$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft File: UCfzGS691UlQo5w9EwlKcfHTMmY.mft (raw, json) Hash identifier: d5E1BnvFkA0ZXcyqrGUOAIGaVIJX03vD2ZcUGHPbdDs= Subject key identifier: E7:0F:D7:FF:7F:93:1E:E7:71:CD:27:51:FA:0E:B4:D7:E9:7C:78:EB Authority key identifier: 50:27:F3:19:2E:BD:D5:49:50:A3:9C:3D:13:09:4A:71:F1:D3:32:66 Certificate issuer: /CN=A91A3078/serialNumber=5027F3192EBDD54950A39C3D13094A71F1D33266 Certificate serial: 0BBA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft Manifest number: 0B92 Signing time: Thu 16 Apr 2026 19:03:23 +0000 Manifest this update: Thu 16 Apr 2026 19:03:23 +0000 Manifest next update: Thu 23 Apr 2026 19:03:23 +0000 Files and hashes: 1: UCfzGS691UlQo5w9EwlKcfHTMmY.crl (hash: fpgVCb2u8TwlGiKtBKQSHSvNUM0uSA8rC1n262C14W4=) 2: CEFEEFEA854E11EBA2CFDC87C4F9AE02.roa (hash: STVj2nhR43tdaUjvSJVzwF108t0kdD6iF4pS76haPJU=) 3: F3F7D2B0CE9711ECA2477C19C4F9AE02.roa (hash: GKFcFl36b7LnjNX4oCJ7zVjBqwtdvTCKUrd14r3mvVc=) 4: CDD62642854E11EBA2CFDC87C4F9AE02.roa (hash: y3tBCZ/zj5uXK4iELgDoXwmRBCPYOm3bLLdNGBDaIUc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.crl rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3002 (0xbba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3078, serialNumber=5027F3192EBDD54950A39C3D13094A71F1D33266 Validity Not Before: Apr 16 19:03:23 2026 GMT Not After : Apr 23 19:03:23 2026 GMT Subject: CN=69e1327b-1b97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c0:50:33:7f:1b:2c:89:ed:3e:d0:b2:aa:ce: ef:33:28:80:a5:fa:17:34:7d:e2:49:d6:15:63:6c: e3:4b:f4:24:2a:7e:85:4c:8a:7f:ac:7f:7b:1c:33: 62:6e:01:39:78:9d:14:4b:e2:78:de:b7:f5:7e:98: d7:46:ed:93:3d:6a:42:5c:e1:cf:3d:64:1c:80:a0: a7:8c:10:5e:03:74:36:57:22:77:aa:84:6a:c6:17: dd:e4:84:21:e2:8f:d2:5e:9a:33:6f:8a:12:cb:7a: b6:0b:dd:a5:81:5f:d8:4c:c1:76:28:9f:8c:b3:9f: e9:75:cb:c2:99:7e:bd:35:36:83:aa:54:28:ed:0a: 93:c5:d8:91:94:80:e8:5a:8d:81:21:7e:e2:65:2a: fa:59:0b:26:c2:bb:48:73:1c:88:a7:24:24:2f:06: 96:00:9b:39:fa:53:93:a7:41:65:cf:dc:fc:24:65: e6:9b:3a:8e:96:00:a9:d7:bc:30:ce:45:84:d2:61: 8e:a6:92:36:bf:1f:85:d7:f4:bb:c9:d0:05:a1:30: 46:02:70:5b:43:5b:df:40:e2:0f:4b:cf:8e:13:59: fb:d3:6d:1b:75:cc:85:64:ce:bf:34:f1:71:a0:7b: 7c:1d:a8:63:88:c6:ad:68:8f:f1:ca:f2:1b:95:89: f6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:0F:D7:FF:7F:93:1E:E7:71:CD:27:51:FA:0E:B4:D7:E9:7C:78:EB X509v3 Authority Key Identifier: keyid:50:27:F3:19:2E:BD:D5:49:50:A3:9C:3D:13:09:4A:71:F1:D3:32:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:a7:19:9b:7c:38:87:5e:91:6f:0b:b1:8b:76:92:17:3f:83: 78:3c:ac:67:25:4a:71:7f:4f:d0:89:2c:5c:b6:01:64:f3:1c: cc:73:5a:2b:0a:2a:73:88:d2:e7:ae:04:98:80:f7:9e:a7:68: 38:41:06:eb:9f:27:0b:b6:2d:9d:87:56:c7:ad:13:cb:26:ac: 5e:87:ed:f5:87:3d:b8:10:9d:a7:ce:f1:9f:30:74:04:1e:22: 55:2e:72:7c:83:12:fb:18:f4:39:46:ab:bb:97:e0:79:e8:7f: 05:c9:ef:17:e2:46:23:a4:19:b1:82:52:bb:77:5d:b2:14:2b: 3c:2d:88:90:18:4b:0a:db:e7:77:08:66:0b:a5:3f:55:15:cb: 24:15:79:df:6b:a1:ef:dd:e5:05:9a:e4:3f:d0:96:7f:a8:79: 96:6d:f8:bd:97:41:9f:a6:e8:a8:33:77:0e:e2:77:78:9b:60: ed:11:8b:4b:78:dd:6b:2e:27:c9:11:77:0d:38:f7:0f:54:32: 9b:42:d4:5d:f8:7d:7a:84:eb:dc:dd:71:38:f1:e6:2a:81:7a: b6:65:54:11:e6:d9:e5:a2:0f:cb:5d:45:6b:42:9e:64:90:26: 1e:86:23:bb:74:7d:66:ce:56:fb:f2:2e:62:02:dc:ef:b5:59: 92:37:a8:fd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC7owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTMwNzgxMTAvBgNVBAUTKDUwMjdGMzE5MkVCREQ1NDk1MEEzOUMzRDEzMDk0QTcx RjFEMzMyNjYwHhcNMjYwNDE2MTkwMzIzWhcNMjYwNDIzMTkwMzIzWjAYMRYwFAYD VQQDEw02OWUxMzI3Yi0xYjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvcBQM38bLIntPtCyqs7vMyiApfoXNH3iSdYVY2zjS/QkKn6FTIp/rH97HDNi bgE5eJ0US+J43rf1fpjXRu2TPWpCXOHPPWQcgKCnjBBeA3Q2VyJ3qoRqxhfd5IQh 4o/SXpozb4oSy3q2C92lgV/YTMF2KJ+Ms5/pdcvCmX69NTaDqlQo7QqTxdiRlIDo Wo2BIX7iZSr6WQsmwrtIcxyIpyQkLwaWAJs5+lOTp0Flz9z8JGXmmzqOlgCp17ww zkWE0mGOppI2vx+F1/S7ydAFoTBGAnBbQ1vfQOIPS8+OE1n7020bdcyFZM6/NPFx oHt8HahjiMataI/xyvIblYn2RwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOcP1/9/ kx7ncc0nUfoOtNfpfHjrMB8GA1UdIwQYMBaAFFAn8xkuvdVJUKOcPRMJSnHx0zJm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzA3OC84NjMwQjFDODRD OEMxMUVBQjlFMjcwNTdDNEY5QUUwMi9VQ2Z6R1M2OTFVbFFvNXc5RXdsS2NmSFRN bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VDZnpHUzY5MVVsUW81dzlFd2xLY2ZIVE1tWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzA3OC84NjMwQjFDODRDOEMxMUVBQjlFMjcwNTdDNEY5QUUwMi9VQ2Z6R1M2OTFV bFFvNXc5RXdsS2NmSFRNbVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoqcZm3w4h16Rbwuxi3aSFz+DeDysZyVKcX9P0IksXLYBZPMczHNaKwoqc4jS 564EmID3nqdoOEEG658nC7YtnYdWx60TyyasXoft9Yc9uBCdp87xnzB0BB4iVS5y fIMS+xj0OUaru5fgeeh/BcnvF+JGI6QZsYJSu3ddshQrPC2IkBhLCtvndwhmC6U/ VRXLJBV532uh793lBZrkP9CWf6h5lm34vZdBn6boqDN3DuJ3eJtg7RGLS3jday4n yRF3DTj3D1Qym0LUXfh9eoTr3N1xOPHmKoF6tmVUEebZ5aIPy11Fa0KeZJAmHoYj u3R9Zs5W+/IuYgLc77VZkjeo/Q== -----END CERTIFICATE-----Generated at Fri Apr 17 12:17:51 2026 by rpki-client