$ rpki-client -vvf rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft File: uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft (raw, json) Hash identifier: 0fxm6/uN2B+owT6XZJpG9QGGDANMsFXXduLMh+UWh/U= Subject key identifier: 87:5D:E8:1E:6B:E3:22:61:8D:A8:28:C5:D9:F0:46:ED:37:0E:69:9A Authority key identifier: B8:4C:23:96:9E:D7:9C:0E:31:C1:3C:14:50:01:2E:22:46:D3:F9:4D Certificate issuer: /CN=A911F2DF/serialNumber=B84C23969ED79C0E31C13C1450012E2246D3F94D Certificate serial: 017D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uEwjlp7XnA4xwTwUUAEuIkbT-U0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft Manifest number: 0165 Signing time: Fri 17 Apr 2026 04:37:50 +0000 Manifest this update: Fri 17 Apr 2026 04:37:49 +0000 Manifest next update: Fri 24 Apr 2026 04:37:49 +0000 Files and hashes: 1: uEwjlp7XnA4xwTwUUAEuIkbT-U0.crl (hash: dkAhswXb0sWCMLmOiA/fil9z8aNvJVqkPETInP2HUyQ=) 2: 92E390AC958E11EF87A4040BC4F9AE02.roa (hash: azgGtSD/uB/29bfpIAysj04e8edmypE0QRYUI+zBDUA=) 3: 7FAE29E8958E11EF9CC0DD0AC4F9AE02.roa (hash: OZGa2rU+4rNVvbrWfqjM0L2gnyA1iPzl5WMDdvuaIDk=) 4: 659B37E4958E11EFAFF1870AC4F9AE02.roa (hash: nhvswsvcHLgOS6ioO6sFGPKfZkM+ms9sdi1nqkmRphw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.crl rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uEwjlp7XnA4xwTwUUAEuIkbT-U0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 381 (0x17d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F2DF, serialNumber=B84C23969ED79C0E31C13C1450012E2246D3F94D Validity Not Before: Apr 17 04:37:49 2026 GMT Not After : Apr 24 04:37:49 2026 GMT Subject: CN=69e1b91e-7d56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:01:1e:64:19:10:ce:58:15:02:27:ff:67:a9: cb:17:c3:5d:02:39:7d:0d:fe:7d:fd:a5:8e:88:ba: 63:9d:12:5b:3e:7f:fd:41:5a:e9:f2:d8:96:dc:a7: eb:b2:37:38:7f:09:dc:7d:ad:5b:81:7b:11:c5:90: 39:1d:6f:62:2d:c4:85:59:cd:0c:1d:67:f0:2b:81: bf:59:c9:39:fe:28:66:47:f0:26:74:e4:ed:0e:31: b1:b0:bd:9d:38:25:0e:18:aa:e2:cb:52:a6:ec:c1: 59:59:54:88:a2:21:6b:45:5e:d7:49:9c:c0:99:f5: 7b:ab:20:35:d6:aa:24:ba:3f:c4:2c:45:5a:88:48: 4b:05:ab:f0:f1:8c:54:e4:6b:17:07:98:f4:ff:8a: a0:b6:8b:7e:8a:92:0d:8b:0b:51:7f:2e:61:ae:86: 21:28:e3:7b:82:35:4f:63:40:63:1d:dc:3d:c0:cf: 61:77:4a:3a:cf:a0:37:f0:2b:43:ae:84:61:be:a2: b2:15:c9:3f:16:4c:05:7c:98:80:b6:b6:2b:d9:66: bb:7d:b4:b2:b5:0e:c4:04:60:3b:90:d1:75:80:fb: 46:f8:53:75:cb:c8:f4:73:06:59:4b:f8:4c:bd:f4: 91:e8:c1:27:fe:72:91:ca:01:5f:28:79:95:95:7b: a2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:5D:E8:1E:6B:E3:22:61:8D:A8:28:C5:D9:F0:46:ED:37:0E:69:9A X509v3 Authority