$ rpki-client -vvf rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft File: UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft (raw, json) Hash identifier: bjZjrzUYFzEW9wFv5POG44Bb4rHaWVTEdx48hR69baI= Subject key identifier: EB:8E:12:E1:98:DC:26:7C:CF:F2:55:E7:38:1D:B6:59:A5:CC:84:FD Authority key identifier: 51:89:2B:E5:B0:B4:AB:C6:02:54:45:F4:03:9F:C7:95:D8:BA:58:E2 Certificate issuer: /CN=A9139A90/serialNumber=51892BE5B0B4ABC6025445F4039FC795D8BA58E2 Certificate serial: 0164 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft Manifest number: 0158 Signing time: Fri 17 Apr 2026 04:44:45 +0000 Manifest this update: Fri 17 Apr 2026 04:44:45 +0000 Manifest next update: Fri 24 Apr 2026 04:44:45 +0000 Files and hashes: 1: UYkr5bC0q8YCVEX0A5_Hldi6WOI.crl (hash: 7NV1uTyKPbIw82F9g8VKaHyS5eqo+0AhXko1heOag9k=) 2: AE977DF8337E11EFB3CCD72FC4F9AE02.roa (hash: GEFeKy8aH4tDYzifQsBwM7koyveNQSqrhuOkOUK426I=) 3: 8B584EC2337D11EF9D71B72DC4F9AE02.roa (hash: nfE8MGXIYFcpCfytRVSLiKAP+7q0/XusaPqqsGF/aVU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.crl rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 04:44:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 356 (0x164) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139A90, serialNumber=51892BE5B0B4ABC6025445F4039FC795D8BA58E2 Validity Not Before: Apr 17 04:44:45 2026 GMT Not After : Apr 24 04:44:45 2026 GMT Subject: CN=69e1babd-87dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:97:d7:f2:39:5a:31:8d:a2:39:50:ae:c3:b4: 3d:f1:60:58:01:ce:ef:28:78:fd:be:a7:2f:c5:94: ee:88:32:17:52:b1:4c:06:57:9a:3c:b8:d8:39:87: 28:8e:d7:38:4f:24:f5:85:6d:16:28:52:df:5a:0d: 00:7a:38:3c:02:d2:6f:ca:36:6f:04:f8:a8:ae:bc: 6c:75:e0:49:62:f7:be:d9:cb:12:5b:b3:26:74:e6: b3:47:7a:04:2c:93:60:66:52:19:6a:8c:5e:78:46: 49:05:1d:81:6e:fa:d8:d2:17:2a:be:ba:66:63:bc: f0:d9:c7:3d:0f:51:1a:80:f7:85:5c:23:b0:3d:b6: 8a:b2:dc:20:27:c3:72:c3:a7:da:f1:62:1e:2f:a3: 22:4f:9f:1d:7f:59:55:d0:77:59:8a:70:02:08:d8: 3d:5d:80:d6:43:25:89:63:07:97:5a:0d:98:66:de: 93:e8:a5:cd:45:ad:8f:79:08:5e:90:d6:30:69:f6: 33:cf:e1:9d:fa:aa:fe:58:52:10:07:d2:12:c6:0a: cf:e5:88:1f:15:30:5f:a9:f4:7b:13:47:bf:87:4c: 62:57:a8:71:ef:bd:cf:a5:00:3f:8b:2f:2f:5b:4c: 5f:b4:50:ab:0d:19:da:41:86:a5:65:44:71:a1:61: ad:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:8E:12:E1:98:DC:26:7C:CF:F2:55:E7:38:1D:B6:59:A5:CC:84:FD X509v3 Authority Key Identifier: keyid:51:89:2B:E5:B0:B4:AB:C6:02:54:45:F4:03:9F:C7:95:D8:BA:58:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UYkr5bC0q8YCVEX0A5_Hldi6WOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139A90/1FE84ED2337611EF993E4673C4F9AE02/UYkr5bC0q8YCVEX0A5_Hldi6WOI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:68:f1:e7:7c:b6:54:ab:0e:92:3b:a4:c2:c3:ed:07:2f:fc: 00:bd:26:e1:d8:d6:5d:47:59:7d:63:18:00:01:57:8a:0a:26: 18:fd:cb:96:9f:5b:ec:a0:a0:b6:8a:47:ca:50:f1:21:16:f7: 81:09:92:04:e5:e0:8b:10:66:50:11:a6:06:a5:02:4d:40:54: 3e:f9:96:7b:41:4e:e8:ab:ac:d1:28:86:7a:f7:72:a3:cf:21: a2:76:5a:62:91:e1:9d:79:23:7c:32:77:ca:0e:a3:71:6f:21: 36:08:a1:3e:9c:bd:7a:80:f9:27:9c:b6:a3:a9:c1:7a:ff:df: ee:8d:51:5b:e1:0b:f1:c3:87:61:c2:f0:9e:fd:78:c7:62:e5: ab:6a:ae:6c:b1:6a:37:bc:82:18:0d:dc:53:b3:f8:4e:6f:10: 11:15:e9:9a:f0:d0:4a:0a:84:21:75:b2:27:ad:34:23:e6:4b: 54:19:02:e5:bb:7d:bf:99:2f:ef:87:72:f3:39:fb:bf:97:18: 13:9b:fa:ba:7b:a3:5b:61:4a:0b:9e:bd:92:f6:69:20:f6:f3: ea:21:35:a8:b3:9e:28:af:89:ab:6b:8c:44:6f:45:c2:5c:4d: d4:1e:20:8e:e1:fd:ad:85:36:19:27:d9:04:83:e1:f0:b4:10: ed:01:f3:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzlBOTAxMTAvBgNVBAUTKDUxODkyQkU1QjBCNEFCQzYwMjU0NDVGNDAzOUZDNzk1 RDhCQTU4RTIwHhcNMjYwNDE3MDQ0NDQ1WhcNMjYwNDI0MDQ0NDQ1WjAYMRYwFAYD VQQDEw02OWUxYmFiZC04N2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2JfX8jlaMY2iOVCuw7Q98WBYAc7vKHj9vqcvxZTuiDIXUrFMBleaPLjYOYco jtc4TyT1hW0WKFLfWg0Aejg8AtJvyjZvBPiorrxsdeBJYve+2csSW7MmdOazR3oE LJNgZlIZaoxeeEZJBR2BbvrY0hcqvrpmY7zw2cc9D1EagPeFXCOwPbaKstwgJ8Ny w6fa8WIeL6MiT58df1lV0HdZinACCNg9XYDWQyWJYweXWg2YZt6T6KXNRa2PeQhe kNYwafYzz+Gd+qr+WFIQB9ISxgrP5YgfFTBfqfR7E0e/h0xiV6hx773PpQA/iy8v W0xftFCrDRnaQYalZURxoWGtEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOuOEuGY 3CZ8z/JV5zgdtlmlzIT9MB8GA1UdIwQYMBaAFFGJK+WwtKvGAlRF9AOfx5XYulji MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOUE5MC8xRkU4NEVEMjMz NzYxMUVGOTkzRTQ2NzNDNEY5QUUwMi9VWWtyNWJDMHE4WUNWRVgwQTVfSGxkaTZX T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VZa3I1YkMwcThZQ1ZFWDBBNV9IbGRpNldPSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OUE5MC8xRkU4NEVEMjMzNzYxMUVGOTkzRTQ2NzNDNEY5QUUwMi9VWWtyNWJDMHE4 WUNWRVgwQTVfSGxkaTZXT0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVWjx53y2VKsOkjukwsPtBy/8AL0m4djWXUdZfWMYAAFXigomGP3Llp9b7KCg topHylDxIRb3gQmSBOXgixBmUBGmBqUCTUBUPvmWe0FO6Kus0SiGevdyo88honZa YpHhnXkjfDJ3yg6jcW8hNgihPpy9eoD5J5y2o6nBev/f7o1RW+EL8cOHYcLwnv14 x2Llq2qubLFqN7yCGA3cU7P4Tm8QERXpmvDQSgqEIXWyJ600I+ZLVBkC5bt9v5kv 74dy8zn7v5cYE5v6unujW2FKC569kvZpIPbz6iE1qLOeKK+Jq2uMRG9FwlxN1B4g juH9rYU2GSfZBIPh8LQQ7QHzgQ== -----END CERTIFICATE-----Generated at Fri Apr 17 12:57:11 2026 by rpki-client