$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft File: UdUxrvegh8GOMB4OaixjcbJkw-g.mft (raw, json) Hash identifier: n3HRVCHvdEoJ9JXpTt19nYlJLKZi2sNxZFn5aBXT3Vw= Subject key identifier: 77:77:1B:50:57:CB:C5:D2:F4:4B:A7:B5:0C:65:FF:B8:29:13:AB:CF Authority key identifier: 51:D5:31:AE:F7:A0:87:C1:8E:30:1E:0E:6A:2C:63:71:B2:64:C3:E8 Certificate issuer: /CN=A91EFAFF/serialNumber=51D531AEF7A087C18E301E0E6A2C6371B264C3E8 Certificate serial: 027B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft Manifest number: 025D Signing time: Sun 05 Apr 2026 02:06:55 +0000 Manifest this update: Sun 05 Apr 2026 02:06:55 +0000 Manifest next update: Sun 12 Apr 2026 02:06:55 +0000 Files and hashes: 1: UdUxrvegh8GOMB4OaixjcbJkw-g.crl (hash: dfMkPxkjB9gDZJBFLBHNEtB8y9NCvqcLhbJ3yhFAYqs=) 2: 891E633CB7F111EFA500D67CC4F9AE02.roa (hash: UgIjU1Y9FIQZMVmVVjbiH3ya5cbpCsU387MDkBuS42U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.crl rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:06:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 635 (0x27b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFAFF, serialNumber=51D531AEF7A087C18E301E0E6A2C6371B264C3E8 Validity Not Before: Apr 5 02:06:55 2026 GMT Not After : Apr 12 02:06:55 2026 GMT Subject: CN=69d1c3bf-60a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:db:33:c7:0b:0e:01:0e:eb:49:ff:18:e4:9a: f0:db:c6:2e:dc:56:de:1e:54:f9:23:b3:b5:21:34: 15:81:80:72:30:f6:92:a1:cb:49:5d:4c:24:80:5c: 34:29:35:48:bb:00:39:7e:23:8b:f1:73:cb:8e:2b: 29:4b:7f:c1:9e:39:3e:92:79:e2:56:b3:c2:0f:e8: a6:59:d6:2b:bb:a0:ce:28:ba:c7:7f:4d:3d:98:11: 40:16:1a:32:41:38:00:eb:26:14:6e:d0:78:86:47: ef:7c:1d:b7:75:93:57:a5:00:f7:eb:68:b6:2a:61: cb:64:74:d3:eb:34:00:5f:97:fe:fd:70:61:3b:21: dd:bd:0e:9f:e2:b9:e1:27:15:e8:24:a6:8a:d9:71: cc:e9:d6:81:f9:3a:c3:55:97:c3:c3:74:de:29:0e: 20:5d:5f:b9:0c:be:f5:78:35:05:2f:3c:55:a3:fe: ec:ee:6d:97:39:f7:86:d6:60:2a:e3:c2:04:78:38: 7d:06:6f:d8:8b:5a:09:c4:2f:bb:41:f4:ed:e8:0e: f6:85:1b:8c:d2:37:a3:c5:6f:15:c2:47:b8:bb:88: e8:71:66:5a:43:0c:6c:1b:31:f7:f3:6b:2f:70:4f: f3:24:b3:e7:45:09:2b:96:f3:56:e5:f4:43:1f:a0: c5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:77:1B:50:57:CB:C5:D2:F4:4B:A7:B5:0C:65:FF:B8:29:13:AB:CF X509v3 Authority Key Identifier: keyid:51:D5:31:AE:F7:A0:87:C1:8E:30:1E:0E:6A:2C:63:71:B2:64:C3:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:9c:4e:78:3a:fd:db:d7:0a:82:bf:79:eb:46:93:df:a9:5e: 