$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft File: Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft (raw, json) Hash identifier: bSOP3cMXSjKCeJIMN6bka2hAJnH3eYv8nn7goXSoAmI= Subject key identifier: D6:58:19:9B:B7:B7:8D:4B:08:5F:EE:9F:31:9B:FC:4F:9A:14:33:EE Authority key identifier: 52:BE:9D:DE:95:68:FE:4A:DC:A0:F3:45:B3:61:7A:63:C3:07:58:45 Certificate issuer: /CN=A91E9467/serialNumber=52BE9DDE9568FE4ADCA0F345B3617A63C3075845 Certificate serial: 0560 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft Manifest number: 052C Signing time: Sat 04 Apr 2026 23:29:02 +0000 Manifest this update: Sat 04 Apr 2026 23:29:01 +0000 Manifest next update: Sat 11 Apr 2026 23:29:01 +0000 Files and hashes: 1: Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl (hash: gmsbLIKMxvgbH202EYqJTgvdkQAoT9ctIe0GL0eTrM8=) 2: 213E93FE8E0B11F088E57287C4F9AE02.roa (hash: 2Rtt0l2vrHpeXFcBc4nS2hVJH5taPuaLmVKCadcs2bc=) 3: F63AA888900F11ED8B4CB41DC4F9AE02.roa (hash: MEZBYUD5FqO/c2lwUKhY6AyLEguQGUqvgydiauMWIwc=) 4: 9D9B2E7A6D3211F0A68A8A58C4F9AE02.roa (hash: KD8sbQxVGc6+o0NWvmiwxFni81JXRae+CNqEs/9OB/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 23:29:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1376 (0x560) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9467, serialNumber=52BE9DDE9568FE4ADCA0F345B3617A63C3075845 Validity Not Before: Apr 4 23:29:01 2026 GMT Not After : Apr 11 23:29:01 2026 GMT Subject: CN=69d19ebd-dd31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a6:82:2f:42:59:13:2a:82:90:bc:2f:b3:b6: 84:18:61:95:3a:4b:f0:2d:37:bd:3a:b2:ba:2a:7d: 48:54:cf:30:74:dd:67:ab:92:4b:73:d2:f1:67:cc: e5:87:79:0e:6f:b5:d6:00:79:74:c7:23:92:b4:06: d4:12:d8:a5:d1:b4:0b:5c:6a:6a:0d:df:02:d5:9a: a6:c7:b0:1f:b2:ce:b4:98:06:a8:91:3c:4c:02:76: d2:68:0f:37:88:ff:7a:b9:c7:2a:b7:1b:cb:6f:45: f9:d9:e1:c5:4e:4b:8c:2d:94:04:5e:30:40:a8:2f: 31:95:ea:7c:6c:3b:fc:f9:a2:19:7c:92:b2:d6:0e: c0:9c:4e:ca:00:27:ed:33:1d:04:09:b1:ba:fa:1a: 03:4f:d4:ef:50:aa:1d:3a:ad:f7:67:a3:40:db:4b: 50:aa:72:ba:d6:a7:89:ed:10:a6:88:72:be:43:e8: 8f:d6:ea:89:f4:fd:97:65:d9:bc:6f:83:86:fb:02: ab:09:84:f4:3a:59:a9:38:2f:1c:57:74:e4:df:cc: fc:26:28:3c:64:ff:e5:d8:64:6b:a8:26:23:e7:95: 71:cb:78:81:5f:2b:86:64:fa:31:cf:4f:6d:7c:ad: 7c:43:c3:1a:73:a3:01:09:7b:46:eb:62:92:9d:7d: 3d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:58:19:9B:B7:B7:8D:4B:08:5F:EE:9F:31:9B:FC:4F:9A:14:33:EE X509v3 Authority Key Identifier: keyid:52:BE:9D:DE:95:68:FE:4A:DC:A0:F3:45:B3:61:7A:63:C3:07:58:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:a2:91:71:e9:c3:29:9c:b0:43:da:12:be:54:19:a9:4e:9f: 57:64:d0:91:a3:36:c8:a0:e1:f9:60:b4:20:09:8c:72:9e:ff: f3:47:2a:59:37:96:34:73:37:0a:e3:3e:cb:70:ea:4c:72:ef: 58:b6:4f:a7:00:3e:f6:18:66:9d:15:a5:4b:c2:dc:8d:00:56: 1b:a1:25:2a:ef:35:78:38:ac:f6:46:29:b1:45:19:29:9b:c0: e5:c5:cb:32:98:29:e9:79:73:98:a1:62:00:81:e8:c0:de:4a: de:bf:09:88:84:69:42:63:34:92:0b:53:73:bf:68:fe:99:4f: db:21:56:df:02:9e:8e:3c:ff:d3:e8:3c:31:ae:e4:eb:37:af: cc:da:c3:73:7e:6f:b4:16:96:a8:8a:1c:65:e9:8a:2a:1a:e5: d6:dd:8f:e8:5e:83:a9:97:da:bc:dd:0f:19:8f:fb:8a:be:ca: 8a:30:23:2e:42:49:ef:af:c0:58:8d:2f:e5:f8:16:6d:b2:3b: 44:20:04:88:5f:d4:8c:63:ae:65:15:8c:22:7e:74:8b:33:95: 4d:c3:09:02:eb:6f:9f:79:8d:5d:4d:32:4e:6e:8b:f1:d2:ca: fa:86:b1:98:44:5a:50:32:54:73:0c:6d:c8:96:39:57:90:44: f2:3e:be:78 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk0NjcxMTAvBgNVBAUTKDUyQkU5RERFOTU2OEZFNEFEQ0EwRjM0NUIzNjE3QTYz QzMwNzU4NDUwHhcNMjYwNDA0MjMyOTAxWhcNMjYwNDExMjMyOTAxWjAYMRYwFAYD VQQDEw02OWQxOWViZC1kZDMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmKaCL0JZEyqCkLwvs7aEGGGVOkvwLTe9OrK6Kn1IVM8wdN1nq5JLc9LxZ8zl h3kOb7XWAHl0xyOStAbUEtil0bQLXGpqDd8C1Zqmx7Afss60mAaokTxMAnbSaA83 iP96uccqtxvLb0X52eHFTkuMLZQEXjBAqC8xlep8bDv8+aIZfJKy1g7AnE7KACft Mx0ECbG6+hoDT9TvUKodOq33Z6NA20tQqnK61qeJ7RCmiHK+Q+iP1uqJ9P2XZdm8 b4OG+wKrCYT0OlmpOC8cV3Tk38z8Jig8ZP/l2GRrqCYj55Vxy3iBXyuGZPoxz09t fK18Q8Mac6MBCXtG62KSnX09qwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNZYGZu3 t41LCF/unzGb/E+aFDPuMB8GA1UdIwQYMBaAFFK+nd6VaP5K3KDzRbNhemPDB1hF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTQ2Ny83NzBCNEYxQTUy NkYxMUVDQkM1MEVCMTdDNEY5QUUwMi9VcjZkM3BWb19rcmNvUE5GczJGNlk4TUhX RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VyNmQzcFZvX2tyY29QTkZzMkY2WThNSFdFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTQ2Ny83NzBCNEYxQTUyNkYxMUVDQkM1MEVCMTdDNEY5QUUwMi9VcjZkM3BWb19r cmNvUE5GczJGNlk4TUhXRVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfqKRcenDKZywQ9oSvlQZqU6fV2TQkaM2yKDh+WC0IAmMcp7/80cqWTeWNHM3 CuM+y3DqTHLvWLZPpwA+9hhmnRWlS8LcjQBWG6ElKu81eDis9kYpsUUZKZvA5cXL Mpgp6XlzmKFiAIHowN5K3r8JiIRpQmM0kgtTc79o/plP2yFW3wKejjz/0+g8Ma7k 6zevzNrDc35vtBaWqIocZemKKhrl1t2P6F6DqZfavN0PGY/7ir7KijAjLkJJ76/A WI0v5fgWbbI7RCAEiF/UjGOuZRWMIn50izOVTcMJAutvn3mNXU0yTm6L8dLK+oax mERaUDJUcwxtyJY5V5BE8j6+eA== -----END CERTIFICATE-----Generated at Sun Apr 5 23:50:54 2026 by rpki-client