$ rpki-client -vvf rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/UOUO2vZKLCW3MSOWc9kHD2GDAnk.mft File: UOUO2vZKLCW3MSOWc9kHD2GDAnk.mft (raw, json) Hash identifier: bfnnL/CLk2tg60kXYWw6wVHLYg11AJX7ZzUdI/fY14k= Subject key identifier: FC:52:63:5F:2E:9F:B2:EE:EC:D6:85:A3:CD:87:55:14:5B:3A:B6:06 Authority key identifier: 50:E5:0E:DA:F6:4A:2C:25:B7:31:23:96:73:D9:07:0F:61:83:02:79 Certificate issuer: /CN=A9157031/serialNumber=50E50EDAF64A2C25B731239673D9070F61830279 Certificate serial: 048E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOUO2vZKLCW3MSOWc9kHD2GDAnk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/UOUO2vZKLCW3MSOWc9kHD2GDAnk.mft Manifest number: 0487 Signing time: Sat 04 Apr 2026 23:48:20 +0000 Manifest this update: Sat 04 Apr 2026 23:48:20 +0000 Manifest next update: Sat 11 Apr 2026 23:48:20 +0000 Files and hashes: 1: UOUO2vZKLCW3MSOWc9kHD2GDAnk.crl (hash: 52uRMztnE0Um4fXHXmo7xpPMaqxTzwfz1UzMc14o1ZA=) 2: 32D8FF34C99E11ED98E9BE5BC4F9AE02.roa (hash: yd4buxnCUiP8RDjBDNVk91tWj2JzoJK9mOzB6Ho4Uo8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/UOUO2vZKLCW3MSOWc9kHD2GDAnk.crl rsync://rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/UOUO2vZKLCW3MSOWc9kHD2GDAnk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOUO2vZKLCW3MSOWc9kHD2GDAnk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 23:48:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1166 (0x48e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157031, serialNumber=50E50EDAF64A2C25B731239673D9070F61830279 Validity Not Before: Apr 4 23:48:20 2026 GMT Not After : Apr 11 23:48:20 2026 GMT Subject: CN=69d1a344-544c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4c:18:a7:bd:a3:75:c6:04:ea:34:70:f8:c8: a4:75:16:5f:b7:76:f4:06:63:93:02:c4:56:e4:42: 1d:8a:33:a5:e9:3f:d0:a4:f0:0d:55:3d:39:b1:6b: 55:1d:3b:25:86:a2:18:23:2c:0d:e2:d3:84:01:70: 32:fb:20:ce:11:e2:76:9a:20:4d:23:fe:f6:6b:09: 80:d0:ed:99:85:e5:18:df:43:5b:6a:75:c3:f4:76: 56:eb:b3:cc:dc:05:b3:34:73:ef:4c:df:15:5b:f6: e5:29:6b:d7:df:04:84:34:0d:03:23:7d:f5:65:ef: 74:c1:73:a3:ba:f8:10:3d:69:88:a2:b8:57:43:85: 62:d4:bd:66:78:2d:64:f4:e4:d9:db:13:7f:f6:64: 47:c0:22:93:f3:ae:39:19:6f:1a:c4:ba:26:38:d1: 4c:da:68:a5:1d:bb:29:51:19:53:53:87:d5:39:61: 16:4b:98:d5:27:3f:6e:a2:a8:5e:57:0d:c4:d5:10: d7:c2:56:87:35:ae:21:86:ed:98:c8:ce:f5:0d:b2: 8b:72:2a:a6:be:f8:a6:75:c2:46:1e:28:7c:26:18: 25:c2:7e:77:e2:46:e2:38:46:6f:d1:15:84:9b:cd: 8a:6e:64:0f:56:f3:46:3e:aa:dd:11:71:e0:2a:c9: ba:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:52:63:5F:2E:9F:B2:EE:EC:D6:85:A3:CD:87:55:14:5B:3A:B6:06 X509v3 Authority Key Identifier: keyid:50:E5:0E:DA:F6:4A:2C:25:B7:31:23:96:73:D9:07:0F:61:83:02:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/UOUO2vZKLCW3MSOWc9kHD2GDAnk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOUO2vZKLCW3MSOWc9kHD2GDAnk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/UOUO2vZKLCW3MSOWc9kHD2GDAnk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:c4:62:bf:09:4a:31:2f:84:1b:d5:84:84:35:39:7f:d7:cb: 2c:c6:e2:51:5d:2e:1d:b5:17:a3:d4:a3:a0:75:9b:70:f6:d9: c1:89:85:7f:56:6b:a0:f6:bb:16:6e:c2:4f:8d:73:b5:7c:d2: 68:44:67:72:95:2a:07:6b:4c:d8:39:93:85:21:1c:3d:6e:a8: 8a:1b:33:d9:e4:48:3f:f0:d4:87:c8:d0:79:4c:a8:f5:85:d3: 8b:3c:6a:01:7f:96:55:4e:42:08:b8:0c:58:b1:dd:7f:3c:f4: a6:a7:8a:e3:76:cf:63:12:52:ab:3e:4c:d2:40:07:60:2a:d2: f2:e6:04:e6:1b:1e:af:67:4c:da:5a:bb:49:5e:e0:a4:47:95: 9c:26:f3:61:38:39:bc:bb:b1:34:37:90:42:bc:f1:a0:53:1a: 0e:a1:c4:7a:3a:78:8d:96:41:08:a4:72:66:73:2d:0d:1e:52: 19:29:7c:8c:20:e8:36:d5:64:58:6a:21:6e:71:1f:2a:08:4b: 06:a7:f0:79:2b:79:e7:bf:a2:69:9c:4f:0f:3e:7c:1a:a2:07: 99:0f:d2:5c:a2:34:25:d5:20:15:13:72:64:50:a8:be:3d:3d: ad:de:5c:13:ea:c0:7e:b6:5e:ef:22:c4:46:fc:51:ab:fb:dd: 1e:ad:de:33 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTcwMzExMTAvBgNVBAUTKDUwRTUwRURBRjY0QTJDMjVCNzMxMjM5NjczRDkwNzBG NjE4MzAyNzkwHhcNMjYwNDA0MjM0ODIwWhcNMjYwNDExMjM0ODIwWjAYMRYwFAYD VQQDEw02OWQxYTM0NC01NDRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArkwYp72jdcYE6jRw+MikdRZft3b0BmOTAsRW5EIdijOl6T/QpPANVT05sWtV HTslhqIYIywN4tOEAXAy+yDOEeJ2miBNI/72awmA0O2ZheUY30NbanXD9HZW67PM 3AWzNHPvTN8VW/blKWvX3wSENA0DI331Ze90wXOjuvgQPWmIorhXQ4Vi1L1meC1k 9OTZ2xN/9mRHwCKT8645GW8axLomONFM2milHbspURlTU4fVOWEWS5jVJz9uoqhe Vw3E1RDXwlaHNa4hhu2YyM71DbKLciqmvvimdcJGHih8Jhglwn534kbiOEZv0RWE m82KbmQPVvNGPqrdEXHgKsm60QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPxSY18u n7Lu7NaFo82HVRRbOrYGMB8GA1UdIwQYMBaAFFDlDtr2SiwltzEjlnPZBw9hgwJ5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzAzMS83QTAwNEY3ODdF QzkxMUVDODRFQzQ0MThDNEY5QUUwMi9VT1VPMnZaS0xDVzNNU09XYzlrSEQyR0RB bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VPVU8ydlpLTENXM01TT1djOWtIRDJHREFuay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzAzMS83QTAwNEY3ODdFQzkxMUVDODRFQzQ0MThDNEY5QUUwMi9VT1VPMnZaS0xD VzNNU09XYzlrSEQyR0RBbmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIcRivwlKMS+EG9WEhDU5f9fLLMbiUV0uHbUXo9SjoHWbcPbZwYmFf1ZroPa7 Fm7CT41ztXzSaERncpUqB2tM2DmThSEcPW6oihsz2eRIP/DUh8jQeUyo9YXTizxq AX+WVU5CCLgMWLHdfzz0pqeK43bPYxJSqz5M0kAHYCrS8uYE5hser2dM2lq7SV7g pEeVnCbzYTg5vLuxNDeQQrzxoFMaDqHEejp4jZZBCKRyZnMtDR5SGSl8jCDoNtVk WGohbnEfKghLBqfweSt557+iaZxPDz58GqIHmQ/SXKI0JdUgFRNyZFCovj09rd5c E+rAfrZe7yLERvxRq/vdHq3eMw== -----END CERTIFICATE-----Generated at Mon Apr 6 10:23:44 2026 by rpki-client