$ rpki-client -vvf rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft File: UO_h33KRXtM2HbVZtba4Pq4-88A.mft (raw, json) Hash identifier: Rm76EFqh/U3MMGY3KJ8BejmBHy8vyE4AhM8paYh/YOc= Subject key identifier: 5A:1D:61:35:90:A0:8B:C5:97:AF:68:F7:21:C4:02:74:F2:4D:F0:DD Authority key identifier: 50:EF:E1:DF:72:91:5E:D3:36:1D:B5:59:B5:B6:B8:3E:AE:3E:F3:C0 Certificate issuer: /CN=A9149DF2/serialNumber=50EFE1DF72915ED3361DB559B5B6B83EAE3EF3C0 Certificate serial: 0AFD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft Manifest number: 0AF3 Signing time: Thu 16 Apr 2026 19:18:03 +0000 Manifest this update: Thu 16 Apr 2026 19:18:03 +0000 Manifest next update: Thu 23 Apr 2026 19:18:03 +0000 Files and hashes: 1: UO_h33KRXtM2HbVZtba4Pq4-88A.crl (hash: AGvaGjc2PJOQEFvifc1gzVRTOfeBuNIni7/jEJ2Qd30=) 2: 0357A064679D11EABD681D0FC4F9AE02.roa (hash: bP8YW/usVEPebr8yo+q/K5uFmrIVy5PiorRcfqJheHQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.crl rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:18:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2813 (0xafd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149DF2, serialNumber=50EFE1DF72915ED3361DB559B5B6B83EAE3EF3C0 Validity Not Before: Apr 16 19:18:03 2026 GMT Not After : Apr 23 19:18:03 2026 GMT Subject: CN=69e135eb-a5ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2c:3b:2e:bb:54:79:1c:81:a3:1c:6b:48:85: 32:17:14:d8:d1:35:fa:8e:02:97:77:d7:5c:f0:6b: d6:97:66:3e:4b:07:8e:a0:d7:68:e1:fa:be:9e:3a: 2c:2d:4f:9e:a2:da:f2:f0:a8:37:05:f6:35:a4:9b: a6:76:3b:e7:85:62:d5:bf:b3:38:2e:38:dc:ac:2e: 90:26:62:ef:51:7c:97:63:bd:b2:23:31:f2:8a:50: 41:1f:13:0a:0b:44:e4:c1:ec:b4:1b:e8:f7:c7:8a: cd:48:e1:be:bc:49:d5:12:25:f4:00:6c:2b:0e:87: a3:da:8c:1c:30:06:95:68:1a:fb:dc:10:ce:24:1b: 74:a3:33:a7:cc:81:bd:f5:03:80:88:47:58:39:9d: d2:2f:f9:80:e7:1b:11:54:be:0c:27:75:59:37:c6: 37:45:2e:6d:c9:1f:dc:90:fa:f1:71:5a:50:38:36: 38:1f:43:bd:0f:30:0d:e8:21:86:f8:37:47:ae:8d: 4a:06:6b:5f:b3:c5:9b:e7:4c:7c:8c:b3:38:27:d7: bf:49:54:ea:89:99:ca:f5:c5:fc:3a:7f:92:8f:99: 77:72:53:d9:e7:19:79:00:2d:78:2b:af:84:30:49: 5a:f0:c1:a9:73:9c:20:70:e0:d5:11:a4:6e:12:54: 7a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:1D:61:35:90:A0:8B:C5:97:AF:68:F7:21:C4:02:74:F2:4D:F0:DD X509v3 Authority Key Identifier: keyid:50:EF:E1:DF:72:91:5E:D3:36:1D:B5:59:B5:B6:B8:3E:AE:3E:F3:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:b4:ad:1a:85:e7:83:af:b2:2a:52:a1:37:12:78:2b:85:89: 