$ rpki-client -vvf rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft File: uHa2DaKzyctmxyu5_Kc77ssR_dE.mft (raw, json) Hash identifier: asNkUrGtr/ICb9zwloL/5eWZsRxRan55j11Dakdn0Z4= Subject key identifier: 69:D3:C8:48:6E:56:C5:03:60:9F:6F:F7:D1:DC:94:F5:CB:C6:36:CE Authority key identifier: B8:76:B6:0D:A2:B3:C9:CB:66:C7:2B:B9:FC:A7:3B:EE:CB:11:FD:D1 Certificate issuer: /CN=A912611F/serialNumber=B876B60DA2B3C9CB66C72BB9FCA73BEECB11FDD1 Certificate serial: 108E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHa2DaKzyctmxyu5_Kc77ssR_dE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft Manifest number: 1A4C Signing time: Thu 16 Apr 2026 17:17:12 +0000 Manifest this update: Thu 16 Apr 2026 17:17:12 +0000 Manifest next update: Thu 23 Apr 2026 17:17:12 +0000 Files and hashes: 1: uHa2DaKzyctmxyu5_Kc77ssR_dE.crl (hash: lPv+/SxyQivBJT3in3M7Ka5Auv9mqGZTJPj9CuecveE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.crl rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHa2DaKzyctmxyu5_Kc77ssR_dE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4238 (0x108e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912611F, serialNumber=B876B60DA2B3C9CB66C72BB9FCA73BEECB11FDD1 Validity Not Before: Apr 16 17:17:12 2026 GMT Not After : Apr 23 17:17:12 2026 GMT Subject: CN=69e11998-a07d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:64:59:84:64:68:11:28:a8:b4:4a:90:01:0f: a1:84:f5:1e:0b:51:cb:65:a8:ec:86:d5:0b:10:22: 32:6d:89:b2:57:73:3e:ce:52:9e:3a:df:21:f8:27: 32:97:d8:54:62:1e:f9:be:1e:d7:4a:12:fe:b4:72: 6a:04:ba:d2:f4:ff:83:1b:92:67:68:c0:88:1c:a8: 0d:eb:47:de:05:e6:9f:39:12:fc:ad:95:d5:e5:fb: 11:45:33:b1:80:99:69:8c:07:88:85:cb:d2:4a:b2: 97:1f:d1:0e:01:47:10:c3:31:e2:34:d9:e1:38:8d: bf:20:9b:34:c4:cb:fd:57:90:6a:22:81:54:80:fd: 9a:22:1b:35:38:22:70:a6:cb:91:55:3b:48:89:0c: 9b:b8:ad:cf:e3:d6:a1:0c:7a:10:aa:73:6a:e2:2b: 18:a4:a5:24:0e:cf:f2:91:83:09:0e:e7:82:32:ce: 7a:29:52:df:d1:bf:31:c1:65:d2:3b:fa:bb:85:06: da:ce:65:69:c2:58:d2:03:f0:46:8d:67:bd:81:5f: 19:44:b6:87:5b:a2:d0:d1:16:c6:f9:1d:2a:00:c8: af:db:15:38:85:27:80:5e:e4:b8:ca:19:88:c2:cd: 0b:4e:e0:26:61:e5:58:02:36:5f:43:59:42:56:09: 05:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:D3:C8:48:6E:56:C5:03:60:9F:6F:F7:D1:DC:94:F5:CB:C6:36:CE X509v3 Authority Key Identifier: keyid:B8:76:B6:0D:A2:B3:C9:CB:66:C7:2B:B9:FC:A7:3B:EE:CB:11:FD:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHa2DaKzyctmxyu5_Kc77ssR_dE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:39:31:2e:f9:2e:70:60:e0:2e:10:d2:90:00:76:51:19:9d: 