$ rpki-client -vvf rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.mft File: U_b3klO824sdFxgs5PGdOf1JnfU.mft (raw, json) Hash identifier: wFzHIzkNAVyNDSil188q+DvdDouVbt2uOgUgTT1FI0w= Subject key identifier: 35:E6:74:8C:A1:E2:2E:50:A0:F1:12:0C:D1:FC:59:E6:2A:AA:AD:EF Authority key identifier: 53:F6:F7:92:53:BC:DB:8B:1D:17:18:2C:E4:F1:9D:39:FD:49:9D:F5 Certificate issuer: /CN=A9154340/serialNumber=53F6F79253BCDB8B1D17182CE4F19D39FD499DF5 Certificate serial: 06CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U_b3klO824sdFxgs5PGdOf1JnfU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.mft Manifest number: 06C8 Signing time: Sat 28 Feb 2026 22:45:59 +0000 Manifest this update: Sat 28 Feb 2026 22:45:59 +0000 Manifest next update: Sat 07 Mar 2026 22:45:59 +0000 Files and hashes: 1: U_b3klO824sdFxgs5PGdOf1JnfU.crl (hash: YugtGb4/Kh9yfDuwfSs4lSHovtN1YbOmmvVGmegVey4=) 2: 28D1785891E311EBA138E330C4F9AE02.roa (hash: jZlWStDyUEA5NOntBzhPKNNSuOk9+V2s5MhuAGQtCUc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.crl rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U_b3klO824sdFxgs5PGdOf1JnfU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 22:45:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1741 (0x6cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154340, serialNumber=53F6F79253BCDB8B1D17182CE4F19D39FD499DF5 Validity Not Before: Feb 28 22:45:59 2026 GMT Not After : Mar 7 22:45:59 2026 GMT Subject: CN=69a37027-10d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:cd:19:bf:4e:ac:34:89:0c:ce:2b:91:9d:4f: 41:ab:9d:58:27:da:25:cc:7d:eb:37:14:2e:32:62: e1:53:d7:d6:fb:e5:a8:ae:29:52:81:87:cf:99:de: 38:05:a8:d2:c5:00:51:db:28:84:23:9c:a3:c3:74: c3:4d:c9:c8:61:12:91:3e:bf:5e:83:e9:ee:5c:40: 68:cd:f4:52:b2:b4:6c:28:3c:34:b8:19:21:26:74: b0:ae:d9:b5:97:12:6b:10:e3:55:28:33:2f:9c:ac: c2:2e:f8:cd:c1:8d:6b:12:22:48:dd:e0:b6:cc:93: 80:5e:98:0e:4c:e4:b7:cd:8b:2a:d9:ad:b7:37:5d: a4:2e:ef:8a:6d:2c:e7:7b:c6:82:53:2b:2c:00:c3: 4d:38:39:63:a7:2c:07:a2:2f:8b:e6:e6:03:c1:55: a9:5b:21:4c:07:c1:4d:1d:53:39:b9:7d:c7:e1:6c: 54:32:2e:d8:a0:d3:7a:75:12:bb:dd:e8:b4:38:13: bd:72:31:c0:34:e8:c0:99:6c:af:b4:df:fc:1d:8a: 0e:09:6e:8f:be:64:bc:a9:01:f5:a5:2a:89:39:3a: 96:11:1e:bd:bb:ce:5f:5b:87:80:9d:82:d0:85:7b: ba:78:28:aa:2b:60:ab:43:c4:2d:34:fb:41:37:5f: 11:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:E6:74:8C:A1:E2:2E:50:A0:F1:12:0C:D1:FC:59:E6:2A:AA:AD:EF X509v3 Authority Key Identifier: