$ rpki-client -vvf rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.mft File: UoaLCQH1W0B4uRpzRRym0iMSyKs.mft (raw, json) Hash identifier: vm4dMdXaJA9owSx4eCBYMHdkqvpS1Z7HAMIGJQfivfs= Subject key identifier: EB:91:1F:A1:53:F6:00:96:66:E3:3E:32:CC:F2:65:EE:E4:71:16:DE Authority key identifier: 52:86:8B:09:01:F5:5B:40:78:B9:1A:73:45:1C:A6:D2:23:12:C8:AB Certificate issuer: /CN=A913E2B3/serialNumber=52868B0901F55B4078B91A73451CA6D22312C8AB Certificate serial: 0CBA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoaLCQH1W0B4uRpzRRym0iMSyKs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.mft Manifest number: 0CA8 Signing time: Thu 16 Apr 2026 18:26:09 +0000 Manifest this update: Thu 16 Apr 2026 18:26:09 +0000 Manifest next update: Thu 23 Apr 2026 18:26:09 +0000 Files and hashes: 1: UoaLCQH1W0B4uRpzRRym0iMSyKs.crl (hash: tSdBAQ7TIFCUcddIPwNuSX83EXSOfbeuFistYQLoiAE=) 2: 3AB1E0D44ED511ED84336740C4F9AE02.roa (hash: 1xwZmu+W4i/TCA6GArfnAsx0Zkop8Nq8b1/wjpzQ/QY=) 3: 399AB6DA4ED511ED84336740C4F9AE02.roa (hash: 2gHhqtDJfKR0qJzs+P2axW63JoLu4G8a5q6M2TKtmYA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.crl rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoaLCQH1W0B4uRpzRRym0iMSyKs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:26:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3258 (0xcba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E2B3, serialNumber=52868B0901F55B4078B91A73451CA6D22312C8AB Validity Not Before: Apr 16 18:26:09 2026 GMT Not After : Apr 23 18:26:09 2026 GMT Subject: CN=69e129c1-bdf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c7:d3:6b:46:b6:0f:7f:61:7c:e2:d7:84:43: c1:02:74:a3:7a:1f:ec:6c:2c:f1:ac:c9:7d:2c:bd: 78:0e:fe:a2:97:48:b5:cc:04:bb:a0:cb:c0:e1:53: 5a:07:3b:12:7f:e7:05:28:2b:bb:2c:a9:b7:c4:86: 23:cd:15:7d:48:40:67:52:58:cd:3e:91:a4:c3:a6: f5:50:5e:5d:f6:63:fd:e0:c5:a1:be:1f:72:e7:29: bf:81:98:72:68:90:ea:24:0b:c7:dd:89:94:c6:1c: b7:78:95:eb:4f:24:6f:40:9d:1e:f5:de:3a:ab:d2: 21:7e:1a:26:67:7f:5e:e7:10:73:29:63:2c:72:4c: e2:f6:c0:81:7c:54:44:54:e2:5d:97:72:a8:2c:07: a9:ed:af:cf:49:d0:7f:60:6a:3b:fb:6a:ff:21:ea: 25:08:96:20:2f:f3:4f:ab:e4:1f:1c:48:1e:94:1c: 39:b1:eb:a8:9b:f2:be:04:60:9a:eb:2c:e2:75:47: c5:c8:10:a8:04:c8:dc:20:1b:41:52:13:b3:19:63: ea:cd:71:63:0e:b2:fa:dc:14:c8:59:61:c5:02:53: 75:ea:6d:63:d3:0e:f4:63:18:f1:83:16:7e:c3:bb: 67:f8:3a:2d:d1:82:7a:c0:fd:19:d1:1f:ea:5b:e6: a5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:91:1F:A1:53:F6:00:96:66:E3:3E:32:CC:F2:65:EE:E4:71:16:DE X509v3 Authority Key Identifier: keyid:52:86:8B:09:01:F5:5B:40:78:B9:1A:73:45:1C:A6:D2:23:12:C8:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoaLCQH1W0B4uRpzRRym0iMSyKs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:22:51:2a:4c:df:8a:47:cb:28:93:2f:23:eb:00:5b:47:a0: 36:00:94:8b:59:9c:0f:b1:8b:a6:00:01:a5:e2:52:d0:5f:8b: 7e:1d:1d:07:c0:81:49:32:51:11:43:05:a1:8b:d1:36:90:ef: 09:3d:3e:a5:9c:a5:6c:d5:1c:6a:52:75:7d:db:76:64:93:f5: 0a:25:20:bf:68:b4:8e:04:ab:87:a8:89:fd:40:09:f7:c7:e5: 8f:49:7e:89:e6:46:d2:b2:91:7d:30:f8:29:da:76:9f:4b:7d: 09:83:bc:da:29:25:04:2c:4e:3f:d7:c5:f6:17:d1:14:d3:7c: 5c:fd:1e:cf:36:ba:cb:93:7e:8d:80:e6:24:be:e8:79:01:32: 99:5a:4a:37:e4:32:58:4b:8c:a8:87:2c:fd:c8:89:07:38:bc: 7b:ef:c1:82:12:da:47:15:c4:ad:1a:0a:0a:f0:9d:76:79:6b: 50:c9:e7:b3:c3:46:5d:24:70:34:8b:fb:7c:eb:b1:3b:62:bc: 29:24:1d:e6:84:b0:25:1e:10:b1:d5:fe:a3:40:3a:e3:a2:f7: 8b:37:c0:4b:c3:c8:80:27:b5:9f:3d:89:2e:32:d5:9e:21:76: 99:75:fa:c8:bc:bd:b6:5a:75:7b:e0:3a:17:aa:ce:34:1a:b3: 8c:f4:bf:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UyQjMxMTAvBgNVBAUTKDUyODY4QjA5MDFGNTVCNDA3OEI5MUE3MzQ1MUNBNkQy MjMxMkM4QUIwHhcNMjYwNDE2MTgyNjA5WhcNMjYwNDIzMTgyNjA5WjAYMRYwFAYD VQQDEw02OWUxMjljMS1iZGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAocfTa0a2D39hfOLXhEPBAnSjeh/sbCzxrMl9LL14Dv6il0i1zAS7oMvA4VNa BzsSf+cFKCu7LKm3xIYjzRV9SEBnUljNPpGkw6b1UF5d9mP94MWhvh9y5ym/gZhy aJDqJAvH3YmUxhy3eJXrTyRvQJ0e9d46q9IhfhomZ39e5xBzKWMsckzi9sCBfFRE VOJdl3KoLAep7a/PSdB/YGo7+2r/IeolCJYgL/NPq+QfHEgelBw5seuom/K+BGCa 6yzidUfFyBCoBMjcIBtBUhOzGWPqzXFjDrL63BTIWWHFAlN16m1j0w70YxjxgxZ+ w7tn+Dot0YJ6wP0Z0R/qW+alIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOuRH6FT 9gCWZuM+MszyZe7kcRbeMB8GA1UdIwQYMBaAFFKGiwkB9VtAeLkac0UcptIjEsir MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTJCMy8yMEU2N0REODEy RjQxMUVBODk0MjA0MzBDNEY5QUUwMi9Vb2FMQ1FIMVcwQjR1UnB6UlJ5bTBpTVN5 S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VvYUxDUUgxVzBCNHVScHpSUnltMGlNU3lLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTJCMy8yMEU2N0REODEyRjQxMUVBODk0MjA0MzBDNEY5QUUwMi9Vb2FMQ1FIMVcw QjR1UnB6UlJ5bTBpTVN5S3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlyJRKkzfikfLKJMvI+sAW0egNgCUi1mcD7GLpgABpeJS0F+Lfh0dB8CBSTJR EUMFoYvRNpDvCT0+pZylbNUcalJ1fdt2ZJP1CiUgv2i0jgSrh6iJ/UAJ98flj0l+ ieZG0rKRfTD4Kdp2n0t9CYO82iklBCxOP9fF9hfRFNN8XP0ezza6y5N+jYDmJL7o eQEymVpKN+QyWEuMqIcs/ciJBzi8e+/BghLaRxXErRoKCvCddnlrUMnns8NGXSRw NIv7fOuxO2K8KSQd5oSwJR4QsdX+o0A646L3izfAS8PIgCe1nz2JLjLVniF2mXX6 yLy9tlp1e+A6F6rONBqzjPS/sw== -----END CERTIFICATE-----Generated at Fri Apr 17 18:05:38 2026 by rpki-client