$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft File: UMP9EvajMVgZtSurzBmPsNv9QTo.mft (raw, json) Hash identifier: 1Zo9UKumeYq/3UhGDKMhCaRBxCoAgf9VxgGpIfrlMtM= Subject key identifier: 01:29:80:17:0C:0A:71:3A:B7:B3:F2:B8:B2:D4:94:3F:A9:E0:B3:DE Authority key identifier: 50:C3:FD:12:F6:A3:31:58:19:B5:2B:AB:CC:19:8F:B0:DB:FD:41:3A Certificate issuer: /CN=A91CE616/serialNumber=50C3FD12F6A3315819B52BABCC198FB0DBFD413A Certificate serial: 0486 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UMP9EvajMVgZtSurzBmPsNv9QTo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft Manifest number: 047A Signing time: Sat 04 Apr 2026 23:52:03 +0000 Manifest this update: Sat 04 Apr 2026 23:52:02 +0000 Manifest next update: Sat 11 Apr 2026 23:52:02 +0000 Files and hashes: 1: UMP9EvajMVgZtSurzBmPsNv9QTo.crl (hash: nE7+vxL0eBK/OXlpDUSgFl8PSrW+UuRnHyve7eT10V8=) 2: 296C190484AD11EC9C3F837CC4F9AE02.roa (hash: lbtzXOv7fCZ9ldssOYWEkCJAJ4leYPGz3mQ8urYvDU8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.crl rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UMP9EvajMVgZtSurzBmPsNv9QTo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 23:52:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1158 (0x486) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE616, serialNumber=50C3FD12F6A3315819B52BABCC198FB0DBFD413A Validity Not Before: Apr 4 23:52:02 2026 GMT Not After : Apr 11 23:52:02 2026 GMT Subject: CN=69d1a423-5d45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:86:a8:5e:c9:25:13:f1:a4:69:e9:07:78:84: bb:43:3c:01:b4:13:55:a8:86:6f:e3:f7:af:6e:eb: c4:c9:87:8b:58:71:b7:cf:37:b8:24:8a:9d:60:97: 68:76:9a:51:5c:25:73:c1:42:d7:54:7a:8a:f9:88: 1a:26:44:fb:ec:c7:34:9f:20:db:b2:ba:53:e7:6c: 32:74:55:f8:d8:f7:09:85:13:67:36:d1:0e:2c:63: 58:e8:e4:01:d7:d8:89:5d:02:26:ab:1e:97:dd:43: 1d:33:56:44:1e:46:25:7a:cb:6b:db:a1:9d:68:72: 18:0b:7b:16:10:10:0d:9f:73:0a:c7:7e:3d:52:d5: 7d:d0:e2:ee:e5:be:73:65:ac:eb:0e:eb:4a:cb:38: 65:b7:81:92:6d:5d:a8:b7:cf:8e:df:e7:d0:24:33: f1:51:5b:0c:54:64:69:b1:6a:a2:92:82:ae:c5:53: 2e:3e:c2:cf:73:30:6f:06:ef:bd:47:aa:13:f6:7c: 3b:24:a7:74:3d:a2:8f:08:ab:72:82:a1:ee:40:67: 10:f0:e5:67:89:57:43:17:8a:44:a6:e1:a7:05:32: db:34:ef:54:ef:64:ae:4a:58:a8:d9:f8:4b:dd:37: d3:74:ec:cd:e2:38:5f:74:97:3d:f9:47:79:f9:dc: 24:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:29:80:17:0C:0A:71:3A:B7:B3:F2:B8:B2:D4:94:3F:A9:E0:B3:DE X509v3 Authority Key Identifier: keyid:50:C3:FD:12:F6:A3:31:58:19:B5:2B:AB:CC:19:8F:B0:DB:FD:41:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UMP9EvajMVgZtSurzBmPsNv9QTo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:ee:b7:e2:2c:90:ef:24:de:ab:14:52:0b:86:f8:10:09:c6: 52:54:6c:2c:b1:18:05:b8:03:d4:5e:c5:82:95:1f:32:0d:18: 36:5a:ee:e0:c5:7f:fd:98:a3:b0:51:0e:42:14:2d:4b:c5:07: 87:24:04:66:2f:0e:42:74:11:88:4b:2d:18:0f:df:35:d9:34: e9:b7:26:26:bc:33:01:9f:76:7a:b9:fe:82:4a:c3:a1:9a:d8: b9:0f:0f:5c:3c:b8:d1:50:c3:95:fc:fb:00:0d:d3:f6:a5:5d: 56:e8:60:3b:9e:47:e5:96:a5:db:cf:bb:1a:cf:63:56:a0:41: 00:c4:33:7e:96:73:9c:06:22:2d:6f:cd:18:fc:27:74:32:ec: f7:82:dc:12:ba:0b:fe:94:1e:1b:c9:5d:40:c8:68:20:57:5f: ae:82:cb:eb:13:a5:ce:f0:24:92:a2:74:df:7c:73:78:f6:e2: df:a9:2d:e1:66:89:e6:99:8e:1c:fe:87:a1:b1:25:bd:81:de: 15:b2:94:7b:a6:0a:60:b5:60:fe:5a:0d:8b:ed:8f:42:c5:63: b7:1a:57:b9:5e:68:4a:68:d9:b5:8c:0e:4d:f6:cb:01:51:f3: 40:9b:c8:ea:44:36:5e:d6:86:04:c2:54:1b:97:10:fe:10:b1: 02:79:de:40 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U2MTYxMTAvBgNVBAUTKDUwQzNGRDEyRjZBMzMxNTgxOUI1MkJBQkNDMTk4RkIw REJGRDQxM0EwHhcNMjYwNDA0MjM1MjAyWhcNMjYwNDExMjM1MjAyWjAYMRYwFAYD VQQDEw02OWQxYTQyMy01ZDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3oaoXsklE/GkaekHeIS7QzwBtBNVqIZv4/evbuvEyYeLWHG3zze4JIqdYJdo dppRXCVzwULXVHqK+YgaJkT77Mc0nyDbsrpT52wydFX42PcJhRNnNtEOLGNY6OQB 19iJXQImqx6X3UMdM1ZEHkYlestr26GdaHIYC3sWEBANn3MKx349UtV90OLu5b5z ZazrDutKyzhlt4GSbV2ot8+O3+fQJDPxUVsMVGRpsWqikoKuxVMuPsLPczBvBu+9 R6oT9nw7JKd0PaKPCKtygqHuQGcQ8OVniVdDF4pEpuGnBTLbNO9U72SuSlio2fhL 3TfTdOzN4jhfdJc9+Ud5+dwkUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAEpgBcM CnE6t7PyuLLUlD+p4LPeMB8GA1UdIwQYMBaAFFDD/RL2ozFYGbUrq8wZj7Db/UE6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTYxNi9BN0U0MjkxNjg0 QTgxMUVDQjI1MDA4NzFDNEY5QUUwMi9VTVA5RXZhak1WZ1p0U3VyekJtUHNOdjlR VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VNUDlFdmFqTVZnWnRTdXJ6Qm1Qc052OVFUby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTYxNi9BN0U0MjkxNjg0QTgxMUVDQjI1MDA4NzFDNEY5QUUwMi9VTVA5RXZhak1W Z1p0U3VyekJtUHNOdjlRVG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ+634iyQ7yTeqxRSC4b4EAnGUlRsLLEYBbgD1F7FgpUfMg0YNlru4MV//Zij sFEOQhQtS8UHhyQEZi8OQnQRiEstGA/fNdk06bcmJrwzAZ92ern+gkrDoZrYuQ8P XDy40VDDlfz7AA3T9qVdVuhgO55H5Zal28+7Gs9jVqBBAMQzfpZznAYiLW/NGPwn dDLs94LcEroL/pQeG8ldQMhoIFdfroLL6xOlzvAkkqJ033xzePbi36kt4WaJ5pmO HP6HobElvYHeFbKUe6YKYLVg/loNi+2PQsVjtxpXuV5oSmjZtYwOTfbLAVHzQJvI 6kQ2XtaGBMJUG5cQ/hCxAnneQA== -----END CERTIFICATE-----Generated at Sun Apr 5 19:53:11 2026 by rpki-client