$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft File: uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft (raw, json) Hash identifier: 6FPLL8meIpC1vglYh2LJ8hGbj3giqQt3wxmm1i/iw+I= Subject key identifier: 23:D0:F0:A5:D4:6B:4A:44:3A:B0:3E:39:40:BB:F6:A1:4A:0E:CD:13 Authority key identifier: B8:89:11:17:80:68:D5:75:DF:DD:F8:49:40:CA:BE:AF:45:1C:8C:2B Certificate issuer: /CN=A91B4DC7/serialNumber=B88911178068D575DFDDF84940CABEAF451C8C2B Certificate serial: 041A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft Manifest number: 03FC Signing time: Fri 17 Apr 2026 00:23:46 +0000 Manifest this update: Fri 17 Apr 2026 00:23:45 +0000 Manifest next update: Fri 24 Apr 2026 00:23:45 +0000 Files and hashes: 1: uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl (hash: E62ivWAZL4sD1501dDdtMbCHBYb7SVQ0sYF50xOyAo8=) 2: 9ABED502176711EFA0260C6DC4F9AE02.roa (hash: KniUex6Br3kVd8ZFa5IvlRLLvtXYDCxf0DDbHMrohjA=) 3: A6168350176711EFA13E2C6DC4F9AE02.roa (hash: qX8tOJbBF02ErsmjyRjd2vo7Vt289wtwBfMF3iMN9FA=) 4: F8400A20C80811ED9ADBA05EC4F9AE02.roa (hash: ZoRg8H9EdcG1KZ48qLjcZYnWfQFTwAAseWDLCkJqZiQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:23:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1050 (0x41a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4DC7, serialNumber=B88911178068D575DFDDF84940CABEAF451C8C2B Validity Not Before: Apr 17 00:23:45 2026 GMT Not After : Apr 24 00:23:45 2026 GMT Subject: CN=69e17d91-dae4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f7:23:b8:60:02:00:3b:5e:be:cb:ff:72:c2: d3:11:8a:3c:d2:95:e5:2d:e1:92:4a:fa:bd:f8:17: bc:f8:65:8f:1c:b4:ac:d2:2c:e4:18:3c:0a:60:f5: 7d:38:ec:19:cb:14:b5:d2:25:f9:97:14:03:ff:3a: 42:b3:49:76:42:33:76:76:96:31:96:56:ec:5d:4e: c5:56:47:34:2f:7b:f3:66:17:77:66:0b:cb:ef:37: e8:2c:02:a9:0c:d8:bc:a0:82:18:77:70:4d:6b:d1: 58:31:e3:51:f3:b0:35:11:c8:69:57:ee:42:68:e4: d4:b3:35:ec:cf:7d:07:43:39:ca:07:5f:dc:4f:84: 37:61:c4:c5:c5:de:9e:17:7f:c8:82:62:79:97:71: 65:53:93:96:0c:6d:e7:d8:65:95:c2:85:24:42:11: a4:ef:fe:4e:53:62:d1:a0:12:c3:63:2f:19:8f:64: 33:19:78:44:17:8b:c6:d0:90:6b:d3:d6:c6:76:4f: 29:3b:38:61:dd:df:34:e1:60:d8:30:59:b0:f7:9d: a4:df:5d:bf:2f:a7:8e:50:30:c3:3c:0e:72:e6:c8: f3:4e:9c:90:2b:28:58:28:ff:61:2e:0f:c9:f3:95: 99:a4:2e:58:de:9e:4c:f7:f6:66:0a:39:4c:fb:a6: cb:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:D0:F0:A5:D4:6B:4A:44:3A:B0:3E:39:40:BB:F6:A1:4A:0E:CD:13 X509v3 Authority Key Identifier: keyid:B8:89:11:17:80:68:D5:75:DF:DD:F8:49:40:CA:BE:AF:45:1C:8C:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:24:42:3f:91:4d:ff:5d:a5:ec:bd:c1:63:af:95:a5:ee:5b: 24:b7:6e:a6:f5:88:e6:f0:f6:9e:26:58:2b:9d:6c:98:98:0d: 5c:d4:a2:92:e0:29:7b:dd:4e:18:ab:c3:61:23:c5:d9:48:56: d6:23:ea:55:00:9f:3e:3b:ff:c2:0f:43:7e:7e:53:36:f4:09: cb:54:ae:c5:4e:82:ce:7e:06:30:fc:1f:fd:d0:23:e9:e8:1f: 27:5a:9a:a2:5f:75:c4:c6:7c:8f:95:9f:ea:fc:11:61:91:1e: eb:2a:53:8f:4c:ff:d9:9b:c0:ac:3e:fc:a7:68:c9:d2:4d:9c: 38:e1:fc:8b:09:51:a7:a9:13:eb:d9:e8:e0:9c:69:a2:70:92: af:5a:01:58:b4:63:05:35:00:ed:13:c0:c8:5b:45:cf:af:65: 3b:e4:82:db:7f:c1:96:24:50:06:21:91:c6:ca:1d:fd:34:aa: 5a:52:e4:be:f8:41:11:cf:9e:69:a2:4e:ee:9f:e1:19:60:c2: 13:c7:39:b1:dd:de:c5:3c:6f:9f:d7:28:6a:a4:a6:c6:47:fe: 60:b4:de:bf:a7:b2:37:4b:e9:91:1c:e6:04:7e:d8:68:e5:70: 01:5f:eb:41:b6:a4:58:5d:96:d9:26:83:bd:58:99:8e:b6:28: 40:92:83:84 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjREQzcxMTAvBgNVBAUTKEI4ODkxMTE3ODA2OEQ1NzVERkRERjg0OTQwQ0FCRUFG NDUxQzhDMkIwHhcNMjYwNDE3MDAyMzQ1WhcNMjYwNDI0MDAyMzQ1WjAYMRYwFAYD VQQDEw02OWUxN2Q5MS1kYWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwPcjuGACADtevsv/csLTEYo80pXlLeGSSvq9+Be8+GWPHLSs0izkGDwKYPV9 OOwZyxS10iX5lxQD/zpCs0l2QjN2dpYxllbsXU7FVkc0L3vzZhd3ZgvL7zfoLAKp DNi8oIIYd3BNa9FYMeNR87A1EchpV+5CaOTUszXsz30HQznKB1/cT4Q3YcTFxd6e F3/IgmJ5l3FlU5OWDG3n2GWVwoUkQhGk7/5OU2LRoBLDYy8Zj2QzGXhEF4vG0JBr 09bGdk8pOzhh3d804WDYMFmw952k312/L6eOUDDDPA5y5sjzTpyQKyhYKP9hLg/J 85WZpC5Y3p5M9/ZmCjlM+6bL8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCPQ8KXU a0pEOrA+OUC79qFKDs0TMB8GA1UdIwQYMBaAFLiJEReAaNV13934SUDKvq9FHIwr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNERDNy9GM0YxMDIwRUJC MTAxMUVDQjY3NUVGNTFDNEY5QUUwMi91SWtSRjRCbzFYWGYzZmhKUU1xLXIwVWNq Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VJa1JGNEJvMVhYZjNmaEpRTXEtcjBVY2pDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NERDNy9GM0YxMDIwRUJCMTAxMUVDQjY3NUVGNTFDNEY5QUUwMi91SWtSRjRCbzFY WGYzZmhKUU1xLXIwVWNqQ3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtCRCP5FN/12l7L3BY6+Vpe5bJLdupvWI5vD2niZYK51smJgNXNSikuApe91O GKvDYSPF2UhW1iPqVQCfPjv/wg9Dfn5TNvQJy1SuxU6Czn4GMPwf/dAj6egfJ1qa ol91xMZ8j5Wf6vwRYZEe6ypTj0z/2ZvArD78p2jJ0k2cOOH8iwlRp6kT69no4Jxp onCSr1oBWLRjBTUA7RPAyFtFz69lO+SC23/BliRQBiGRxsod/TSqWlLkvvhBEc+e aaJO7p/hGWDCE8c5sd3exTxvn9coaqSmxkf+YLTev6eyN0vpkRzmBH7YaOVwAV/r QbakWF2W2SaDvViZjrYoQJKDhA== -----END CERTIFICATE-----Generated at Fri Apr 17 13:26:04 2026 by rpki-client