$ rpki-client -vvf rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.mft File: UaaO3S3yt7_2emYQm9c5ypuyOMQ.mft (raw, json) Hash identifier: 2ZI6U42Zn0pSFp0btxsFBMJLjiQ87bHCaVygyQfIsBY= Subject key identifier: FC:B2:EA:E7:27:E3:82:E4:57:34:AF:D9:2D:07:A8:24:55:B6:64:D3 Authority key identifier: 51:A6:8E:DD:2D:F2:B7:BF:F6:7A:66:10:9B:D7:39:CA:9B:B2:38:C4 Certificate issuer: /CN=A9160DDD/serialNumber=51A68EDD2DF2B7BFF67A66109BD739CA9BB238C4 Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaaO3S3yt7_2emYQm9c5ypuyOMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.mft Manifest number: 5D Signing time: Sun 05 Apr 2026 07:29:21 +0000 Manifest this update: Sun 05 Apr 2026 07:29:20 +0000 Manifest next update: Sun 12 Apr 2026 07:29:20 +0000 Files and hashes: 1: UaaO3S3yt7_2emYQm9c5ypuyOMQ.crl (hash: ovzYvDa0MgmAAYUNCyBiXUPOSNQdBjxXbXtPlRVyzBQ=) 2: 575015502DAF11F19D6369A7A5833773.roa (hash: T+vt5kY0tw2A88NgzBRfDGJQYYb/MnavpW5x/gtyd4Y=) 3: 6AF2E1BE2DAF11F19CE413ADA5833773.roa (hash: LJvWmBYl/Gn4+TkwFCWffQRxkN5cLI3ct0U1dzazLmg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.crl rsync://rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaaO3S3yt7_2emYQm9c5ypuyOMQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 07:29:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160DDD, serialNumber=51A68EDD2DF2B7BFF67A66109BD739CA9BB238C4 Validity Not Before: Apr 5 07:29:20 2026 GMT Not After : Apr 12 07:29:20 2026 GMT Subject: CN=69d20f51-b3b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:b4:da:f6:e6:83:c5:bb:d1:d2:b2:b9:6d:6f: 4f:5e:79:f5:16:d6:9c:a1:56:fe:17:49:d9:68:3f: b7:0f:1c:99:34:22:2a:06:4e:e3:17:bf:d0:99:09: 96:6e:37:6b:fa:26:5f:59:cf:9c:fe:90:19:4b:c9: 9f:a4:44:f9:a8:47:93:a0:61:cc:53:13:4e:a6:03: a1:f7:2e:a1:d1:4e:49:59:1e:48:c5:40:ee:90:bc: cd:da:d8:4f:55:ad:70:a3:8d:61:54:01:5a:47:96: 0a:70:6c:93:7b:63:39:b4:85:09:83:4a:ea:a4:df: a4:d5:dd:89:c9:d9:59:5c:12:bd:58:d6:9f:80:a0: 5e:a5:0b:0e:cf:ce:2a:6b:63:8f:a8:5e:bd:4b:2f: 35:53:55:5f:65:46:13:03:be:eb:a8:7a:ac:0b:02: 55:e8:ca:76:44:c7:57:6f:ec:de:b3:44:01:0b:32: 09:70:ca:a8:09:58:52:7f:5b:c3:d0:7d:36:8c:52: 72:79:b5:41:6b:52:53:a3:2d:67:63:b8:e5:83:e4: c9:e8:3d:6c:b4:85:af:0c:e9:de:60:22:4b:0d:f1: b0:2f:66:89:f5:87:38:0a:30:6c:92:35:31:4d:15: 79:4a:2a:0f:4e:c0:36:4e:27:c0:58:9d:10:4d:83: 8f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:B2:EA:E7:27:E3:82:E4:57:34:AF:D9:2D:07:A8:24:55:B6:64:D3 X509v3 Authority Key Identifier: keyid:51:A6:8E:DD:2D:F2:B7:BF:F6:7A:66:10:9B:D7:39:CA:9B:B2:38:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaaO3S3yt7_2emYQm9c5ypuyOMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:c0:65:e0:04:c1:84:24:89:89:12:e1:65:d6:65:67:58:fb: 13:70:d7:bd:b2:3d:cf:d4:9d:f0:cc:f6:ec:04:72:a1:af:a7: 40:f2:12:e5:d3:12:96:e7:8d:60:04:40:ff:84:be:d2:8a:8b: a5:e7:ee:22:1d:9c:7f:d5:74:2e:69:30:9c:91:fc:49:be:96: 6d:8a:76:08:ad:8b:e4:92:a1:6d:a3:35:af:91:c1:0a:69:2a: 41:6a:11:fe:4f:aa:52:72:53:69:42:86:af:1c:ab:74:4e:37: 82:41:d3:62:09:eb:c8:70:e9:38:cb:30:b2:1e:1e:50:0c:17: f3:90:d2:56:c2:9f:ed:35:c7:95:41:e4:69:42:be:e1:36:e3: 7e:d5:0c:e8:43:3c:96:88:7b:2b:e2:01:75:ab:13:56:5b:4c: 89:63:cb:c2:37:22:ff:66:3a:f4:11:54:c0:43:1a:bd:8d:31: 71:12:2a:f5:cd:24:0c:ec:dc:82:e8:46:61:10:4e:d5:b7:4d: 4b:af:3e:7d:0d:1a:80:cf:d9:70:62:3e:8c:ac:28:68:bc:2b: 9f:a1:69:be:70:c3:9b:55:6f:41:91:f2:e2:92:58:a5:c8:b3: 93:78:47:f9:be:e5:0d:44:8c:d6:86:d7:34:32:24:09:0f:1e: 9f:fa:d0:e3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MERERDExMC8GA1UEBRMoNTFBNjhFREQyREYyQjdCRkY2N0E2NjEwOUJENzM5Q0E5 QkIyMzhDNDAeFw0yNjA0MDUwNzI5MjBaFw0yNjA0MTIwNzI5MjBaMBgxFjAUBgNV BAMTDTY5ZDIwZjUxLWIzYjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD1tNr25oPFu9HSsrltb09eefUW1pyhVv4XSdloP7cPHJk0IioGTuMXv9CZCZZu N2v6Jl9Zz5z+kBlLyZ+kRPmoR5OgYcxTE06mA6H3LqHRTklZHkjFQO6QvM3a2E9V rXCjjWFUAVpHlgpwbJN7Yzm0hQmDSuqk36TV3YnJ2VlcEr1Y1p+AoF6lCw7Pzipr Y4+oXr1LLzVTVV9lRhMDvuuoeqwLAlXoynZEx1dv7N6zRAELMglwyqgJWFJ/W8PQ fTaMUnJ5tUFrUlOjLWdjuOWD5MnoPWy0ha8M6d5gIksN8bAvZon1hzgKMGySNTFN FXlKKg9OwDZOJ8BYnRBNg49zAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU/LLq5yfj guRXNK/ZLQeoJFW2ZNMwHwYDVR0jBBgwFoAUUaaO3S3yt7/2emYQm9c5ypuyOMQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYwRERELzM0ODI0QjlFQjMz QzExRjBCOTVENDA1NEM0RjlBRTAyL1VhYU8zUzN5dDdfMmVtWVFtOWM1eXB1eU9N US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVWFhTzNTM3l0N18yZW1ZUW05YzV5cHV5T01RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYw RERELzM0ODI0QjlFQjMzQzExRjBCOTVENDA1NEM0RjlBRTAyL1VhYU8zUzN5dDdf MmVtWVFtOWM1eXB1eU9NUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCfwGXgBMGEJImJEuFl1mVnWPsTcNe9sj3P1J3wzPbsBHKhr6dA8hLl0xKW541g BED/hL7Sioul5+4iHZx/1XQuaTCckfxJvpZtinYIrYvkkqFtozWvkcEKaSpBahH+ T6pSclNpQoavHKt0TjeCQdNiCevIcOk4yzCyHh5QDBfzkNJWwp/tNceVQeRpQr7h NuN+1QzoQzyWiHsr4gF1qxNWW0yJY8vCNyL/Zjr0EVTAQxq9jTFxEir1zSQM7NyC 6EZhEE7Vt01Lrz59DRqAz9lwYj6MrChovCufoWm+cMObVW9BkfLiklilyLOTeEf5 vuUNRIzWhtc0MiQJDx6f+tDj -----END CERTIFICATE-----Generated at Sun Apr 5 19:44:09 2026 by rpki-client