$ rpki-client -vvf rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.mft File: uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.mft (raw, json) Hash identifier: I1izNIAl+IFdpHhlm8nxKnMn4vFdsyMWGRO1KPUa1MY= Subject key identifier: 83:EC:92:46:D2:DD:2E:72:BD:5F:22:81:27:C0:70:CE:95:5E:40:A0 Authority key identifier: B8:F8:46:B4:35:3B:64:29:AC:40:43:F3:2B:B7:89:4C:F8:38:55:FD Certificate issuer: /CN=A9170829/serialNumber=B8F846B4353B6429AC4043F32BB7894CF83855FD Certificate serial: 04DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.mft Manifest number: 06B5 Signing time: Sat 04 Apr 2026 23:39:41 +0000 Manifest this update: Sat 04 Apr 2026 23:39:41 +0000 Manifest next update: Sat 11 Apr 2026 23:39:41 +0000 Files and hashes: 1: uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.crl (hash: kY+GZWsZimJhJl2G5Mrr5EVjolV5lNKh+Q49l6lsEPE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.crl rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 23:39:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1245 (0x4dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170829, serialNumber=B8F846B4353B6429AC4043F32BB7894CF83855FD Validity Not Before: Apr 4 23:39:41 2026 GMT Not After : Apr 11 23:39:41 2026 GMT Subject: CN=69d1a13d-96ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1b:3c:08:56:29:aa:45:de:bc:b8:e5:e1:14: 3f:17:9c:b2:df:a0:3e:28:93:da:cb:01:4e:e2:da: 92:0f:b4:af:e5:3d:e3:c2:2a:be:3b:e5:41:73:d1: 31:f4:a2:15:ce:cb:fe:c2:ba:b2:b9:8a:51:ec:b1: bd:c9:e9:a0:e8:79:88:95:5c:23:b4:57:99:49:f0: c1:10:ae:17:e5:88:25:33:96:91:fe:e9:93:98:7b: e5:c9:d5:ef:59:3b:f6:7d:eb:31:c6:f4:40:68:78: 3e:ce:b5:4f:2f:1c:c6:9b:c8:32:5f:93:cc:dd:12: 6d:cc:fc:cc:38:58:9b:d0:eb:79:6a:f2:54:dd:53: bb:03:df:2f:f1:2d:13:4f:80:2d:9f:80:24:1c:2c: 7a:c7:50:12:ec:32:7c:d5:a2:ae:3b:0e:47:ef:fd: 7e:45:00:30:ed:80:90:b6:9c:33:0e:10:1d:60:64: a0:f8:b7:b6:24:fa:a7:95:b5:63:d8:e9:24:c8:fc: 20:2e:b0:87:42:d3:25:37:12:39:9c:03:0c:d4:2d: 6b:ca:c6:23:ae:61:b6:04:68:75:19:e8:7e:cb:48: a6:0d:56:69:b0:f9:d2:b8:c9:81:0c:b1:52:bf:fd: 69:85:b0:55:28:a0:43:d3:be:85:2d:eb:97:2c:5f: d0:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:EC:92:46:D2:DD:2E:72:BD:5F:22:81:27:C0:70:CE:95:5E:40:A0 X509v3 Authority Key Identifier: keyid:B8:F8:46:B4:35:3B:64:29:AC:40:43:F3:2B:B7:89:4C:F8:38:55:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:a4:14:8e:11:d5:26:58:b3:b9:0a:d0:10:62:5f:0f:ea:6f: 