$ rpki-client -vvf rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.mft File: ufrcQefh-XVse8mz3jlyy_bPYLU.mft (raw, json) Hash identifier: ZZbOyRclKV/qzvx1wrzcGHOwRo9lp04SPR0jZole07o= Subject key identifier: B0:59:E4:14:F0:14:51:8E:59:9E:C7:11:1F:18:2B:A1:74:9E:90:99 Authority key identifier: B9:FA:DC:41:E7:E1:F9:75:6C:7B:C9:B3:DE:39:72:CB:F6:CF:60:B5 Certificate issuer: /CN=A9140562/serialNumber=B9FADC41E7E1F9756C7BC9B3DE3972CBF6CF60B5 Certificate serial: DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufrcQefh-XVse8mz3jlyy_bPYLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.mft Manifest number: D8 Signing time: Sun 05 Apr 2026 06:04:53 +0000 Manifest this update: Sun 05 Apr 2026 06:04:53 +0000 Manifest next update: Sun 12 Apr 2026 06:04:53 +0000 Files and hashes: 1: ufrcQefh-XVse8mz3jlyy_bPYLU.crl (hash: tszy+xiZP6u9gMl7FK+yYFyAhoD3zj+UGHY7r3jxRyE=) 2: 5FCE01D8EDFA11EF8193933AC4F9AE02.roa (hash: VVrV7jvsQ36nCZSxe/dX4uftVXST3hoj5p0k5ak5K3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.crl rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufrcQefh-XVse8mz3jlyy_bPYLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 06:04:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140562, serialNumber=B9FADC41E7E1F9756C7BC9B3DE3972CBF6CF60B5 Validity Not Before: Apr 5 06:04:53 2026 GMT Not After : Apr 12 06:04:53 2026 GMT Subject: CN=69d1fb85-cdef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:fa:a7:57:9e:49:48:0e:11:53:c2:53:c1:97: 8e:3a:c8:a2:1e:54:0f:76:84:ad:eb:a5:88:74:4c: 12:4c:6b:73:41:f9:69:f8:81:03:29:29:58:c3:81: 80:20:bd:24:6b:ac:56:4a:5e:12:a9:72:74:5d:d0: 34:b0:5d:d4:44:b7:83:d6:f5:f6:53:fd:d3:ec:da: de:69:63:d0:f5:0b:b8:c4:30:93:75:ee:38:48:53: 17:37:63:09:74:1f:b3:0d:50:2d:92:1c:e3:53:3a: 32:2c:4e:52:c4:d8:16:6b:1a:44:21:68:c2:63:d3: c1:68:b4:a8:e6:c9:03:6b:b7:b7:a3:c7:af:13:76: d5:db:a3:d8:c9:3d:b4:38:ce:95:3e:16:c7:89:19: 1c:d5:2a:45:08:fa:62:35:07:2b:ce:ee:fa:ca:be: 5b:ad:94:1c:45:bc:da:31:b3:b0:e6:3b:37:b0:1d: 78:21:4b:8c:94:0e:1d:f3:e7:2c:99:cf:28:71:89: f3:30:8c:39:2e:57:51:59:ce:04:c7:df:8f:66:fc: 00:92:aa:48:0f:47:35:74:ed:20:ac:84:56:09:51: 63:02:ef:d9:e4:62:1b:67:0d:f3:61:6f:de:ac:eb: 5f:5c:5d:56:0b:01:ce:34:18:52:33:c9:14:58:9e: 1d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:59:E4:14:F0:14:51:8E:59:9E:C7:11:1F:18:2B:A1:74:9E:90:99 X509v3 Authority Key Identifier: keyid:B9:FA:DC:41:E7:E1:F9:75:6C:7B:C9:B3:DE:39:72:CB:F6:CF:60:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufrcQefh-XVse8mz3jlyy_bPYLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:d0:79:81:65:ed:8e:12:fb:e7:6c:d7:8e:2a:33:08:f4:dd: e8:d0:fe:bc:1a:3b:38:c2:24:7e:55:39:c3:88:66:e2:2b:80: 85:64:4d:e8:ff:b1:c5:08:26:5a:6c:1b:34:59:c5:e0:97:53: 64:3b:aa:fc:ef:44:9b:6a:bc:46:84:00:84:d6:14:51:ca:6d: 0e:58:0e:b4:05:a7:85:e7:20:9a:7d:2f:91:c2:34:cb:cb:62: 5f:d1:5f:e3:0f:5c:0a:64:38:b9:65:ee:03:46:f1:f7:3e:dc: 13:0a:2a:55:e3:f6:d9:44:00:b8:2b:d8:fa:40:d3:d1:26:7c: 8f:d7:ba:1e:4b:ec:94:23:23:c6:bf:e2:33:72:68:e4:fb:41: 10:ef:a6:35:ef:ec:33:4d:10:2b:18:e6:77:c7:04:fa:f5:57: bf:28:9b:f5:70:55:36:9b:4d:c0:92:0f:39:ef:90:d6:46:76: d2:c2:2b:d1:33:0f:58:c4:89:7f:e6:a5:54:80:8a:49:d8:cf: 1c:53:21:dc:5b:35:ce:66:cc:d5:cd:12:5e:dd:45:c9:c3:06: f4:b3:65:7d:15:c1:ab:79:eb:65:4c:96:a9:df:7a:c3:55:98: b9:7e:8f:ce:ce:06:00:ed:67:27:fe:e7:24:6a:21:84:8e:bb: 62:66:87:6b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA1NjIxMTAvBgNVBAUTKEI5RkFEQzQxRTdFMUY5NzU2QzdCQzlCM0RFMzk3MkNC RjZDRjYwQjUwHhcNMjYwNDA1MDYwNDUzWhcNMjYwNDEyMDYwNDUzWjAYMRYwFAYD VQQDEw02OWQxZmI4NS1jZGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk/qnV55JSA4RU8JTwZeOOsiiHlQPdoSt66WIdEwSTGtzQflp+IEDKSlYw4GA IL0ka6xWSl4SqXJ0XdA0sF3URLeD1vX2U/3T7NreaWPQ9Qu4xDCTde44SFMXN2MJ dB+zDVAtkhzjUzoyLE5SxNgWaxpEIWjCY9PBaLSo5skDa7e3o8evE3bV26PYyT20 OM6VPhbHiRkc1SpFCPpiNQcrzu76yr5brZQcRbzaMbOw5js3sB14IUuMlA4d8+cs mc8ocYnzMIw5LldRWc4Ex9+PZvwAkqpID0c1dO0grIRWCVFjAu/Z5GIbZw3zYW/e rOtfXF1WCwHONBhSM8kUWJ4dTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLBZ5BTw FFGOWZ7HER8YK6F0npCZMB8GA1UdIwQYMBaAFLn63EHn4fl1bHvJs945csv2z2C1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDU2Mi82NkMzQzk3RUVE RjkxMUVGQTlDREE4MzhDNEY5QUUwMi91ZnJjUWVmaC1YVnNlOG16M2pseXlfYlBZ TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VmcmNRZWZoLVhWc2U4bXozamx5eV9iUFlMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDU2Mi82NkMzQzk3RUVERjkxMUVGQTlDREE4MzhDNEY5QUUwMi91ZnJjUWVmaC1Y VnNlOG16M2pseXlfYlBZTFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqtB5gWXtjhL752zXjiozCPTd6ND+vBo7OMIkflU5w4hm4iuAhWRN6P+xxQgm WmwbNFnF4JdTZDuq/O9Em2q8RoQAhNYUUcptDlgOtAWnhecgmn0vkcI0y8tiX9Ff 4w9cCmQ4uWXuA0bx9z7cEwoqVeP22UQAuCvY+kDT0SZ8j9e6HkvslCMjxr/iM3Jo 5PtBEO+mNe/sM00QKxjmd8cE+vVXvyib9XBVNptNwJIPOe+Q1kZ20sIr0TMPWMSJ f+alVICKSdjPHFMh3Fs1zmbM1c0SXt1FycMG9LNlfRXBq3nrZUyWqd96w1WYuX6P zs4GAO1nJ/7nJGohhI67YmaHaw== -----END CERTIFICATE-----Generated at Mon Apr 6 09:54:41 2026 by rpki-client