$ rpki-client -vvf rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.mft File: U7ksLaLVSegUcEB8yP8MdbjEty0.mft (raw, json) Hash identifier: K8PXGRE3wJWrwQKbdhstkmQMevI0Wfr3jRLR70SskTI= Subject key identifier: E4:34:39:1D:D3:9A:DF:A7:74:F8:12:A0:AD:DD:0B:3D:12:DC:7D:29 Authority key identifier: 53:B9:2C:2D:A2:D5:49:E8:14:70:40:7C:C8:FF:0C:75:B8:C4:B7:2D Certificate issuer: /CN=A91940AE/serialNumber=53B92C2DA2D549E81470407CC8FF0C75B8C4B72D Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U7ksLaLVSegUcEB8yP8MdbjEty0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.mft Manifest number: 39 Signing time: Fri 17 Apr 2026 08:18:35 +0000 Manifest this update: Fri 17 Apr 2026 08:18:34 +0000 Manifest next update: Fri 24 Apr 2026 08:18:34 +0000 Files and hashes: 1: U7ksLaLVSegUcEB8yP8MdbjEty0.crl (hash: rpGoQDNjgjVWyyMPbBvPXTWOi8OuQgZl2sUwPudH7ZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.crl rsync://rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U7ksLaLVSegUcEB8yP8MdbjEty0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91940AE, serialNumber=53B92C2DA2D549E81470407CC8FF0C75B8C4B72D Validity Not Before: Apr 17 08:18:34 2026 GMT Not After : Apr 24 08:18:34 2026 GMT Subject: CN=69e1ecdb-e300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:90:d0:6c:8f:cc:22:0c:dd:c3:6f:0e:7f:0f: aa:a2:c5:bd:7e:2d:1f:65:e3:29:d8:c0:f1:ca:73: 38:95:9d:fb:3a:86:3a:47:05:f0:66:dc:b5:e0:ed: 66:4c:54:b2:4e:99:a7:46:21:81:29:0c:cc:05:e0: b6:cf:f1:0c:18:c0:9c:e7:2d:cd:bb:fb:28:5b:76: 5f:6e:03:b6:83:9d:16:43:7e:28:ff:25:ef:11:48: c6:a8:cb:da:b5:93:11:7d:fb:ad:d0:f8:7c:e6:42: ce:a4:87:50:f0:98:2f:8b:da:34:8b:06:fb:55:1e: 67:c5:af:14:ec:ee:05:0f:07:60:60:7b:66:d6:40: c1:c3:8c:84:f5:e6:b6:31:c6:de:8e:23:af:16:8b: ca:31:e4:59:fa:08:37:77:ba:cb:fd:bc:c2:42:c3: a1:7b:d8:69:de:f7:c8:8d:bb:c4:dd:89:9d:fe:90: 3f:79:57:e0:75:55:ec:79:a8:d7:5a:d8:23:ec:8f: fe:ba:08:e6:dc:42:81:88:36:66:3f:ff:b2:20:ed: 41:47:19:26:64:f5:78:1f:ea:6b:ad:f6:43:be:94: d9:ea:d8:74:31:fc:e4:63:8e:0e:e1:a5:5d:bb:ba: f1:39:c9:0e:52:c2:b6:7b:04:b3:7c:cc:ea:79:1d: 63:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:34:39:1D:D3:9A:DF:A7:74:F8:12:A0:AD:DD:0B:3D:12:DC:7D:29 X509v3 Authority Key Identifier: keyid:53:B9:2C:2D:A2:D5:49:E8:14:70:40:7C:C8:FF:0C:75:B8:C4:B7:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U7ksLaLVSegUcEB8yP8MdbjEty0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:88:8b:0f:3c:20:c0:db:61:d0:7a:f3:9d:87:4f:30:82:29: f7:1e:3f:75:85:c5:da:bc:62:1e:c1:c1:68:55:44:41:e4:19: 35:49:25:c1:ef:c9:b8:7c:eb:33:01:71:75:df:de:e8:50:97: 11:4e:88:f3:a9:11:65:f3:0f:e5:7b:a0:79:c1:1c:9b:f6:de: 42:18:76:29:90:56:10:89:17:a5:e7:2c:66:e5:b5:47:fe:1e: b3:2b:45:a8:94:c2:63:d1:34:df:bd:be:1c:72:d9:f5:37:b9: ed:e3:38:a0:00:6f:0b:d9:08:f6:d6:a5:77:d4:03:73:4a:20: 57:72:6b:04:bd:45:7e:87:b5:e1:97:f6:d2:91:09:5c:42:5a: 44:f8:4b:ff:14:5d:ca:9f:5d:dc:95:4a:d0:7a:96:7c:74:e6: 8a:da:4e:d9:8a:6b:fa:2b:5b:af:f4:84:d3:33:3c:2a:db:80: 52:6d:d8:62:bf:ab:68:1c:d7:25:a2:48:77:18:eb:29:6d:70: 7e:fe:39:ff:ad:a9:da:ad:9e:d6:d9:c0:07:3a:80:cb:aa:28: ba:6b:b4:03:4d:7f:9f:dd:71:02:0d:12:de:17:9c:e7:c3:b5: e9:44:f4:e7:73:af:19:f8:96:b3:93:e6:dd:4b:09:d9:2f:1d: 03:b2:74:5d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NDBBRTExMC8GA1UEBRMoNTNCOTJDMkRBMkQ1NDlFODE0NzA0MDdDQzhGRjBDNzVC OEM0QjcyRDAeFw0yNjA0MTcwODE4MzRaFw0yNjA0MjQwODE4MzRaMBgxFjAUBgNV BAMTDTY5ZTFlY2RiLWUzMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkkNBsj8wiDN3Dbw5/D6qixb1+LR9l4ynYwPHKcziVnfs6hjpHBfBm3LXg7WZM VLJOmadGIYEpDMwF4LbP8QwYwJznLc27+yhbdl9uA7aDnRZDfij/Je8RSMaoy9q1 kxF9+63Q+HzmQs6kh1DwmC+L2jSLBvtVHmfFrxTs7gUPB2Bge2bWQMHDjIT15rYx xt6OI68Wi8ox5Fn6CDd3usv9vMJCw6F72Gne98iNu8TdiZ3+kD95V+B1Vex5qNda 2CPsj/66CObcQoGINmY//7Ig7UFHGSZk9Xgf6mut9kO+lNnq2HQx/ORjjg7hpV27 uvE5yQ5SwrZ7BLN8zOp5HWMrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU5DQ5HdOa 36d0+BKgrd0LPRLcfSkwHwYDVR0jBBgwFoAUU7ksLaLVSegUcEB8yP8MdbjEty0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk0MEFFL0IzOEU1RkQ0RUY5 RDExRjBBMkQ2Qjc3OTY3NkY1NkJDL1U3a3NMYUxWU2VnVWNFQjh5UDhNZGJqRXR5 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVTdrc0xhTFZTZWdVY0VCOHlQOE1kYmpFdHkwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk0 MEFFL0IzOEU1RkQ0RUY5RDExRjBBMkQ2Qjc3OTY3NkY1NkJDL1U3a3NMYUxWU2Vn VWNFQjh5UDhNZGJqRXR5MC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCciIsPPCDA22HQevOdh08wgin3Hj91hcXavGIewcFoVURB5Bk1SSXB78m4fOsz AXF1397oUJcRTojzqRFl8w/le6B5wRyb9t5CGHYpkFYQiRel5yxm5bVH/h6zK0Wo lMJj0TTfvb4cctn1N7nt4zigAG8L2Qj21qV31ANzSiBXcmsEvUV+h7Xhl/bSkQlc QlpE+Ev/FF3Kn13clUrQepZ8dOaK2k7Zimv6K1uv9ITTMzwq24BSbdhiv6toHNcl okh3GOspbXB+/jn/ranarZ7W2cAHOoDLqii6a7QDTX+f3XECDRLeF5znw7XpRPTn c68Z+Jazk+bdSwnZLx0DsnRd -----END CERTIFICATE-----Generated at Fri Apr 17 10:20:13 2026 by rpki-client