$ rpki-client -vvf rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft File: UoKkZCr301eZKRu6RH6hQlGk1fw.mft (raw, json) Hash identifier: IYCJxF3qcTugociycuSpOn1BBySlKDs0qAdY84uIkls= Subject key identifier: 89:A3:A6:5C:4E:EC:16:4E:88:46:2F:30:FF:3A:13:C2:AE:C5:36:48 Authority key identifier: 52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC Certificate issuer: /CN=A91582D9/serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC Certificate serial: 08F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft Manifest number: 20D5 Signing time: Sat 04 Apr 2026 16:25:48 +0000 Manifest this update: Sat 04 Apr 2026 16:25:48 +0000 Manifest next update: Sat 11 Apr 2026 16:25:48 +0000 Files and hashes: 1: UoKkZCr301eZKRu6RH6hQlGk1fw.crl (hash: PFM3FJpabH7eWK7ro/4kork+0IAzFdLVKq5OOAcd7aQ=) 2: 654665EA197611F09D2B1C76C4F9AE02.roa (hash: EKk887jvD91sa5mqsDwh0zo559XyowQgVll88eOizFM=) 3: B5E806CC8BC711EE899A5284C4F9AE02.roa (hash: sQmmHynRplLfSEUYnUX91utp9ekEe+hXIjAXfGLYEZ0=) 4: 172C2B96197711F0A993397AC4F9AE02.roa (hash: KlRLli/SZyA/blQSDVf22qf7tBm9EE3kAalEgJQxMlA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.crl rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 16:25:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2290 (0x8f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91582D9, serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC Validity Not Before: Apr 4 16:25:48 2026 GMT Not After : Apr 11 16:25:48 2026 GMT Subject: CN=69d13b8c-f5aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:dd:1d:4b:a9:dc:0b:3e:96:a7:cb:21:7e:34: 9b:26:c1:87:e9:b5:4d:23:06:ef:3f:66:73:00:78: c6:1b:97:2c:e2:c2:c8:e9:95:9c:57:84:4d:93:94: c2:18:76:66:1a:f6:11:16:13:fd:1b:9b:47:93:74: d7:d4:09:3d:b2:ba:4b:04:ab:2a:32:d0:2c:f7:c5: d6:9e:67:5a:a2:c7:85:f8:af:83:46:15:1f:d7:75: a0:07:0c:e8:97:3c:47:b6:57:1f:18:fe:99:a7:59: 77:3b:b2:7e:59:ca:d6:1f:ad:31:28:96:34:c9:ec: 03:d8:5c:b8:69:ae:7d:7b:59:cd:b2:c0:7a:81:5c: 97:8b:b1:d9:7d:0a:5d:a1:d0:3d:19:c6:14:c5:71: 00:d9:c8:2b:ae:17:45:b7:0b:42:37:d9:24:b4:25: 6c:da:25:b2:bc:1e:e4:f6:db:6f:88:89:22:cb:db: 13:85:c1:e7:fc:c4:b5:99:2e:7b:41:b7:c3:32:84: 9f:96:e4:0c:37:a5:83:ea:4a:39:d9:95:f4:5d:b2: 03:99:b3:00:14:26:4c:b6:b7:47:39:34:bb:10:ee: 43:fa:cd:85:74:1a:d1:b5:42:63:72:9f:22:0d:4c: 66:eb:9a:ce:62:37:0c:c8:64:21:24:9c:7a:3a:44: 35:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:A3:A6:5C:4E:EC:16:4E:88:46:2F:30:FF:3A:13:C2:AE:C5:36:48 X509v3 