$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft File: UmRCqpPf8MUTmmF7DeZFtznmvs0.mft (raw, json) Hash identifier: hupnqCkSIgTQlsMN5bZar7Ne1rgjLgjbLCTx1RWIaC0= Subject key identifier: 03:62:24:73:AF:A6:BC:63:44:7C:C9:8A:DA:6C:8C:7B:E2:9B:28:BB Authority key identifier: 52:64:42:AA:93:DF:F0:C5:13:9A:61:7B:0D:E6:45:B7:39:E6:BE:CD Certificate issuer: /CN=A9140D7D/serialNumber=526442AA93DFF0C5139A617B0DE645B739E6BECD Certificate serial: 0A99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft Manifest number: 0A8D Signing time: Sun 26 Apr 2026 19:28:02 +0000 Manifest this update: Sun 26 Apr 2026 19:28:01 +0000 Manifest next update: Sun 03 May 2026 19:28:01 +0000 Files and hashes: 1: UmRCqpPf8MUTmmF7DeZFtznmvs0.crl (hash: hRH3fZM1apoA0JRiml3JiIsAg24xbdS7Rx59UCufaJI=) 2: 1C9AB3F67D6711EA90858415C4F9AE02.roa (hash: 3EUvPkX0SOOlZadKwQdE/Ttb0l8oKRF3mN8x9otpD/E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.crl rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 19:28:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2713 (0xa99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140D7D, serialNumber=526442AA93DFF0C5139A617B0DE645B739E6BECD Validity Not Before: Apr 26 19:28:01 2026 GMT Not After : May 3 19:28:01 2026 GMT Subject: CN=69ee6742-27b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2c:ae:44:bb:f4:fb:af:2d:85:83:a9:ce:81: ec:fd:e4:23:e4:27:5a:05:cf:67:6a:4e:75:83:2a: d0:fd:39:b0:e8:6a:f2:31:c1:2c:b7:cc:1a:5b:a5: b1:e2:e8:c8:51:c0:03:34:a6:9d:e8:9a:ba:a6:cc: 12:25:b9:be:0a:54:38:f7:a7:a4:f5:68:b9:af:a1: 98:6a:41:85:73:a9:8d:79:81:56:54:8a:b4:29:fd: 3c:89:7b:b1:e9:38:91:b9:ed:77:ac:58:0d:e4:42: ab:21:f3:31:5a:ec:66:73:bb:d8:84:e1:45:91:0e: ec:87:20:46:49:c8:03:94:92:7a:7a:a8:bd:a2:4a: 54:d9:d6:6a:a4:6e:d0:c8:44:69:3d:0c:06:0f:46: 03:08:86:d1:f1:88:68:2b:b1:ae:75:17:7b:4e:42: 1f:6e:7f:86:0d:97:b7:4c:76:4f:35:a4:4d:fb:bd: 6c:59:5b:f9:2f:f5:fb:e2:a4:fd:a9:c8:14:01:b2: 06:dc:cc:a0:76:6d:b5:a3:bc:df:fa:37:05:df:ec: 9f:eb:8d:94:18:bc:13:ce:36:ef:24:91:13:e5:40: bf:10:3d:f0:09:c7:24:d7:c8:f9:4e:07:48:7e:81: 94:c3:a5:ce:f6:2c:29:07:cb:d8:ed:4e:d4:2e:39: d5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:62:24:73:AF:A6:BC:63:44:7C:C9:8A:DA:6C:8C:7B:E2:9B:28:BB X509v3 Authority Key Identifier: keyid:52:64:42:AA:93:DF:F0:C5:13:9A:61:7B:0D:E6:45:B7:39:E6:BE:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UmRCqpPf8MUTmmF7DeZFtznmvs0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D7D/716D2F367D6611EAB32B3B15C4F9AE02/UmRCqpPf8MUTmmF7DeZFtznmvs0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:db:3b:1e:17:d3:63:dd:f4:41:4a:bb:ba:2c:65:17:a1:95: 