$ rpki-client -vvf rpki.apnic.net/member_repository/A911F587/C1BA1A22136E11F1AD791BA3313D8C67/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.mft File: ufxcFLLSdSnVDm5ZPajLCqh9ZRA.mft (raw, json) Hash identifier: HyEWM9j4yZtAq1gemT1Nmm/L1uZVQd00cfq1lgvuG0M= Subject key identifier: 1E:73:FC:5C:94:09:62:FD:6C:4F:57:D6:B7:C0:99:08:05:A5:31:6C Authority key identifier: B9:FC:5C:14:B2:D2:75:29:D5:0E:6E:59:3D:A8:CB:0A:A8:7D:65:10 Certificate issuer: /CN=A911F587/serialNumber=B9FC5C14B2D27529D50E6E593DA8CB0AA87D6510 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F587/C1BA1A22136E11F1AD791BA3313D8C67/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.mft Manifest number: 20 Signing time: Wed 15 Apr 2026 08:30:27 +0000 Manifest this update: Wed 15 Apr 2026 08:30:27 +0000 Manifest next update: Wed 22 Apr 2026 08:30:27 +0000 Files and hashes: 1: ufxcFLLSdSnVDm5ZPajLCqh9ZRA.crl (hash: znpGiLI1zJzwgbWfL28CcBno3jZcNY9djLTJIiM7tdU=) 2: CE3E7CF6136F11F1982A4804323D8C67.roa (hash: 433GVnEHsEmqM+RA2zhP/NFczVjY5LHUX58RsvVfVKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F587/C1BA1A22136E11F1AD791BA3313D8C67/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.crl rsync://rpki.apnic.net/member_repository/A911F587/C1BA1A22136E11F1AD791BA3313D8C67/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 08:30:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F587, serialNumber=B9FC5C14B2D27529D50E6E593DA8CB0AA87D6510 Validity Not Before: Apr 15 08:30:27 2026 GMT Not After : Apr 22 08:30:27 2026 GMT Subject: CN=69df4ca3-72ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d7:5b:c6:7d:64:d1:4d:81:32:62:34:0a:28: 0f:c8:04:57:64:37:ca:cb:bc:fc:28:3b:07:0c:62: 0e:8b:09:8e:9d:44:a0:92:00:00:45:41:4b:b2:c3: 1f:ee:c6:f4:33:2d:24:4a:e2:71:95:32:8d:15:ce: ac:ee:71:fd:dd:77:d1:d4:7d:99:70:ae:6b:3a:4c: 69:ef:ed:21:00:a9:28:9c:8f:bf:1a:21:8d:d9:93: 8b:11:65:90:17:97:65:f0:ae:4e:bc:9f:d3:cc:f3: b9:56:b8:6d:37:5a:72:53:94:27:5f:ce:be:a4:6c: 92:45:c6:16:d4:df:21:50:19:e3:8a:b8:dc:f7:25: c8:0e:20:73:b9:2a:7c:c4:a4:70:65:34:73:1c:fb: 37:61:82:20:55:3b:ba:d8:29:77:35:71:f1:ad:84: a2:ad:f5:19:32:25:5d:4b:cb:f1:39:4f:d6:10:c9: ef:40:97:91:4b:7b:18:8e:e7:2a:09:64:ea:78:d0: 3d:15:7a:31:d1:79:83:fa:70:0c:91:2f:50:d9:80: 2d:c0:a5:aa:29:49:43:4b:76:53:fd:be:17:96:5c: 9c:2e:9f:3c:a2:9e:4b:52:09:78:9a:8d:e5:91:04: 85:9a:0a:a9:af:bb:e6:c3:9b:f2:f9:73:76:b3:7a: cb:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:73:FC:5C:94:09:62:FD:6C:4F:57:D6:B7:C0:99:08:05:A5:31:6C X509v3 Authority Key Identifier: keyid:B9:FC:5C:14:B2:D2:75:29:D5:0E:6E:59:3D:A8:CB:0A:A8:7D:65:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F587/C1BA1A22136E11F1AD791BA3313D8C67/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F587/C1BA1A22136E11F1AD791BA3313D8C67/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:31:42:00:f2:69:95:47:e5:3d:fb:f9:82:35:99:24:83:b3: 35:e1:7c:55:8a:aa:08:94:ea:57:6b:73:f3:c5:9e:88:2f:b7: 04:e6:67:f6:b2:d7:18:b0:4c:6b:a0:f8:a9:68:3e:8e:3c:76: 06:7b:37:6f:d0:a1:31:09:2a:e9:6b:75:d7:8a:8f:0c:31:b3: 27:74:72:f0:31:71:a8:54:4c:ac:f2:a8:e3:5f:49:bb:b9:2f: 2f:05:e9:9e:8d:79:fe:f1:fa:c7:62:38:f5:61:d7:5d:f8:b7: bb:4a:d8:50:d4:a2:09:68:58:01:d7:72:78:db:4e:3a:c9:e5: 28:1b:8a:ae:19:c3:27:a7:a1:70:83:c7:bc:a1:08:58:96:02: 3e:d5:25:89:6a:80:9e:31:55:c8:46:e8:98:c4:51:62:fb:70: c4:86:d8:27:52:84:07:a5:01:07:1f:70:00:1b:da:e6:f2:2d: 38:24:cd:c7:45:58:70:e9:fc:a6:d9:76:eb:d7:bf:f2:f4:c0: fb:c1:e6:02:ba:3f:59:9c:67:b4:2f:04:fb:36:14:41:6c:6e: 69:c3:55:49:86:43:3b:3a:8a:08:f3:59:a1:c1:d7:55:39:b9: 4a:a7:69:96:c8:80:0c:be:53:df:b0:e2:3b:95:5c:05:5a:0d: aa:76:20:25 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RjU4NzExMC8GA1UEBRMoQjlGQzVDMTRCMkQyNzUyOUQ1MEU2RTU5M0RBOENCMEFB ODdENjUxMDAeFw0yNjA0MTUwODMwMjdaFw0yNjA0MjIwODMwMjdaMBgxFjAUBgNV BAMTDTY5ZGY0Y2EzLTcyYWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCs11vGfWTRTYEyYjQKKA/IBFdkN8rLvPwoOwcMYg6LCY6dRKCSAABFQUuywx/u xvQzLSRK4nGVMo0Vzqzucf3dd9HUfZlwrms6TGnv7SEAqSicj78aIY3Zk4sRZZAX l2Xwrk68n9PM87lWuG03WnJTlCdfzr6kbJJFxhbU3yFQGeOKuNz3JcgOIHO5KnzE pHBlNHMc+zdhgiBVO7rYKXc1cfGthKKt9RkyJV1Ly/E5T9YQye9Al5FLexiO5yoJ ZOp40D0VejHReYP6cAyRL1DZgC3ApaopSUNLdlP9vheWXJwunzyinktSCXiajeWR BIWaCqmvu+bDm/L5c3azestzAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUHnP8XJQJ Yv1sT1fWt8CZCAWlMWwwHwYDVR0jBBgwFoAUufxcFLLSdSnVDm5ZPajLCqh9ZRAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFGNTg3L0MxQkExQTIyMTM2 RTExRjFBRDc5MUJBMzMxM0Q4QzY3L3VmeGNGTExTZFNuVkRtNVpQYWpMQ3FoOVpS QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdWZ4Y0ZMTFNkU25WRG01WlBhakxDcWg5WlJBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFG NTg3L0MxQkExQTIyMTM2RTExRjFBRDc5MUJBMzMxM0Q4QzY3L3VmeGNGTExTZFNu VkRtNVpQYWpMQ3FoOVpSQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA4MUIA8mmVR+U9+/mCNZkkg7M14XxViqoIlOpXa3PzxZ6IL7cE5mf2stcYsExr oPipaD6OPHYGezdv0KExCSrpa3XXio8MMbMndHLwMXGoVEys8qjjX0m7uS8vBeme jXn+8frHYjj1Yddd+Le7SthQ1KIJaFgB13J42046yeUoG4quGcMnp6Fwg8e8oQhY lgI+1SWJaoCeMVXIRuiYxFFi+3DEhtgnUoQHpQEHH3AAG9rm8i04JM3HRVhw6fym 2Xbr17/y9MD7weYCuj9ZnGe0LwT7NhRBbG5pw1VJhkM7OooI81mhwddVOblKp2mW yIAMvlPfsOI7lVwFWg2qdiAl -----END CERTIFICATE-----Generated at Fri Apr 17 05:52:02 2026 by rpki-client