$ rpki-client -vvf rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft File: UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft (raw, json) Hash identifier: 79gum83x8hSfLf+nF59EkWX1yvuNyLq7dkHHq8vw2lc= Subject key identifier: 43:41:82:F7:58:BC:C8:8B:37:63:E3:43:74:4E:70:43:D5:65:20:31 Authority key identifier: 53:32:F9:AF:30:52:CF:3F:85:EA:BD:D0:AA:D6:81:52:39:52:E6:56 Certificate issuer: /CN=A911BAD6/serialNumber=5332F9AF3052CF3F85EABDD0AAD681523952E656 Certificate serial: 02CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft Manifest number: 02B7 Signing time: Fri 17 Apr 2026 01:22:32 +0000 Manifest this update: Fri 17 Apr 2026 01:22:32 +0000 Manifest next update: Fri 24 Apr 2026 01:22:32 +0000 Files and hashes: 1: UzL5rzBSzz-F6r3QqtaBUjlS5lY.crl (hash: yFeb7YQkmQH1oug6NjANdKDaHbbQA6GMbgW+cl2oqIQ=) 2: B288EC9C870811F0A371DD81C4F9AE02.roa (hash: EbM83ZEvePXe1Ly5n5Vgc1KedeQFazDTw+k8LcCr0ls=) 3: 35CBA9EC70D311F08BF5B035C4F9AE02.roa (hash: nJ1vYtdsXfeT0k12QEfSHKja0MiLNjEpDEZqyjvHy0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.crl rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:22:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 714 (0x2ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BAD6, serialNumber=5332F9AF3052CF3F85EABDD0AAD681523952E656 Validity Not Before: Apr 17 01:22:32 2026 GMT Not After : Apr 24 01:22:32 2026 GMT Subject: CN=69e18b58-a6ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c8:10:f8:0a:7e:77:b2:de:97:88:17:35:d7: b5:89:cf:f8:9a:3b:63:81:2b:51:bb:3e:c2:8a:68: 0d:c5:45:61:f8:e5:3f:ef:63:94:3a:00:dd:4a:0e: e0:d9:ea:2a:08:5a:ca:85:d4:f1:27:bc:b0:08:6c: a4:ec:e2:01:12:44:a3:f4:74:e6:fd:55:08:7a:9c: d7:ec:c2:e8:5f:fb:74:b2:dc:e6:31:d2:89:d7:f6: 57:02:b4:6e:a3:25:d0:7a:8f:6b:3f:4a:9e:69:c2: 6b:b7:7e:2a:93:9c:30:88:e0:bb:15:62:71:9e:dd: a1:56:2b:70:71:0c:c9:d1:f6:c5:5e:57:82:9e:a7: da:ff:a9:92:10:40:dc:fe:d2:cf:bd:ce:1d:1d:3f: 36:0b:f0:2c:e6:15:0a:fb:b4:8a:07:9d:b7:be:78: 67:ae:72:67:95:28:7c:6d:66:84:5d:b8:d8:0d:eb: 10:60:d6:f7:26:c3:38:b5:85:81:99:1c:05:55:45: d0:1c:85:66:59:a7:e6:1e:05:c2:02:a2:35:5e:04: fd:55:06:e0:38:ae:e8:fe:03:d2:ce:0c:f4:2a:4c: ca:7f:f9:8f:80:c8:32:ba:16:0f:58:78:01:f7:86: 98:f6:b6:04:a3:60:ad:23:1c:64:49:d0:91:bc:f9: f0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:41:82:F7:58:BC:C8:8B:37:63:E3:43:74:4E:70:43:D5:65:20:31 X509v3 Authority Key Identifier: keyid:53:32:F9:AF:30:52:CF:3F:85:EA:BD:D0:AA:D6:81:52:39:52:E6:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:28:f1:de:7e:bd:c8:cd:c4:52:24:a8:b0:97:fe:ac:7f:60: 25:e8:07:9e:2f:bb:c9:12:9e:af:8c:84:8d:3a:50:84:8a:b0: 02:40:20:83:da:a0:e8:ff:4d:cc:ab:ae:b5:d1:f8:78:e4:d5: 48:6d:83:81:bb:6b:c5:fa:1f:5a:d8:39:9d:66:fc:27:fb:ab: 05:73:5f:9f:28:47:ed:98:96:1f:98:39:b2:21:d5:06:47:65: d9:f2:66:55:d9:c2:72:1d:33:24:47:91:98:46:7a:19:c8:1b: 58:b8:73:18:e1:64:19:a6:21:0b:ae:23:7d:59:43:43:16:86: ce:df:f7:75:f9:d8:28:56:35:fd:6f:dc:fd:fb:7b:d8:75:12: 90:4e:a9:32:cb:01:15:50:ac:01:b4:09:6a:5b:d9:db:3a:40: 37:4c:3a:dc:93:4a:db:d2:f9:70:fb:63:0d:46:96:c6:26:ff: 73:9d:ab:da:2a:bd:24:b0:f8:2f:e3:9f:2d:59:ac:64:aa:26: 90:36:dc:de:7f:4d:17:34:32:fd:b0:c0:77:a9:c2:37:3c:a0: cc:db:4d:58:e4:a3:a4:a2:43:e3:58:87:2a:8e:0f:8c:69:6f: 40:0f:3e:71:f9:6c:d2:06:14:cc:28:9b:37:6e:16:8e:b9:d9: 6e:5f:4e:a5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAsowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJBRDYxMTAvBgNVBAUTKDUzMzJGOUFGMzA1MkNGM0Y4NUVBQkREMEFBRDY4MTUy Mzk1MkU2NTYwHhcNMjYwNDE3MDEyMjMyWhcNMjYwNDI0MDEyMjMyWjAYMRYwFAYD VQQDEw02OWUxOGI1OC1hNmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2cgQ+Ap+d7Lel4gXNde1ic/4mjtjgStRuz7CimgNxUVh+OU/72OUOgDdSg7g 2eoqCFrKhdTxJ7ywCGyk7OIBEkSj9HTm/VUIepzX7MLoX/t0stzmMdKJ1/ZXArRu oyXQeo9rP0qeacJrt34qk5wwiOC7FWJxnt2hVitwcQzJ0fbFXleCnqfa/6mSEEDc /tLPvc4dHT82C/As5hUK+7SKB523vnhnrnJnlSh8bWaEXbjYDesQYNb3JsM4tYWB mRwFVUXQHIVmWafmHgXCAqI1XgT9VQbgOK7o/gPSzgz0KkzKf/mPgMgyuhYPWHgB 94aY9rYEo2CtIxxkSdCRvPnwbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFENBgvdY vMiLN2PjQ3ROcEPVZSAxMB8GA1UdIwQYMBaAFFMy+a8wUs8/heq90KrWgVI5UuZW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkFENi9ENjRGNEU5QzNB RjIxMUVEQTg0MkM1NzZDNEY5QUUwMi9Vekw1cnpCU3p6LUY2cjNRcXRhQlVqbFM1 bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V6TDVyekJTenotRjZyM1FxdGFCVWpsUzVsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkFENi9ENjRGNEU5QzNBRjIxMUVEQTg0MkM1NzZDNEY5QUUwMi9Vekw1cnpCU3p6 LUY2cjNRcXRhQlVqbFM1bFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnSjx3n69yM3EUiSosJf+rH9gJegHni+7yRKer4yEjTpQhIqwAkAgg9qg6P9N zKuutdH4eOTVSG2DgbtrxfofWtg5nWb8J/urBXNfnyhH7ZiWH5g5siHVBkdl2fJm VdnCch0zJEeRmEZ6GcgbWLhzGOFkGaYhC64jfVlDQxaGzt/3dfnYKFY1/W/c/ft7 2HUSkE6pMssBFVCsAbQJalvZ2zpAN0w63JNK29L5cPtjDUaWxib/c52r2iq9JLD4 L+OfLVmsZKomkDbc3n9NFzQy/bDAd6nCNzygzNtNWOSjpKJD41iHKo4PjGlvQA8+ cfls0gYUzCibN24WjrnZbl9OpQ== -----END CERTIFICATE-----Generated at Fri Apr 17 22:45:06 2026 by rpki-client