$ rpki-client -vvf rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft File: uHa2DaKzyctmxyu5_Kc77ssR_dE.mft (raw, json) Hash identifier: TonQNRTZBT5KptGvepkGigGb/ZwFxefahZ1fZ/51ro0= Subject key identifier: 32:F4:43:34:7D:29:F7:8E:01:D8:7B:96:1F:A5:4D:10:74:53:4F:F7 Authority key identifier: B8:76:B6:0D:A2:B3:C9:CB:66:C7:2B:B9:FC:A7:3B:EE:CB:11:FD:D1 Certificate issuer: /CN=A912611F/serialNumber=B876B60DA2B3C9CB66C72BB9FCA73BEECB11FDD1 Certificate serial: 1088 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHa2DaKzyctmxyu5_Kc77ssR_dE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft Manifest number: 1A40 Signing time: Sat 04 Apr 2026 17:14:57 +0000 Manifest this update: Sat 04 Apr 2026 17:14:56 +0000 Manifest next update: Sat 11 Apr 2026 17:14:56 +0000 Files and hashes: 1: uHa2DaKzyctmxyu5_Kc77ssR_dE.crl (hash: am3XMb9CQLZe7DDwhUBxlglZM0vHjf6bkrCs/DJx02Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.crl rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHa2DaKzyctmxyu5_Kc77ssR_dE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:14:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4232 (0x1088) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912611F, serialNumber=B876B60DA2B3C9CB66C72BB9FCA73BEECB11FDD1 Validity Not Before: Apr 4 17:14:56 2026 GMT Not After : Apr 11 17:14:56 2026 GMT Subject: CN=69d14711-124e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2f:05:2f:96:a1:a7:e1:db:fc:74:82:64:c1: ca:60:ee:29:7b:e2:4b:58:72:13:ab:70:b4:b5:7e: 89:47:62:0e:b1:af:0d:92:a1:b6:a5:ad:42:79:49: ac:f7:05:45:06:f8:d5:52:42:08:48:b1:6c:a0:a0: 97:81:13:60:a6:2a:49:67:85:67:4c:4d:73:33:df: 75:60:e8:8a:6b:29:7f:da:13:3d:8f:03:13:b4:6e: 5f:4f:16:3b:0f:f8:c2:df:fb:04:bc:68:bd:35:de: d3:59:d4:45:bf:d8:31:58:a3:b8:d3:ca:b2:b5:87: bc:ea:93:ff:c5:3e:7d:bc:93:e8:00:4f:30:4a:ff: 6e:02:00:9b:7f:fa:da:97:ff:3d:c4:16:f2:a9:1c: 6a:b5:52:57:c9:64:83:82:3c:f8:f3:58:e1:7a:1d: 1f:75:d2:8f:c2:3d:be:d4:b6:51:07:29:28:99:6b: 14:6f:01:0b:c0:66:a6:f4:c2:42:69:23:e6:90:6b: 84:be:5b:eb:2b:f8:48:b2:5b:f4:8f:da:0b:3d:4e: 28:c4:78:08:40:47:a1:f9:ab:02:a2:76:5b:4f:44: 71:e9:28:41:11:ff:cf:73:f5:61:14:b0:c4:4f:ee: e8:66:ad:c7:3d:67:03:84:dc:88:a3:3a:10:f6:6d: 08:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F4:43:34:7D:29:F7:8E:01:D8:7B:96:1F:A5:4D:10:74:53:4F:F7 X509v3 Authority Key Identifier: keyid:B8:76:B6:0D:A2:B3:C9:CB:66:C7:2B:B9:FC:A7:3B:EE:CB:11:FD:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHa2DaKzyctmxyu5_Kc77ssR_dE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:92:a7:bb:a2:7c:55:25:3f:84:b3:47:38:98:33:69:be:e5: 39:63:0f:12:de:0f:68:b2:6f:e3:dd:71:4c:89:f0:9f:89:8c: 2e:df:f0:57:a3:c5:91:eb:63:cc:37:8d:d3:8e:40:92:dd:f5: 1a:56:88:55:b7:e3:ae:f7:75:15:37:68:a9:78:39:db:08:60: fa:27:e0:8f:c7:f5:4d:f6:69:f7:f2:0c:3f:7e:2c:12:7b:43: 23:27:d5:53:1c:9a:a3:3a:f8:3c:f1:4e:96:f9:7c:6c:40:3a: da:3b:1f:a9:94:57:07:d7:06:69:f5:fe:6a:a1:97:26:64:a0: c1:eb:8b:36:5b:6e:e7:d0:fb:bd:30:b6:d1:3d:bc:71:a0:64: 83:9c:ed:ba:97:0f:1c:95:cf:4f:be:f0:54:c4:7f:93:05:a1: fd:e0:79:c3:02:64:b3:b4:a3:0d:ca:76:17:84:4c:ba:63:67: 07:75:91:a4:76:e7:5c:0a:8a:24:ab:93:f9:e3:f3:33:18:2c: 07:fd:22:25:90:f6:40:28:2f:64:2a:64:80:6b:1b:e7:c3:84: bb:fb:2f:bf:34:b5:29:19:39:51:03:2b:f8:72:59:99:f8:08: 98:db:99:22:98:bf:44:b9:76:b1:60:e9:b9:64:65:a1:2d:5e: f3:20:e8:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYxMUYxMTAvBgNVBAUTKEI4NzZCNjBEQTJCM0M5Q0I2NkM3MkJCOUZDQTczQkVF Q0IxMUZERDEwHhcNMjYwNDA0MTcxNDU2WhcNMjYwNDExMTcxNDU2WjAYMRYwFAYD VQQDEw02OWQxNDcxMS0xMjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxy8FL5ahp+Hb/HSCZMHKYO4pe+JLWHITq3C0tX6JR2IOsa8NkqG2pa1CeUms 9wVFBvjVUkIISLFsoKCXgRNgpipJZ4VnTE1zM991YOiKayl/2hM9jwMTtG5fTxY7 D/jC3/sEvGi9Nd7TWdRFv9gxWKO408qytYe86pP/xT59vJPoAE8wSv9uAgCbf/ra l/89xBbyqRxqtVJXyWSDgjz481jheh0fddKPwj2+1LZRBykomWsUbwELwGam9MJC aSPmkGuEvlvrK/hIslv0j9oLPU4oxHgIQEeh+asConZbT0Rx6ShBEf/Pc/VhFLDE T+7oZq3HPWcDhNyIozoQ9m0IuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDL0QzR9 KfeOAdh7lh+lTRB0U0/3MB8GA1UdIwQYMBaAFLh2tg2is8nLZscrufynO+7LEf3R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjExRi80QThCMDRFQTRD N0MxMUU5ODFBNDM5NjlDNEY5QUUwMi91SGEyRGFLenljdG14eXU1X0tjNzdzc1Jf ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VIYTJEYUt6eWN0bXh5dTVfS2M3N3NzUl9kRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjExRi80QThCMDRFQTRDN0MxMUU5ODFBNDM5NjlDNEY5QUUwMi91SGEyRGFLenlj dG14eXU1X0tjNzdzc1JfZEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZJKnu6J8VSU/hLNHOJgzab7lOWMPEt4PaLJv491xTInwn4mMLt/wV6PFketj zDeN045Akt31GlaIVbfjrvd1FTdoqXg52whg+ifgj8f1TfZp9/IMP34sEntDIyfV Uxyaozr4PPFOlvl8bEA62jsfqZRXB9cGafX+aqGXJmSgweuLNltu59D7vTC20T28 caBkg5ztupcPHJXPT77wVMR/kwWh/eB5wwJks7SjDcp2F4RMumNnB3WRpHbnXAqK JKuT+ePzMxgsB/0iJZD2QCgvZCpkgGsb58OEu/svvzS1KRk5UQMr+HJZmfgImNuZ Ipi/RLl2sWDpuWRloS1e8yDoog== -----END CERTIFICATE-----Generated at Mon Apr 6 08:32:03 2026 by rpki-client