02:5a:7f:08:45:74:9b:87:fd:43:03:62:cc:83:ce:77:6a:a2: e3:72:cd:47:73:21:dd:ba:ff:21:64:15:97:40:b6:e0:72:f4: cf:0a:43:0f:97:f7:27:a5:27:c0:78:7c:dd:3c:36:6b:ce:34: aa:5d:35:63:9a:f7:df:40:f5:62:25:71:2a:a0:52:04:03:07: 66:e6:23:ac:5c:9d:d3:53:88:1a:9c:0e:c4:4a:3e:f2:c4:17: 9d:c6:7b:16:2e:0a:b4:58:91:e9:e0:ea:fe:15:ad:18:7f:c1: ac:4b:2a:0b:a6:d0:cc:d6:f3:6b:86:f6:7a:cf:e1:4d:6f:bc: e0:ce:57:57:ef:54:a6:e6:09:47:90:a5:a1:4d:db:c4:8c:a1: e7:32:69:7f:42:90:04:3f:33:5f:36:81:dc:e1:11:a7:d3:f9: 09:9a:d1:dc:5d:16:17:3d:14:b9:71:7f:6d:97:89:29:a4:b4: d1:04:32:01:3a:9f:f9:fb:8d:2b:cf:5f:33:0e:88:fa:12:ff: bc:ad:54:59:dc:21:a8:b5:d7:e0:c6:c2:45:7f:0e:77:fe:17: 94:34:93:ca:79:43:e8:c4:15:1d:35:f3:19:0e:16:80:cb:84: eb:cf:fc:71 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA4MjkxMTAvBgNVBAUTKEI4Rjg0NkI0MzUzQjY0MjlBQzQwNDNGMzJCQjc4OTRD RjgzODU1RkQwHhcNMjYwNDA0MjMzOTQxWhcNMjYwNDExMjMzOTQxWjAYMRYwFAYD VQQDEw02OWQxYTEzZC05NmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwBs8CFYpqkXevLjl4RQ/F5yy36A+KJPaywFO4tqSD7Sv5T3jwiq+O+VBc9Ex 9KIVzsv+wrqyuYpR7LG9yemg6HmIlVwjtFeZSfDBEK4X5YglM5aR/umTmHvlydXv WTv2fesxxvRAaHg+zrVPLxzGm8gyX5PM3RJtzPzMOFib0Ot5avJU3VO7A98v8S0T T4Atn4AkHCx6x1AS7DJ81aKuOw5H7/1+RQAw7YCQtpwzDhAdYGSg+Le2JPqnlbVj 2OkkyPwgLrCHQtMlNxI5nAMM1C1rysYjrmG2BGh1Geh+y0imDVZpsPnSuMmBDLFS v/1phbBVKKBD076FLeuXLF/QAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIPskkbS 3S5yvV8igSfAcM6VXkCgMB8GA1UdIwQYMBaAFLj4RrQ1O2QprEBD8yu3iUz4OFX9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDgyOS83NjY3QkVEMDYz QTAxMUVDQUQ4Mjk5MUNDNEY5QUUwMi91UGhHdERVN1pDbXNRRVB6SzdlSlRQZzRW ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VQaEd0RFU3WkNtc1FFUHpLN2VKVFBnNFZmMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDgyOS83NjY3QkVEMDYzQTAxMUVDQUQ4Mjk5MUNDNEY5QUUwMi91UGhHdERVN1pD bXNRRVB6SzdlSlRQZzRWZjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL6QUjhHVJlizuQrQEGJfD+pvAlp/CEV0m4f9QwNizIPOd2qi43LNR3Mh3br/ IWQVl0C24HL0zwpDD5f3J6UnwHh83Tw2a840ql01Y5r330D1YiVxKqBSBAMHZuYj rFyd01OIGpwOxEo+8sQXncZ7Fi4KtFiR6eDq/hWtGH/BrEsqC6bQzNbza4b2es/h TW+84M5XV+9UpuYJR5CloU3bxIyh5zJpf0KQBD8zXzaB3OERp9P5CZrR3F0WFz0U uXF/bZeJKaS00QQyATqf+fuNK89fMw6I+hL/vK1UWdwhqLXX4MbCRX8Od/4XlDST ynlD6MQVHTXzGQ4WgMuE68/8cQ== -----END CERTIFICATE-----Generated at Mon Apr 6 09:53:47 2026 by rpki-client