$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.mft File: u0yWZedfnhna1G-LYJ00RPto7Uc.mft (raw, json) Hash identifier: tdzTD1+qPVGG81Hewe42fei9MUtEgIct8IhmwfOs5ro= Subject key identifier: 68:A0:D1:3F:6C:52:11:2B:2A:88:83:B4:91:82:F4:48:43:6E:72:0B Authority key identifier: BB:4C:96:65:E7:5F:9E:19:DA:D4:6F:8B:60:9D:34:44:FB:68:ED:47 Certificate issuer: /CN=A9142DA4/serialNumber=BB4C9665E75F9E19DAD46F8B609D3444FB68ED47 Certificate serial: 0410 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0yWZedfnhna1G-LYJ00RPto7Uc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.mft Manifest number: 03FD Signing time: Sun 05 Apr 2026 00:17:03 +0000 Manifest this update: Sun 05 Apr 2026 00:17:03 +0000 Manifest next update: Sun 12 Apr 2026 00:17:03 +0000 Files and hashes: 1: u0yWZedfnhna1G-LYJ00RPto7Uc.crl (hash: K755SgFk6lvILVlk05jIca7OFjsm7VgEB/vK+sWF0YA=) 2: FC35CE340A4711F0809C3032C4F9AE02.roa (hash: GCF/9VMFmjdFmy3bYTGGRnKSNfUmeGJXgemnhDHWC2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.crl rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0yWZedfnhna1G-LYJ00RPto7Uc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 00:17:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1040 (0x410) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142DA4, serialNumber=BB4C9665E75F9E19DAD46F8B609D3444FB68ED47 Validity Not Before: Apr 5 00:17:03 2026 GMT Not After : Apr 12 00:17:03 2026 GMT Subject: CN=69d1a9ff-66dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:86:f2:9a:1d:51:ca:34:b7:83:29:98:df:c8: a8:24:7b:d7:a1:f9:1b:1e:e1:6b:55:67:4d:1b:02: 64:bb:5e:9e:cf:f7:bf:b1:8e:48:06:a7:38:d1:a9: 07:e9:cb:e6:d3:b1:40:b2:59:06:65:3d:49:0a:aa: 8c:f5:67:47:91:e0:ac:94:66:ee:5c:4a:17:b8:97: 1d:2b:eb:8e:ae:3d:60:43:3c:62:83:5e:e4:d0:22: 0e:12:2c:b1:73:10:e9:4d:d0:91:ff:00:88:6f:c7: b3:ed:52:b4:eb:f5:4b:11:6f:f1:4c:a1:26:73:3b: 86:92:f2:f9:ef:c2:e4:c4:8e:bf:1d:29:a8:ed:cc: 75:7f:70:3d:84:d7:8b:d1:3b:1a:dd:fb:f9:d9:35: 95:e0:9d:3b:c2:a7:c1:d0:de:5a:aa:e4:7a:6a:93: 2c:82:7f:09:ef:a8:eb:db:aa:a7:d1:95:2a:48:54: c0:d8:20:71:94:cb:06:47:d7:a2:e8:fa:f6:a1:85: 40:ab:1d:28:f4:ab:6d:ef:9a:c9:c1:ff:26:2e:ea: 1b:83:16:32:20:1c:b8:04:81:7a:95:f8:68:49:f9: 48:24:a5:d6:13:66:85:ac:96:07:fe:62:df:63:5e: c5:0c:f4:56:81:34:a9:aa:86:fd:3e:b7:5b:ae:50: 1a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:A0:D1:3F:6C:52:11:2B:2A:88:83:B4:91:82:F4:48:43:6E:72:0B X509v3 Authority Key Identifier: keyid:BB:4C:96:65:E7:5F:9E:19:DA:D4:6F:8B:60:9D:34:44:FB:68:ED:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0yWZedfnhna1G-LYJ00RPto7Uc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:1b:a8:f9:c2:08:69:47:05:4e:7c:09:c8:c1:e0:7a:e8:15: 2f:30:d0:df:3b:d0:ef:eb:ce:22:dd:ce:0a:3d:5b:a5:cb:87: bf:e7:fc:9b:29:32:c9:fd:b8:81:9f:ca:40:42:be:8d:da:91: d3:bb:a8:d2:68:15:53:5a:3d:0c:e6:2f:7e:25:29:82:c7:77: 01:c2:0f:1e:9b:28:d3:2a:84:55:77:19:b9:b8:58:56:29:c4: 26:74:47:aa:94:e0:1f:95:75:9f:c5:b5:f3:b8:b9:ad:07:97: b8:5a:d2:14:2f:69:69:7d:13:08:34:ec:7f:0b:70:50:14:69: 33:89:fb:01:10:53:a6:bc:60:f5:89:a0:a6:e9:66:0d:4d:3b: ec:e9:6c:ff:e2:46:61:3a:94:c8:b3:fd:8d:26:5f:98:95:62: 5e:d5:2c:5d:e8:6d:3f:b6:07:80:72:9c:28:60:e6:63:a4:0d: c6:84:c1:69:1a:60:87:63:f0:d6:1e:9c:59:78:f9:32:01:25: a4:37:3d:06:f5:a6:c3:8d:b0:98:bb:0f:63:82:cc:16:3e:93: ce:07:ba:bc:a4:f7:3e:46:77:ff:ab:cc:98:29:23:ad:1c:ad: 6a:e6:a7:f4:37:10:77:21:6d:f5:ab:25:c9:11:6f:19:12:a9: 6b:e0:a5:5c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBBAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJEQTQxMTAvBgNVBAUTKEJCNEM5NjY1RTc1RjlFMTlEQUQ0NkY4QjYwOUQzNDQ0 RkI2OEVENDcwHhcNMjYwNDA1MDAxNzAzWhcNMjYwNDEyMDAxNzAzWjAYMRYwFAYD VQQDEw02OWQxYTlmZi02NmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzobymh1RyjS3gymY38ioJHvXofkbHuFrVWdNGwJku16ez/e/sY5IBqc40akH 6cvm07FAslkGZT1JCqqM9WdHkeCslGbuXEoXuJcdK+uOrj1gQzxig17k0CIOEiyx cxDpTdCR/wCIb8ez7VK06/VLEW/xTKEmczuGkvL578LkxI6/HSmo7cx1f3A9hNeL 0Tsa3fv52TWV4J07wqfB0N5aquR6apMsgn8J76jr26qn0ZUqSFTA2CBxlMsGR9ei 6Pr2oYVAqx0o9Ktt75rJwf8mLuobgxYyIBy4BIF6lfhoSflIJKXWE2aFrJYH/mLf Y17FDPRWgTSpqob9PrdbrlAaWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGig0T9s UhErKoiDtJGC9EhDbnILMB8GA1UdIwQYMBaAFLtMlmXnX54Z2tRvi2CdNET7aO1H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkRBNC84QUQ0OUY3RUJB RTgxMUVDQTgyRjE0MUNDNEY5QUUwMi91MHlXWmVkZm5obmExRy1MWUowMFJQdG83 VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UweVdaZWRmbmhuYTFHLUxZSjAwUlB0bzdVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkRBNC84QUQ0OUY3RUJBRTgxMUVDQTgyRjE0MUNDNEY5QUUwMi91MHlXWmVkZm5o bmExRy1MWUowMFJQdG83VWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApRuo+cIIaUcFTnwJyMHgeugVLzDQ3zvQ7+vOIt3OCj1bpcuHv+f8mykyyf24 gZ/KQEK+jdqR07uo0mgVU1o9DOYvfiUpgsd3AcIPHpso0yqEVXcZubhYVinEJnRH qpTgH5V1n8W187i5rQeXuFrSFC9paX0TCDTsfwtwUBRpM4n7ARBTprxg9Ymgpulm DU077Ols/+JGYTqUyLP9jSZfmJViXtUsXehtP7YHgHKcKGDmY6QNxoTBaRpgh2Pw 1h6cWXj5MgElpDc9BvWmw42wmLsPY4LMFj6Tzge6vKT3PkZ3/6vMmCkjrRytauan 9DcQdyFt9aslyRFvGRKpa+ClXA== -----END CERTIFICATE-----Generated at Sun Apr 5 19:57:59 2026 by rpki-client