$ rpki-client -vvf rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft File: UxLzmab36w3c1RwDn4P3t6R6Xwk.mft (raw, json) Hash identifier: RHxs+ABWDlgaJkJ8BWhK7fv9Dmgj/PAqRpfRXYsWGtE= Subject key identifier: 15:B1:77:09:7B:4B:9D:DC:C6:44:5C:20:52:91:C7:B6:C9:02:3C:C7 Authority key identifier: 53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09 Certificate issuer: /CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09 Certificate serial: 361C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft Manifest number: 3562 Signing time: Sat 04 Apr 2026 15:16:59 +0000 Manifest this update: Sat 04 Apr 2026 15:16:59 +0000 Manifest next update: Sat 11 Apr 2026 15:16:59 +0000 Files and hashes: 1: UxLzmab36w3c1RwDn4P3t6R6Xwk.crl (hash: 1K5GbuYeW8QnWW7h7IvUhfpGCHwjBxEv9srAC0sNToI=) 2: EF1D0466455311E98FA31F68C4F9AE02.roa (hash: WNcYetTPqeiv/gJdhSaTlqe8oWCCpgSvbxYX4ELwCGg=) 3: 7350B2AE2BB011EEBF8C0962C4F9AE02.roa (hash: d4lTODvUkouxXVPPc6ygUkOl8NqMMqWXrGfdqtm829Y=) 4: 03C522BA8CF211ED8699F014C4F9AE02.roa (hash: ZiJdNAI9D1fhgY+vFrSQSO5HYdO+TKWApMeaHQROAjU=) 5: 95B5C59E2DCE11EEB652B16FC4F9AE02.roa (hash: d6iO9u2ih9RRm7pMd+vjg8OegUnNhTtH4LrmCu5pQ4M=) 6: 2F20ECAE554211EF82D40732C4F9AE02.roa (hash: kgR3YHk5XEHcnqdC6D3tAl758+AW2RhczADq1evpAQs=) 7: EB3FE1C61B6411ECAAB1D328C4F9AE02.roa (hash: QN6urrq0/MRPBsyVwW06hj5Hgqfql2xPz8BmJ6v46LI=) 8: E474AF108D8811EDB3C13D6CC4F9AE02.roa (hash: noBQw864/f72VFx3andbpjd4W9nv+2EjSEATcB2fGbI=) 9: E367308E8D8811EDB3C13D6CC4F9AE02.roa (hash: a063z56fhF465bYqQMqQ/VS6+YD1pprAbiKfQKP6c7Q=) 10: E48E2E94017211EBA18CC269C4F9AE02.roa (hash: mVGA78Zl2U0B3hkzOEy3AAD5vMNBI+xTYAZL5c4Orlk=) 11: C2F17AB22DCE11EEA2884670C4F9AE02.roa (hash: effeuvJ8l3AUehdgLEWM2HD3kmQlAIDMK+QRL0CUES8=) 12: 56C4FAF42D4511EAB70F247AC4F9AE02.roa (hash: YRii0Zo0Ii/RPFSSaW2DmXwDsKKvPuXOrEkEJHdLhV0=) 13: 8D6973CE77C311EE90D4BD46C4F9AE02.roa (hash: kH5XvLgwYNGVU4SNZtJIVKDH6abpZgZgif4ntA/Uq98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 15:16:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13852 (0x361c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BC7A, serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09 Validity Not Before: Apr 4 15:16:59 2026 GMT Not After : Apr 11 15:16:59 2026 GMT Subject: CN=69d12b6b-8f96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:9e:64:2e:f1:8c:f3:f7:73:d2:c4:a8:50:61: 7e:f4:82:1c:81:9a:04:ec:a2:72:95:f5:40:7d:92: a8:a7:bd:33:8a:49:ad:1a:6b:07:44:b1:89:89:97: 07:8d:92:39:87:5c:a2:44:f2:db:9d:ba:58:5f:0f: bf:16:21:eb:41:d2:d0:cc:87:ee:35:2f:0b:01:be: bf:87:a3:37:c1:bd:13:65:03:bd:48:ed:f6:c8:92: 63:c6:68:73:d5:e1:95:02:42:ef:c9:5e:5a:a9:30: d2:4a:af:4b:5e:3b:ef:eb:09:a9:49:65:02:50:d1: 72:b2:61:5e:ad:27:86:43:e1:7e:a0:ad:d8:f2:b5: 50:c8:ae:e3:e6:f9:91:aa:d6:c3:10:eb:92:fd:a4: 88:b8:26:30:ee:8b:ab:19:4e:6e:c4:d7:7d:ca:71: 