$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft File: U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft (raw, json) Hash identifier: mA/84HzZ0AHbR7OcOGFhSqmW5Z4J5bnqAigdjNaRvIQ= Subject key identifier: 8C:DB:D2:53:64:20:89:77:FC:7A:9C:B2:64:2C:F4:05:03:1D:6D:D6 Authority key identifier: 53:D5:DB:87:0E:5C:CD:48:E9:8D:73:56:0D:BD:5E:65:94:6C:2D:D4 Certificate issuer: /CN=A91BA251/serialNumber=53D5DB870E5CCD48E98D73560DBD5E65946C2DD4 Certificate serial: 05E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft Manifest number: 05DA Signing time: Sat 04 Apr 2026 22:46:50 +0000 Manifest this update: Sat 04 Apr 2026 22:46:50 +0000 Manifest next update: Sat 11 Apr 2026 22:46:50 +0000 Files and hashes: 1: U9Xbhw5czUjpjXNWDb1eZZRsLdQ.crl (hash: I09H7xR4JpUzbLs0EdudNScS7QrK1p3L0NIuzZieCuY=) 2: 567C8DB8354111ECBCC05B63C4F9AE02.roa (hash: 3Myni48C8MqbnkMOucThNgI8mHbpIgv3RcenlXVut6k=) 3: DEA2CCF8050511EEB4D8141FC4F9AE02.roa (hash: n7blhtr8CeB1GQILH2tbTNGZrE0mtz4/kPdd9dFJxPM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.crl rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 22:46:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1512 (0x5e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA251, serialNumber=53D5DB870E5CCD48E98D73560DBD5E65946C2DD4 Validity Not Before: Apr 4 22:46:50 2026 GMT Not After : Apr 11 22:46:50 2026 GMT Subject: CN=69d194da-e94d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:2d:7b:9c:2d:a4:f2:0f:5c:61:f1:3f:49:56: 12:0e:37:3e:9f:f7:83:c6:f0:79:62:80:7e:24:ba: 65:87:1b:49:f9:7b:2d:d8:e4:69:4a:df:2c:a5:90: 0b:52:a8:59:ce:bd:97:f7:98:ad:66:40:29:b6:d1: d5:a4:dc:94:73:30:11:69:f6:e4:bb:a7:e2:e2:b3: f6:d0:00:43:f5:6d:03:15:38:b5:06:fb:74:52:9d: 8d:51:df:ba:0b:42:67:9f:70:e4:76:12:3e:53:10: 33:9c:e5:b1:94:5f:d3:af:c8:e1:5e:f2:92:39:6b: 8b:c1:19:4c:a9:2a:61:ad:99:53:eb:fc:0a:89:25: 85:45:83:1d:35:2f:d3:54:3c:30:9f:18:2e:92:87: 23:89:ff:4c:25:89:e0:ae:28:2c:20:17:d1:24:b7: 95:b7:d8:a1:9f:24:61:fe:13:da:da:75:48:de:a4: 5f:df:e1:56:a1:23:bd:c3:48:f2:9c:d2:79:d8:ad: 42:78:5e:87:38:fd:d4:41:df:ef:49:2f:b4:7b:1c: 7b:e7:9f:0a:74:cb:b7:e1:4e:60:1d:b6:59:9d:4d: 15:96:71:8a:5d:09:06:41:28:90:df:28:6c:33:4b: eb:2c:52:02:70:f2:bd:35:6d:02:7a:2f:aa:a7:ca: c0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:DB:D2:53:64:20:89:77:FC:7A:9C:B2:64:2C:F4:05:03:1D:6D:D6 X509v3 Authority Key Identifier: keyid:53:D5:DB:87:0E:5C:CD:48:E9:8D:73:56:0D:BD:5E:65:94:6C:2D:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:49:59:6e:bc:41:a3:48:e1:b0:1c:a9:de:02:7f:fa:7f:94: bd:f1:bb:73:af:e3:50:60:ec:be:a7:ed:c6:f9:43:7a:1d:04: 03:f7:9c:cf:b1:fc:99:82:2c:a9:79:cf:b6:ea:2f:8a:dd:9f: b4:6a:fa:f1:c2:10:e7:f0:8c:6b:b5:3e:6d:4a:9c:e1:a0:66: 0e:9e:da:4f:18:c7:9b:25:38:15:ed:94:99:6b:18:f8:78:d6: 0f:b3:3f:66:4e:fd:b5:63:3f:ca:f9:4f:d7:d5:d9:26:27:2b: 3a:9d:0e:a5:2b:8b:77:9f:6c:18:13:b7:78:1b:cd:ae:1f:13: 9f:e2:78:1a:58:94:11:5e:ef:8b:0f:10:e7:e8:00:6d:79:58: 92:91:bd:20:f7:49:bb:d8:74:0d:b2:b7:fc:b6:5f:b9:95:62: c7:a3:6f:c5:c5:25:dc:d2:40:0a:b1:56:0f:f6:d4:dc:64:3e: a4:68:56:6b:f1:e0:7a:ff:c1:c9:82:0e:19:3c:aa:0b:43:4b: 2c:a6:4e:b3:0a:a3:fa:c6:85:ff:8d:17:3e:e0:d7:92:40:10: f0:14:3b:f6:9f:08:32:2b:64:a2:bd:27:31:8f:f5:90:b4:ae: 85:dc:cb:12:64:47:50:55:31:4b:dd:ef:75:7f:b7:28:80:51: 3e:74:db:1a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEyNTExMTAvBgNVBAUTKDUzRDVEQjg3MEU1Q0NENDhFOThENzM1NjBEQkQ1RTY1 OTQ2QzJERDQwHhcNMjYwNDA0MjI0NjUwWhcNMjYwNDExMjI0NjUwWjAYMRYwFAYD VQQDEw02OWQxOTRkYS1lOTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4y17nC2k8g9cYfE/SVYSDjc+n/eDxvB5YoB+JLplhxtJ+Xst2ORpSt8spZAL UqhZzr2X95itZkApttHVpNyUczARafbku6fi4rP20ABD9W0DFTi1Bvt0Up2NUd+6 C0Jnn3DkdhI+UxAznOWxlF/Tr8jhXvKSOWuLwRlMqSphrZlT6/wKiSWFRYMdNS/T VDwwnxgukocjif9MJYngrigsIBfRJLeVt9ihnyRh/hPa2nVI3qRf3+FWoSO9w0jy nNJ52K1CeF6HOP3UQd/vSS+0exx7558KdMu34U5gHbZZnU0VlnGKXQkGQSiQ3yhs M0vrLFICcPK9NW0Cei+qp8rAvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIzb0lNk IIl3/HqcsmQs9AUDHW3WMB8GA1UdIwQYMBaAFFPV24cOXM1I6Y1zVg29XmWUbC3U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTI1MS9EOTNENzk2MEY3 NDgxMUVCQTc1RkNDMTNDNEY5QUUwMi9VOVhiaHc1Y3pVanBqWE5XRGIxZVpaUnNM ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U5WGJodzVjelVqcGpYTldEYjFlWlpSc0xkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTI1MS9EOTNENzk2MEY3NDgxMUVCQTc1RkNDMTNDNEY5QUUwMi9VOVhiaHc1Y3pV anBqWE5XRGIxZVpaUnNMZFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmklZbrxBo0jhsByp3gJ/+n+UvfG7c6/jUGDsvqftxvlDeh0EA/ecz7H8mYIs qXnPtuovit2ftGr68cIQ5/CMa7U+bUqc4aBmDp7aTxjHmyU4Fe2UmWsY+HjWD7M/ Zk79tWM/yvlP19XZJicrOp0OpSuLd59sGBO3eBvNrh8Tn+J4GliUEV7viw8Q5+gA bXlYkpG9IPdJu9h0DbK3/LZfuZVix6NvxcUl3NJACrFWD/bU3GQ+pGhWa/Hgev/B yYIOGTyqC0NLLKZOswqj+saF/40XPuDXkkAQ8BQ79p8IMitkor0nMY/1kLSuhdzL EmRHUFUxS93vdX+3KIBRPnTbGg== -----END CERTIFICATE-----Generated at Sun Apr 5 19:51:15 2026 by rpki-client