98:fc:ce:6e:09:e4:a3:53:58:bd:76:a1:22:b0:2c:82:3f:de: e0:9c:70:e7:1f:62:34:ea:c5:9f:30:71:11:e6:97:50:e7:bf: 8f:38:64:71:8c:86:ff:3e:e6:af:95:96:59:da:97:88:db:5d: a8:0c:3a:93:22:57:87:85:95:8d:41:f1:10:8b:fb:47:cc:e7: 99:ba:19:8b:94:34:78:c9:96:b3:e4:10:38:61:6e:10:8a:d5: 0d:da:3b:57:11:bc:de:f2:95:cc:4f:c5:a1:3b:58:75:82:88: fe:b5:83:42:d3:90:e6:17:42:ff:44:5a:43:62:d4:64:26:8a: 11:08:5d:45:be:2d:e8:18:80:81:12:3b:bd:fc:13:fb:c5:81: 5a:a0:20:6b:c2:b9:a8:c5:66:6c:be:f3:02:db:f5:78:b6:1f: 82:e3:0f:5b:dc:44:68:32:43:9b:90:18:a7:b9:f7:c9:4e:b1: d8:ab:6a:5a:d9:e0:2c:ab:5b:f1:3f:df:f3:7d:3d:fb:10:a9: 9c:35:d2:ed:05:dc:73:fe:91:3c:fe:39:de:83:b1:29:0e:ac: 32:cd:b8:2b:0d:c4:61:ef:d2:ca:bc:d5:71:9c:08:a3:bd:67: 74:f8:18:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCv0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlERjIxMTAvBgNVBAUTKDUwRUZFMURGNzI5MTVFRDMzNjFEQjU1OUI1QjZCODNF QUUzRUYzQzAwHhcNMjYwNDE2MTkxODAzWhcNMjYwNDIzMTkxODAzWjAYMRYwFAYD VQQDEw02OWUxMzVlYi1hNWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtyw7LrtUeRyBoxxrSIUyFxTY0TX6jgKXd9dc8GvWl2Y+SweOoNdo4fq+njos LU+eotry8Kg3BfY1pJumdjvnhWLVv7M4LjjcrC6QJmLvUXyXY72yIzHyilBBHxMK C0Tkwey0G+j3x4rNSOG+vEnVEiX0AGwrDoej2owcMAaVaBr73BDOJBt0ozOnzIG9 9QOAiEdYOZ3SL/mA5xsRVL4MJ3VZN8Y3RS5tyR/ckPrxcVpQODY4H0O9DzAN6CGG +DdHro1KBmtfs8Wb50x8jLM4J9e/SVTqiZnK9cX8On+Sj5l3clPZ5xl5AC14K6+E MEla8MGpc5wgcODVEaRuElR60wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFodYTWQ oIvFl69o9yHEAnTyTfDdMB8GA1UdIwQYMBaAFFDv4d9ykV7TNh21WbW2uD6uPvPA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OURGMi85OTk4RjFDNDY3 OUIxMUVBOTlBQTQyMEFDNEY5QUUwMi9VT19oMzNLUlh0TTJIYlZadGJhNFBxNC04 OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VPX2gzM0tSWHRNMkhiVlp0YmE0UHE0LTg4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OURGMi85OTk4RjFDNDY3OUIxMUVBOTlBQTQyMEFDNEY5QUUwMi9VT19oMzNLUlh0 TTJIYlZadGJhNFBxNC04OEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAW7StGoXng6+yKlKhNxJ4K4WJmPzObgnko1NYvXahIrAsgj/e4Jxw5x9iNOrF nzBxEeaXUOe/jzhkcYyG/z7mr5WWWdqXiNtdqAw6kyJXh4WVjUHxEIv7R8znmboZ i5Q0eMmWs+QQOGFuEIrVDdo7VxG83vKVzE/FoTtYdYKI/rWDQtOQ5hdC/0RaQ2LU ZCaKEQhdRb4t6BiAgRI7vfwT+8WBWqAga8K5qMVmbL7zAtv1eLYfguMPW9xEaDJD m5AYp7n3yU6x2KtqWtngLKtb8T/f8309+xCpnDXS7QXcc/6RPP453oOxKQ6sMs24 Kw3EYe/SyrzVcZwIo71ndPgY1Q== -----END CERTIFICATE-----Generated at Fri Apr 17 13:21:10 2026 by rpki-client