$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft File: UylwC03drZ4_zcMnP00Y0-MEXcA.mft (raw, json) Hash identifier: rBp/U0EnFGd0Tu2l637DVybRmW7GeJt2CKIIF8h7b48= Subject key identifier: 96:0C:8C:04:08:22:14:61:FF:4B:C0:84:F8:62:CC:6F:36:D0:63:80 Authority key identifier: 53:29:70:0B:4D:DD:AD:9E:3F:CD:C3:27:3F:4D:18:D3:E3:04:5D:C0 Certificate issuer: /CN=A9143B09/serialNumber=5329700B4DDDAD9E3FCDC3273F4D18D3E3045DC0 Certificate serial: 0972 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft Manifest number: 1A5F Signing time: Sat 04 Apr 2026 17:09:09 +0000 Manifest this update: Sat 04 Apr 2026 17:09:09 +0000 Manifest next update: Sat 11 Apr 2026 17:09:09 +0000 Files and hashes: 1: UylwC03drZ4_zcMnP00Y0-MEXcA.crl (hash: OPOUcpYY6m0/UDZT+/x8S9FfQ2qX9NbqxkDeqbaKwAw=) 2: D9B56C8A7AB211EB99DAFE83C4F9AE02.roa (hash: HTJDCglPoFk22fksfhTkeiZZB0j/VQ2aH60i8wPK/kc=) 3: 31414558B0D511EFB17B942FC4F9AE02.roa (hash: ROykPYM/LeczZs6fuaskuBijSjnFp8A1FgiccxUhw58=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.crl rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:09:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2418 (0x972) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143B09, serialNumber=5329700B4DDDAD9E3FCDC3273F4D18D3E3045DC0 Validity Not Before: Apr 4 17:09:09 2026 GMT Not After : Apr 11 17:09:09 2026 GMT Subject: CN=69d145b5-343b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:62:ec:b9:1c:04:a7:be:8b:27:61:d8:4e:61: 0a:d6:9d:ef:46:75:72:57:a4:c2:7f:46:a6:cf:84: 8f:71:d1:d8:ea:e3:ac:a5:c3:8c:13:fc:26:41:75: 04:f7:00:c1:18:7a:e2:b1:a4:28:c9:8e:a7:22:96: d2:65:b9:e7:92:34:86:b8:44:45:70:a0:97:bb:0a: 44:74:6f:53:02:78:09:a7:54:12:84:5d:f9:cd:b5: e0:19:56:94:fc:d4:86:e1:da:18:c3:85:11:fe:e5: a1:20:a6:ae:5f:ed:e5:4e:f4:fd:86:7f:b3:c8:c6: 3e:ef:37:26:59:12:f6:4e:09:62:1a:02:a3:83:d1: 47:47:b6:41:c8:82:dd:71:55:88:27:aa:a3:95:e3: 82:2a:2d:8b:bd:f1:10:07:ec:2b:40:6a:00:f3:61: 3d:27:61:b4:5b:20:33:01:7b:38:29:09:66:c2:b7: ea:cf:e1:54:85:99:cf:55:f6:4f:9b:cd:2f:03:03: 89:de:7c:ca:c8:43:20:36:05:43:98:4e:54:1c:66: 41:80:c7:46:63:74:fe:fb:72:dd:7a:a2:5a:18:f9: 1e:09:f3:a7:2f:7c:14:03:62:c2:f3:00:29:c5:24: b9:9f:a4:31:44:49:93:4f:01:86:95:81:01:bb:c5: 31:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:0C:8C:04:08:22:14:61:FF:4B:C0:84:F8:62:CC:6F:36:D0:63:80 X509v3 Authority Key Identifier: keyid:53:29:70:0B:4D:DD:AD:9E:3F:CD:C3:27:3F:4D:18:D3:E3:04:5D:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:d6:b0:d6:72:d3:8d:0c:a3:6f:b5:3d:8b:fe:3b:94:00:14: 50:63:f9:a1:35:6d:31:22:be:42:34:93:83:8d:96:bb:1b:92: d2:73:f4:ec:cc:3e:b9:e9:00:32:b4:67:8b:11:50:90:54:9e: 6d:a5:37:ed:c5:41:0d:19:4c:6d:6a:6f:2d:ea:07:ea:a6:b0: 5e:fb:ae:29:1c:4f:14:d5:b9:26:69:31:3a:cf:ce:5e:f7:02: 98:96:7a:57:c8:a3:aa:12:4b:a9:ea:5d:ae:06:ce:f9:24:d2: e4:fd:51:9e:7d:f1:0c:42:b5:37:28:74:0e:60:04:d9:ce:64: 47:0f:38:74:e0:b5:cc:6c:de:3e:2f:25:82:7c:47:24:57:b6: 71:82:6f:93:9a:f8:21:34:d7:e9:39:d4:d3:b1:9c:60:f8:10: a3:ab:bc:aa:0c:1e:f5:84:d6:8b:d8:fb:4b:9b:32:7d:d7:b7: 25:02:04:c6:96:e5:6a:cc:77:25:3b:c4:f1:42:b5:24:d3:b3: 28:a7:ae:72:e9:6b:b8:d7:92:a7:ad:9c:c7:66:03:d5:62:42: 78:6a:ab:d9:8d:0e:73:41:da:4f:0f:85:32:f2:b8:b0:c4:b8: bf:7b:3f:10:d3:b3:ba:a2:a8:ea:0a:80:07:9d:4b:bd:a6:bc: 24:e7:c5:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNCMDkxMTAvBgNVBAUTKDUzMjk3MDBCNEREREFEOUUzRkNEQzMyNzNGNEQxOEQz RTMwNDVEQzAwHhcNMjYwNDA0MTcwOTA5WhcNMjYwNDExMTcwOTA5WjAYMRYwFAYD VQQDEw02OWQxNDViNS0zNDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzmLsuRwEp76LJ2HYTmEK1p3vRnVyV6TCf0amz4SPcdHY6uOspcOME/wmQXUE 9wDBGHrisaQoyY6nIpbSZbnnkjSGuERFcKCXuwpEdG9TAngJp1QShF35zbXgGVaU /NSG4doYw4UR/uWhIKauX+3lTvT9hn+zyMY+7zcmWRL2TgliGgKjg9FHR7ZByILd cVWIJ6qjleOCKi2LvfEQB+wrQGoA82E9J2G0WyAzAXs4KQlmwrfqz+FUhZnPVfZP m80vAwOJ3nzKyEMgNgVDmE5UHGZBgMdGY3T++3LdeqJaGPkeCfOnL3wUA2LC8wAp xSS5n6QxREmTTwGGlYEBu8UxbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJYMjAQI IhRh/0vAhPhizG820GOAMB8GA1UdIwQYMBaAFFMpcAtN3a2eP83DJz9NGNPjBF3A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0IwOS8zQjM2N0JDRTMz QjcxMUU5QUQwRjU4N0FDNEY5QUUwMi9VeWx3QzAzZHJaNF96Y01uUDAwWTAtTUVY Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V5bHdDMDNkclo0X3pjTW5QMDBZMC1NRVhjQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0IwOS8zQjM2N0JDRTMzQjcxMUU5QUQwRjU4N0FDNEY5QUUwMi9VeWx3QzAzZHJa NF96Y01uUDAwWTAtTUVYY0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJtaw1nLTjQyjb7U9i/47lAAUUGP5oTVtMSK+QjSTg42WuxuS0nP07Mw+uekA MrRnixFQkFSebaU37cVBDRlMbWpvLeoH6qawXvuuKRxPFNW5JmkxOs/OXvcCmJZ6 V8ijqhJLqepdrgbO+STS5P1Rnn3xDEK1Nyh0DmAE2c5kRw84dOC1zGzePi8lgnxH JFe2cYJvk5r4ITTX6TnU07GcYPgQo6u8qgwe9YTWi9j7S5syfde3JQIExpblasx3 JTvE8UK1JNOzKKeuculruNeSp62cx2YD1WJCeGqr2Y0Oc0HaTw+FMvK4sMS4v3s/ ENOzuqKo6gqAB51Lvaa8JOfFqw== -----END CERTIFICATE-----Generated at Mon Apr 6 10:09:44 2026 by rpki-client