$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.mft File: UZO9WZSe-bfaEnIPfUbufEvKMOw.mft (raw, json) Hash identifier: CEUFFr2sR/5RPYS6opPmejg8P6KALI+E5RksbACgLbI= Subject key identifier: 5B:F2:6A:AB:79:B8:8F:23:21:A6:E5:96:58:ED:05:AF:CD:E1:86:46 Authority key identifier: 51:93:BD:59:94:9E:F9:B7:DA:12:72:0F:7D:46:EE:7C:4B:CA:30:EC Certificate issuer: /CN=A91A1D8C/serialNumber=5193BD59949EF9B7DA12720F7D46EE7C4BCA30EC Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZO9WZSe-bfaEnIPfUbufEvKMOw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.mft Manifest number: 32 Signing time: Sun 01 Mar 2026 10:07:03 +0000 Manifest this update: Sun 01 Mar 2026 10:07:02 +0000 Manifest next update: Sun 08 Mar 2026 10:07:02 +0000 Files and hashes: 1: UZO9WZSe-bfaEnIPfUbufEvKMOw.crl (hash: KssxV+s02denGYyZ/qK0cqB54HLQy9f+4NU2lyV/s+M=) 2: DF3F877ED01D11F09BB99C37C4F9AE02.roa (hash: tgtytQmr6pQ+PGiMqkoXYyGsCLfeIgQnFjuAN5av8ec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.crl rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZO9WZSe-bfaEnIPfUbufEvKMOw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1D8C, serialNumber=5193BD59949EF9B7DA12720F7D46EE7C4BCA30EC Validity Not Before: Mar 1 10:07:02 2026 GMT Not After : Mar 8 10:07:02 2026 GMT Subject: CN=69a40fc7-bfcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b0:27:39:ba:c9:28:91:b1:43:21:34:8e:05: e0:b0:7b:a6:52:54:c9:81:19:37:72:b5:d7:0c:d2: d8:b5:5e:1e:bc:6a:ed:02:32:9a:a1:6a:41:52:82: 69:b5:87:c9:4f:d4:aa:c9:0f:a9:60:86:5d:c6:76: 49:9a:0e:a8:c4:df:a6:75:e1:2a:91:35:04:75:f6: 5f:ad:41:a5:74:ba:a0:1a:7a:5a:35:a6:0d:85:56: 16:5b:3a:2f:61:ab:a9:d4:30:d5:11:a8:a9:14:27: d3:27:7b:41:e3:b5:3e:16:83:60:b3:71:b4:8b:99: a1:52:77:5a:cf:bb:66:af:1d:51:2a:f1:e8:22:6d: af:27:17:9f:c1:0c:99:d1:02:f5:04:fb:5b:11:e4: d1:e6:59:8f:cc:fb:0a:2b:7c:49:78:7f:63:68:8b: f1:27:96:98:c6:6d:ef:92:d9:3d:9f:6d:76:67:3b: ab:f6:e5:e8:4b:f2:3b:bf:59:a5:6a:8c:7c:95:72: 3b:2b:ec:0d:49:b0:6a:6d:ec:dc:61:be:ab:61:58: d2:60:83:52:bc:48:08:f1:40:fb:4c:92:9b:94:6a: 2f:46:14:88:d1:6a:08:6a:56:96:a2:d4:20:91:b4: 64:7c:fd:c0:7a:14:1c:07:7c:8c:33:6e:de:b1:fa: 18:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F2:6A:AB:79:B8:8F:23:21:A6:E5:96:58:ED:05:AF:CD:E1:86:46 X509v3 Authority Key Identifier: keyid:51:93:BD:59:94:9E:F9:B7:DA:12:72:0F:7D:46:EE:7C:4B:CA:30:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZO9WZSe-bfaEnIPfUbufEvKMOw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:70:1f:64:c9:fa:29:16:25:c1:1d:b6:d5:fe:9d:24:90:72: 