$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.mft File: ujlCdcT_j47yNHSaNvKhkTknlVs.mft (raw, json) Hash identifier: qeNx+34NK/E1yCC+8J2FpV4AMzoqW1vXcMW6H2BqbEI= Subject key identifier: 44:0D:D4:89:9B:E4:39:31:94:AA:26:3F:5C:1F:F8:42:0F:FD:65:AC Authority key identifier: BA:39:42:75:C4:FF:8F:8E:F2:34:74:9A:36:F2:A1:91:39:27:95:5B Certificate issuer: /CN=A9158E7B/serialNumber=BA394275C4FF8F8EF234749A36F2A1913927955B Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujlCdcT_j47yNHSaNvKhkTknlVs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.mft Manifest number: 3B Signing time: Sun 29 Mar 2026 08:12:24 +0000 Manifest this update: Sun 29 Mar 2026 08:12:23 +0000 Manifest next update: Sun 05 Apr 2026 08:12:23 +0000 Files and hashes: 1: ujlCdcT_j47yNHSaNvKhkTknlVs.crl (hash: fmIpPElrArtEhmZPkGtl8cix8GWIhSpx80UMGgY7hsI=) 2: B1921BE21D1C11F19ECA08BE103D8C67.roa (hash: WobrnjAcJid+qQ3zmSqPJbNrzTm76HPt3Dd40mnXzdk=) 3: B2897A041D1C11F19ECA08BE103D8C67.roa (hash: VQAnAshqNaJSS0rUq9sVC9WDtf0AoAAQTcJNc9J4oxg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.crl rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujlCdcT_j47yNHSaNvKhkTknlVs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 08:12:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158E7B, serialNumber=BA394275C4FF8F8EF234749A36F2A1913927955B Validity Not Before: Mar 29 08:12:23 2026 GMT Not After : Apr 5 08:12:23 2026 GMT Subject: CN=69c8dee8-2732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ec:91:9d:a1:00:b5:03:e9:c1:0f:16:a5:61: d4:15:0f:97:38:06:5b:f5:a5:89:e4:81:3c:74:40: 1a:d0:62:b6:65:79:d2:fb:fd:57:92:f5:c8:69:66: c5:c1:96:ce:59:5e:55:93:7c:43:3e:95:f2:58:65: 21:0d:7d:49:e7:06:70:92:e9:ae:19:a8:c3:4d:b6: 08:a2:68:b9:1f:2e:6b:92:06:bc:d6:d6:5e:b2:14: e7:7a:a5:f4:15:fc:d8:78:d6:3d:e1:22:70:f7:e4: 35:fd:15:96:f8:9d:0b:1c:f4:ae:ff:75:d9:ad:91: 8c:2a:56:e6:96:ff:b1:00:20:b9:02:c6:5e:7a:ac: d8:8d:78:01:4a:06:4c:88:1f:dc:b3:cf:e8:cc:68: b0:c0:23:45:6d:39:ad:5b:6e:f1:ce:a1:d5:99:fd: 6d:07:ba:77:c4:ca:47:01:94:76:5c:92:f3:69:53: 2a:d8:ae:fd:76:e6:25:4c:1a:3d:59:79:be:7c:40: 0b:f7:77:8e:b6:7a:6a:a6:e2:24:9b:aa:f2:14:03: 90:40:8a:71:f8:55:ef:c0:04:3a:93:ae:fb:8f:bd: 81:6c:5f:8c:9d:6c:69:ea:7d:b6:b8:5f:8d:c4:94: 1b:61:0c:27:bd:e0:20:6a:aa:a9:85:ab:ed:e4:e3: 68:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:0D:D4:89:9B:E4:39:31:94:AA:26:3F:5C:1F:F8:42:0F:FD:65:AC X509v3 Authority Key Identifier: keyid:BA:39:42:75:C4:FF:8F:8E:F2:34:74:9A:36:F2:A1:91:39:27:95:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujlCdcT_j47yNHSaNvKhkTknlVs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:73:16:ce:55:77:39:a7:aa:d8:3d:1b:2d:34:56:4b:be:e4: e9:e1:1d:eb:00:8a:62:5f:a1:db:a7:e1:39:eb:c1:ff:64:e3: ac:39:29:ca:20:d7:3c:bc:78:7b:1d:21:60:b6:63:fd:ba:f5: 55:03:bf:a6:b7:88:13:25:3f:6c:6a:3f:04:06:b4:7e:60:de: a7:65:d0:b8:4b:06:2d:05:64:40:97:fb:fd:6c:0e:1a:f5:87: c9:12:c3:40:a6:5b:54:f3:b4:c7:09:ef:ed:7f:10:eb:ef:39: f3:75:3c:4e:1d:64:91:59:b2:c8:71:12:a8:fd:c1:15:b9:01: f8:bc:0e:0f:55:67:da:4a:bb:1c:71:e6:41:4d:4d:9a:f6:38: 5b:4d:79:c8:02:f9:74:32:70:8e:85:6b:ed:de:4f:2d:2c:fc: 3a:f1:8d:b0:d1:a3:aa:b7:63:85:4c:b4:de:84:8f:5a:7e:ac: c0:e3:66:dd:1f:e4:8d:0e:bf:2e:7c:ad:0d:a4:02:e0:01:d9: 29:cb:31:bf:5a:73:80:ed:b4:41:7c:8e:88:94:61:b9:2f:3f: b8:ea:36:ac:65:29:54:72:b4:08:13:af:a5:77:d9:dc:1e:5d: d7:7c:20:54:5c:de:e5:81:a6:f0:82:12:92:d7:a5:9d:f9:6a: 43:0f:b2:0a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 OEU3QjExMC8GA1UEBRMoQkEzOTQyNzVDNEZGOEY4RUYyMzQ3NDlBMzZGMkExOTEz OTI3OTU1QjAeFw0yNjAzMjkwODEyMjNaFw0yNjA0MDUwODEyMjNaMBgxFjAUBgNV BAMTDTY5YzhkZWU4LTI3MzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC67JGdoQC1A+nBDxalYdQVD5c4Blv1pYnkgTx0QBrQYrZledL7/VeS9chpZsXB ls5ZXlWTfEM+lfJYZSENfUnnBnCS6a4ZqMNNtgiiaLkfLmuSBrzW1l6yFOd6pfQV /Nh41j3hInD35DX9FZb4nQsc9K7/ddmtkYwqVuaW/7EAILkCxl56rNiNeAFKBkyI H9yzz+jMaLDAI0VtOa1bbvHOodWZ/W0HunfEykcBlHZckvNpUyrYrv125iVMGj1Z eb58QAv3d462emqm4iSbqvIUA5BAinH4Ve/ABDqTrvuPvYFsX4ydbGnqfba4X43E lBthDCe94CBqqqmFq+3k42hVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQURA3UiZvk OTGUqiY/XB/4Qg/9ZawwHwYDVR0jBBgwFoAUujlCdcT/j47yNHSaNvKhkTknlVsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4RTdCLzUxMUIzQjFBRDk5 QTExRjA4RDQ5MzhCMDY1RDM2NDFEL3VqbENkY1RfajQ3eU5IU2FOdktoa1RrbmxW cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdWpsQ2RjVF9qNDd5TkhTYU52S2hrVGtubFZzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4 RTdCLzUxMUIzQjFBRDk5QTExRjA4RDQ5MzhCMDY1RDM2NDFEL3VqbENkY1RfajQ3 eU5IU2FOdktoa1RrbmxWcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCFcxbOVXc5p6rYPRstNFZLvuTp4R3rAIpiX6Hbp+E568H/ZOOsOSnKINc8vHh7 HSFgtmP9uvVVA7+mt4gTJT9saj8EBrR+YN6nZdC4SwYtBWRAl/v9bA4a9YfJEsNA pltU87THCe/tfxDr7znzdTxOHWSRWbLIcRKo/cEVuQH4vA4PVWfaSrscceZBTU2a 9jhbTXnIAvl0MnCOhWvt3k8tLPw68Y2w0aOqt2OFTLTehI9afqzA42bdH+SNDr8u fK0NpALgAdkpyzG/WnOA7bRBfI6IlGG5Lz+46jasZSlUcrQIE6+ld9ncHl3XfCBU XN7lgabwghKS16Wd+WpDD7IK -----END CERTIFICATE-----Generated at Mon Mar 30 15:34:16 2026 by rpki-client