$ rpki-client -vvf rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.mft File: U-OPHbJadp7S9ONa2_fqxILGEaU.mft (raw, json) Hash identifier: WXdsmvxGzeBhZPnUJI2OIH8XIum2MrYEGL59HZBaMSI= Subject key identifier: C8:3A:24:A5:5C:BD:B9:AC:F1:23:FF:6B:C4:CE:CA:12:6E:46:2D:EE Authority key identifier: 53:E3:8F:1D:B2:5A:76:9E:D2:F4:E3:5A:DB:F7:EA:C4:82:C6:11:A5 Certificate issuer: /CN=A91449DF/serialNumber=53E38F1DB25A769ED2F4E35ADBF7EAC482C611A5 Certificate serial: 0882 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-OPHbJadp7S9ONa2_fqxILGEaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.mft Manifest number: 0872 Signing time: Sat 04 Apr 2026 20:30:18 +0000 Manifest this update: Sat 04 Apr 2026 20:30:17 +0000 Manifest next update: Sat 11 Apr 2026 20:30:17 +0000 Files and hashes: 1: U-OPHbJadp7S9ONa2_fqxILGEaU.crl (hash: csEHdWV+a/MqW9TtyZSbrjBpR2HuMOU1/aQovSUDbac=) 2: E5ADB5CAF73A11EAB074A016C4F9AE02.roa (hash: /eR4DcEKcHPeMGGpYmYmwEr8sLx2OGFp1l1XKPCo91M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.crl rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-OPHbJadp7S9ONa2_fqxILGEaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 20:30:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2178 (0x882) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91449DF, serialNumber=53E38F1DB25A769ED2F4E35ADBF7EAC482C611A5 Validity Not Before: Apr 4 20:30:17 2026 GMT Not After : Apr 11 20:30:17 2026 GMT Subject: CN=69d174da-1ad7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1a:12:89:b2:59:72:59:ca:33:8d:ce:da:ac: 39:10:20:24:30:55:0f:bb:a6:1f:ae:8e:79:c0:dc: 33:e9:43:49:e4:de:53:b6:94:00:6b:65:c7:cb:0f: 82:a8:7a:bd:d9:4f:68:00:75:50:9f:70:11:90:e9: 4b:1e:a8:df:c0:c7:9c:ef:77:4d:59:49:ef:77:2d: 2c:b0:0c:39:34:10:a9:01:18:bc:14:fe:99:0b:50: 16:5e:ce:51:04:e0:00:12:b6:42:eb:68:d2:a6:42: ea:b8:47:87:50:bf:3c:30:08:8b:51:99:48:f1:8b: 58:2c:29:0e:c9:95:19:c4:7e:1a:7c:c9:d3:22:8f: 67:12:75:3a:18:3b:88:b4:10:f5:01:50:63:74:7f: 7f:0b:a9:fa:ed:b3:22:75:28:6e:5f:b7:9a:4a:ee: 32:71:9b:45:c4:fa:8a:e3:12:c5:e0:7e:ca:19:5c: 59:c9:d1:00:3f:e4:7e:af:c6:02:ab:db:dc:11:d5: a8:b0:df:fb:46:2b:a4:89:e2:88:8d:41:75:c3:3b: 26:e0:d0:53:b2:f8:a8:d3:93:9f:61:3d:31:fd:51: aa:d2:35:8b:0f:ad:7f:0d:4a:dd:bc:40:60:71:6d: 4a:03:3e:00:1a:02:08:0b:ef:80:f3:04:16:2f:5e: 90:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:3A:24:A5:5C:BD:B9:AC:F1:23:FF:6B:C4:CE:CA:12:6E:46:2D:EE X509v3 Authority Key Identifier: keyid:53:E3:8F:1D:B2:5A:76:9E:D2:F4:E3:5A:DB:F7:EA:C4:82:C6:11:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-OPHbJadp7S9ONa2_fqxILGEaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91449DF/04B7CF74F73A11EA815A1316C4F9AE02/U-OPHbJadp7S9ONa2_fqxILGEaU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:76:c4:56:a9:90:68:25:0a:d4:98:a6:bb:32:86:bb:25:6e: 96:50:ee:e9:e8:80:5f:39:0d:78:d5:5e:c3:d0:d2:a7:e1:30: bd:70:4d:62:db:03:6b:c1:0e:f7:94:fe:37:ae:e9:1d:fa:5e: d1:cf:50:61:af:af:8a:fb:07:73:09:7a:d6:73:51:50:22:92: 9f:55:50:01:d6:08:ae:83:a2:85:a7:0b:c9:17:1e:dc:4e:62: bd:fa:88:45:ad:25:64:a8:1e:2b:9a:3a:b6:4a:02:0e:21:42: 74:46:00:d9:c4:ab:b0:58:e9:f2:8c:9e:96:20:65:41:d3:ea: 3b:7e:d0:b0:c6:1f:f2:db:2b:06:0c:e3:39:d2:98:95:8c:7f: 7e:cc:48:a5:44:17:d5:b0:ab:10:ec:32:da:85:d3:be:53:d5: 3c:36:ca:d3:39:54:c7:44:99:c3:ee:88:ef:8c:1a:1a:f8:72: 49:34:4d:c7:f5:de:50:50:5f:13:97:a2:09:58:f1:a2:d8:d7: 5f:e0:79:78:76:ec:2b:f8:78:6d:ef:ae:9c:9a:6e:25:56:8c: cd:00:c6:fd:d0:3e:53:10:0f:5f:b8:7e:ef:e8:84:dc:67:44: d2:b7:d1:36:ed:81:a1:c4:2a:30:cc:1b:9d:5c:f6:71:6f:8f: 60:44:2a:0f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ5REYxMTAvBgNVBAUTKDUzRTM4RjFEQjI1QTc2OUVEMkY0RTM1QURCRjdFQUM0 ODJDNjExQTUwHhcNMjYwNDA0MjAzMDE3WhcNMjYwNDExMjAzMDE3WjAYMRYwFAYD VQQDEw02OWQxNzRkYS0xYWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlhoSibJZclnKM43O2qw5ECAkMFUPu6Yfro55wNwz6UNJ5N5TtpQAa2XHyw+C qHq92U9oAHVQn3ARkOlLHqjfwMec73dNWUnvdy0ssAw5NBCpARi8FP6ZC1AWXs5R BOAAErZC62jSpkLquEeHUL88MAiLUZlI8YtYLCkOyZUZxH4afMnTIo9nEnU6GDuI tBD1AVBjdH9/C6n67bMidShuX7eaSu4ycZtFxPqK4xLF4H7KGVxZydEAP+R+r8YC q9vcEdWosN/7RiukieKIjUF1wzsm4NBTsvio05OfYT0x/VGq0jWLD61/DUrdvEBg cW1KAz4AGgIIC++A8wQWL16QtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMg6JKVc vbms8SP/a8TOyhJuRi3uMB8GA1UdIwQYMBaAFFPjjx2yWnae0vTjWtv36sSCxhGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDlERi8wNEI3Q0Y3NEY3 M0ExMUVBODE1QTEzMTZDNEY5QUUwMi9VLU9QSGJKYWRwN1M5T05hMl9mcXhJTEdF YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1UtT1BIYkphZHA3UzlPTmEyX2ZxeElMR0VhVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDlERi8wNEI3Q0Y3NEY3M0ExMUVBODE1QTEzMTZDNEY5QUUwMi9VLU9QSGJKYWRw N1M5T05hMl9mcXhJTEdFYVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADHbEVqmQaCUK1JimuzKGuyVullDu6eiAXzkNeNVew9DSp+EwvXBNYtsDa8EO 95T+N67pHfpe0c9QYa+vivsHcwl61nNRUCKSn1VQAdYIroOihacLyRce3E5ivfqI Ra0lZKgeK5o6tkoCDiFCdEYA2cSrsFjp8oyeliBlQdPqO37QsMYf8tsrBgzjOdKY lYx/fsxIpUQX1bCrEOwy2oXTvlPVPDbK0zlUx0SZw+6I74waGvhySTRNx/XeUFBf E5eiCVjxotjXX+B5eHbsK/h4be+unJpuJVaMzQDG/dA+UxAPX7h+7+iE3GdE0rfR Nu2BocQqMMwbnVz2cW+PYEQqDw== -----END CERTIFICATE-----Generated at Mon Apr 6 09:54:35 2026 by rpki-client