5f:a7:32:b0:5e:6b:48:90:f4:bd:6e:eb:73:26:9e:c3:b7:72: 2e:78:4f:21:12:ea:65:6c:cb:b8:ea:b9:ee:28:a6:0e:17:8d: c6:77:64:55:b6:56:87:fa:a2:13:d9:14:e8:d9:04:04:6e:f4: 24:ad:45:eb:e9:8d:43:3b:1a:74:b3:84:86:2c:da:98:0b:db: 43:ea:7d:44:64:13:7c:5f:cc:0b:05:67:36:5d:6d:a4:77:da: 92:40:0b:fe:d8:91:21:2c:28:dc:44:db:ea:0f:d5:a6:9a:d6: 18:03:a5:6b:30:9e:9f:67:8c:88:39:ce:cd:73:14:05:65:93: 1d:64:c1:94:00:94:de:95:04:35:a6:15:53:23:8e:62:f6:82: 6b:0c:eb:2a:8d:72:25:d9:b2:00:37:19:ba:df:d7:a2:34:3b: b6:45:09:ea:8d:56:9f:04:25:40:e3:ca:54:0e:ba:ba:6f:26: b0:1f:5c:59:f1:d4:98:07:1e:e6:3d:64:a8:a3:15:f1:df:24: 4e:dc:b3:02:1f:e3:8f:8e:ba:fa:e1:98:bc:7b:3e:fc:ca:62: 47:2f:08:37:81:71:5e:4f:39:1e:30:09:98:15:5f:a6:4c:a1: 96:79:70:81 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MUQ4QzExMC8GA1UEBRMoNTE5M0JENTk5NDlFRjlCN0RBMTI3MjBGN0Q0NkVFN0M0 QkNBMzBFQzAeFw0yNjAzMDExMDA3MDJaFw0yNjAzMDgxMDA3MDJaMBgxFjAUBgNV BAMTDTY5YTQwZmM3LWJmY2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/sCc5uskokbFDITSOBeCwe6ZSVMmBGTdytdcM0ti1Xh68au0CMpqhakFSgmm1 h8lP1KrJD6lghl3GdkmaDqjE36Z14SqRNQR19l+tQaV0uqAaelo1pg2FVhZbOi9h q6nUMNURqKkUJ9Mne0HjtT4Wg2CzcbSLmaFSd1rPu2avHVEq8egiba8nF5/BDJnR AvUE+1sR5NHmWY/M+worfEl4f2Noi/EnlpjGbe+S2T2fbXZnO6v25ehL8ju/WaVq jHyVcjsr7A1JsGpt7NxhvqthWNJgg1K8SAjxQPtMkpuUai9GFIjRaghqVpai1CCR tGR8/cB6FBwHfIwzbt6x+hg3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUW/Jqq3m4 jyMhpuWWWO0Fr83hhkYwHwYDVR0jBBgwFoAUUZO9WZSe+bfaEnIPfUbufEvKMOww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUExRDhDL0EwODE5OTM0RDAx NjExRjBBRDQ5N0E3RUM0RjlBRTAyL1VaTzlXWlNlLWJmYUVuSVBmVWJ1ZkV2S01P dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVVpPOVdaU2UtYmZhRW5JUGZVYnVmRXZLTU93LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEx RDhDL0EwODE5OTM0RDAxNjExRjBBRDQ5N0E3RUM0RjlBRTAyL1VaTzlXWlNlLWJm YUVuSVBmVWJ1ZkV2S01Pdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBacB9kyfopFiXBHbbV/p0kkHJfpzKwXmtIkPS9butzJp7Dt3IueE8hEuplbMu4 6rnuKKYOF43Gd2RVtlaH+qIT2RTo2QQEbvQkrUXr6Y1DOxp0s4SGLNqYC9tD6n1E ZBN8X8wLBWc2XW2kd9qSQAv+2JEhLCjcRNvqD9WmmtYYA6VrMJ6fZ4yIOc7NcxQF ZZMdZMGUAJTelQQ1phVTI45i9oJrDOsqjXIl2bIANxm639eiNDu2RQnqjVafBCVA 48pUDrq6byawH1xZ8dSYBx7mPWSooxXx3yRO3LMCH+OPjrr64Zi8ez78ymJHLwg3 gXFeTzkeMAmYFV+mTKGWeXCB -----END CERTIFICATE-----Generated at Mon Mar 2 00:08:58 2026 by rpki-client