$ rpki-client -vvf rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft File: u3-5V71tGEoIkjFpTPg4nbaI_lM.mft (raw, json) Hash identifier: IDFQGjwo8Qo20H2mTjSOmvjc1X8GYR5FmuscObFnZJo= Subject key identifier: 83:23:80:B1:A6:C9:24:54:92:B9:F4:AD:46:1C:0B:F8:F2:1D:41:CD Authority key identifier: BB:7F:B9:57:BD:6D:18:4A:08:92:31:69:4C:F8:38:9D:B6:88:FE:53 Certificate issuer: /CN=A91F39A9/serialNumber=BB7FB957BD6D184A089231694CF8389DB688FE53 Certificate serial: 0500 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3-5V71tGEoIkjFpTPg4nbaI_lM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft Manifest number: 04F8 Signing time: Thu 16 Apr 2026 23:37:19 +0000 Manifest this update: Thu 16 Apr 2026 23:37:18 +0000 Manifest next update: Thu 23 Apr 2026 23:37:18 +0000 Files and hashes: 1: u3-5V71tGEoIkjFpTPg4nbaI_lM.crl (hash: bkmyF40L9RfZEMoGnZI4mxeOx21Dwp/VWE7h5FWc5Dw=) 2: 12702794577711ECB7FD0C6FC4F9AE02.roa (hash: E1ZhKxPEzQQ/QbldcIhGwEwKe1KS8Rg1yFxMH77UIsk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.crl rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3-5V71tGEoIkjFpTPg4nbaI_lM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 23:37:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1280 (0x500) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F39A9, serialNumber=BB7FB957BD6D184A089231694CF8389DB688FE53 Validity Not Before: Apr 16 23:37:18 2026 GMT Not After : Apr 23 23:37:18 2026 GMT Subject: CN=69e172ae-5c0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:77:98:25:7f:b5:73:2d:0f:73:79:c3:b6:a4: ea:a9:0c:86:40:95:91:48:d4:c7:40:bd:e0:cd:86: 90:f1:eb:77:f1:1e:b4:a7:77:f6:ff:d3:2c:8e:4d: 06:60:a6:d7:a4:aa:db:a0:99:4e:1a:05:e0:1f:b6: 6e:79:53:fb:c4:fb:84:c7:57:bc:2a:5f:b5:ec:1f: 7d:f4:7e:6f:25:df:40:4f:07:2e:98:bd:66:cf:d4: 4d:4a:ea:38:e0:0b:22:9e:1c:5c:93:35:e8:03:5d: a7:d7:19:10:e7:f2:fd:d4:49:bd:24:33:15:0f:af: 50:89:35:f5:d6:c2:57:ef:33:8a:b7:b3:f3:35:35: 81:43:8d:f5:0a:f9:54:07:f0:e0:3c:94:3f:71:06: b5:fc:53:62:c6:ad:67:b0:d1:31:bd:e2:05:b2:ed: e4:ab:06:65:da:3a:f2:6d:3f:4d:a6:68:86:92:49: d2:4c:8a:9c:ae:87:a1:36:05:c1:ce:04:c5:db:46: ba:6b:f8:2d:2e:db:53:6c:4b:f6:98:60:98:a0:1b: 94:41:4e:e7:23:84:08:0c:b1:d1:ad:77:8d:5d:e9: 7e:24:3b:12:5d:0c:8c:b5:6d:65:f2:71:35:a1:4f: ab:ed:1d:64:ee:40:5a:4a:cf:a0:a5:32:e3:68:24: a7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:23:80:B1:A6:C9:24:54:92:B9:F4:AD:46:1C:0B:F8:F2:1D:41:CD X509v3 Authority Key Identifier: keyid:BB:7F:B9:57:BD:6D:18:4A:08:92:31:69:4C:F8:38:9D:B6:88:FE:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3-5V71tGEoIkjFpTPg4nbaI_lM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:74:94:4f:1e:ad:96:70:86:fd:83:ba:3d:e9:41:b8:60:7e: 03:0e:73:24:82:38:9d:c4:81:e5:3f:1d:81:ce:74:62:67:74: 42:4c:43:65:57:54:8e:86:fa:30:bb:f2:7f:85:7c:06:0d:c3: 72:f0:1e:13:b2:a6:1c:fc:fb:e0:38:55:fc:41:a0:00:06:cb: cd:79:47:27:d4:3e:bd:e9:08:57:85:5c:5c:3f:47:bb:75:1f: 94:50:1c:00:9e:0d:d6:29:a6:52:5f:34:47:83:01:a3:82:86: 25:4b:55:22:b4:74:8d:cf:8f:53:ae:ef:9b:cd:99:6e:8f:36: ed:8c:73:16:6f:84:f3:ab:3b:2d:db:ae:57:e0:3f:bb:00:0c: 23:f7:a2:a7:0e:87:50:43:a7:51:c3:04:c8:8c:d1:9e:99:41: 47:78:79:08:9b:13:03:91:77:e5:10:03:64:0e:b5:01:43:fd: fe:80:8b:ad:84:1e:55:13:30:5a:26:09:6b:6e:03:31:1c:10: 3a:8c:c9:94:52:7a:49:e9:4a:37:ae:90:91:68:c4:1b:e9:66: 27:61:41:40:61:37:f1:fc:3c:a9:86:d1:e2:8a:99:91:d1:70: 84:72:b1:8e:51:39:03:7d:5f:47:13:4e:88:17:6b:76:3a:45: 10:9b:10:40 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM5QTkxMTAvBgNVBAUTKEJCN0ZCOTU3QkQ2RDE4NEEwODkyMzE2OTRDRjgzODlE QjY4OEZFNTMwHhcNMjYwNDE2MjMzNzE4WhcNMjYwNDIzMjMzNzE4WjAYMRYwFAYD VQQDEw02OWUxNzJhZS01YzBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkHeYJX+1cy0Pc3nDtqTqqQyGQJWRSNTHQL3gzYaQ8et38R60p3f2/9Msjk0G YKbXpKrboJlOGgXgH7ZueVP7xPuEx1e8Kl+17B999H5vJd9ATwcumL1mz9RNSuo4 4AsinhxckzXoA12n1xkQ5/L91Em9JDMVD69QiTX11sJX7zOKt7PzNTWBQ431CvlU B/DgPJQ/cQa1/FNixq1nsNExveIFsu3kqwZl2jrybT9NpmiGkknSTIqcroehNgXB zgTF20a6a/gtLttTbEv2mGCYoBuUQU7nI4QIDLHRrXeNXel+JDsSXQyMtW1l8nE1 oU+r7R1k7kBaSs+gpTLjaCSn8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIMjgLGm ySRUkrn0rUYcC/jyHUHNMB8GA1UdIwQYMBaAFLt/uVe9bRhKCJIxaUz4OJ22iP5T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzlBOS81MjU0ODZCODU2 NjIxMUVDQjhFQzczMzFDNEY5QUUwMi91My01VjcxdEdFb0lrakZwVFBnNG5iYUlf bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UzLTVWNzF0R0VvSWtqRnBUUGc0bmJhSV9sTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzlBOS81MjU0ODZCODU2NjIxMUVDQjhFQzczMzFDNEY5QUUwMi91My01VjcxdEdF b0lrakZwVFBnNG5iYUlfbE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuHSUTx6tlnCG/YO6PelBuGB+Aw5zJII4ncSB5T8dgc50Ymd0QkxDZVdUjob6 MLvyf4V8Bg3DcvAeE7KmHPz74DhV/EGgAAbLzXlHJ9Q+vekIV4VcXD9Hu3UflFAc AJ4N1immUl80R4MBo4KGJUtVIrR0jc+PU67vm82Zbo827YxzFm+E86s7LduuV+A/ uwAMI/eipw6HUEOnUcMEyIzRnplBR3h5CJsTA5F35RADZA61AUP9/oCLrYQeVRMw WiYJa24DMRwQOozJlFJ6SelKN66QkWjEG+lmJ2FBQGE38fw8qYbR4oqZkdFwhHKx jlE5A31fRxNOiBdrdjpFEJsQQA== -----END CERTIFICATE-----Generated at Fri Apr 17 16:39:52 2026 by rpki-client