26:93:5a:2e:f0:a6:17:9f:c4:f5:27:dc:50:9d:53:b0:2e:1d: 4b:ba:c6:e5:e2:6f:de:56:7f:8a:50:cd:fc:69:8a:f5:6a:94: 35:66:c1:b3:c6:c6:a2:4b:63:05:c2:89:55:c8:c3:16:9f:1f: e7:98:75:33:6d:cf:4d:c3:05:5c:c4:64:09:41:92:79:c2:1d: b4:7e:85:97:de:e9:e4:df:a2:31:34:88:ae:94:44:9f:ab:2d: f5:c7:32:92:57:10:9e:4f:5a:23:3e:f3:8c:35:0e:d3:06:0d: 47:03:4f:8c:2d:82:84:a3:f7:30:9e:eb:bc:c7:11:95:5d:4a: 86:1d:a2:a9:a4:2e:0a:bb:73:d8:f7:0d:1d:f3:7d:36:c1:c3: ee:14:73:c5:04:0e:5e:33:10:d3:8f:27:3d:d6:3b:0b:1e:b1: 18:8e:28:d3:c5:77:75:b3:2c:cb:0c:7c:87:a0:c8:89:9d:79: 18:32:86:f3:71:9e:4d:80:ed:bb:f1:b7:13:c3:b3:bf:01:e0: 6c:3d:2e:96:3c:03:35:cb:7e:e1:bc:70:65:e9:62:42:df:91: 42:de:b8:39:17:80:5e:3e:77:b3:a8:15:a0:f6:b6:d8:01:84: 55:1c:cf:86 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYxMUYxMTAvBgNVBAUTKEI4NzZCNjBEQTJCM0M5Q0I2NkM3MkJCOUZDQTczQkVF Q0IxMUZERDEwHhcNMjYwNDE2MTcxNzEyWhcNMjYwNDIzMTcxNzEyWjAYMRYwFAYD VQQDEw02OWUxMTk5OC1hMDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6GRZhGRoESiotEqQAQ+hhPUeC1HLZajshtULECIybYmyV3M+zlKeOt8h+Ccy l9hUYh75vh7XShL+tHJqBLrS9P+DG5JnaMCIHKgN60feBeafORL8rZXV5fsRRTOx gJlpjAeIhcvSSrKXH9EOAUcQwzHiNNnhOI2/IJs0xMv9V5BqIoFUgP2aIhs1OCJw psuRVTtIiQybuK3P49ahDHoQqnNq4isYpKUkDs/ykYMJDueCMs56KVLf0b8xwWXS O/q7hQbazmVpwljSA/BGjWe9gV8ZRLaHW6LQ0RbG+R0qAMiv2xU4hSeAXuS4yhmI ws0LTuAmYeVYAjZfQ1lCVgkFYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGnTyEhu VsUDYJ9v99HclPXLxjbOMB8GA1UdIwQYMBaAFLh2tg2is8nLZscrufynO+7LEf3R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjExRi80QThCMDRFQTRD N0MxMUU5ODFBNDM5NjlDNEY5QUUwMi91SGEyRGFLenljdG14eXU1X0tjNzdzc1Jf ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VIYTJEYUt6eWN0bXh5dTVfS2M3N3NzUl9kRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjExRi80QThCMDRFQTRDN0MxMUU5ODFBNDM5NjlDNEY5QUUwMi91SGEyRGFLenlj dG14eXU1X0tjNzdzc1JfZEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkjkxLvkucGDgLhDSkAB2URmdJpNaLvCmF5/E9SfcUJ1TsC4dS7rG5eJv3lZ/ ilDN/GmK9WqUNWbBs8bGoktjBcKJVcjDFp8f55h1M23PTcMFXMRkCUGSecIdtH6F l97p5N+iMTSIrpREn6st9ccyklcQnk9aIz7zjDUO0wYNRwNPjC2ChKP3MJ7rvMcR lV1Khh2iqaQuCrtz2PcNHfN9NsHD7hRzxQQOXjMQ048nPdY7Cx6xGI4o08V3dbMs ywx8h6DIiZ15GDKG83GeTYDtu/G3E8OzvwHgbD0uljwDNct+4bxwZeliQt+RQt64 OReAXj53s6gVoPa22AGEVRzPhg== -----END CERTIFICATE-----Generated at Fri Apr 17 16:44:06 2026 by rpki-client