$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft File: U4JkLr15mg-ChtBlSCntdoQw-eQ.mft (raw, json) Hash identifier: J2nONlTtZSZI3mo5LC+19egM/ClkI6QnCRlG5WWhpss= Subject key identifier: 60:6B:A5:DD:45:F2:6E:68:9B:C9:85:6B:59:BD:06:5E:80:6A:86:E6 Authority key identifier: 53:82:64:2E:BD:79:9A:0F:82:86:D0:65:48:29:ED:76:84:30:F9:E4 Certificate issuer: /CN=A91E6856/serialNumber=5382642EBD799A0F8286D0654829ED768430F9E4 Certificate serial: 0F02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft Manifest number: 0EF8 Signing time: Thu 16 Apr 2026 17:32:52 +0000 Manifest this update: Thu 16 Apr 2026 17:32:52 +0000 Manifest next update: Thu 23 Apr 2026 17:32:52 +0000 Files and hashes: 1: U4JkLr15mg-ChtBlSCntdoQw-eQ.crl (hash: CXmd2jjzjlAhdntzb9qOrGj6qeoeR/O4Z77KjuBCr10=) 2: C2213CFC2CC311F1A8A01C5D8F833773.roa (hash: tkrVJ/cVpoiHk0cmXy2YYFkJoXN9OgcqITOcYSO8FI4=) 3: 350711FA881211EE9710F928C4F9AE02.roa (hash: /Sl1+zcuYzALlR5FExQ8VOIo7ICRp9RWUJXD4AKkevs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.crl rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:32:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3842 (0xf02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6856, serialNumber=5382642EBD799A0F8286D0654829ED768430F9E4 Validity Not Before: Apr 16 17:32:52 2026 GMT Not After : Apr 23 17:32:52 2026 GMT Subject: CN=69e11d44-f1b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f1:cb:35:2d:03:65:37:02:59:3a:4e:58:d1: 37:93:84:44:fe:90:5f:64:65:0a:0b:49:75:82:42: d0:ca:7d:5b:ae:46:37:ee:ee:4e:e8:60:ab:3c:a8: 88:af:6c:f5:8e:94:ab:fb:68:0b:ae:95:ec:5a:b3: 06:cc:9a:29:ff:da:2e:37:4b:e9:af:88:7f:89:47: 89:8d:53:78:d6:21:e4:41:67:ce:53:42:c3:9d:42: b4:b0:29:d2:bd:5a:a6:4d:5f:37:86:b4:69:0f:fb: 83:53:ec:03:8c:d3:07:73:98:4c:48:12:32:87:64: 38:01:fb:12:fd:2c:f6:89:d7:c7:4e:8b:01:d5:10: 7b:89:40:78:5e:60:c9:ef:61:e4:50:78:c7:2e:b1: aa:67:c2:89:ad:99:aa:88:90:0b:c9:59:94:1f:96: a9:6c:b2:2d:ce:d2:6a:02:56:76:9a:b9:ad:28:cf: 9c:8e:25:9a:f8:da:1a:77:2b:91:8d:7a:59:5e:e4: 0a:32:1c:1d:16:cb:55:de:b8:9d:3d:9c:03:30:16: e3:8a:0f:a0:3b:4c:1a:ee:c3:c1:84:94:1d:ad:f7: 52:e6:1d:c5:40:1a:79:46:71:5d:c9:8e:92:cb:f3: 81:96:1d:93:d1:73:e1:19:38:ca:1c:ae:c4:62:f4: a6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:6B:A5:DD:45:F2:6E:68:9B:C9:85:6B:59:BD:06:5E:80:6A:86:E6 X509v3 Authority Key Identifier: keyid:53:82:64:2E:BD:79:9A:0F:82:86:D0:65:48:29:ED:76:84:30:F9:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:da:c6:52:7c:3b:23:80:0e:86:73:17:35:d3:f5:34:54:2a: 