$ rpki-client -vvf rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.mft File: sUCvBJGbRROCWm6lfhq55UN548g.mft (raw, json) Hash identifier: PBzsWSVP4Ag792onD3GN1yrmZI+eThi8vKf16zXFZqw= Subject key identifier: 40:B7:81:BE:AA:8E:22:63:73:8D:07:8A:B6:05:2C:D8:78:5D:5F:04 Authority key identifier: B1:40:AF:04:91:9B:45:13:82:5A:6E:A5:7E:1A:B9:E5:43:79:E3:C8 Certificate issuer: /CN=A913EBFD/serialNumber=B140AF04919B4513825A6EA57E1AB9E54379E3C8 Certificate serial: 0BEC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUCvBJGbRROCWm6lfhq55UN548g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.mft Manifest number: 0BDE Signing time: Sat 18 Apr 2026 18:47:37 +0000 Manifest this update: Sat 18 Apr 2026 18:47:37 +0000 Manifest next update: Sat 25 Apr 2026 18:47:37 +0000 Files and hashes: 1: sUCvBJGbRROCWm6lfhq55UN548g.crl (hash: CMpbuTb7SEiil0NiDWYufn7au0OZvMxEIEE8eJa4JPw=) 2: A2139F38EF8111F091D2B45E5F6F56BC.roa (hash: htJ4VDMIgUmAqLLv+vJUBNK9ByybYpEa/tAe+qkz96c=) 3: DC7A929EEF8111F0B8F8645F5F6F56BC.roa (hash: oXnvHlMxtaLYGYz5MghtoZAARZeUZKQdkFkuL9+XvMU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.crl rsync://rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUCvBJGbRROCWm6lfhq55UN548g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 18:47:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3052 (0xbec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EBFD, serialNumber=B140AF04919B4513825A6EA57E1AB9E54379E3C8 Validity Not Before: Apr 18 18:47:37 2026 GMT Not After : Apr 25 18:47:37 2026 GMT Subject: CN=69e3d1c9-c2c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e4:76:1c:3d:e7:c3:8e:51:73:bf:a1:0c:81: 20:69:6c:a8:73:e5:fa:c3:48:79:ef:00:a8:1e:16: f0:55:2c:de:75:2f:01:48:f8:64:e0:7f:fa:00:c1: 01:9a:5d:15:f4:88:83:90:6d:b5:58:65:5b:d0:f4: 02:e0:8f:55:c7:d4:78:b8:e7:2e:d2:2b:95:da:f6: 8c:d6:a8:5f:c0:5f:2f:7a:bc:14:bb:be:59:15:f7: b6:c0:20:3c:cf:90:af:fe:08:40:1f:9e:a8:05:8f: c6:41:f3:88:40:a4:f6:b0:88:ff:fb:ae:e5:16:3f: ad:53:7b:37:05:c7:ad:b4:28:0a:b9:7d:89:bd:23: c7:5f:ed:eb:94:28:f4:bf:dc:36:1f:0e:7c:b6:ce: ea:79:7d:f2:8e:d8:8a:e4:bb:f1:35:a5:25:e4:86: 58:2c:fe:91:fa:76:34:2d:32:07:3d:a9:f1:d7:ca: a0:ad:5d:c8:02:a5:36:90:67:12:80:0b:26:87:bf: 9f:bf:b3:d7:fa:41:2e:68:fc:42:9f:c3:62:55:b4: 46:5a:d2:73:ee:01:59:8b:61:ce:25:4f:22:b5:68: be:93:b1:78:b3:f4:0f:4b:75:54:72:de:30:fd:41: 32:85:cf:26:bd:39:be:de:e0:64:23:94:21:56:00: b1:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B7:81:BE:AA:8E:22:63:73:8D:07:8A:B6:05:2C:D8:78:5D:5F:04 X509v3 Authority Key Identifier: keyid:B1:40:AF:04:91:9B:45:13:82:5A:6E:A5:7E:1A:B9:E5:43:79:E3:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUCvBJGbRROCWm6lfhq55UN548g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:42:60:03:8d:39:0f:49:45:0c:cb:69:43:73:f8:c9:3f:6f: 02:9f:91:94:13:c7:54:eb:61:22:43:d6:d5:fc:d7:85:07:82: 76:7f:d2:7d:f6:36:1d:07:12:6a:e4:31:80:5b:32:97:9a:1e: 2c:50:96:0c:39:63:6c:d9:62:6b:09:91:1c:cb:d0:c9:23:33: ce:f1:00:19:44:66:14:c4:c3:09:21:1c:fa:d4:4c:b6:e9:05: b8:28:a9:46:a0:30:d5:57:39:be:c1:25:2d:c2:6b:96:41:b5: f5:9a:27:00:42:d7:b1:f1:ae:f6:e2:f5:7e:61:39:5d:c4:dd: 9a:7c:78:1f:78:e7:24:d6:93:1b:94:7a:e8:5b:f6:25:28:60: 0b:d5:03:3b:c2:a4:4e:5e:91:dd:ef:59:1c:0a:7b:87:01:76: 4d:f7:9e:8b:3b:01:83:d1:9a:57:23:53:4e:0e:8d:29:95:bb: 9f:6e:78:45:12:c1:c0:6b:5a:62:23:c4:c5:89:8c:4b:c0:b5: d9:c3:71:dd:e8:c7:03:a5:d7:8e:ef:bc:aa:c4:34:1e:e3:c6: 27:88:4b:c0:e5:70:44:63:ea:ce:b8:20:00:aa:15:6d:7f:78: 1e:52:fb:fe:b9:90:33:c9:03:1a:ae:30:c6:9c:99:19:16:27: b2:d7:3e:83 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VCRkQxMTAvBgNVBAUTKEIxNDBBRjA0OTE5QjQ1MTM4MjVBNkVBNTdFMUFCOUU1 NDM3OUUzQzgwHhcNMjYwNDE4MTg0NzM3WhcNMjYwNDI1MTg0NzM3WjAYMRYwFAYD VQQDEw02OWUzZDFjOS1jMmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx+R2HD3nw45Rc7+hDIEgaWyoc+X6w0h57wCoHhbwVSzedS8BSPhk4H/6AMEB ml0V9IiDkG21WGVb0PQC4I9Vx9R4uOcu0iuV2vaM1qhfwF8verwUu75ZFfe2wCA8 z5Cv/ghAH56oBY/GQfOIQKT2sIj/+67lFj+tU3s3BcettCgKuX2JvSPHX+3rlCj0 v9w2Hw58ts7qeX3yjtiK5LvxNaUl5IZYLP6R+nY0LTIHPanx18qgrV3IAqU2kGcS gAsmh7+fv7PX+kEuaPxCn8NiVbRGWtJz7gFZi2HOJU8itWi+k7F4s/QPS3VUct4w /UEyhc8mvTm+3uBkI5QhVgCxAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEC3gb6q jiJjc40HirYFLNh4XV8EMB8GA1UdIwQYMBaAFLFArwSRm0UTglpupX4aueVDeePI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUJGRC9GN0NFNjI5QTNB OEUxMUVBODBBRjBFMzFDNEY5QUUwMi9zVUN2QkpHYlJST0NXbTZsZmhxNTVVTjU0 OGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NVQ3ZCSkdiUlJPQ1dtNmxmaHE1NVVONTQ4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RUJGRC9GN0NFNjI5QTNBOEUxMUVBODBBRjBFMzFDNEY5QUUwMi9zVUN2QkpHYlJS T0NXbTZsZmhxNTVVTjU0OGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfkJgA405D0lFDMtpQ3P4yT9vAp+RlBPHVOthIkPW1fzXhQeCdn/SffY2HQcS auQxgFsyl5oeLFCWDDljbNliawmRHMvQySMzzvEAGURmFMTDCSEc+tRMtukFuCip RqAw1Vc5vsElLcJrlkG19ZonAELXsfGu9uL1fmE5XcTdmnx4H3jnJNaTG5R66Fv2 JShgC9UDO8KkTl6R3e9ZHAp7hwF2TfeeizsBg9GaVyNTTg6NKZW7n254RRLBwGta YiPExYmMS8C12cNx3ejHA6XXju+8qsQ0HuPGJ4hLwOVwRGPqzrggAKoVbX94HlL7 /rmQM8kDGq4wxpyZGRYnstc+gw== -----END CERTIFICATE-----Generated at Sun Apr 19 08:55:29 2026 by rpki-client