$ rpki-client -vvf rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.mft File: U7ksLaLVSegUcEB8yP8MdbjEty0.mft (raw, json) Hash identifier: wmiPbOc55RDjALOEzvdlm/E07zzJWi3fXlwQ/wrdOTk= Subject key identifier: 40:56:6A:47:B0:EE:A9:22:A2:57:26:56:58:6B:00:45:9E:51:E5:03 Authority key identifier: 53:B9:2C:2D:A2:D5:49:E8:14:70:40:7C:C8:FF:0C:75:B8:C4:B7:2D Certificate issuer: /CN=A91940AE/serialNumber=53B92C2DA2D549E81470407CC8FF0C75B8C4B72D Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U7ksLaLVSegUcEB8yP8MdbjEty0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.mft Manifest number: 33 Signing time: Sun 05 Apr 2026 08:01:05 +0000 Manifest this update: Sun 05 Apr 2026 08:01:04 +0000 Manifest next update: Sun 12 Apr 2026 08:01:04 +0000 Files and hashes: 1: U7ksLaLVSegUcEB8yP8MdbjEty0.crl (hash: mMFzt9KwmhuwPI5LqVIj0/tbJgmoAAlwNmbc6hCJFKU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.crl rsync://rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U7ksLaLVSegUcEB8yP8MdbjEty0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91940AE, serialNumber=53B92C2DA2D549E81470407CC8FF0C75B8C4B72D Validity Not Before: Apr 5 08:01:04 2026 GMT Not After : Apr 12 08:01:04 2026 GMT Subject: CN=69d216c1-4e4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:5e:44:49:99:7e:f6:46:56:3c:a7:0b:bc:58: 5f:3d:be:52:60:e9:90:c0:54:cb:19:75:2f:d5:74: 7c:d0:e3:de:19:fa:55:1a:98:0f:b6:6e:16:b6:bd: 8e:06:e9:fd:bd:a0:c0:71:a2:b1:0a:66:a1:e8:d9: 8a:c2:31:24:9f:a1:14:72:28:35:47:50:fa:29:25: cb:13:a2:c3:a4:00:19:58:98:d8:6c:ba:d2:ce:92: 00:44:ef:7b:59:e4:11:d3:ed:b4:0f:b9:24:7b:ac: df:93:4d:50:bf:d7:fb:c4:2f:f7:44:d2:ab:0c:f9: de:1d:09:f3:59:11:1d:23:58:1f:f9:0b:b3:20:80: eb:1f:63:bd:a0:ef:ad:bc:f0:8e:c3:4d:23:ff:1d: 19:3c:c8:4e:13:e0:a6:3d:8c:24:2b:5e:75:4d:00: 84:6c:1d:3d:20:5b:b5:02:30:82:b4:c6:4d:ea:21: 44:66:8b:67:e1:e5:f5:fb:89:63:ac:9d:2b:a9:bf: 01:56:c0:89:84:3e:d2:17:07:6c:52:e0:90:67:9d: a3:67:6c:7c:9a:fe:b1:89:b5:39:8b:7e:ff:e8:9e: 15:f4:83:1c:53:6e:ae:b4:6c:55:6e:ec:29:c6:b2: 59:96:10:40:66:82:6b:77:89:d2:12:7e:f6:e4:f7: 36:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:56:6A:47:B0:EE:A9:22:A2:57:26:56:58:6B:00:45:9E:51:E5:03 X509v3 Authority Key Identifier: keyid:53:B9:2C:2D:A2:D5:49:E8:14:70:40:7C:C8:FF:0C:75:B8:C4:B7:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U7ksLaLVSegUcEB8yP8MdbjEty0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:fc:c0:f9:be:a8:cd:08:14:bc:89:eb:0b:77:fe:16:1f:01: 