$ rpki-client -vvf rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft File: xUMJ3BErZYYnvTagMHLnXQYDZNM.mft (raw, json) Hash identifier: ZdniOXbM3UBSQ2YlfPbDiKR5NWOkFOBkZOdOE/qr+gw= Subject key identifier: 8A:A9:51:B2:A4:22:1E:19:BF:0F:7F:5A:AC:28:54:A3:07:DC:05:F9 Authority key identifier: C5:43:09:DC:11:2B:65:86:27:BD:36:A0:30:72:E7:5D:06:03:64:D3 Certificate issuer: /CN=A9199836/serialNumber=C54309DC112B658627BD36A03072E75D060364D3 Certificate serial: 054B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUMJ3BErZYYnvTagMHLnXQYDZNM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft Manifest number: 0544 Signing time: Thu 16 Apr 2026 23:22:23 +0000 Manifest this update: Thu 16 Apr 2026 23:22:22 +0000 Manifest next update: Thu 23 Apr 2026 23:22:22 +0000 Files and hashes: 1: xUMJ3BErZYYnvTagMHLnXQYDZNM.crl (hash: FW/A4vKd6mv8zlwYeUY24hdm0gCv7verzpJ52HeKF1o=) 2: 029F318A366F11ECA773E263C4F9AE02.roa (hash: Wk0rJSEhmI1m146JBYCWjAtB11PfAVxg4es4P8RFH/c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.crl rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUMJ3BErZYYnvTagMHLnXQYDZNM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 23:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1355 (0x54b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199836, serialNumber=C54309DC112B658627BD36A03072E75D060364D3 Validity Not Before: Apr 16 23:22:22 2026 GMT Not After : Apr 23 23:22:22 2026 GMT Subject: CN=69e16f2f-ef5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:12:c4:27:27:46:6d:85:f9:90:c9:57:c5:0c: 10:3a:40:34:13:0f:28:79:5d:5b:b7:f9:79:47:7f: a2:25:bf:11:81:cd:70:ba:a5:bc:d8:6f:34:34:6c: 45:a8:7e:c2:35:15:05:83:ce:46:b7:4b:15:69:9d: 17:b1:40:74:36:b4:8a:ec:3f:ec:75:d7:b4:d3:08: 06:e9:b1:53:19:1c:44:aa:a2:54:5d:ad:98:d7:3a: 66:1c:43:e3:39:30:16:6f:f2:77:3e:9a:c7:02:21: 21:dc:1a:d9:1f:c9:22:52:a3:04:e2:47:2f:1b:d6: c2:17:aa:cd:83:ad:46:96:02:01:ce:6a:7e:58:a8: 59:74:d9:bc:69:ec:fc:a2:8c:2e:f3:98:14:90:7e: 57:d7:51:e4:8e:d3:09:f8:bd:a8:38:92:0c:61:ea: 18:e6:b0:f8:d5:5a:0d:20:f3:78:98:38:9b:91:f6: de:47:4b:86:df:40:09:d1:19:ba:03:a8:ba:54:0d: e8:b9:4c:0f:58:77:e6:c3:ba:dd:13:93:89:42:95: af:a9:21:9f:0a:45:8b:eb:d0:ff:81:32:4e:c4:c4: 54:c5:6e:cc:d0:31:95:cb:f2:68:33:3b:d5:78:49: 95:d9:d9:c0:3b:6b:f2:08:8a:46:1d:f3:01:1e:a5: 97:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:A9:51:B2:A4:22:1E:19:BF:0F:7F:5A:AC:28:54:A3:07:DC:05:F9 X509v3 Authority Key Identifier: keyid:C5:43:09:DC:11:2B:65:86:27:BD:36:A0:30:72:E7:5D:06:03:64:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUMJ3BErZYYnvTagMHLnXQYDZNM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:c0:b2:fd:df:82:9e:2d:a3:a4:a7:e1:16:10:64:da:20:81: e4:06:f9:93:a7:a0:b9:22:01:3e:bc:0a:70:cd:0a:b0:86:b5: 7a:e2:81:d3:ed:cd:c7:5a:fc:89:66:38:f6:82:9f:ee:46:87: 4a:86:16:88:75:29:dc:7a:76:26:80:36:ae:81:2f:61:77:e2: 0e:fe:42:5e:e1:92:bf:76:2b:df:e5:f6:1c:2e:8e:d9:57:4c: 14:1b:9e:a2:20:32:46:d1:f4:3e:77:ab:75:fa:a6:83:1a:36: 6b:fa:54:e8:43:ea:06:6e:38:8a:62:6e:04:41:c7:5c:3e:39: 1e:26:c9:68:7d:4a:b4:3f:b9:8e:60:b7:5b:67:bb:1d:a1:d6: 12:69:d0:b8:eb:70:c1:9a:79:29:77:ff:f0:c8:8c:83:a7:34: c1:1b:cb:aa:a2:3d:4b:c9:af:28:60:50:76:fb:49:7a:77:f5: 76:cb:7e:2f:6b:62:aa:5c:a3:43:7e:95:17:52:03:cc:16:0c: 06:a1:3b:17:ad:26:a4:4f:ef:46:dd:25:ae:8f:6d:14:e5:fc: f0:34:0a:fa:a3:c2:7b:bc:30:17:df:f6:e0:9d:3a:63:0e:a2: df:74:90:9f:2b:f8:4f:3f:80:f9:32:64:86:5f:24:bc:e6:0d: 11:98:e2:01 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk4MzYxMTAvBgNVBAUTKEM1NDMwOURDMTEyQjY1ODYyN0JEMzZBMDMwNzJFNzVE MDYwMzY0RDMwHhcNMjYwNDE2MjMyMjIyWhcNMjYwNDIzMjMyMjIyWjAYMRYwFAYD VQQDEw02OWUxNmYyZi1lZjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsxLEJydGbYX5kMlXxQwQOkA0Ew8oeV1bt/l5R3+iJb8Rgc1wuqW82G80NGxF qH7CNRUFg85Gt0sVaZ0XsUB0NrSK7D/sdde00wgG6bFTGRxEqqJUXa2Y1zpmHEPj OTAWb/J3PprHAiEh3BrZH8kiUqME4kcvG9bCF6rNg61GlgIBzmp+WKhZdNm8aez8 oowu85gUkH5X11HkjtMJ+L2oOJIMYeoY5rD41VoNIPN4mDibkfbeR0uG30AJ0Rm6 A6i6VA3ouUwPWHfmw7rdE5OJQpWvqSGfCkWL69D/gTJOxMRUxW7M0DGVy/JoMzvV eEmV2dnAO2vyCIpGHfMBHqWXrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIqpUbKk Ih4Zvw9/WqwoVKMH3AX5MB8GA1UdIwQYMBaAFMVDCdwRK2WGJ702oDBy510GA2TT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTgzNi8yOTM2RkZCMjM2 MkUxMUVDODkwOUU4NkZDNEY5QUUwMi94VU1KM0JFclpZWW52VGFnTUhMblhRWURa Tk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hVTUozQkVyWllZbnZUYWdNSExuWFFZRFpOTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTgzNi8yOTM2RkZCMjM2MkUxMUVDODkwOUU4NkZDNEY5QUUwMi94VU1KM0JFclpZ WW52VGFnTUhMblhRWURaTk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjMCy/d+Cni2jpKfhFhBk2iCB5Ab5k6eguSIBPrwKcM0KsIa1euKB0+3Nx1r8 iWY49oKf7kaHSoYWiHUp3Hp2JoA2roEvYXfiDv5CXuGSv3Yr3+X2HC6O2VdMFBue oiAyRtH0Pnerdfqmgxo2a/pU6EPqBm44imJuBEHHXD45HibJaH1KtD+5jmC3W2e7 HaHWEmnQuOtwwZp5KXf/8MiMg6c0wRvLqqI9S8mvKGBQdvtJenf1dst+L2tiqlyj Q36VF1IDzBYMBqE7F60mpE/vRt0lro9tFOX88DQK+qPCe7wwF9/24J06Yw6i33SQ nyv4Tz+A+TJkhl8kvOYNEZjiAQ== -----END CERTIFICATE-----Generated at Fri Apr 17 15:15:36 2026 by rpki-client