$ rpki-client -vvf rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.mft File: UoaLCQH1W0B4uRpzRRym0iMSyKs.mft (raw, json) Hash identifier: llsUQMsoK669ynW0+XDmtNVmeDtaS0gf82Gy8TWbXzA= Subject key identifier: AB:55:3C:7C:5B:C7:06:78:52:0B:5C:BA:E5:5A:F9:31:76:5C:16:FE Authority key identifier: 52:86:8B:09:01:F5:5B:40:78:B9:1A:73:45:1C:A6:D2:23:12:C8:AB Certificate issuer: /CN=A913E2B3/serialNumber=52868B0901F55B4078B91A73451CA6D22312C8AB Certificate serial: 0CC1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoaLCQH1W0B4uRpzRRym0iMSyKs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.mft Manifest number: 0CAF Signing time: Thu 30 Apr 2026 18:33:56 +0000 Manifest this update: Thu 30 Apr 2026 18:33:55 +0000 Manifest next update: Thu 07 May 2026 18:33:55 +0000 Files and hashes: 1: UoaLCQH1W0B4uRpzRRym0iMSyKs.crl (hash: UU56LnYPfwrNdSrC0Zdea0Qs+50ZlSqB7LIILc5HYLE=) 2: 399AB6DA4ED511ED84336740C4F9AE02.roa (hash: 2gHhqtDJfKR0qJzs+P2axW63JoLu4G8a5q6M2TKtmYA=) 3: 3AB1E0D44ED511ED84336740C4F9AE02.roa (hash: 1xwZmu+W4i/TCA6GArfnAsx0Zkop8Nq8b1/wjpzQ/QY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.crl rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoaLCQH1W0B4uRpzRRym0iMSyKs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 May 2026 18:33:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3265 (0xcc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E2B3, serialNumber=52868B0901F55B4078B91A73451CA6D22312C8AB Validity Not Before: Apr 30 18:33:55 2026 GMT Not After : May 7 18:33:55 2026 GMT Subject: CN=69f3a094-8ad7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f1:ac:dd:02:3c:14:75:8f:1d:72:37:27:24: b4:74:cb:e8:d9:55:e6:04:f4:29:d0:71:44:8b:de: 88:90:29:8b:a9:1c:50:3b:16:31:63:c0:1c:ed:3b: 24:9f:0a:93:c1:30:74:74:20:dc:70:54:f2:1a:6c: 4c:ac:6d:13:1a:f3:f9:fd:73:6c:dd:45:75:36:8a: d5:b7:a5:fe:f3:e5:63:80:37:fd:b1:0d:6f:f9:78: 91:14:a4:ec:f2:83:2c:97:8a:f4:07:1e:5c:36:55: 86:ea:76:5f:41:bc:e1:e5:e2:90:53:00:bb:93:17: 1e:b2:c4:f0:f3:bc:d4:57:31:d2:77:bd:98:14:04: f0:ad:35:13:d9:78:53:1e:73:89:9c:2f:b0:5a:c8: 42:85:76:d7:75:65:7c:70:f5:99:11:e9:c3:64:d9: 4f:fa:1d:07:41:0e:f4:62:4b:77:b4:8f:8e:7b:c9: 3a:d7:49:ec:fe:50:6d:0e:1a:58:d2:ec:1e:ac:df: 61:e6:c1:b8:98:03:c2:4c:e4:d9:13:2d:36:d3:67: 73:12:97:69:05:59:03:70:47:b1:3b:a9:68:53:7e: 85:51:1c:f2:05:11:16:20:9a:96:ab:49:34:ae:28: 1a:0b:82:ab:d7:29:f4:ff:38:b5:a9:5a:6b:f6:ed: 33:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:55:3C:7C:5B:C7:06:78:52:0B:5C:BA:E5:5A:F9:31:76:5C:16:FE X509v3 Authority Key Identifier: keyid:52:86:8B:09:01:F5:5B:40:78:B9:1A:73:45:1C:A6:D2:23:12:C8:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoaLCQH1W0B4uRpzRRym0iMSyKs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:92:b5:e2:24:ee:27:7a:d3:30:12:23:cf:da:c3:83:1b:6d: 9e:f2:7a:db:26:e4:62:07:5b:6e:79:a5:a4:a7:93:21:00:98: 62:b2:1a:37:9d:c8:59:8d:42:1f:9f:ee:91:09:21:48:16:57: d3:c7:77:96:1d:f5:23:58:40:b0:60:d7:28:20:38:34:1d:65: 51:88:d8:cb:d5:ac:e6:69:b0:7e:7b:61:d9:f7:94:f7:12:3f: 04:ef:1a:44:cb:c3:4a:ef:e5:d9:c2:27:7e:c4:5d:f8:1a:57: 50:74:3f:b0:f9:dd:ea:9a:28:a6:e5:89:11:7c:10:1a:64:d4: 66:3d:34:c9:28:de:29:5c:3c:7e:a7:d1:70:32:aa:27:6d:9f: fb:5a:62:5f:23:6c:75:55:de:9c:7c:07:ee:76:01:85:b0:83: 50:b9:14:0c:83:eb:53:08:5e:8e:43:4e:8c:92:a9:cb:1e:8f: 51:b4:ff:4f:ec:da:66:8a:33:0b:73:2d:55:a6:0f:00:d9:bc: 95:e6:64:3c:d0:97:f1:c5:59:9a:1d:9b:aa:e5:11:7e:34:3b: f0:f8:a1:fb:6a:ab:14:30:b5:3d:62:a6:61:a0:c5:09:05:fb: 4b:2f:66:06:b2:e6:d8:c7:0d:e8:f7:95:5c:64:9c:a0:b6:e1: 58:de:e0:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UyQjMxMTAvBgNVBAUTKDUyODY4QjA5MDFGNTVCNDA3OEI5MUE3MzQ1MUNBNkQy MjMxMkM4QUIwHhcNMjYwNDMwMTgzMzU1WhcNMjYwNTA3MTgzMzU1WjAYMRYwFAYD VQQDEw02OWYzYTA5NC04YWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl/Gs3QI8FHWPHXI3JyS0dMvo2VXmBPQp0HFEi96IkCmLqRxQOxYxY8Ac7Tsk nwqTwTB0dCDccFTyGmxMrG0TGvP5/XNs3UV1NorVt6X+8+VjgDf9sQ1v+XiRFKTs 8oMsl4r0Bx5cNlWG6nZfQbzh5eKQUwC7kxcessTw87zUVzHSd72YFATwrTUT2XhT HnOJnC+wWshChXbXdWV8cPWZEenDZNlP+h0HQQ70Ykt3tI+Oe8k610ns/lBtDhpY 0uwerN9h5sG4mAPCTOTZEy0202dzEpdpBVkDcEexO6loU36FURzyBREWIJqWq0k0 rigaC4Kr1yn0/zi1qVpr9u0z7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKtVPHxb xwZ4UgtcuuVa+TF2XBb+MB8GA1UdIwQYMBaAFFKGiwkB9VtAeLkac0UcptIjEsir MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTJCMy8yMEU2N0REODEy RjQxMUVBODk0MjA0MzBDNEY5QUUwMi9Vb2FMQ1FIMVcwQjR1UnB6UlJ5bTBpTVN5 S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VvYUxDUUgxVzBCNHVScHpSUnltMGlNU3lLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTJCMy8yMEU2N0REODEyRjQxMUVBODk0MjA0MzBDNEY5QUUwMi9Vb2FMQ1FIMVcw QjR1UnB6UlJ5bTBpTVN5S3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgJK14iTuJ3rTMBIjz9rDgxttnvJ62ybkYgdbbnmlpKeTIQCYYrIaN53IWY1C H5/ukQkhSBZX08d3lh31I1hAsGDXKCA4NB1lUYjYy9Ws5mmwfnth2feU9xI/BO8a RMvDSu/l2cInfsRd+BpXUHQ/sPnd6poopuWJEXwQGmTUZj00ySjeKVw8fqfRcDKq J22f+1piXyNsdVXenHwH7nYBhbCDULkUDIPrUwhejkNOjJKpyx6PUbT/T+zaZooz C3MtVaYPANm8leZkPNCX8cVZmh2bquURfjQ78Pih+2qrFDC1PWKmYaDFCQX7Sy9m BrLm2McN6PeVXGScoLbhWN7gAA== -----END CERTIFICATE-----Generated at Sat May 2 20:15:32 2026 by rpki-client