$ rpki-client -vvf rpki.apnic.net/member_repository/A911F587/C1BA1A22136E11F1AD791BA3313D8C67/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.mft File: ufxcFLLSdSnVDm5ZPajLCqh9ZRA.mft (raw, json) Hash identifier: STjgmjgr22+0jUWMDQVDbqDhVMfqyOlnRITLWP6Fqi4= Subject key identifier: AE:F7:0E:71:F1:97:84:7C:3C:58:38:AD:DB:8D:27:AB:F9:64:F6:B6 Authority key identifier: B9:FC:5C:14:B2:D2:75:29:D5:0E:6E:59:3D:A8:CB:0A:A8:7D:65:10 Certificate issuer: /CN=A911F587/serialNumber=B9FC5C14B2D27529D50E6E593DA8CB0AA87D6510 Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F587/C1BA1A22136E11F1AD791BA3313D8C67/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.mft Manifest number: 21 Signing time: Fri 17 Apr 2026 08:37:40 +0000 Manifest this update: Fri 17 Apr 2026 08:37:40 +0000 Manifest next update: Fri 24 Apr 2026 08:37:40 +0000 Files and hashes: 1: ufxcFLLSdSnVDm5ZPajLCqh9ZRA.crl (hash: JcSf0plNnk62qRt/v6fRnbWEv4AA6KLEJS/UODWZJ8w=) 2: CE3E7CF6136F11F1982A4804323D8C67.roa (hash: 433GVnEHsEmqM+RA2zhP/NFczVjY5LHUX58RsvVfVKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F587/C1BA1A22136E11F1AD791BA3313D8C67/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.crl rsync://rpki.apnic.net/member_repository/A911F587/C1BA1A22136E11F1AD791BA3313D8C67/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:37:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F587, serialNumber=B9FC5C14B2D27529D50E6E593DA8CB0AA87D6510 Validity Not Before: Apr 17 08:37:40 2026 GMT Not After : Apr 24 08:37:40 2026 GMT Subject: CN=69e1f154-1d24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5e:e9:6f:df:ad:5c:0b:90:c6:7c:d0:ef:3e: 43:63:09:7d:ad:8b:f1:57:e3:5f:23:00:57:59:85: 2c:0d:78:5b:c8:dd:62:3f:a4:e6:8d:aa:3c:f7:46: 88:cf:01:cb:61:62:50:44:b0:ee:fc:c8:0b:b4:6f: 7a:5f:b7:46:37:b5:cb:78:aa:dc:b4:da:a0:a9:5f: e2:15:2f:13:50:e0:5b:02:f0:f6:61:a1:db:85:2d: 16:8e:f9:90:df:8c:0e:e0:96:5c:f3:17:6d:e4:03: 55:ec:6c:d9:b1:db:54:97:98:5d:80:b3:d6:68:01: c6:6f:2c:e8:2e:44:d0:42:ce:95:7d:2b:da:56:4a: ea:6f:4c:7d:a5:51:c4:4c:c2:02:db:2b:0b:b7:20: 06:c1:ba:a8:72:99:3d:a1:86:35:1c:b0:d9:1d:6a: 42:ec:34:fa:04:f8:c1:9c:42:69:83:91:0b:d8:64: 59:37:91:6d:d8:53:72:0f:a9:93:0f:94:cb:cd:1e: 1e:0c:a0:00:28:a4:05:5c:86:e8:86:1a:1a:cf:5b: e4:69:f0:29:6b:23:26:cb:65:5f:02:3e:d4:e1:af: 8c:0d:48:1a:ce:1d:d7:c3:0e:c3:f6:c5:83:09:d5: 9f:c4:97:05:bb:5e:c8:c6:a0:9d:bc:1a:2d:73:ec: 31:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:F7:0E:71:F1:97:84:7C:3C:58:38:AD:DB:8D:27:AB:F9:64:F6:B6 X509v3 Authority Key Identifier: keyid:B9:FC:5C:14:B2:D2:75:29:D5:0E:6E:59:3D:A8:CB:0A:A8:7D:65:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F587/C1BA1A22136E11F1AD791BA3313D8C67/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F587/C1BA1A22136E11F1AD791BA3313D8C67/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:62:29:e9:f5:13:3f:ee:f4:49:94:42:6d:79:71:bf:c1:f9: 30:7c:8b:52:b1:e5:c3:99:f5:fe:36:4e:d0:77:f9:aa:77:dd: 3a:30:5a:de:e6:65:60:74:20:55:8b:42:b0:83:f4:4d:b9:c7: bc:ca:f8:97:18:bd:75:25:db:c5:2d:d6:09:5a:4d:39:0b:10: 76:4d:ed:dd:fb:fd:f6:31:ee:b0:2c:41:14:06:a0:2d:05:1f: b2:50:2a:d2:89:3e:f5:08:b2:84:3f:1a:c1:90:9a:4d:e8:2e: 6a:9d:c1:53:ee:67:ca:10:48:53:b4:c1:6d:b0:27:9f:0e:fa: 39:84:bb:4c:03:a9:0d:c8:b3:57:43:27:a5:6d:ba:b4:87:49: 94:6e:58:ad:df:9e:1c:6b:38:fb:7d:94:cb:5f:16:50:24:31: 58:cd:66:94:dc:6b:a2:01:2c:fb:00:55:12:41:8f:03:95:9c: bd:6f:1f:99:88:c6:a8:e1:4e:4f:d4:86:93:1f:3b:9e:25:9b: 96:49:11:cf:e7:b4:ec:e1:26:4a:6f:2c:14:91:d4:f9:5e:80: 85:44:f9:1a:19:4f:26:41:1b:f4:1a:76:44:73:86:37:6c:b3: 9d:56:07:c2:ee:3d:72:aa:b3:8f:ac:30:59:88:b7:3c:4d:90: 88:9c:87:2e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RjU4NzExMC8GA1UEBRMoQjlGQzVDMTRCMkQyNzUyOUQ1MEU2RTU5M0RBOENCMEFB ODdENjUxMDAeFw0yNjA0MTcwODM3NDBaFw0yNjA0MjQwODM3NDBaMBgxFjAUBgNV BAMTDTY5ZTFmMTU0LTFkMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjXulv361cC5DGfNDvPkNjCX2ti/FX418jAFdZhSwNeFvI3WI/pOaNqjz3RojP ActhYlBEsO78yAu0b3pft0Y3tct4qty02qCpX+IVLxNQ4FsC8PZhoduFLRaO+ZDf jA7gllzzF23kA1XsbNmx21SXmF2As9ZoAcZvLOguRNBCzpV9K9pWSupvTH2lUcRM wgLbKwu3IAbBuqhymT2hhjUcsNkdakLsNPoE+MGcQmmDkQvYZFk3kW3YU3IPqZMP lMvNHh4MoAAopAVchuiGGhrPW+Rp8ClrIybLZV8CPtThr4wNSBrOHdfDDsP2xYMJ 1Z/ElwW7XsjGoJ28Gi1z7DGZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUrvcOcfGX hHw8WDit240nq/lk9rYwHwYDVR0jBBgwFoAUufxcFLLSdSnVDm5ZPajLCqh9ZRAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFGNTg3L0MxQkExQTIyMTM2 RTExRjFBRDc5MUJBMzMxM0Q4QzY3L3VmeGNGTExTZFNuVkRtNVpQYWpMQ3FoOVpS QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdWZ4Y0ZMTFNkU25WRG01WlBhakxDcWg5WlJBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFG NTg3L0MxQkExQTIyMTM2RTExRjFBRDc5MUJBMzMxM0Q4QzY3L3VmeGNGTExTZFNu VkRtNVpQYWpMQ3FoOVpSQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBqYinp9RM/7vRJlEJteXG/wfkwfItSseXDmfX+Nk7Qd/mqd906MFre5mVgdCBV i0Kwg/RNuce8yviXGL11JdvFLdYJWk05CxB2Te3d+/32Me6wLEEUBqAtBR+yUCrS iT71CLKEPxrBkJpN6C5qncFT7mfKEEhTtMFtsCefDvo5hLtMA6kNyLNXQyelbbq0 h0mUblit354cazj7fZTLXxZQJDFYzWaU3GuiASz7AFUSQY8DlZy9bx+ZiMao4U5P 1IaTHzueJZuWSRHP57Ts4SZKbywUkdT5XoCFRPkaGU8mQRv0GnZEc4Y3bLOdVgfC 7j1yqrOPrDBZiLc8TZCInIcu -----END CERTIFICATE-----Generated at Sun Apr 19 02:20:22 2026 by rpki-client