2d:c2:da:f3:88:4b:86:31:93:d0:c6:5a:e2:fe:1c:10:88:a3: 74:3b:3a:b6:c5:ea:cc:35:69:83:2b:17:cf:52:1b:18:76:54: a7:1e:06:e9:5a:b5:20:a6:75:86:33:64:eb:c6:b7:b1:1a:e4: 10:56:1a:7d:18:59:ab:fb:8b:4c:c2:da:31:7e:f4:a3:f4:ef: e9:9d:27:3d:bc:30:20:05:39:18:bb:aa:a1:20:65:3a:50:65: e8:64:27:3a:dc:c0:7a:9e:90:59:bb:88:f3:17:91:a1:32:6d: 42:6b:38:53:ad:43:c4:c2:1d:cd:07:6c:72:37:6d:cd:3e:e1: 22:58:4c:34:17:c7:72:a8:81:cf:f0:84:f2:cc:7a:0f:44:0f: c4:3b:ea:80:7b:0c:09:c7:ba:d9:07:b5:c7:bb:f8:4e:37:61: 6a:e7:dd:ce:af:e4:8e:b1:51:59:28:c8:fd:88:a1:72:83:b3: 19:e8:04:66:15:77:ff:00:96:b4:03:eb:63:37:ca:80:76:32: 0e:eb:4b:9b:54:5c:67:f0:e7:ba:28:ed:a9:07:e2:13:2e:e0: 8c:bc:17:97:74:97:b5:3d:44:30:81:19:29:8e:99:1b:87:5b: f5:8a:da:74 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCpkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBEN0QxMTAvBgNVBAUTKDUyNjQ0MkFBOTNERkYwQzUxMzlBNjE3QjBERTY0NUI3 MzlFNkJFQ0QwHhcNMjYwNDI2MTkyODAxWhcNMjYwNTAzMTkyODAxWjAYMRYwFAYD VQQDEw02OWVlNjc0Mi0yN2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzCyuRLv0+68thYOpzoHs/eQj5CdaBc9nak51gyrQ/Tmw6GryMcEst8waW6Wx 4ujIUcADNKad6Jq6pswSJbm+ClQ496ek9Wi5r6GYakGFc6mNeYFWVIq0Kf08iXux 6TiRue13rFgN5EKrIfMxWuxmc7vYhOFFkQ7shyBGScgDlJJ6eqi9okpU2dZqpG7Q yERpPQwGD0YDCIbR8YhoK7GudRd7TkIfbn+GDZe3THZPNaRN+71sWVv5L/X74qT9 qcgUAbIG3Mygdm21o7zf+jcF3+yf642UGLwTzjbvJJET5UC/ED3wCcck18j5TgdI foGUw6XO9iwpB8vY7U7ULjnVrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFANiJHOv prxjRHzJitpsjHvimyi7MB8GA1UdIwQYMBaAFFJkQqqT3/DFE5phew3mRbc55r7N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEQ3RC83MTZEMkYzNjdE NjYxMUVBQjMyQjNCMTVDNEY5QUUwMi9VbVJDcXBQZjhNVVRtbUY3RGVaRnR6bm12 czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VtUkNxcFBmOE1VVG1tRjdEZVpGdHpubXZzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEQ3RC83MTZEMkYzNjdENjYxMUVBQjMyQjNCMTVDNEY5QUUwMi9VbVJDcXBQZjhN VVRtbUY3RGVaRnR6bm12czAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoNs7HhfTY930QUq7uixlF6GVLcLa84hLhjGT0MZa4v4cEIijdDs6tsXqzDVp gysXz1IbGHZUpx4G6Vq1IKZ1hjNk68a3sRrkEFYafRhZq/uLTMLaMX70o/Tv6Z0n PbwwIAU5GLuqoSBlOlBl6GQnOtzAep6QWbuI8xeRoTJtQms4U61DxMIdzQdscjdt zT7hIlhMNBfHcqiBz/CE8sx6D0QPxDvqgHsMCce62Qe1x7v4Tjdhaufdzq/kjrFR WSjI/YihcoOzGegEZhV3/wCWtAPrYzfKgHYyDutLm1RcZ/DnuijtqQfiEy7gjLwX l3SXtT1EMIEZKY6ZG4db9YradA== -----END CERTIFICATE-----Generated at Tue Apr 28 17:27:40 2026 by rpki-client