-fOlDUz-NPAVknylGgqJvgU8V8.crl rsync://rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/U-fOlDUz-NPAVknylGgqJvgU8V8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-fOlDUz-NPAVknylGgqJvgU8V8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 14:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144391, serialNumber=53E7CE943533F8D3C05649F294682A26F814F15F Validity Not Before: Mar 2 14:05:51 2026 GMT Not After : Mar 9 14:05:51 2026 GMT Subject: CN=69a59940-59db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5c:ab:96:6b:40:de:bf:e2:33:12:8c:ae:e2: 00:09:43:5b:d2:fc:99:6b:a1:b1:b0:f1:f0:cb:3d: 9e:af:d2:e8:98:17:36:cb:34:c8:50:74:98:97:d2: 77:42:cb:d0:38:c4:0c:0b:cc:2a:04:15:a5:60:53: 63:d0:90:c4:8a:53:9f:05:9d:7f:88:55:08:b5:a0: 23:d1:a3:74:a4:f6:66:35:e5:bd:f0:d0:f4:a3:4d: 52:88:cb:c6:d1:1e:4d:b4:25:41:f3:fd:9b:c0:22: 3a:86:0c:c1:ac:20:57:d1:bb:e9:9e:5d:fe:92:17: 8b:c9:c9:1e:9f:37:4f:ec:ef:6b:d5:75:32:db:2f: bc:3a:2b:86:91:f9:e0:b1:06:86:09:68:3e:e9:96: 98:a4:22:35:44:ea:9e:e8:71:d2:33:fa:0a:77:d4: 73:c2:ac:ee:c2:ff:ab:e6:f1:58:c7:55:2c:84:08: bc:7d:59:ca:82:2f:a7:f7:cb:df:f0:c5:4a:de:c3: 04:6a:f8:bb:42:62:3c:06:51:96:43:9f:39:18:a6: f6:9c:8a:ed:06:62:35:0a:df:71:62:2e:02:5a:db: 64:82:d9:2d:79:c7:90:6f:5d:39:f4:37:28:c6:9a: f8:83:55:a9:d6:9c:ed:f6:29:66:cd:0b:33:32:1c: 16:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:F2:E9:F2:AC:74:E3:AC:F7:19:1D:85:3A:DD:7E:89:3B:83:F2:B1 X509v3 Authority Key Identifier: keyid:53:E7:CE:94:35:33:F8:D3:C0:56:49:F2:94:68:2A:26:F8:14:F1:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/U-fOlDUz-NPAVknylGgqJvgU8V8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-fOlDUz-NPAVknylGgqJvgU8V8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/U-fOlDUz-NPAVknylGgqJvgU8V8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:fd:f3:95:bb:c8:9f:83:8e:45:3f:68:fb:9a:3d:f4:ee:f6: ac:ba:48:ed:a7:fc:69:19:0b:88:a7:90:73:8a:03:cd:54:15: 47:02:e4:eb:6d:ec:a8:12:22:ff:0a:e7:d9:2c:bd:1d:e7:aa: ff:82:67:c0:28:66:3e:79:27:fb:7b:9c:cd:7f:97:d5:33:cb: 22:49:88:0d:20:00:9c:a2:62:75:e5:0e:c2:6f:36:04:5d:f3: 95:57:e3:9c:b4:81:ba:ad:15:f6:97:22:00:f8:1e:59:14:41: 8c:b1:00:07:c9:b6:c6:d4:da:a5:e5:46:97:51:66:4b:aa:71: 61:7e:a9:6e:0e:b9:bc:27:f3:49:ac:5c:c6:3f:b7:cf:a0:5e: 1a:ea:5b:ea:3c:f5:29:70:c2:27:c6:46:35:9f:97:3d:8c:f4: 96:c3:a1:f2:50:2f:5b:6d:8e:9e:6d:2d:4c:e7:bf:d1:84:23: 7d:0b:f6:da:a8:ec:4a:f3:53:42:a8:cd:66:6d:e8:a9:65:73: 41:d5:8e:2c:51:6b:27:1e:45:a0:84:cd:e7:87:63:bb:56:39: c4:98:26:ca:c2:8a:f1:03:66:80:dc:07:de:e2:af:46:ed:61: d1:a0:07:8b:c5:94:36:77:4c:52:1a:be:c8:f4:e9:1f:59:10: 68:c3:b7:b8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQzOTExMTAvBgNVBAUTKDUzRTdDRTk0MzUzM0Y4RDNDMDU2NDlGMjk0NjgyQTI2 RjgxNEYxNUYwHhcNMjYwMzAyMTQwNTUxWhcNMjYwMzA5MTQwNTUxWjAYMRYwFAYD VQQDEw02OWE1OTk0MC01OWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApFyrlmtA3r/iMxKMruIACUNb0vyZa6GxsPHwyz2er9LomBc2yzTIUHSYl9J3 QsvQOMQMC8wqBBWlYFNj0JDEilOfBZ1/iFUItaAj0aN0pPZmNeW98ND0o01SiMvG 0R5NtCVB8/2bwCI6hgzBrCBX0bvpnl3+kheLyckenzdP7O9r1XUy2y+8OiuGkfng sQaGCWg+6ZaYpCI1ROqe6HHSM/oKd9Rzwqzuwv+r5vFYx1UshAi8fVnKgi+n98vf 8MVK3sMEavi7QmI8BlGWQ585GKb2nIrtBmI1Ct9xYi4CWttkgtkteceQb1059Dco xpr4g1Wp1pzt9ilmzQszMhwWOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ3y6fKs dOOs9xkdhTrdfok7g/KxMB8GA1UdIwQYMBaAFFPnzpQ1M/jTwFZJ8pRoKib4FPFf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDM5MS8wMTlGRjE0RTcw QUUxMUVGQTg0OEIwNjhDNEY5QUUwMi9VLWZPbERVei1OUEFWa255bEdncUp2Z1U4 VjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1UtZk9sRFV6LU5QQVZrbnlsR2dxSnZnVThWOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDM5MS8wMTlGRjE0RTcwQUUxMUVGQTg0OEIwNjhDNEY5QUUwMi9VLWZPbERVei1O UEFWa255bEdncUp2Z1U4VjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlv3zlbvIn4OORT9o+5o99O72rLpI7af8aRkLiKeQc4oDzVQVRwLk623sqBIi /wrn2Sy9Heeq/4JnwChmPnkn+3uczX+X1TPLIkmIDSAAnKJideUOwm82BF3zlVfj nLSBuq0V9pciAPgeWRRBjLEAB8m2xtTapeVGl1FmS6pxYX6pbg65vCfzSaxcxj+3 z6BeGupb6jz1KXDCJ8ZGNZ+XPYz0lsOh8lAvW22Onm0tTOe/0YQjfQv22qjsSvNT QqjNZm3oqWVzQdWOLFFrJx5FoITN54dju1Y5xJgmysKK8QNmgNwH3uKvRu1h0aAH i8WUNndMUhq+yPTpH1kQaMO3uA== -----END CERTIFICATE-----Generated at Mon Mar 2 18:00:27 2026 by rpki-client