$ rpki-client -vvf rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.mft File: Uy5wVMRxv_LtemoYjtNzY2XkYIo.mft (raw, json) Hash identifier: prvb5VRTxRlSqF2AFi9lqJg1yTlG35zUrMxrtcNnkMc= Subject key identifier: 57:D4:64:7D:34:11:BD:5D:89:7B:20:A4:28:DD:B3:F1:A2:2E:B9:64 Authority key identifier: 53:2E:70:54:C4:71:BF:F2:ED:7A:6A:18:8E:D3:73:63:65:E4:60:8A Certificate issuer: /CN=A9149ACD/serialNumber=532E7054C471BFF2ED7A6A188ED3736365E4608A Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uy5wVMRxv_LtemoYjtNzY2XkYIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.mft Manifest number: 75 Signing time: Sun 05 Apr 2026 07:11:04 +0000 Manifest this update: Sun 05 Apr 2026 07:11:04 +0000 Manifest next update: Sun 12 Apr 2026 07:11:04 +0000 Files and hashes: 1: Uy5wVMRxv_LtemoYjtNzY2XkYIo.crl (hash: fgS83dSg3SkODPMQc/lFxB9Skq+Ioq5iDkSNinZIKSg=) 2: 286C872684B011F08D2ED42CC4F9AE02.roa (hash: WVobOagpEAd84RigRT5lqEkEZLi28lRSUvzP7/VjaVk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.crl rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uy5wVMRxv_LtemoYjtNzY2XkYIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 07:11:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149ACD, serialNumber=532E7054C471BFF2ED7A6A188ED3736365E4608A Validity Not Before: Apr 5 07:11:04 2026 GMT Not After : Apr 12 07:11:04 2026 GMT Subject: CN=69d20b08-94a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ee:c4:21:f5:3f:5a:ec:71:22:51:c7:e8:16: fb:5c:6f:58:a5:66:67:07:ad:22:16:1b:79:cb:ed: b5:a6:4a:e7:ee:be:19:f0:31:30:c1:38:b8:55:33: c4:8f:7a:bb:e8:b9:c9:94:86:11:30:36:ad:d1:d2: 20:f1:69:1b:69:53:a4:7a:a3:b5:9f:22:40:35:ee: ef:c9:85:cf:a1:31:f8:47:40:94:d0:1e:24:a9:20: d7:34:62:07:b7:32:24:9a:c3:0d:a5:3a:cf:82:7b: 5b:d6:36:ba:8c:a2:d7:9e:6f:ce:e1:15:88:d4:95: a4:ba:42:be:78:e1:81:ba:3b:83:36:eb:de:0f:88: 65:f5:d3:a0:0c:3c:bb:a8:3f:ea:7b:dd:ff:95:d7: bc:1e:f0:84:d8:f9:9c:e3:49:88:f4:60:10:4c:90: 7f:52:ee:e5:2a:45:61:8a:6d:70:21:39:65:04:6f: b2:e2:0c:54:88:45:1b:74:65:27:9a:26:fa:11:f4: 6f:bc:1a:ea:d2:90:b9:5e:63:e6:d0:1a:03:a5:b5: 69:95:7e:ec:2d:d7:f0:fa:da:f9:77:16:eb:c6:60: 00:d5:ed:30:6c:ec:fb:66:04:f7:e6:70:a3:a3:bf: 88:87:03:4f:2a:fd:2b:42:6b:b0:9e:4e:6f:ec:d1: 4a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:D4:64:7D:34:11:BD:5D:89:7B:20:A4:28:DD:B3:F1:A2:2E:B9:64 X509v3 Authority Key Identifier: keyid:53:2E:70:54:C4:71:BF:F2:ED:7A:6A:18:8E:D3:73:63:65:E4:60:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uy5wVMRxv_LtemoYjtNzY2XkYIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:8a:f2:5d:e6:54:82:04:93:6e:f0:bb:c4:00:d4:bb:74:46: a4:28:17:dd:c5:75:a8:1d:bc:c3:c6:43:4e:bb:fd:20:f1:fd: 00:38:f9:e1:d4:ad:d1:ce:ac:7c:f6:a0:6f:22:c1:17:8b:6b: 46:87:89:ea:e5:af:6c:5b:6f:24:02:64:50:9c:ea:53:a4:51: fd:64:77:72:50:25:f1:ab:94:60:52:b7:ee:68:47:8b:3a:7e: b1:6e:45:eb:3b:8d:51:ae:3c:0c:28:75:98:12:b6:47:60:ca: 31:f2:78:53:55:90:7c:66:54:6d:26:cc:f4:f5:0c:0d:4a:59: 1a:d0:2a:6d:b6:8b:93:a1:25:4f:d2:d1:14:de:cf:72:34:68: 88:e5:c8:ce:1a:71:44:96:33:73:bd:ea:23:43:b6:9a:da:4c: 57:a8:a8:b1:92:97:1c:89:4d:eb:8b:06:95:bc:43:86:46:20: d1:a7:8c:71:e6:c6:75:fd:d0:8e:3b:5c:8a:53:c4:5d:8c:f2: 63:4f:50:2f:02:0c:b9:fe:55:6e:90:b8:12:33:ff:dc:42:dc: 78:af:0f:80:9c:16:06:35:e9:9c:83:de:cb:96:b8:b1:55:f7: be:67:8a:e4:f9:06:b2:e4:31:86:26:bf:d2:e0:79:d0:b2:0c: 66:c5:d8:a5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 OUFDRDExMC8GA1UEBRMoNTMyRTcwNTRDNDcxQkZGMkVEN0E2QTE4OEVEMzczNjM2 NUU0NjA4QTAeFw0yNjA0MDUwNzExMDRaFw0yNjA0MTIwNzExMDRaMBgxFjAUBgNV BAMTDTY5ZDIwYjA4LTk0YTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC77sQh9T9a7HEiUcfoFvtcb1ilZmcHrSIWG3nL7bWmSufuvhnwMTDBOLhVM8SP ervoucmUhhEwNq3R0iDxaRtpU6R6o7WfIkA17u/Jhc+hMfhHQJTQHiSpINc0Yge3 MiSaww2lOs+Ce1vWNrqMoteeb87hFYjUlaS6Qr544YG6O4M2694PiGX106AMPLuo P+p73f+V17we8ITY+ZzjSYj0YBBMkH9S7uUqRWGKbXAhOWUEb7LiDFSIRRt0ZSea JvoR9G+8GurSkLleY+bQGgOltWmVfuwt1/D62vl3FuvGYADV7TBs7PtmBPfmcKOj v4iHA08q/StCa7CeTm/s0UrFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUV9RkfTQR vV2JeyCkKN2z8aIuuWQwHwYDVR0jBBgwFoAUUy5wVMRxv/LtemoYjtNzY2XkYIow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5QUNEL0Q4MzVBOTBFODRB RjExRjBBRDdDREUyQkM0RjlBRTAyL1V5NXdWTVJ4dl9MdGVtb1lqdE56WTJYa1lJ by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVXk1d1ZNUnh2X0x0ZW1vWWp0TnpZMlhrWUlvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5 QUNEL0Q4MzVBOTBFODRBRjExRjBBRDdDREUyQkM0RjlBRTAyL1V5NXdWTVJ4dl9M dGVtb1lqdE56WTJYa1lJby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAVivJd5lSCBJNu8LvEANS7dEakKBfdxXWoHbzDxkNOu/0g8f0AOPnh1K3Rzqx8 9qBvIsEXi2tGh4nq5a9sW28kAmRQnOpTpFH9ZHdyUCXxq5RgUrfuaEeLOn6xbkXr O41RrjwMKHWYErZHYMox8nhTVZB8ZlRtJsz09QwNSlka0CpttouToSVP0tEU3s9y NGiI5cjOGnFEljNzveojQ7aa2kxXqKixkpcciU3riwaVvEOGRiDRp4xx5sZ1/dCO O1yKU8RdjPJjT1AvAgy5/lVukLgSM//cQtx4rw+AnBYGNemcg97LlrixVfe+Z4rk +Qay5DGGJr/S4HnQsgxmxdil -----END CERTIFICATE-----Generated at Mon Apr 6 13:58:16 2026 by rpki-client