$ rpki-client -vvf rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft File: UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft (raw, json) Hash identifier: 4Dc09/MYXJQasP5LUrUAe3Lo7j7uDKpDxRq1/AbLtWk= Subject key identifier: E1:C4:8D:6E:85:C7:F1:E8:22:76:3C:B4:18:9E:7A:77:60:2E:6C:BF Authority key identifier: 53:30:EE:EE:B0:D0:A9:53:5F:AC:85:05:E7:35:84:3A:F6:CE:60:AF Certificate issuer: /CN=A9159967/serialNumber=5330EEEEB0D0A9535FAC8505E735843AF6CE60AF Certificate serial: 2133 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzDu7rDQqVNfrIUF5zWEOvbOYK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft Manifest number: 2110 Signing time: Sat 04 Apr 2026 15:52:19 +0000 Manifest this update: Sat 04 Apr 2026 15:52:19 +0000 Manifest next update: Sat 11 Apr 2026 15:52:19 +0000 Files and hashes: 1: UzDu7rDQqVNfrIUF5zWEOvbOYK8.crl (hash: 2UKf+Z9ExrgaRBKJjVsU2siLmcsEHh2jEi74ouI+ytA=) 2: F79267D61E4011E6945BEB0DC4F9AE02.roa (hash: ybHfR/5xx3UHYBd525TGkptsJesZi6Lna1QGzoVxLoo=) 3: 2991FB703EBC11F0B4390D6CC4F9AE02.roa (hash: IX69yIubs1cdWLw+u1/cJ2ESvxKouHlRxob5F2MvTs0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.crl rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzDu7rDQqVNfrIUF5zWEOvbOYK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 15:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8499 (0x2133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159967, serialNumber=5330EEEEB0D0A9535FAC8505E735843AF6CE60AF Validity Not Before: Apr 4 15:52:19 2026 GMT Not After : Apr 11 15:52:19 2026 GMT Subject: CN=69d133b3-a07c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:40:18:11:37:57:90:c7:33:80:82:f0:be:53: 33:0b:45:95:c2:a2:2c:05:94:89:22:fa:e8:57:43: d4:e8:b9:c4:c2:5d:1e:ca:9b:0d:4a:06:f4:d2:4f: 22:96:03:45:ec:9f:35:6d:e9:7f:94:31:64:ee:9d: e2:38:14:1c:a6:bf:96:db:26:7b:77:d3:8c:58:16: d8:57:30:86:5f:c2:c5:80:e0:1f:ce:c2:cb:bc:1b: 54:c2:d9:7c:d4:4e:14:be:5d:5a:7f:5f:af:b4:ce: 7f:2e:06:c1:74:74:c8:63:a8:44:8b:8e:ea:7d:7a: 3e:14:a9:a3:db:f3:34:d3:b0:01:ee:2a:3d:68:66: 80:a0:07:fa:4f:ce:90:d3:fe:ec:58:fc:7d:53:4a: 3b:af:28:e6:df:32:ea:b3:0d:77:70:b9:e9:42:68: 7c:96:f2:b1:59:a1:3a:d7:c5:33:1e:d9:fb:a5:8d: 3d:1a:c9:fb:3b:16:d8:f6:20:7c:d8:af:d4:98:b3: 8b:12:62:3e:4b:34:5b:64:b9:71:82:1a:95:e3:a5: 9d:a0:2d:45:93:f1:9f:34:6b:8c:69:75:ae:28:97: e2:0d:8d:2a:71:09:f9:55:88:e3:01:77:da:ed:6f: aa:b6:79:55:b9:c6:c3:16:72:f8:20:49:73:b1:2a: 0e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:C4:8D:6E:85:C7:F1:E8:22:76:3C:B4:18:9E:7A:77:60:2E:6C:BF X509v3 Authority Key Identifier: keyid:53:30:EE:EE:B0:D0:A9:53:5F:AC:85:05:E7:35:84:3A:F6:CE:60:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzDu7rDQqVNfrIUF5zWEOvbOYK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:93:d3:86:46:cc:98:6f:1a:39:6a:ee:3f:4f:3d:4d:ce:36: e4:df:9e:24:3a:c7:59:24:e9:e5:4f:06:f2:e3:a2:34:c6:2b: 16:c9:41:71:c6:5a:d5:7c:b5:c5:66:2b:be:8a:51:7b:32:ea: a8:52:29:a2:d7:8e:f1:8c:d3:85:5e:46:dd:ae:5a:45:f5:b3: 81:15:05:5a:57:ae:6d:c1:eb:f9:3e:5f:ac:15:1f:16:9e:34: 64:4a:51:fb:48:37:c1:e6:81:5a:6a:37:48:4d:fc:f9:08:0a: 70:24:b7:c2:b2:98:5e:e1:ae:fe:64:79:21:f8:ae:87:de:46: d6:59:95:16:36:60:7b:1c:91:b9:e6:cb:94:7d:66:1f:20:f6: b5:42:ad:bd:46:ae:d3:c9:e4:39:7a:93:02:13:ca:d6:c6:4d: 61:69:bf:97:39:7e:bb:c6:3a:cd:5e:88:88:80:2f:6b:71:61: ea:85:ba:8b:b3:1f:6a:07:11:de:17:1c:c0:8e:de:f8:46:bb: 09:d7:4e:19:1d:e7:ad:59:3e:b2:ed:de:5e:34:f1:d8:ae:ba: 71:44:85:26:4d:e5:41:b6:36:ba:16:48:11:b0:ac:87:25:86: bc:99:0e:e3:ea:b9:1d:1e:04:f1:bf:82:59:6b:a0:f3:f1:14: 3d:dd:95:3c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICITMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTk5NjcxMTAvBgNVBAUTKDUzMzBFRUVFQjBEMEE5NTM1RkFDODUwNUU3MzU4NDNB RjZDRTYwQUYwHhcNMjYwNDA0MTU1MjE5WhcNMjYwNDExMTU1MjE5WjAYMRYwFAYD VQQDEw02OWQxMzNiMy1hMDdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArUAYETdXkMczgILwvlMzC0WVwqIsBZSJIvroV0PU6LnEwl0eypsNSgb00k8i lgNF7J81bel/lDFk7p3iOBQcpr+W2yZ7d9OMWBbYVzCGX8LFgOAfzsLLvBtUwtl8 1E4Uvl1af1+vtM5/LgbBdHTIY6hEi47qfXo+FKmj2/M007AB7io9aGaAoAf6T86Q 0/7sWPx9U0o7ryjm3zLqsw13cLnpQmh8lvKxWaE618UzHtn7pY09Gsn7OxbY9iB8 2K/UmLOLEmI+SzRbZLlxghqV46WdoC1Fk/GfNGuMaXWuKJfiDY0qcQn5VYjjAXfa 7W+qtnlVucbDFnL4IElzsSoOBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOHEjW6F x/HoInY8tBieendgLmy/MB8GA1UdIwQYMBaAFFMw7u6w0KlTX6yFBec1hDr2zmCv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTk2Ny8wQkJGMjU3ODE1 QTkxMUU2OTEyRDQyM0JDNEY5QUUwMi9VekR1N3JEUXFWTmZySVVGNXpXRU92Yk9Z SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V6RHU3ckRRcVZOZnJJVUY1eldFT3ZiT1lLOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTk2Ny8wQkJGMjU3ODE1QTkxMUU2OTEyRDQyM0JDNEY5QUUwMi9VekR1N3JEUXFW TmZySVVGNXpXRU92Yk9ZSzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm5PThkbMmG8aOWruP089Tc425N+eJDrHWSTp5U8G8uOiNMYrFslBccZa1Xy1 xWYrvopRezLqqFIpoteO8YzThV5G3a5aRfWzgRUFWleubcHr+T5frBUfFp40ZEpR +0g3weaBWmo3SE38+QgKcCS3wrKYXuGu/mR5Ifiuh95G1lmVFjZgexyRuebLlH1m HyD2tUKtvUau08nkOXqTAhPK1sZNYWm/lzl+u8Y6zV6IiIAva3Fh6oW6i7MfagcR 3hccwI7e+Ea7CddOGR3nrVk+su3eXjTx2K66cUSFJk3lQbY2uhZIEbCshyWGvJkO 4+q5HR4E8b+CWWug8/EUPd2VPA== -----END CERTIFICATE-----Generated at Sun Apr 5 19:53:16 2026 by rpki-client