keyid:53:F6:F7:92:53:BC:DB:8B:1D:17:18:2C:E4:F1:9D:39:FD:49:9D:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U_b3klO824sdFxgs5PGdOf1JnfU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:5d:8e:43:3e:f3:d7:14:f8:2e:a5:4e:a0:8f:26:d4:6e:17: 74:ea:f4:fe:e0:d6:0a:f2:c5:7b:a8:54:35:08:ef:04:d0:b8: af:2c:c5:39:53:31:73:a5:5e:c8:74:f4:26:54:63:a2:09:04: f0:5b:54:5b:6a:72:dd:2f:0b:98:d4:bd:2c:06:f4:83:a0:db: 98:0c:62:6a:14:a6:24:78:1a:13:9b:bd:ff:e6:92:a1:dc:e0: 38:7f:b1:a8:f3:45:8e:33:b8:09:af:6c:74:80:a4:f0:c1:8e: aa:3d:f0:84:a3:7f:23:ba:01:13:64:24:82:1a:e0:a9:05:4a: 69:42:ee:37:41:1e:d0:fc:77:a3:9b:91:43:64:f2:07:51:59: 92:41:b5:4e:51:9f:10:e4:5f:ef:04:22:c6:0d:97:2e:8d:ec: ea:56:9b:b1:db:73:9f:98:83:7a:88:0d:6a:03:3b:7e:a9:28: b8:bd:50:28:ed:5b:3f:b9:c9:71:b2:ef:42:ff:a9:7d:89:f3: 11:b4:5e:cd:fa:e9:e0:97:00:07:27:9b:52:db:3a:8e:94:0b: 2a:33:76:51:eb:45:90:e9:44:25:ae:86:08:35:62:44:9f:3f: 51:6f:c9:69:12:c5:19:d8:be:d1:20:da:71:95:ac:f7:d1:37: 43:13:1f:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBs0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQzNDAxMTAvBgNVBAUTKDUzRjZGNzkyNTNCQ0RCOEIxRDE3MTgyQ0U0RjE5RDM5 RkQ0OTlERjUwHhcNMjYwMjI4MjI0NTU5WhcNMjYwMzA3MjI0NTU5WjAYMRYwFAYD VQQDDA02OWEzNzAyNy0xMGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1s0Zv06sNIkMziuRnU9Bq51YJ9olzH3rNxQuMmLhU9fW++WorilSgYfPmd44 BajSxQBR2yiEI5yjw3TDTcnIYRKRPr9eg+nuXEBozfRSsrRsKDw0uBkhJnSwrtm1 lxJrEONVKDMvnKzCLvjNwY1rEiJI3eC2zJOAXpgOTOS3zYsq2a23N12kLu+KbSzn e8aCUyssAMNNODljpywHoi+L5uYDwVWpWyFMB8FNHVM5uX3H4WxUMi7YoNN6dRK7 3ei0OBO9cjHANOjAmWyvtN/8HYoOCW6PvmS8qQH1pSqJOTqWER69u85fW4eAnYLQ hXu6eCiqK2CrQ8QtNPtBN18RlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDXmdIyh 4i5QoPESDNH8WeYqqq3vMB8GA1UdIwQYMBaAFFP295JTvNuLHRcYLOTxnTn9SZ31 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDM0MC83QzFGRDFEMjkx RTExMUVCQjY4NzhDMkVDNEY5QUUwMi9VX2Iza2xPODI0c2RGeGdzNVBHZE9mMUpu ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VfYjNrbE84MjRzZEZ4Z3M1UEdkT2YxSm5mVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDM0MC83QzFGRDFEMjkxRTExMUVCQjY4NzhDMkVDNEY5QUUwMi9VX2Iza2xPODI0 c2RGeGdzNVBHZE9mMUpuZlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzl2OQz7z1xT4LqVOoI8m1G4XdOr0/uDWCvLFe6hUNQjvBNC4ryzFOVMxc6Ve yHT0JlRjogkE8FtUW2py3S8LmNS9LAb0g6DbmAxiahSmJHgaE5u9/+aSodzgOH+x qPNFjjO4Ca9sdICk8MGOqj3whKN/I7oBE2QkghrgqQVKaULuN0Ee0Px3o5uRQ2Ty B1FZkkG1TlGfEORf7wQixg2XLo3s6labsdtzn5iDeogNagM7fqkouL1QKO1bP7nJ cbLvQv+pfYnzEbRezfrp4JcAByebUts6jpQLKjN2UetFkOlEJa6GCDViRJ8/UW/J aRLFGdi+0SDacZWs99E3QxMfAw== -----END CERTIFICATE-----Generated at Sun Mar 1 23:57:56 2026 by rpki-client