$ rpki-client -vvf rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.mft File: up0lGkqfrMTkpmOHdQooZioxAFc.mft (raw, json) Hash identifier: 4A89hYwRAJ+fRiSUWEYNHNGK+/m9GYv2U+QYmQuW2xA= Subject key identifier: 76:A5:74:10:39:14:8B:69:47:26:64:B8:05:02:EE:42:8D:0E:1B:32 Authority key identifier: BA:9D:25:1A:4A:9F:AC:C4:E4:A6:63:87:75:0A:28:66:2A:31:00:57 Certificate issuer: /CN=A915B581/serialNumber=BA9D251A4A9FACC4E4A66387750A28662A310057 Certificate serial: 3553 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0lGkqfrMTkpmOHdQooZioxAFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.mft Manifest number: 353D Signing time: Sat 04 Apr 2026 14:45:46 +0000 Manifest this update: Sat 04 Apr 2026 14:45:46 +0000 Manifest next update: Sat 11 Apr 2026 14:45:46 +0000 Files and hashes: 1: up0lGkqfrMTkpmOHdQooZioxAFc.crl (hash: oPYWxtumvpBXMwxOXV0iy9pjBc6zesIczb+a92UMnUY=) 2: 7A38D6B854F311E7AC64ED3AC4F9AE02.roa (hash: wpF9ptajaxcFCU5XYXYL7kAycTSdDrhOWM0Rnpw1Xnw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.crl rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0lGkqfrMTkpmOHdQooZioxAFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 14:45:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13651 (0x3553) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B581, serialNumber=BA9D251A4A9FACC4E4A66387750A28662A310057 Validity Not Before: Apr 4 14:45:46 2026 GMT Not After : Apr 11 14:45:46 2026 GMT Subject: CN=69d1241a-b64f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f2:ed:1d:38:d0:f8:68:4d:18:01:73:08:71: 90:cf:23:15:2d:51:8d:10:51:7a:b9:4e:7d:90:36: fe:79:e8:cd:0c:90:2e:ae:73:92:ed:8a:22:12:f1: 05:7b:e6:d0:03:d5:e4:3a:45:a4:7f:e4:3c:fd:c9: 09:6a:31:48:50:df:df:f3:31:3a:2b:a1:72:0e:ab: 37:f7:f6:9f:fd:7c:49:43:37:2f:9a:c3:32:ad:2a: 6b:f4:4c:43:f9:6b:e8:32:96:ba:d2:3d:a5:f0:bf: 9b:b2:57:74:c3:09:b8:a1:f9:07:8e:7a:5b:b2:3a: 14:da:d9:ff:e0:34:64:e3:07:a5:26:b4:e1:86:22: f0:2c:6f:2c:23:5a:96:d4:56:34:52:ff:23:27:ca: 59:00:a0:8c:ea:e5:3b:5f:56:2c:cd:a8:48:88:1f: a3:b6:dc:f5:00:c2:ae:f3:8f:08:d0:b6:42:6c:d8: b7:1b:ca:f2:fe:3c:99:30:7d:b5:62:20:be:c0:e1: 4b:38:b5:a5:45:8e:8f:45:66:fe:3e:c4:48:80:39: 60:66:df:ec:b3:db:26:53:fc:ea:6b:d0:71:67:16: d0:4d:f8:85:09:7c:54:fe:ea:70:c9:8f:95:1b:c2: ce:94:16:30:59:c1:b8:46:2e:6c:f5:50:a2:3d:c9: 33:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:A5:74:10:39:14:8B:69:47:26:64:B8:05:02:EE:42:8D:0E:1B:32 X509v3 Authority Key Identifier: keyid:BA:9D:25:1A:4A:9F:AC:C4:E4:A6:63:87:75:0A:28:66:2A:31:00:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0lGkqfrMTkpmOHdQooZioxAFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:ca:ce:a8:29:f4:d2:4d:3b:ae:d7:48:7c:dd:d2:f5:3c:43: 34:49:dc:53:49:24:12:19:26:54:9c:90:0d:c3:ae:7c:9b:70: c0:80:29:5f:32:7b:9d:7d:0e:d6:8f:a2:3f:9f:0c:43:ed:dc: 36:5b:1c:c9:9e:a9:fe:0a:6d:09:af:16:64:a6:c7:eb:94:5c: 66:10:31:1a:da:8c:82:68:b0:52:65:91:2e:be:88:96:81:13: 8f:d7:4b:ca:af:af:1a:f6:23:1b:b6:2f:35:e9:4d:bd:ca:b2: 89:f5:13:92:39:ba:e2:76:d4:28:68:28:ec:65:96:93:6a:12: 5b:b4:db:4c:2a:9c:e6:19:47:7c:b6:ec:78:18:01:6d:a5:aa: 41:15:41:c3:ca:39:0e:14:9a:87:b7:30:39:6d:a8:4f:c0:13: 3f:0a:8f:c6:3c:e3:c5:08:90:e5:5c:9f:d2:cd:e5:69:77:50: eb:0c:6e:8c:a9:9e:4b:93:e7:e5:b6:5b:39:79:14:da:f6:b1: 6d:47:e8:b4:05:36:64:ed:83:ec:de:8a:b3:98:3f:80:30:df: 2e:14:e9:87:6d:9b:fc:34:d7:cb:cf:87:90:79:d5:42:74:48: a6:4a:7a:81:01:3c:e1:51:b9:5c:10:12:ae:4e:f3:3f:5c:b0: 6f:44:1f:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1ODExMTAvBgNVBAUTKEJBOUQyNTFBNEE5RkFDQzRFNEE2NjM4Nzc1MEEyODY2 MkEzMTAwNTcwHhcNMjYwNDA0MTQ0NTQ2WhcNMjYwNDExMTQ0NTQ2WjAYMRYwFAYD VQQDEw02OWQxMjQxYS1iNjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvPLtHTjQ+GhNGAFzCHGQzyMVLVGNEFF6uU59kDb+eejNDJAurnOS7YoiEvEF e+bQA9XkOkWkf+Q8/ckJajFIUN/f8zE6K6FyDqs39/af/XxJQzcvmsMyrSpr9ExD +WvoMpa60j2l8L+bsld0wwm4ofkHjnpbsjoU2tn/4DRk4welJrThhiLwLG8sI1qW 1FY0Uv8jJ8pZAKCM6uU7X1YszahIiB+jttz1AMKu848I0LZCbNi3G8ry/jyZMH21 YiC+wOFLOLWlRY6PRWb+PsRIgDlgZt/ss9smU/zqa9BxZxbQTfiFCXxU/upwyY+V G8LOlBYwWcG4Ri5s9VCiPckzcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHaldBA5 FItpRyZkuAUC7kKNDhsyMB8GA1UdIwQYMBaAFLqdJRpKn6zE5KZjh3UKKGYqMQBX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjU4MS9CQjhGREZGRTFE OTMxMUUyQTk2MzhBRjcwOEIwMkNEMi91cDBsR2txZnJNVGtwbU9IZFFvb1ppb3hB RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VwMGxHa3Fmck1Ua3BtT0hkUW9vWmlveEFGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjU4MS9CQjhGREZGRTFEOTMxMUUyQTk2MzhBRjcwOEIwMkNEMi91cDBsR2txZnJN VGtwbU9IZFFvb1ppb3hBRmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAn8rOqCn00k07rtdIfN3S9TxDNEncU0kkEhkmVJyQDcOufJtwwIApXzJ7nX0O 1o+iP58MQ+3cNlscyZ6p/gptCa8WZKbH65RcZhAxGtqMgmiwUmWRLr6IloETj9dL yq+vGvYjG7YvNelNvcqyifUTkjm64nbUKGgo7GWWk2oSW7TbTCqc5hlHfLbseBgB baWqQRVBw8o5DhSah7cwOW2oT8ATPwqPxjzjxQiQ5Vyf0s3laXdQ6wxujKmeS5Pn 5bZbOXkU2vaxbUfotAU2ZO2D7N6Ks5g/gDDfLhTph22b/DTXy8+HkHnVQnRIpkp6 gQE84VG5XBASrk7zP1ywb0Qfrg== -----END CERTIFICATE-----Generated at Mon Apr 6 08:27:56 2026 by rpki-client