2a:52:6a:ef:77:4c:fc:38:ce:e4:07:5d:76:4d:4e:df:25:ca: 2a:b5:45:33:b0:70:d9:3f:bf:1b:40:fd:38:92:7a:d7:d4:02: 74:8f:91:2d:84:0d:f4:ef:4c:99:67:d2:08:ee:15:e2:82:97: b3:8f:2f:86:25:f8:9c:24:4e:82:77:46:93:d5:cd:b1:10:27: 0f:60:d7:33:ae:71:fc:b9:5a:b9:73:5c:d9:37:33:e1:50:ea: c0:e9:75:ed:3c:b8:43:0d:7a:c1:29:bf:34:d7:e9:6f:4f:14: 16:ca:77:d2:75:1f:49:11:f3:2e:a7:77:60:f2:63:49:66:53: 2c:48:d0:8d:e4:ce:71:15:bb:69:0f:2c:b3:dc:9e:f8:0e:16: 56:59:21:4e:ef:c1:ac:11:77:47:1f:86:54:f1:ca:d4:11:0c: 1f:97:fc:98:f6:2c:bd:15:19:a6:2e:e6:4a:c3:c2:8e:53:ca: 5f:27:2b:88:49:8d:6a:36:ca:31:08:96:ab:65:32:26:e1:ee: 43:23:34:e6:65:fc:4b:92:74:0b:ee:ef:6d:f2:e2:56:89:44: 36:c4:7a:3b:1b:49:c6:80:60:18:0c:22:8c:a7:9e:ec:de:0e: 42:08:46:e0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDwIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY4NTYxMTAvBgNVBAUTKDUzODI2NDJFQkQ3OTlBMEY4Mjg2RDA2NTQ4MjlFRDc2 ODQzMEY5RTQwHhcNMjYwNDE2MTczMjUyWhcNMjYwNDIzMTczMjUyWjAYMRYwFAYD VQQDEw02OWUxMWQ0NC1mMWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2PHLNS0DZTcCWTpOWNE3k4RE/pBfZGUKC0l1gkLQyn1brkY37u5O6GCrPKiI r2z1jpSr+2gLrpXsWrMGzJop/9ouN0vpr4h/iUeJjVN41iHkQWfOU0LDnUK0sCnS vVqmTV83hrRpD/uDU+wDjNMHc5hMSBIyh2Q4AfsS/Sz2idfHTosB1RB7iUB4XmDJ 72HkUHjHLrGqZ8KJrZmqiJALyVmUH5apbLItztJqAlZ2mrmtKM+cjiWa+NoadyuR jXpZXuQKMhwdFstV3ridPZwDMBbjig+gO0wa7sPBhJQdrfdS5h3FQBp5RnFdyY6S y/OBlh2T0XPhGTjKHK7EYvSmTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGBrpd1F 8m5om8mFa1m9Bl6AaobmMB8GA1UdIwQYMBaAFFOCZC69eZoPgobQZUgp7XaEMPnk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjg1Ni8yQ0Q0NUZCQTlF MjQxMUU5QjE0M0JFNzFDNEY5QUUwMi9VNEprTHIxNW1nLUNodEJsU0NudGRvUXct ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U0SmtMcjE1bWctQ2h0QmxTQ250ZG9Rdy1lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Njg1Ni8yQ0Q0NUZCQTlFMjQxMUU5QjE0M0JFNzFDNEY5QUUwMi9VNEprTHIxNW1n LUNodEJsU0NudGRvUXctZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAl9rGUnw7I4AOhnMXNdP1NFQqKlJq73dM/DjO5Adddk1O3yXKKrVFM7Bw2T+/ G0D9OJJ619QCdI+RLYQN9O9MmWfSCO4V4oKXs48vhiX4nCROgndGk9XNsRAnD2DX M65x/LlauXNc2Tcz4VDqwOl17Ty4Qw16wSm/NNfpb08UFsp30nUfSRHzLqd3YPJj SWZTLEjQjeTOcRW7aQ8ss9ye+A4WVlkhTu/BrBF3Rx+GVPHK1BEMH5f8mPYsvRUZ pi7mSsPCjlPKXycriEmNajbKMQiWq2UyJuHuQyM05mX8S5J0C+7vbfLiVolENsR6 OxtJxoBgGAwijKee7N4OQghG4A== -----END CERTIFICATE-----Generated at Fri Apr 17 07:57:21 2026 by rpki-client