$ rpki-client -vvf rpki.apnic.net/member_repository/A91201F1/738F3A6800DA11F1BE3B4206756F56BC/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.mft File: UXP4oQqFzhFUPXRBKGtdbi7nU8Q.mft (raw, json) Hash identifier: MBM71snoIsmyYO5LVV7Ehk+6jnbJq/AKB5X1FTec/D8= Subject key identifier: F7:91:06:DE:8A:37:20:17:22:36:25:F4:41:E6:34:BB:3B:30:85:73 Authority key identifier: 51:73:F8:A1:0A:85:CE:11:54:3D:74:41:28:6B:5D:6E:2E:E7:53:C4 Certificate issuer: /CN=A91201F1/serialNumber=5173F8A10A85CE11543D7441286B5D6E2EE753C4 Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91201F1/738F3A6800DA11F1BE3B4206756F56BC/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.mft Manifest number: 2D Signing time: Wed 15 Apr 2026 08:22:08 +0000 Manifest this update: Wed 15 Apr 2026 08:22:08 +0000 Manifest next update: Wed 22 Apr 2026 08:22:08 +0000 Files and hashes: 1: UXP4oQqFzhFUPXRBKGtdbi7nU8Q.crl (hash: Xx4tkWEf6SL39nCoETNaXWW7eaXMDCkFsndFqIyV6F8=) 2: D93132D6019811F1B6B26F14666F56BC.roa (hash: Kdauw0gJZUlOd9cLWCyN/Fmo1Dvhpdel9pLxOkR1eyA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91201F1/738F3A6800DA11F1BE3B4206756F56BC/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.crl rsync://rpki.apnic.net/member_repository/A91201F1/738F3A6800DA11F1BE3B4206756F56BC/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 08:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91201F1, serialNumber=5173F8A10A85CE11543D7441286B5D6E2EE753C4 Validity Not Before: Apr 15 08:22:08 2026 GMT Not After : Apr 22 08:22:08 2026 GMT Subject: CN=69df4ab0-e899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:25:28:b6:20:ee:48:ee:7a:ca:19:38:1f:d1: 8d:9f:b6:bd:68:09:95:18:98:42:3f:7a:00:67:87: 3c:51:c9:7b:9d:de:3a:1f:6d:4e:30:43:9d:e6:66: f7:2a:2f:88:37:0a:38:ad:64:9e:67:2f:0e:7b:50: 77:24:85:e2:7c:6a:e3:7e:5e:0a:5d:1e:4d:08:4d: 53:0d:f0:3c:4a:64:da:ff:8c:03:e9:c8:bd:75:6e: c7:48:e7:32:97:8b:5e:4a:73:20:fe:6f:e9:b6:74: c9:d8:11:47:9b:26:e2:a6:43:b4:fa:8b:81:be:a3: 22:1c:ec:05:e8:7d:13:f0:cd:77:dc:18:5d:3b:ca: 74:d7:1a:f9:50:e1:71:a9:c8:19:31:18:f5:7c:43: 4d:54:d0:98:78:b1:df:58:7a:5a:7d:f5:81:e2:57: 28:ca:16:aa:4d:bf:5c:8d:66:ce:99:0f:3c:3d:3b: 18:b8:5c:40:ad:64:b5:e4:5e:98:47:29:25:55:2b: e1:cd:bc:ca:e5:77:46:eb:c3:ac:22:ab:f7:42:2a: 37:a8:1f:81:fa:f0:95:34:d6:4d:2a:31:18:af:5f: 7a:12:93:a0:4e:93:9d:1c:31:97:ff:91:28:60:81: 0b:a2:d6:ff:cc:82:e0:f2:2c:54:76:86:c1:af:86: 46:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:91:06:DE:8A:37:20:17:22:36:25:F4:41:E6:34:BB:3B:30:85:73 X509v3 Authority Key Identifier: keyid:51:73:F8:A1:0A:85:CE:11:54:3D:74:41:28:6B:5D:6E:2E:E7:53:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91201F1/738F3A6800DA11F1BE3B4206756F56BC/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91201F1/738F3A6800DA11F1BE3B4206756F56BC/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:20:df:83:4d:cb:68:78:0b:4d:21:9c:b7:48:bd:22:14:4b: 84:5f:de:91:03:44:db:dc:bd:d6:53:51:9f:56:6a:50:da:ec: 87:3e:a9:2e:b2:5c:cc:f7:3d:fa:5d:ed:df:2a:80:63:18:65: 2e:99:c7:ba:de:a1:ad:fd:8e:21:c8:68:10:f0:b8:53:73:b6: fd:66:ef:b9:04:1c:2a:82:f1:18:d2:1a:fa:75:3d:9f:95:a7: 8d:19:55:0c:6a:6b:4c:2a:19:df:fd:74:ec:76:dd:8d:9b:ab: d3:0e:d4:8d:af:3e:ed:89:75:6d:74:74:50:11:15:6f:71:41: 7f:f7:6f:8d:9b:7e:78:46:73:6a:22:6c:f8:51:65:5a:f8:8c: 19:47:b3:a9:e5:b3:5c:fe:d5:47:05:e9:c3:17:62:5d:9a:71: 4e:01:8c:81:23:a5:6d:dc:4e:8c:1a:7d:7e:96:17:d2:65:6b: 53:31:d1:5c:4c:19:9a:eb:78:4f:f8:35:37:83:ab:b3:92:0c: f0:89:94:95:2d:2e:8c:53:35:2d:f3:1e:c8:a1:6d:89:1b:f6: 1c:01:23:44:c7:4d:2d:45:f9:c5:e4:61:ac:9f:3d:9c:cf:bf: 4a:97:e7:ce:af:db:b4:04:93:18:a4:a4:ea:ac:8f:a4:2a:fb: 97:31:67:26 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MDFGMTExMC8GA1UEBRMoNTE3M0Y4QTEwQTg1Q0UxMTU0M0Q3NDQxMjg2QjVENkUy RUU3NTNDNDAeFw0yNjA0MTUwODIyMDhaFw0yNjA0MjIwODIyMDhaMBgxFjAUBgNV BAMTDTY5ZGY0YWIwLWU4OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEJSi2IO5I7nrKGTgf0Y2ftr1oCZUYmEI/egBnhzxRyXud3jofbU4wQ53mZvcq L4g3CjitZJ5nLw57UHckheJ8auN+XgpdHk0ITVMN8DxKZNr/jAPpyL11bsdI5zKX i15KcyD+b+m2dMnYEUebJuKmQ7T6i4G+oyIc7AXofRPwzXfcGF07ynTXGvlQ4XGp yBkxGPV8Q01U0Jh4sd9Yelp99YHiVyjKFqpNv1yNZs6ZDzw9Oxi4XECtZLXkXphH KSVVK+HNvMrld0brw6wiq/dCKjeoH4H68JU01k0qMRivX3oSk6BOk50cMZf/kShg gQui1v/MguDyLFR2hsGvhkZtAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU95EG3oo3 IBciNiX0QeY0uzswhXMwHwYDVR0jBBgwFoAUUXP4oQqFzhFUPXRBKGtdbi7nU8Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIwMUYxLzczOEYzQTY4MDBE QTExRjFCRTNCNDIwNjc1NkY1NkJDL1VYUDRvUXFGemhGVVBYUkJLR3RkYmk3blU4 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvVVhQNG9RcUZ6aEZVUFhSQktHdGRiaTduVThRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIw MUYxLzczOEYzQTY4MDBEQTExRjFCRTNCNDIwNjc1NkY1NkJDL1VYUDRvUXFGemhG VVBYUkJLR3RkYmk3blU4US5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCQIN+DTctoeAtNIZy3SL0iFEuEX96RA0Tb3L3WU1GfVmpQ2uyHPqkuslzM9z36 Xe3fKoBjGGUumce63qGt/Y4hyGgQ8LhTc7b9Zu+5BBwqgvEY0hr6dT2flaeNGVUM amtMKhnf/XTsdt2Nm6vTDtSNrz7tiXVtdHRQERVvcUF/92+Nm354RnNqImz4UWVa +IwZR7Op5bNc/tVHBenDF2JdmnFOAYyBI6Vt3E6MGn1+lhfSZWtTMdFcTBma63hP +DU3g6uzkgzwiZSVLS6MUzUt8x7IoW2JG/YcASNEx00tRfnF5GGsnz2cz79Kl+fO r9u0BJMYpKTqrI+kKvuXMWcm -----END CERTIFICATE-----Generated at Fri Apr 17 09:50:56 2026 by rpki-client