Key Identifier: keyid:B8:4C:23:96:9E:D7:9C:0E:31:C1:3C:14:50:01:2E:22:46:D3:F9:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uEwjlp7XnA4xwTwUUAEuIkbT-U0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:b4:9b:32:65:da:c7:c1:22:28:10:03:06:9e:7b:cb:76:e0: 14:fa:a3:8d:41:26:a5:1c:90:c9:59:a0:8c:72:2d:ae:40:1e: eb:d8:0c:b8:e6:23:aa:fb:8d:3e:c8:2a:ef:c8:ad:15:0e:ad: 76:2e:22:1f:14:5c:de:16:42:66:27:b1:91:ac:b9:f1:3b:1e: bf:39:dc:bb:81:13:90:2d:96:c5:38:ba:4b:31:af:16:a1:f8: 88:71:dc:4b:45:b2:fe:19:f6:14:0a:ae:1d:8b:7b:d9:d2:1d: 7c:4f:29:18:84:45:59:bb:d7:cf:9e:87:d0:83:7d:e3:2e:e0: 5d:13:d0:56:29:2b:ae:2c:69:f0:66:c6:9d:b7:1a:de:a8:a3: 94:c3:4c:66:ac:c5:54:39:45:61:5c:6d:9b:ca:a3:29:74:89: c3:98:bf:e7:40:30:32:53:b5:01:a1:c3:2f:30:8a:c3:2a:de: e2:a0:db:4d:ef:47:d2:3b:6e:ad:9a:63:51:66:62:d9:12:a7: fd:4b:f6:81:1c:39:4b:e7:39:18:53:c8:63:c0:27:59:24:ce: c2:e3:f3:8c:64:ad:20:17:68:18:1a:06:05:fb:a1:34:b4:92: 22:a5:ed:29:f7:cb:92:97:30:85:a3:07:8a:ad:c2:7f:55:a2: 73:ad:00:ca -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUYyREYxMTAvBgNVBAUTKEI4NEMyMzk2OUVENzlDMEUzMUMxM0MxNDUwMDEyRTIy NDZEM0Y5NEQwHhcNMjYwNDE3MDQzNzQ5WhcNMjYwNDI0MDQzNzQ5WjAYMRYwFAYD VQQDEw02OWUxYjkxZS03ZDU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiQEeZBkQzlgVAif/Z6nLF8NdAjl9Df59/aWOiLpjnRJbPn/9QVrp8tiW3Kfr sjc4fwncfa1bgXsRxZA5HW9iLcSFWc0MHWfwK4G/Wck5/ihmR/AmdOTtDjGxsL2d OCUOGKriy1Km7MFZWVSIoiFrRV7XSZzAmfV7qyA11qokuj/ELEVaiEhLBavw8YxU 5GsXB5j0/4qgtot+ipINiwtRfy5hroYhKON7gjVPY0BjHdw9wM9hd0o6z6A38CtD roRhvqKyFck/FkwFfJiAtrYr2Wa7fbSytQ7EBGA7kNF1gPtG+FN1y8j0cwZZS/hM vfSR6MEn/nKRygFfKHmVlXuiEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIdd6B5r 4yJhjagoxdnwRu03DmmaMB8GA1UdIwQYMBaAFLhMI5ae15wOMcE8FFABLiJG0/lN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjJERi8wMDUwMUZEMjIz QUUxMUVGOTQ5M0Y0NUNDNEY5QUUwMi91RXdqbHA3WG5BNHh3VHdVVUFFdUlrYlQt VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3VFd2pscDdYbkE0eHdUd1VVQUV1SWtiVC1VMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjJERi8wMDUwMUZEMjIzQUUxMUVGOTQ5M0Y0NUNDNEY5QUUwMi91RXdqbHA3WG5B NHh3VHdVVUFFdUlrYlQtVTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM7SbMmXax8EiKBADBp57y3bgFPqjjUEmpRyQyVmgjHItrkAe69gMuOYjqvuN Psgq78itFQ6tdi4iHxRc3hZCZiexkay58Tsevzncu4ETkC2WxTi6SzGvFqH4iHHc S0Wy/hn2FAquHYt72dIdfE8pGIRFWbvXz56H0IN94y7gXRPQVikrrixp8GbGnbca 3qijlMNMZqzFVDlFYVxtm8qjKXSJw5i/50AwMlO1AaHDLzCKwyre4qDbTe9H0jtu rZpjUWZi2RKn/Uv2gRw5S+c5GFPIY8AnWSTOwuPzjGStIBdoGBoGBfuhNLSSIqXt KffLkpcwhaMHiq3Cf1Wic60Ayg== -----END CERTIFICATE-----Generated at Fri Apr 17 11:36:51 2026 by rpki-client