$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.mft File: UzSpQuM2kLKBJhu645cTXb6kE5c.mft (raw, json) Hash identifier: ci4tXgzCzHu3YYojv+5txqyNC4YZe3f+yw2m6T1YqbI= Subject key identifier: CD:76:28:DF:67:6E:CA:62:F3:EB:67:8B:B9:1F:C4:26:02:B9:3A:8A Authority key identifier: 53:34:A9:42:E3:36:90:B2:81:26:1B:BA:E3:97:13:5D:BE:A4:13:97 Certificate issuer: /CN=A91DA022/serialNumber=5334A942E33690B281261BBAE397135DBEA41397 Certificate serial: 08E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzSpQuM2kLKBJhu645cTXb6kE5c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.mft Manifest number: 08DA Signing time: Thu 16 Apr 2026 20:17:25 +0000 Manifest this update: Thu 16 Apr 2026 20:17:25 +0000 Manifest next update: Thu 23 Apr 2026 20:17:25 +0000 Files and hashes: 1: UzSpQuM2kLKBJhu645cTXb6kE5c.crl (hash: ZK9m2UiKuhZIh0lGgIoNeO9nQswSEnjD4w70tPeSL9Y=) 2: DF3136A2CFF011EAB2F1D086C4F9AE02.roa (hash: bCHE5nI4rqzx/kCg0rTMONZHHcxfxtmtXkLR2EjPLb0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.crl rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzSpQuM2kLKBJhu645cTXb6kE5c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 20:17:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2275 (0x8e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA022, serialNumber=5334A942E33690B281261BBAE397135DBEA41397 Validity Not Before: Apr 16 20:17:25 2026 GMT Not After : Apr 23 20:17:25 2026 GMT Subject: CN=69e143d5-7c50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ae:7c:50:0e:8c:e3:02:eb:5d:34:d2:b7:36: c8:7b:16:06:b4:98:23:e4:fe:f0:77:28:a5:0b:98: a5:30:eb:e2:70:60:0c:2f:2a:ef:bf:ee:11:2d:c1: fc:2c:58:40:c7:a6:66:2b:c4:89:3b:55:e1:95:6f: d5:dc:bf:04:9f:41:43:98:e8:d8:78:26:6b:15:a9: ad:a6:0e:c6:9d:1a:c8:72:ba:20:81:41:8d:52:b2: 7a:c2:32:3e:3e:96:61:92:fe:10:a9:bf:7a:4c:6a: 18:a5:38:2c:c7:94:01:b0:e6:8b:a7:25:8e:2d:55: 14:0f:2e:3c:b7:ae:06:06:1b:a7:99:bb:20:3b:06: 80:a7:d8:22:a9:44:44:2a:56:71:83:e1:63:b9:b0: ae:21:ac:e4:f6:5b:ad:0a:8d:f2:b2:30:32:73:44: c4:f1:e0:60:ef:f0:90:26:af:54:50:9b:3b:a1:a2: d1:e2:67:77:47:28:1f:d1:f8:6d:5c:f8:c6:98:ca: f5:59:e0:4c:7e:ab:14:ce:53:41:73:5b:45:f5:a1: b8:dd:62:33:4e:86:f6:3b:b7:a2:65:aa:1d:96:b5: 6f:ff:3e:f0:c5:6b:74:07:a7:c3:8b:e7:3a:f8:1c: 44:a6:8c:c4:cb:d1:24:ed:f0:a1:e3:45:91:f0:81: 18:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:76:28:DF:67:6E:CA:62:F3:EB:67:8B:B9:1F:C4:26:02:B9:3A:8A X509v3 Authority Key Identifier: keyid:53:34:A9:42:E3:36:90:B2:81:26:1B:BA:E3:97:13:5D:BE:A4:13:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzSpQuM2kLKBJhu645cTXb6kE5c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:e0:01:7d:88:82:97:49:c0:a8:62:d1:05:16:64:d5:71:01: ed:e9:b4:73:62:44:fe:b3:98:d6:07:9f:6f:47:5b:dd:6a:d2: ac:88:92:d2:9b:ec:92:05:85:fd:78:a3:64:2b:3f:3b:ec:3c: 60:80:15:9c:bc:e1:e5:67:3a:ca:8b:44:d6:0c:9a:d5:27:81: cf:da:39:d5:8a:44:e6:60:50:98:28:5c:6a:2a:bd:05:c9:12: 74:80:50:cb:6e:ac:5c:db:22:be:78:f6:a9:29:b1:35:78:d9: 3c:c5:27:35:24:9a:96:6c:27:aa:16:32:de:0c:d6:18:75:dd: 1a:83:9d:2d:ce:41:ee:da:ab:5a:48:6a:0d:1b:8a:5d:64:67: 80:12:4f:f6:a1:ed:38:ac:cd:58:00:eb:88:55:5f:a0:a8:48: fe:2a:d9:4c:02:ac:f8:68:a2:db:ea:9e:8a:10:55:39:43:d7: 60:82:c2:e9:16:ad:41:0c:ab:ba:16:bd:96:46:e4:ff:69:24: 3b:94:82:e9:dd:b6:48:4d:b4:74:64:69:94:24:f0:88:3c:c9: 2a:74:e0:e5:da:73:ac:e7:40:3d:7b:f5:8f:1e:70:31:ee:01: 84:bf:fa:91:3d:77:4e:69:22:0b:25:44:a0:94:83:00:8b:95: 11:c4:d9:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REEwMjIxMTAvBgNVBAUTKDUzMzRBOTQyRTMzNjkwQjI4MTI2MUJCQUUzOTcxMzVE QkVBNDEzOTcwHhcNMjYwNDE2MjAxNzI1WhcNMjYwNDIzMjAxNzI1WjAYMRYwFAYD VQQDEw02OWUxNDNkNS03YzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxK58UA6M4wLrXTTStzbIexYGtJgj5P7wdyilC5ilMOvicGAMLyrvv+4RLcH8 LFhAx6ZmK8SJO1XhlW/V3L8En0FDmOjYeCZrFamtpg7GnRrIcroggUGNUrJ6wjI+ PpZhkv4Qqb96TGoYpTgsx5QBsOaLpyWOLVUUDy48t64GBhunmbsgOwaAp9giqURE KlZxg+FjubCuIazk9lutCo3ysjAyc0TE8eBg7/CQJq9UUJs7oaLR4md3Rygf0fht XPjGmMr1WeBMfqsUzlNBc1tF9aG43WIzTob2O7eiZaodlrVv/z7wxWt0B6fDi+c6 +BxEpozEy9Ek7fCh40WR8IEY4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM12KN9n bspi8+tni7kfxCYCuTqKMB8GA1UdIwQYMBaAFFM0qULjNpCygSYbuuOXE12+pBOX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTAyMi85RDhEOTQ1OENG RUYxMUVBQjJDQjg4ODVDNEY5QUUwMi9VelNwUXVNMmtMS0JKaHU2NDVjVFhiNmtF NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V6U3BRdU0ya0xLQkpodTY0NWNUWGI2a0U1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTAyMi85RDhEOTQ1OENGRUYxMUVBQjJDQjg4ODVDNEY5QUUwMi9VelNwUXVNMmtM S0JKaHU2NDVjVFhiNmtFNWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxOABfYiCl0nAqGLRBRZk1XEB7em0c2JE/rOY1gefb0db3WrSrIiS0pvskgWF /XijZCs/O+w8YIAVnLzh5Wc6yotE1gya1SeBz9o51YpE5mBQmChcaiq9BckSdIBQ y26sXNsivnj2qSmxNXjZPMUnNSSalmwnqhYy3gzWGHXdGoOdLc5B7tqrWkhqDRuK XWRngBJP9qHtOKzNWADriFVfoKhI/irZTAKs+Gii2+qeihBVOUPXYILC6RatQQyr uha9lkbk/2kkO5SC6d22SE20dGRplCTwiDzJKnTg5dpzrOdAPXv1jx5wMe4BhL/6 kT13TmkiCyVEoJSDAIuVEcTZpA== -----END CERTIFICATE-----Generated at Fri Apr 17 08:00:51 2026 by rpki-client