14:4a:9e:37:cd:d8:0d:79:b5:b7:7a:24:19:75:2e: df:69:f5:53:f0:85:fd:b8:0e:89:ed:8e:75:c9:e4: 18:b8:43:fe:06:c0:aa:92:b1:eb:eb:67:a4:5d:47: 09:f5:27:24:b4:02:41:e3:b2:50:a0:5c:5c:b8:80: 9d:66:e6:b4:44:fc:f6:f8:e2:10:51:7b:51:9d:77: 37:c1:ea:df:e0:24:5f:b6:0c:c0:64:32:01:d5:7b: e6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:B1:77:09:7B:4B:9D:DC:C6:44:5C:20:52:91:C7:B6:C9:02:3C:C7 X509v3 Authority Key Identifier: keyid:53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:9d:e7:55:a1:a9:d1:cb:0e:a8:4b:f1:4f:50:1a:fe:4a:c2: ae:e8:72:a2:8f:e7:22:9e:9a:08:66:ac:5f:31:f2:a2:d9:fd: c4:bc:eb:2d:53:f7:1e:87:54:c4:fd:92:80:e5:ec:11:53:14: 6b:be:82:c5:bd:2e:ee:be:01:c0:c3:cf:da:e3:b0:0f:83:0d: 44:93:5b:54:31:c9:1b:01:1b:4c:12:79:d5:2f:e3:c1:7a:16: a6:5a:ca:f9:94:e6:bc:20:33:f1:ee:d7:c7:e4:4a:3f:fd:7a: ea:42:1f:32:6e:a6:d5:a7:4c:9e:6d:aa:f5:d3:4b:b2:64:e4: e5:aa:5e:9b:94:4a:df:8a:ff:6b:6f:28:39:f7:a3:b7:78:88: 80:64:6c:c1:f9:4b:12:04:66:3f:91:e4:42:7e:bd:70:48:ea: 7e:df:13:c2:5a:a4:54:10:49:a8:e3:93:72:6b:5f:96:21:dd: 1e:59:53:ba:88:b2:b8:b8:e1:62:0c:56:a4:b0:fd:ad:18:02: fa:be:2e:d6:6f:d0:65:77:47:a6:9b:54:5f:d7:95:d2:b4:2d: 50:11:52:9b:ec:34:28:36:f7:01:e6:bb:2e:67:a4:34:d4:d3: 6d:81:22:ee:b3:64:ec:02:5d:b7:dc:fc:12:1b:a5:b1:0e:4a: a4:7f:3c:ac -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJDN0ExMTAvBgNVBAUTKDUzMTJGMzk5QTZGN0VCMEREQ0Q1MUMwMzlGODNGN0I3 QTQ3QTVGMDkwHhcNMjYwNDA0MTUxNjU5WhcNMjYwNDExMTUxNjU5WjAYMRYwFAYD VQQDEw02OWQxMmI2Yi04Zjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA855kLvGM8/dz0sSoUGF+9IIcgZoE7KJylfVAfZKop70zikmtGmsHRLGJiZcH jZI5h1yiRPLbnbpYXw+/FiHrQdLQzIfuNS8LAb6/h6M3wb0TZQO9SO32yJJjxmhz 1eGVAkLvyV5aqTDSSq9LXjvv6wmpSWUCUNFysmFerSeGQ+F+oK3Y8rVQyK7j5vmR qtbDEOuS/aSIuCYw7ourGU5uxNd9ynEUSp43zdgNebW3eiQZdS7fafVT8IX9uA6J 7Y51yeQYuEP+BsCqkrHr62ekXUcJ9ScktAJB47JQoFxcuICdZua0RPz2+OIQUXtR nXc3werf4CRftgzAZDIB1XvmgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBWxdwl7 S53cxkRcIFKRx7bJAjzHMB8GA1UdIwQYMBaAFFMS85mm9+sN3NUcA5+D97ekel8J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkM3QS80QzUyOEY3ODQ1 MDMxMUUyQkRDQTFGNzMyOTc5QkIyMC9VeEx6bWFiMzZ3M2MxUndEbjRQM3Q2UjZY d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V4THptYWIzNnczYzFSd0RuNFAzdDZSNlh3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkM3QS80QzUyOEY3ODQ1MDMxMUUyQkRDQTFGNzMyOTc5QkIyMC9VeEx6bWFiMzZ3 M2MxUndEbjRQM3Q2UjZYd2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfZ3nVaGp0csOqEvxT1Aa/krCruhyoo/nIp6aCGasXzHyotn9xLzrLVP3HodU xP2SgOXsEVMUa76Cxb0u7r4BwMPP2uOwD4MNRJNbVDHJGwEbTBJ51S/jwXoWplrK +ZTmvCAz8e7Xx+RKP/166kIfMm6m1adMnm2q9dNLsmTk5apem5RK34r/a28oOfej t3iIgGRswflLEgRmP5HkQn69cEjqft8TwlqkVBBJqOOTcmtfliHdHllTuoiyuLjh YgxWpLD9rRgC+r4u1m/QZXdHpptUX9eV0rQtUBFSm+w0KDb3Aea7LmekNNTTbYEi 7rNk7AJdt9z8EhulsQ5KpH88rA== -----END CERTIFICATE-----Generated at Mon Apr 6 10:12:07 2026 by rpki-client