Authority Key Identifier: keyid:52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:07:1e:25:78:15:fd:ce:31:52:8f:0c:f2:92:4b:2b:0f:a1: 39:04:77:8c:bf:f0:0d:8e:9c:b4:f7:e4:41:dc:1d:2a:27:da: c6:96:15:e5:d6:04:9c:9f:f0:27:d2:ce:98:48:3d:8a:2c:51: ed:d5:da:82:7d:1d:9f:5d:76:d3:5b:95:4f:43:ce:5f:09:89: 76:3f:f6:62:76:8f:c5:93:42:7a:f1:6b:c0:9a:14:2d:42:43: f0:03:2f:38:e1:1e:4e:8c:8b:ae:57:18:e1:e1:8d:4d:ab:98: f1:33:3b:28:8d:e1:dd:2f:d6:a1:61:96:b0:bf:95:d1:cf:41: d5:56:3f:b2:ec:10:6c:90:6c:52:10:6f:75:7f:f9:00:e3:10: 13:89:9f:da:91:ed:12:09:99:fb:b1:23:b6:90:15:fb:58:c8: d0:98:f4:af:c3:45:57:e7:fd:84:fd:fb:5b:83:21:6e:79:16: e2:a0:d6:26:15:5e:6d:ed:29:56:bf:6b:8a:b6:a9:06:74:ba: b8:4e:ce:10:6d:28:c9:54:b8:53:03:d8:7a:f1:0a:09:46:c5: 31:fe:3b:c5:29:95:07:c6:a5:e9:26:b6:d6:51:2a:88:3b:58: 37:5d:0b:2d:96:99:e7:57:c8:96:38:48:29:ba:26:35:6e:34: a5:a6:01:df -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgyRDkxMTAvBgNVBAUTKDUyODJBNDY0MkFGN0QzNTc5OTI5MUJCQTQ0N0VBMTQy NTFBNEQ1RkMwHhcNMjYwNDA0MTYyNTQ4WhcNMjYwNDExMTYyNTQ4WjAYMRYwFAYD VQQDEw02OWQxM2I4Yy1mNWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm90dS6ncCz6Wp8shfjSbJsGH6bVNIwbvP2ZzAHjGG5cs4sLI6ZWcV4RNk5TC GHZmGvYRFhP9G5tHk3TX1Ak9srpLBKsqMtAs98XWnmdaoseF+K+DRhUf13WgBwzo lzxHtlcfGP6Zp1l3O7J+WcrWH60xKJY0yewD2Fy4aa59e1nNssB6gVyXi7HZfQpd odA9GcYUxXEA2cgrrhdFtwtCN9kktCVs2iWyvB7k9ttviIkiy9sThcHn/MS1mS57 QbfDMoSfluQMN6WD6ko52ZX0XbIDmbMAFCZMtrdHOTS7EO5D+s2FdBrRtUJjcp8i DUxm65rOYjcMyGQhJJx6OkQ1QwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFImjplxO 7BZOiEYvMP86E8KuxTZIMB8GA1UdIwQYMBaAFFKCpGQq99NXmSkbukR+oUJRpNX8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODJEOS8wRURBNkQ1RUNE REExMUU3QkRFQThDMkJDNEY5QUUwMi9Vb0trWkNyMzAxZVpLUnU2Ukg2aFFsR2sx ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VvS2taQ3IzMDFlWktSdTZSSDZoUWxHazFmdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODJEOS8wRURBNkQ1RUNEREExMUU3QkRFQThDMkJDNEY5QUUwMi9Vb0trWkNyMzAx ZVpLUnU2Ukg2aFFsR2sxZncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArwceJXgV/c4xUo8M8pJLKw+hOQR3jL/wDY6ctPfkQdwdKifaxpYV5dYEnJ/w J9LOmEg9iixR7dXagn0dn11201uVT0POXwmJdj/2YnaPxZNCevFrwJoULUJD8AMv OOEeToyLrlcY4eGNTauY8TM7KI3h3S/WoWGWsL+V0c9B1VY/suwQbJBsUhBvdX/5 AOMQE4mf2pHtEgmZ+7EjtpAV+1jI0Jj0r8NFV+f9hP37W4MhbnkW4qDWJhVebe0p Vr9rirapBnS6uE7OEG0oyVS4UwPYevEKCUbFMf47xSmVB8al6Sa21lEqiDtYN10L LZaZ51fIljhIKbomNW40paYB3w== -----END CERTIFICATE-----Generated at Sun Apr 5 20:00:18 2026 by rpki-client