$ rpki-client -vvf rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft File: Ut5nj6808fJ7_XLOdS9c1X6ME84.mft (raw, json) Hash identifier: uU+GQva5df3bm/fiutyZ3uXYo8gaVgaBOo6SnwzIfyw= Subject key identifier: D0:D1:F4:95:DD:CC:FF:FC:6A:B6:E4:70:D2:DC:07:97:33:F5:D2:B8 Authority key identifier: 52:DE:67:8F:AF:34:F1:F2:7B:FD:72:CE:75:2F:5C:D5:7E:8C:13:CE Certificate issuer: /CN=A91781C0/serialNumber=52DE678FAF34F1F27BFD72CE752F5CD57E8C13CE Certificate serial: 0276 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft Manifest number: 026A Signing time: Sun 05 Apr 2026 01:39:59 +0000 Manifest this update: Sun 05 Apr 2026 01:39:59 +0000 Manifest next update: Sun 12 Apr 2026 01:39:59 +0000 Files and hashes: 1: Ut5nj6808fJ7_XLOdS9c1X6ME84.crl (hash: ppOca4dVIqYQaiz5VQQ8UoSVCtsBS41g3Gs4bZJ1FN0=) 2: F5D6B6B8810811ED9EA03683C4F9AE02.roa (hash: YhFFk2hbxX7ipWmiEtRtt5VM5YND4GHLWqHWN4WPPew=) 3: F69540BA810811ED9EA03683C4F9AE02.roa (hash: 1ls87L8wFBI3susqrdOibbBBgEFKgSyseB64cHDFqj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.crl rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 01:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 630 (0x276) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91781C0, serialNumber=52DE678FAF34F1F27BFD72CE752F5CD57E8C13CE Validity Not Before: Apr 5 01:39:59 2026 GMT Not After : Apr 12 01:39:59 2026 GMT Subject: CN=69d1bd6f-3826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:11:19:14:00:b4:f2:cb:ac:65:be:de:7b:69: 17:ad:ea:a5:a8:d3:0a:a0:08:5c:14:bf:92:69:22: 5b:e5:01:fa:d6:54:c4:d9:aa:b7:93:63:09:1a:67: 18:41:23:97:e4:13:d1:ba:d8:d8:b7:ed:c1:b3:95: f8:3c:5a:fb:cc:bc:a3:fa:3c:58:1e:2f:9e:e5:fd: cc:c3:cc:75:a0:83:85:3a:b0:4f:8c:11:ce:ed:14: a2:9a:c9:02:32:6d:d6:26:56:80:87:74:4d:fd:3a: dc:b1:32:84:57:fd:67:64:5d:b1:60:23:14:12:97: 42:f7:8e:00:5b:97:16:b4:ab:c2:16:51:0d:97:81: a9:a2:eb:2d:6a:f1:b3:7a:82:4f:41:97:71:52:4a: 37:c3:12:10:30:ba:3d:89:b4:2a:05:dc:54:f7:a0: 18:be:e3:d6:43:28:c0:10:ad:fb:13:49:41:8d:c6: 91:b5:1f:7b:20:0c:15:6b:d7:b0:08:2a:2d:a4:5a: 3d:86:ae:15:24:38:48:3a:60:75:34:eb:c4:08:52: 25:16:e7:cd:04:99:4e:f3:95:dc:e2:49:41:48:1f: b2:34:45:e8:7f:78:dc:a6:ad:55:2f:bb:c2:e8:79: 61:56:bf:2c:d2:32:05:da:e7:1a:19:a8:d9:16:a6: 9f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:D1:F4:95:DD:CC:FF:FC:6A:B6:E4:70:D2:DC:07:97:33:F5:D2:B8 X509v3 Authority Key Identifier: keyid:52:DE:67:8F:AF:34:F1:F2:7B:FD:72:CE:75:2F:5C:D5:7E:8C:13:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:68:61:0d:48:3a:b9:1d:7d:d9:dc:89:e4:fa:ba:8a:a2:62: 5b:9c:96:d0:2b:bd:14:71:d0:7c:31:4c:f5:0d:cc:05:14:4b: 5e:5b:bd:38:b5:98:bc:5d:da:24:53:e2:aa:b1:55:eb:13:79: 8c:68:49:a1:47:9f:cb:be:b4:34:6d:b2:34:18:28:e4:e7:d2: 3d:8b:69:07:9e:50:b7:2f:a0:df:05:1c:ae:b4:e4:88:49:f6: 59:57:39:0f:52:d1:57:26:01:ce:0b:f7:28:67:71:ae:b3:92: b1:fd:d8:04:c3:b5:05:53:33:27:06:b1:27:c5:e4:6a:34:51: 4a:bd:b0:bb:6f:87:4b:db:8f:69:ea:30:78:4d:36:00:23:f0: 61:1c:26:bd:ad:e1:69:89:ad:ff:20:e2:16:33:5c:94:93:e0: ab:58:5d:f2:1b:83:80:3b:97:76:0c:7f:26:62:42:eb:3c:2f: 50:3e:aa:d8:69:37:80:c7:f0:0b:f0:ed:20:5c:76:b9:20:24: 91:07:90:79:87:66:0a:9a:07:3e:71:8f:81:93:3b:e3:5e:13: eb:17:f0:38:29:21:8b:89:5e:e9:bf:2b:af:29:89:0b:bb:7e: 82:de:1c:ba:fd:7d:80:9f:bd:d4:37:89:8d:1a:65:9e:97:60: 34:c2:a2:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAnYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzgxQzAxMTAvBgNVBAUTKDUyREU2NzhGQUYzNEYxRjI3QkZENzJDRTc1MkY1Q0Q1 N0U4QzEzQ0UwHhcNMjYwNDA1MDEzOTU5WhcNMjYwNDEyMDEzOTU5WjAYMRYwFAYD VQQDEw02OWQxYmQ2Zi0zODI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtBEZFAC08susZb7ee2kXreqlqNMKoAhcFL+SaSJb5QH61lTE2aq3k2MJGmcY QSOX5BPRutjYt+3Bs5X4PFr7zLyj+jxYHi+e5f3Mw8x1oIOFOrBPjBHO7RSimskC Mm3WJlaAh3RN/TrcsTKEV/1nZF2xYCMUEpdC944AW5cWtKvCFlENl4GpoustavGz eoJPQZdxUko3wxIQMLo9ibQqBdxU96AYvuPWQyjAEK37E0lBjcaRtR97IAwVa9ew CCotpFo9hq4VJDhIOmB1NOvECFIlFufNBJlO85Xc4klBSB+yNEXof3jcpq1VL7vC 6HlhVr8s0jIF2ucaGajZFqafGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNDR9JXd zP/8arbkcNLcB5cz9dK4MB8GA1UdIwQYMBaAFFLeZ4+vNPHye/1yznUvXNV+jBPO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODFDMC8yRjI4OUVENjgx MDQxMUVEQkVDNjUwODdDNEY5QUUwMi9VdDVuajY4MDhmSjdfWExPZFM5YzFYNk1F ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V0NW5qNjgwOGZKN19YTE9kUzljMVg2TUU4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 ODFDMC8yRjI4OUVENjgxMDQxMUVEQkVDNjUwODdDNEY5QUUwMi9VdDVuajY4MDhm SjdfWExPZFM5YzFYNk1FODQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ2hhDUg6uR192dyJ5Pq6iqJiW5yW0Cu9FHHQfDFM9Q3MBRRLXlu9OLWYvF3a JFPiqrFV6xN5jGhJoUefy760NG2yNBgo5OfSPYtpB55Qty+g3wUcrrTkiEn2WVc5 D1LRVyYBzgv3KGdxrrOSsf3YBMO1BVMzJwaxJ8XkajRRSr2wu2+HS9uPaeoweE02 ACPwYRwmva3haYmt/yDiFjNclJPgq1hd8huDgDuXdgx/JmJC6zwvUD6q2Gk3gMfw C/DtIFx2uSAkkQeQeYdmCpoHPnGPgZM7414T6xfwOCkhi4le6b8rrymJC7t+gt4c uv19gJ+91DeJjRplnpdgNMKiFw== -----END CERTIFICATE-----Generated at Sun Apr 5 19:41:20 2026 by rpki-client