58:15:ca:bb:d0:9f:f6:e6:36:4f:b2:a6:55:2e:db:48:67:db: 6f:71:74:34:05:14:5f:8a:2d:62:43:a6:dc:3b:88:04:11:13: 44:b4:ba:fc:ed:b4:bd:12:17:e2:1a:e6:68:bd:dc:83:e8:93: bf:e9:ac:ca:74:bb:17:d1:3b:24:0f:47:74:f8:69:2d:5f:3d: 68:79:92:c8:74:d9:1e:71:cd:0d:3a:58:68:9d:dd:e6:21:f6: da:9f:e7:50:64:05:3d:b0:d8:1c:53:79:cd:c9:54:3c:41:ad: bf:09:ad:5b:76:04:25:4a:8c:cd:8a:05:6c:dc:6f:78:05:a9: 6e:eb:f2:e6:90:89:8b:b8:8c:5f:0d:e1:6b:9d:7d:29:6e:72: 3f:0d:14:91:12:e1:6a:ab:63:f2:92:97:c9:63:4a:e9:08:c9: 72:0b:aa:9f:23:82:4f:ab:0f:79:6c:ca:f7:47:4e:16:ce:07: a1:5e:e6:dc:7b:bc:ca:5c:8b:76:46:28:76:73:af:91:26:9b: b4:43:24:59:b3:69:16:c3:90:55:31:04:df:16:43:35:dd:8d: 1b:aa:c5:ca:f3:5e:2c:ea:5a:cb:62:2d:10:3e:a7:54:64:57: 91:49:67:93 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NDBBRTExMC8GA1UEBRMoNTNCOTJDMkRBMkQ1NDlFODE0NzA0MDdDQzhGRjBDNzVC OEM0QjcyRDAeFw0yNjA0MDUwODAxMDRaFw0yNjA0MTIwODAxMDRaMBgxFjAUBgNV BAMTDTY5ZDIxNmMxLTRlNGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD5XkRJmX72RlY8pwu8WF89vlJg6ZDAVMsZdS/VdHzQ494Z+lUamA+2bha2vY4G 6f29oMBxorEKZqHo2YrCMSSfoRRyKDVHUPopJcsTosOkABlYmNhsutLOkgBE73tZ 5BHT7bQPuSR7rN+TTVC/1/vEL/dE0qsM+d4dCfNZER0jWB/5C7MggOsfY72g7628 8I7DTSP/HRk8yE4T4KY9jCQrXnVNAIRsHT0gW7UCMIK0xk3qIURmi2fh5fX7iWOs nSupvwFWwImEPtIXB2xS4JBnnaNnbHya/rGJtTmLfv/onhX0gxxTbq60bFVu7CnG slmWEEBmgmt3idISfvbk9zbxAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUQFZqR7Du qSKiVyZWWGsARZ5R5QMwHwYDVR0jBBgwFoAUU7ksLaLVSegUcEB8yP8MdbjEty0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk0MEFFL0IzOEU1RkQ0RUY5 RDExRjBBMkQ2Qjc3OTY3NkY1NkJDL1U3a3NMYUxWU2VnVWNFQjh5UDhNZGJqRXR5 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVTdrc0xhTFZTZWdVY0VCOHlQOE1kYmpFdHkwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk0 MEFFL0IzOEU1RkQ0RUY5RDExRjBBMkQ2Qjc3OTY3NkY1NkJDL1U3a3NMYUxWU2Vn VWNFQjh5UDhNZGJqRXR5MC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDJ/MD5vqjNCBS8iesLd/4WHwFYFcq70J/25jZPsqZVLttIZ9tvcXQ0BRRfii1i Q6bcO4gEERNEtLr87bS9EhfiGuZovdyD6JO/6azKdLsX0TskD0d0+GktXz1oeZLI dNkecc0NOlhond3mIfban+dQZAU9sNgcU3nNyVQ8Qa2/Ca1bdgQlSozNigVs3G94 Balu6/LmkImLuIxfDeFrnX0pbnI/DRSREuFqq2PykpfJY0rpCMlyC6qfI4JPqw95 bMr3R04WzgehXubce7zKXIt2Rih2c6+RJpu0QyRZs2kWw5BVMQTfFkM13Y0bqsXK 814s6lrLYi0QPqdUZFeRSWeT -----END CERTIFICATE-----Generated at Sun Apr 5 19:44:14 2026 by rpki-client