$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft File: u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft (raw, json) Hash identifier: rPHguV1r7KkanISZVKRAgdqWL18aS5PfN3z4belyJIA= Subject key identifier: 2C:D4:BD:54:BA:C7:E1:DD:1E:DE:5A:3C:DD:07:E0:E5:4B:EE:A7:70 Authority key identifier: BB:57:55:5F:82:AA:20:A5:1C:1B:48:F7:B2:6C:35:67:F5:A1:E7:BB Certificate issuer: /CN=A9152D28/serialNumber=BB57555F82AA20A51C1B48F7B26C3567F5A1E7BB Certificate serial: 0216 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1dVX4KqIKUcG0j3smw1Z_Wh57s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft Manifest number: 020F Signing time: Fri 17 Apr 2026 02:46:58 +0000 Manifest this update: Fri 17 Apr 2026 02:46:58 +0000 Manifest next update: Fri 24 Apr 2026 02:46:58 +0000 Files and hashes: 1: u1dVX4KqIKUcG0j3smw1Z_Wh57s.crl (hash: COAtdwpk0NZHCh438NdiYrUSiRfkThY3E42YIPl1LMY=) 2: E94B9DBC34EC11EE94A16565C4F9AE02.roa (hash: Ny3isw6umsC+HWLP+QGmuoxGo7jIpWZVWqHK1TweF80=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.crl rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1dVX4KqIKUcG0j3smw1Z_Wh57s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:46:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 534 (0x216) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152D28, serialNumber=BB57555F82AA20A51C1B48F7B26C3567F5A1E7BB Validity Not Before: Apr 17 02:46:58 2026 GMT Not After : Apr 24 02:46:58 2026 GMT Subject: CN=69e19f22-3386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ee:c6:3f:31:13:74:cd:da:99:e5:b6:6f:33: a6:0f:78:f4:29:a9:b7:11:23:43:ec:47:97:4b:e7: 2e:85:2b:6d:a9:55:08:51:c9:06:51:49:12:53:4b: 06:9f:bc:34:98:2c:aa:f5:e1:97:c4:7b:da:4d:35: d9:3b:d7:3e:83:89:95:5e:cc:61:e5:f8:4a:cf:85: fb:60:53:65:b4:0b:52:9c:15:b0:89:e4:ea:a5:b9: a3:e5:48:fa:77:74:f7:4a:e2:f0:7a:88:6e:29:84: 7c:ac:49:98:86:e9:0e:ad:82:7c:1b:fb:e6:2c:60: 37:24:49:48:2e:56:8c:16:d0:ae:51:27:8f:6f:9d: 00:33:83:b4:17:36:19:7e:ee:5f:fe:d9:9e:9a:a8: 72:1f:8b:47:83:be:a0:32:63:45:f3:58:18:e2:67: 57:3a:43:50:9d:63:6f:41:c8:91:df:11:e1:b6:94: 69:67:85:f3:73:c6:43:ea:57:ab:84:c8:47:dd:5a: a1:a0:1d:96:1d:b5:de:a9:ef:2d:98:51:59:b5:cd: 72:80:0e:4c:53:50:db:28:bb:00:eb:df:5e:b4:05: 03:58:8e:36:dd:b9:20:46:35:f4:8a:33:da:48:c1: 7e:b6:36:16:4c:bd:de:a7:48:e1:3d:88:d9:f4:0e: dc:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:D4:BD:54:BA:C7:E1:DD:1E:DE:5A:3C:DD:07:E0:E5:4B:EE:A7:70 X509v3 Authority Key Identifier: keyid:BB:57:55:5F:82:AA:20:A5:1C:1B:48:F7:B2:6C:35:67:F5:A1:E7:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1dVX4KqIKUcG0j3smw1Z_Wh57s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:75:1e:4d:20:33:33:f6:4b:df:ab:9b:76:d2:de:1a:39:ab: 93:fe:e3:d9:49:58:d8:2b:2c:0b:24:70:da:64:a9:91:3d:ca: 6a:57:4a:8b:f8:a8:fc:4f:29:7a:23:d5:0b:13:fe:80:32:61: 2f:6d:fb:cd:da:60:1d:49:34:17:4b:7c:6d:f4:11:bb:b4:3b: cf:88:08:5b:c9:73:02:0f:5e:e1:2b:9f:18:bb:61:4b:83:e0: 33:98:4d:b8:95:e8:8a:b8:0f:d4:43:4d:b3:06:e7:54:0c:b0: 98:5c:29:f9:de:00:10:6e:8d:f9:19:6f:7a:1f:27:1c:5c:49: a1:b5:ea:41:3c:78:20:d7:39:7f:bc:8e:cd:39:ce:4d:24:88: de:37:cd:c6:8a:de:18:5f:40:ec:2a:bc:91:6d:d0:0f:77:e4: 02:0f:59:ea:cb:95:15:7f:0f:1f:58:83:1e:19:96:4a:f7:75: d3:d7:b9:dc:60:f9:53:3f:f6:84:97:0f:38:ef:e6:05:04:92: 89:43:30:0b:fd:e4:eb:d1:0a:6e:3e:fd:2b:d9:cd:0f:43:25: 09:10:4b:61:0a:d6:1a:14:81:e6:a8:6e:f1:9a:2e:5b:b6:7d: f8:a5:02:d1:2f:d5:4b:4f:91:ba:0f:3f:c8:c1:e0:e1:60:66: d7:ce:5f:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJEMjgxMTAvBgNVBAUTKEJCNTc1NTVGODJBQTIwQTUxQzFCNDhGN0IyNkMzNTY3 RjVBMUU3QkIwHhcNMjYwNDE3MDI0NjU4WhcNMjYwNDI0MDI0NjU4WjAYMRYwFAYD VQQDEw02OWUxOWYyMi0zMzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxu7GPzETdM3ameW2bzOmD3j0Kam3ESND7EeXS+cuhSttqVUIUckGUUkSU0sG n7w0mCyq9eGXxHvaTTXZO9c+g4mVXsxh5fhKz4X7YFNltAtSnBWwieTqpbmj5Uj6 d3T3SuLweohuKYR8rEmYhukOrYJ8G/vmLGA3JElILlaMFtCuUSePb50AM4O0FzYZ fu5f/tmemqhyH4tHg76gMmNF81gY4mdXOkNQnWNvQciR3xHhtpRpZ4Xzc8ZD6ler hMhH3VqhoB2WHbXeqe8tmFFZtc1ygA5MU1DbKLsA699etAUDWI423bkgRjX0ijPa SMF+tjYWTL3ep0jhPYjZ9A7c8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCzUvVS6 x+HdHt5aPN0H4OVL7qdwMB8GA1UdIwQYMBaAFLtXVV+CqiClHBtI97JsNWf1oee7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkQyOC9BRjkzRDE2MjIy MjYxMUVFODlBRTc2ODNDNEY5QUUwMi91MWRWWDRLcUlLVWNHMGozc213MVpfV2g1 N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UxZFZYNEtxSUtVY0cwajNzbXcxWl9XaDU3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkQyOC9BRjkzRDE2MjIyMjYxMUVFODlBRTc2ODNDNEY5QUUwMi91MWRWWDRLcUlL VWNHMGozc213MVpfV2g1N3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkHUeTSAzM/ZL36ubdtLeGjmrk/7j2UlY2CssCyRw2mSpkT3KaldKi/io/E8p eiPVCxP+gDJhL237zdpgHUk0F0t8bfQRu7Q7z4gIW8lzAg9e4SufGLthS4PgM5hN uJXoirgP1ENNswbnVAywmFwp+d4AEG6N+Rlveh8nHFxJobXqQTx4INc5f7yOzTnO TSSI3jfNxoreGF9A7Cq8kW3QD3fkAg9Z6suVFX8PH1iDHhmWSvd109e53GD5Uz/2 hJcPOO/mBQSSiUMwC/3k69EKbj79K9nND0MlCRBLYQrWGhSB5qhu8ZouW7Z9+KUC 0S/VS0+Rug8/yMHg4WBm185ffA== -----END CERTIFICATE-----Generated at Fri Apr 17 18:27:47 2026 by rpki-client