$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft File: u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft (raw, json) Hash identifier: 76ct80bOUy3wEXbBCWTaN4wMB8O7hsbDrraI97O97+E= Subject key identifier: 4F:39:F4:FA:2D:5F:3C:F2:92:9B:F6:03:5F:65:B0:D7:B5:35:14:CA Authority key identifier: BB:E8:03:FB:75:7E:0C:47:D3:20:45:45:21:87:B7:4A:E2:71:11:F0 Certificate issuer: /CN=A91CEE85/serialNumber=BBE803FB757E0C47D32045452187B74AE27111F0 Certificate serial: 0162 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-gD-3V-DEfTIEVFIYe3SuJxEfA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft Manifest number: 0151 Signing time: Fri 17 Apr 2026 04:54:23 +0000 Manifest this update: Fri 17 Apr 2026 04:54:23 +0000 Manifest next update: Fri 24 Apr 2026 04:54:23 +0000 Files and hashes: 1: u-gD-3V-DEfTIEVFIYe3SuJxEfA.crl (hash: AudLDJDDKozPAYWjydSRdNplrc/oJsAFJ18dYNCvLbw=) 2: 4D189DD4728311EFA9CECE43C4F9AE02.roa (hash: m3Jo8FCeaELT1I3nJBgJYkzF+itVMTxAlpjgG+4EtAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.crl rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-gD-3V-DEfTIEVFIYe3SuJxEfA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 04:54:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 354 (0x162) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEE85, serialNumber=BBE803FB757E0C47D32045452187B74AE27111F0 Validity Not Before: Apr 17 04:54:23 2026 GMT Not After : Apr 24 04:54:23 2026 GMT Subject: CN=69e1bcff-e8b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4d:d9:e4:08:e6:d3:d1:dc:e6:db:03:eb:75: dd:32:9a:a3:d7:3a:04:c6:71:c4:d4:24:73:0b:df: 01:48:8b:c3:06:73:ad:84:b6:79:6b:bf:ac:ae:54: c1:89:2c:f8:b5:fd:40:66:dc:ca:c7:bf:d4:71:d8: 40:24:16:94:ac:66:6b:8b:cb:5a:bd:97:5f:2c:27: d4:d2:c6:db:9f:3a:23:e0:78:0b:f1:68:c1:ec:54: 89:c7:5f:5e:4e:73:5e:32:e3:ef:ce:5d:d5:73:30: da:1d:85:70:4a:a7:75:2a:03:b3:2d:a1:4d:dd:8b: f6:e5:b3:f6:b5:ee:76:4f:a7:dc:2e:d3:f9:d7:af: b9:f4:2f:b9:ac:64:cd:28:42:da:87:d1:94:72:82: 48:31:60:ca:55:ab:e1:3c:9f:34:47:fb:b9:12:e3: 57:68:e6:be:7e:58:e0:1b:12:37:ca:22:1b:15:69: 31:36:d4:7e:5c:81:cc:f1:c0:8c:70:fb:62:8f:08: 31:89:b7:50:fd:c0:1b:4b:68:24:77:7c:4b:aa:ad: db:e0:18:dc:db:2a:8a:7b:55:3a:6c:a8:0e:e7:dc: 71:74:37:a6:42:e4:bd:c1:ee:e6:97:de:9d:6e:68: 19:78:6a:aa:e1:ea:96:4d:e1:d4:04:db:57:58:72: fc:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:39:F4:FA:2D:5F:3C:F2:92:9B:F6:03:5F:65:B0:D7:B5:35:14:CA X509v3 Authority Key Identifier: keyid:BB:E8:03:FB:75:7E:0C:47:D3:20:45:45:21:87:B7:4A:E2:71:11:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-gD-3V-DEfTIEVFIYe3SuJxEfA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:d0:ec:85:ab:c4:43:49:7e:11:46:30:5b:b0:d9:de:29:d0: 74:7c:40:53:d6:1c:5f:33:be:a5:d4:a8:00:1e:ad:5c:33:b4: 4d:61:ff:89:59:ea:86:43:f7:4c:38:d5:4d:be:d4:b8:2c:13: c9:ec:cd:b8:4c:77:16:34:36:95:3a:1b:35:9d:3b:9c:a8:a1: 77:c0:cd:2a:2e:36:16:a8:50:89:e3:df:0f:37:cb:7b:01:bd: 1d:b3:43:7d:e6:06:56:d9:39:1f:4a:23:0c:a6:e5:36:66:09: 06:d2:54:91:d3:34:a6:a0:b0:08:11:9e:05:60:94:15:cf:e2: 9a:43:93:ff:5d:9a:ad:ea:20:89:23:d5:43:b5:5d:15:71:20: 98:c4:51:8c:cd:07:51:31:c9:4f:f3:1b:78:02:0c:67:81:c8: 78:d8:cc:10:43:f4:10:56:96:d5:58:00:cf:34:f5:63:c9:a3: c2:c1:cd:fc:80:ad:77:71:b2:58:a5:45:ca:c7:e0:99:26:b4: f0:ed:be:6d:43:5a:e6:6c:d8:1f:cd:69:03:24:71:25:d2:0f: 2d:a6:b4:61:b5:5f:cd:3b:03:b9:33:5b:30:d9:71:ab:3c:12: 7e:cd:eb:1d:56:9c:27:5c:a1:8f:8c:bf:e6:e4:a8:c7:18:a5: 59:26:eb:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VFODUxMTAvBgNVBAUTKEJCRTgwM0ZCNzU3RTBDNDdEMzIwNDU0NTIxODdCNzRB RTI3MTExRjAwHhcNMjYwNDE3MDQ1NDIzWhcNMjYwNDI0MDQ1NDIzWjAYMRYwFAYD VQQDEw02OWUxYmNmZi1lOGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt03Z5Ajm09Hc5tsD63XdMpqj1zoExnHE1CRzC98BSIvDBnOthLZ5a7+srlTB iSz4tf1AZtzKx7/UcdhAJBaUrGZri8tavZdfLCfU0sbbnzoj4HgL8WjB7FSJx19e TnNeMuPvzl3VczDaHYVwSqd1KgOzLaFN3Yv25bP2te52T6fcLtP516+59C+5rGTN KELah9GUcoJIMWDKVavhPJ80R/u5EuNXaOa+fljgGxI3yiIbFWkxNtR+XIHM8cCM cPtijwgxibdQ/cAbS2gkd3xLqq3b4Bjc2yqKe1U6bKgO59xxdDemQuS9we7ml96d bmgZeGqq4eqWTeHUBNtXWHL8MwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE859Pot Xzzykpv2A19lsNe1NRTKMB8GA1UdIwQYMBaAFLvoA/t1fgxH0yBFRSGHt0ricRHw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUU4NS8wNUE3Q0U2ODQ1 QUUxMUVGQjQzNUVCNkZDNEY5QUUwMi91LWdELTNWLURFZlRJRVZGSVllM1N1SnhF ZkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UtZ0QtM1YtREVmVElFVkZJWWUzU3VKeEVmQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUU4NS8wNUE3Q0U2ODQ1QUUxMUVGQjQzNUVCNkZDNEY5QUUwMi91LWdELTNWLURF ZlRJRVZGSVllM1N1SnhFZkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWNDshavEQ0l+EUYwW7DZ3inQdHxAU9YcXzO+pdSoAB6tXDO0TWH/iVnqhkP3 TDjVTb7UuCwTyezNuEx3FjQ2lTobNZ07nKihd8DNKi42FqhQiePfDzfLewG9HbND feYGVtk5H0ojDKblNmYJBtJUkdM0pqCwCBGeBWCUFc/imkOT/12areogiSPVQ7Vd FXEgmMRRjM0HUTHJT/MbeAIMZ4HIeNjMEEP0EFaW1VgAzzT1Y8mjwsHN/ICtd3Gy WKVFysfgmSa08O2+bUNa5mzYH81pAyRxJdIPLaa0YbVfzTsDuTNbMNlxqzwSfs3r HVacJ1yhj4y/5uSoxxilWSbr0g== -----END CERTIFICATE-----Generated at Fri Apr 17 10:49:26 2026 by rpki-client