$ rpki-client -vvf rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.mft File: U7ksLaLVSegUcEB8yP8MdbjEty0.mft (raw, json) Hash identifier: UG6JzTajFuZEDF+dgH2+sOaE/p3E3SLQ0m9xBXHB0QQ= Subject key identifier: 05:FF:3D:0E:48:0D:4C:27:3E:FF:95:53:5C:CE:D2:B7:9E:62:D8:E3 Authority key identifier: 53:B9:2C:2D:A2:D5:49:E8:14:70:40:7C:C8:FF:0C:75:B8:C4:B7:2D Certificate issuer: /CN=A91940AE/serialNumber=53B92C2DA2D549E81470407CC8FF0C75B8C4B72D Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U7ksLaLVSegUcEB8yP8MdbjEty0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.mft Manifest number: 1D Signing time: Sun 01 Mar 2026 10:23:32 +0000 Manifest this update: Sun 01 Mar 2026 10:23:32 +0000 Manifest next update: Sun 08 Mar 2026 10:23:32 +0000 Files and hashes: 1: U7ksLaLVSegUcEB8yP8MdbjEty0.crl (hash: ACNFlxcSFdO8keOimVegh4cDdJf9WyipPLvP6eOWt/M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.crl rsync://rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U7ksLaLVSegUcEB8yP8MdbjEty0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:23:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91940AE, serialNumber=53B92C2DA2D549E81470407CC8FF0C75B8C4B72D Validity Not Before: Mar 1 10:23:32 2026 GMT Not After : Mar 8 10:23:32 2026 GMT Subject: CN=69a413a4-dd80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fe:fa:59:09:ef:1a:3e:3e:98:b9:eb:8a:78: f6:69:86:66:76:7c:da:64:9f:ef:19:d4:fc:cb:4c: c1:68:4e:73:76:8b:75:a9:69:73:e5:76:7c:8b:0a: 94:c5:f3:69:94:04:e3:be:98:e1:32:31:1c:58:1c: a5:cc:6e:9f:1e:8f:15:67:55:82:9b:48:44:84:d5: 89:33:66:2e:10:fe:03:23:f4:fd:2b:79:cc:4c:bf: 9a:b1:8c:5e:2a:3e:56:0e:81:9a:c5:92:c4:1e:d1: 06:21:ab:54:15:1a:4e:3c:0d:0c:f6:4d:d9:c2:1b: 99:6e:3f:f2:5f:58:21:0d:a0:83:42:3d:cf:ce:bf: c3:3a:db:74:12:98:ed:87:d1:0d:ef:11:53:07:88: 98:55:98:f5:f8:93:06:af:d5:a3:bc:63:d2:e0:51: 73:f9:83:bc:9b:f8:51:39:db:c4:b3:05:d5:ab:9b: 28:f1:c6:55:3a:3e:cb:21:ab:ae:1c:a9:ae:42:b0: c5:34:e4:74:b0:8f:30:0b:72:60:06:bb:61:50:41: 4a:53:03:b7:6e:70:77:18:c6:92:6e:40:75:24:f2: e7:ac:02:ab:49:29:73:0c:69:b8:ae:1f:7b:07:30: cf:5c:07:20:5a:b8:d3:d0:31:5f:e3:4c:b2:c8:c5: 61:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:FF:3D:0E:48:0D:4C:27:3E:FF:95:53:5C:CE:D2:B7:9E:62:D8:E3 X509v3 Authority Key Identifier: keyid:53:B9:2C:2D:A2:D5:49:E8:14:70:40:7C:C8:FF:0C:75:B8:C4:B7:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U7ksLaLVSegUcEB8yP8MdbjEty0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:d0:f2:3b:23:4b:43:6e:92:ce:fa:0f:31:6f:40:4a:ec:4f: ea:ff:d9:51:4a:0d:36:38:d8:d5:10:bd:95:a5:dc:fc:49:56: 6f:98:79:0a:78:2e:f9:87:53:9f:97:d0:2f:a6:a9:bc:bb:8d: 7d:e1:7a:3b:69:fe:62:b7:24:c1:26:30:05:26:0b:d6:36:c9: 58:cf:77:01:b2:f1:b4:b1:dc:bb:98:35:81:83:c5:77:80:bf: d0:6e:db:5a:9b:63:cb:c0:a2:b9:5d:00:d8:ea:13:99:06:d9: 1a:d5:8b:f9:89:aa:89:31:fc:35:fd:4c:cd:92:d6:e1:ba:2c: df:52:7e:f8:cc:b5:e6:9a:f0:04:2b:35:a8:18:cb:57:5f:60: ed:6b:55:5a:a4:54:86:e6:f9:c0:22:87:6a:4c:41:f1:55:55: 54:99:a0:7a:47:ed:72:b6:df:a8:af:d6:43:30:fc:fc:7a:49: 35:eb:78:b0:82:a9:df:79:23:69:bf:27:f6:f4:e2:de:f8:7d: bd:3b:26:4c:0e:9c:02:39:30:d9:2d:b4:b8:5a:42:65:fc:8b: d1:d2:6c:86:03:2b:4e:5a:51:5a:55:28:0d:ce:2d:ca:55:25: 6c:1a:cb:68:49:1b:db:2c:56:d3:71:5d:b1:9e:32:4a:2a:a7: bf:57:df:ba -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NDBBRTExMC8GA1UEBRMoNTNCOTJDMkRBMkQ1NDlFODE0NzA0MDdDQzhGRjBDNzVC OEM0QjcyRDAeFw0yNjAzMDExMDIzMzJaFw0yNjAzMDgxMDIzMzJaMBgxFjAUBgNV BAMTDTY5YTQxM2E0LWRkODAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3/vpZCe8aPj6YueuKePZphmZ2fNpkn+8Z1PzLTMFoTnN2i3WpaXPldnyLCpTF 82mUBOO+mOEyMRxYHKXMbp8ejxVnVYKbSESE1YkzZi4Q/gMj9P0recxMv5qxjF4q PlYOgZrFksQe0QYhq1QVGk48DQz2TdnCG5luP/JfWCENoINCPc/Ov8M623QSmO2H 0Q3vEVMHiJhVmPX4kwav1aO8Y9LgUXP5g7yb+FE528SzBdWrmyjxxlU6Psshq64c qa5CsMU05HSwjzALcmAGu2FQQUpTA7ducHcYxpJuQHUk8uesAqtJKXMMabiuH3sH MM9cByBauNPQMV/jTLLIxWHpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUBf89DkgN TCc+/5VTXM7St55i2OMwHwYDVR0jBBgwFoAUU7ksLaLVSegUcEB8yP8MdbjEty0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk0MEFFL0IzOEU1RkQ0RUY5 RDExRjBBMkQ2Qjc3OTY3NkY1NkJDL1U3a3NMYUxWU2VnVWNFQjh5UDhNZGJqRXR5 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVTdrc0xhTFZTZWdVY0VCOHlQOE1kYmpFdHkwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk0 MEFFL0IzOEU1RkQ0RUY5RDExRjBBMkQ2Qjc3OTY3NkY1NkJDL1U3a3NMYUxWU2Vn VWNFQjh5UDhNZGJqRXR5MC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDK0PI7I0tDbpLO+g8xb0BK7E/q/9lRSg02ONjVEL2Vpdz8SVZvmHkKeC75h1Of l9Avpqm8u4194Xo7af5ityTBJjAFJgvWNslYz3cBsvG0sdy7mDWBg8V3gL/Qbtta m2PLwKK5XQDY6hOZBtka1Yv5iaqJMfw1/UzNktbhuizfUn74zLXmmvAEKzWoGMtX X2Dta1VapFSG5vnAIodqTEHxVVVUmaB6R+1ytt+or9ZDMPz8ekk163iwgqnfeSNp vyf29OLe+H29OyZMDpwCOTDZLbS4WkJl/IvR0myGAytOWlFaVSgNzi3KVSVsGsto SRvbLFbTcV2xnjJKKqe/V9+6 -----END CERTIFICATE-----Generated at Mon Mar 2 02:17:24 2026 by rpki-client