30:82:2a:ec:99:0a:0a:02:e5:a1:4e:64:38:5c:64:4f:83:e2: c2:5d:b8:0e:89:ec:28:22:1f:75:cf:c0:c8:29:46:45:63:70: 03:61:b6:e0:c8:bf:dc:aa:f9:f0:1a:ee:f3:c0:2d:67:30:4b: b5:39:fe:4e:5a:67:28:5d:df:ea:ca:b1:00:3f:2b:45:e5:23: 56:44:82:6b:40:60:38:80:1d:03:a2:40:9a:23:31:01:9d:c6: d6:d7:db:70:e7:e9:9a:8c:1b:e6:ec:bb:04:45:17:f6:20:99: 51:66:66:af:eb:f5:bb:df:d2:3c:2b:41:17:07:d5:1a:14:a4: 0e:c0:af:59:4c:f2:55:4b:49:d1:51:ad:94:83:ba:6e:bc:f3: 40:f8:28:84:20:f7:f3:f5:6a:24:df:1b:01:c3:ed:3d:ac:05: 72:3a:89:f6:dd:d2:13:df:69:a0:3b:66:ad:e7:ae:84:98:70: ef:84:1f:31:a9:1c:b8:42:5d:5a:02:ea:96:fe:d2:e8:33:31: 61:3f:bb:04:c3:e6:e4:36:23:eb:d5:28:05:42:02:07:38:12: 1a:3e:62:dd:80:7d:4e:23:fa:e8:d5:b9:76:31:12:6f:69:85: 28:2a:5c:aa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAnswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZBRkYxMTAvBgNVBAUTKDUxRDUzMUFFRjdBMDg3QzE4RTMwMUUwRTZBMkM2Mzcx QjI2NEMzRTgwHhcNMjYwNDA1MDIwNjU1WhcNMjYwNDEyMDIwNjU1WjAYMRYwFAYD VQQDEw02OWQxYzNiZi02MGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1tszxwsOAQ7rSf8Y5Jrw28Yu3FbeHlT5I7O1ITQVgYByMPaSoctJXUwkgFw0 KTVIuwA5fiOL8XPLjispS3/Bnjk+knniVrPCD+imWdYru6DOKLrHf009mBFAFhoy QTgA6yYUbtB4hkfvfB23dZNXpQD362i2KmHLZHTT6zQAX5f+/XBhOyHdvQ6f4rnh JxXoJKaK2XHM6daB+TrDVZfDw3TeKQ4gXV+5DL71eDUFLzxVo/7s7m2XOfeG1mAq 48IEeDh9Bm/Yi1oJxC+7QfTt6A72hRuM0jejxW8Vwke4u4jocWZaQwxsGzH382sv cE/zJLPnRQkrlvNW5fRDH6DF4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHd3G1BX y8XS9EuntQxl/7gpE6vPMB8GA1UdIwQYMBaAFFHVMa73oIfBjjAeDmosY3GyZMPo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkFGRi9EMDYxMUYwNEND NDQxMUVEOUE3MUUxMENDNEY5QUUwMi9VZFV4cnZlZ2g4R09NQjRPYWl4amNiSmt3 LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VkVXhydmVnaDhHT01CNE9haXhqY2JKa3ctZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkFGRi9EMDYxMUYwNENDNDQxMUVEOUE3MUUxMENDNEY5QUUwMi9VZFV4cnZlZ2g4 R09NQjRPYWl4amNiSmt3LWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWZxOeDr929cKgr9560aT36leMIIq7JkKCgLloU5kOFxkT4Piwl24DonsKCIf dc/AyClGRWNwA2G24Mi/3Kr58Bru88AtZzBLtTn+TlpnKF3f6sqxAD8rReUjVkSC a0BgOIAdA6JAmiMxAZ3G1tfbcOfpmowb5uy7BEUX9iCZUWZmr+v1u9/SPCtBFwfV GhSkDsCvWUzyVUtJ0VGtlIO6brzzQPgohCD38/VqJN8bAcPtPawFcjqJ9t3SE99p oDtmreeuhJhw74QfMakcuEJdWgLqlv7S6DMxYT+7BMPm5DYj69UoBUICBzgSGj5i 3YB9TiP66NW5djESb2mFKCpcqg== -----END CERTIFICATE-----Generated at Sun Apr 5 19:58:47 2026 by rpki-client