$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft File: u6lOqRCj8jLfn98s1OOiejSZa3A.mft (raw, json) Hash identifier: UXqu5OvtBbjLdEXg/wywZhR9T/bSkGFgjQ8PPjFiYyY= Subject key identifier: 70:3C:89:F6:69:D0:43:DA:AE:83:00:0A:ED:92:0C:13:7B:BB:76:03 Authority key identifier: BB:A9:4E:A9:10:A3:F2:32:DF:9F:DF:2C:D4:E3:A2:7A:34:99:6B:70 Certificate issuer: /CN=A917BEB0/serialNumber=BBA94EA910A3F232DF9FDF2CD4E3A27A34996B70 Certificate serial: 04DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6lOqRCj8jLfn98s1OOiejSZa3A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft Manifest number: 04D5 Signing time: Sat 04 Apr 2026 23:37:58 +0000 Manifest this update: Sat 04 Apr 2026 23:37:58 +0000 Manifest next update: Sat 11 Apr 2026 23:37:58 +0000 Files and hashes: 1: u6lOqRCj8jLfn98s1OOiejSZa3A.crl (hash: +SKh76dduLQstwY6aiRxU7fae4E2S2pt4ux5leXKiyk=) 2: 4AEAB70C615D11ECAC75D44DC4F9AE02.roa (hash: 9CfqYYl4auSjx9zjrb6Pvsma7el5RM6zCTL8hx3B2ss=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.crl rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6lOqRCj8jLfn98s1OOiejSZa3A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 23:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1244 (0x4dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BEB0, serialNumber=BBA94EA910A3F232DF9FDF2CD4E3A27A34996B70 Validity Not Before: Apr 4 23:37:58 2026 GMT Not After : Apr 11 23:37:58 2026 GMT Subject: CN=69d1a0d6-f4f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:89:7f:b6:78:6b:0d:09:66:42:ac:c5:6c:21: 8f:e0:1a:50:26:f0:f4:67:d4:34:88:59:33:ee:a5: da:a3:94:01:f6:f7:72:7c:7e:ad:5b:de:c7:81:95: 59:21:e3:5b:1d:89:eb:80:9b:0f:5c:76:04:ea:43: 73:0d:36:17:cd:40:11:59:6f:0d:bb:b6:df:a2:4c: 98:51:78:75:c0:1f:93:46:24:b5:86:e2:8d:43:19: f3:1a:e6:9a:06:7a:22:0b:64:dc:18:4c:63:ac:9a: 8d:52:72:93:10:58:fd:f8:05:8e:58:92:bd:ec:7d: 25:b4:a6:ac:bb:a5:f2:c7:9d:98:4f:df:95:a5:72: 75:16:3b:a2:66:73:94:60:94:1c:da:4f:e9:a4:12: 62:79:60:af:8f:5c:13:4e:b1:17:2a:2d:68:a7:2b: d7:5a:df:b5:8f:54:78:14:e0:b3:9c:86:3d:5b:25: db:77:51:72:c3:bd:86:7a:3b:6c:00:dc:09:b0:43: c1:86:ce:cc:d3:5f:9e:04:61:8b:c3:58:6b:91:13: 91:93:c0:df:49:e7:aa:2f:8c:23:7c:55:f3:0f:73: 60:b3:50:71:e9:10:8f:03:9d:97:dd:f9:5d:43:df: 97:db:96:88:53:1d:ab:ba:92:d8:fb:d2:39:b7:bb: 17:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:3C:89:F6:69:D0:43:DA:AE:83:00:0A:ED:92:0C:13:7B:BB:76:03 X509v3 Authority Key Identifier: keyid:BB:A9:4E:A9:10:A3:F2:32:DF:9F:DF:2C:D4:E3:A2:7A:34:99:6B:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6lOqRCj8jLfn98s1OOiejSZa3A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:89:81:b9:45:34:d0:eb:f8:8b:f2:3c:bb:7d:2a:ac:45:87: 8e:d2:40:03:11:cc:1a:3e:9a:7d:3f:22:a8:5c:ed:83:02:ee: 5f:a7:6b:4d:f3:4c:26:cf:e9:19:f8:8c:82:a9:31:77:1e:be: 5d:80:c8:ed:07:44:37:a3:66:66:1d:89:07:26:b2:3d:6c:60: d1:34:02:9f:e0:de:50:b6:f4:b9:67:03:35:74:d5:03:55:c9: 71:b4:16:20:e6:f9:42:38:73:a3:10:1d:7d:5c:a9:42:b3:cc: c4:16:99:80:97:c7:1e:2f:3b:98:40:f6:eb:be:b9:d4:89:b0: 6e:8f:04:43:b6:b9:a1:57:83:bf:f8:87:3d:b2:b5:3a:8b:47: 33:66:4e:61:ef:ed:c5:62:db:46:1b:9a:21:16:79:79:7d:f3: 15:74:00:fa:ed:e6:d7:69:e6:1e:33:92:cd:94:ad:ff:87:fe: 95:ba:38:51:2b:fb:ad:63:09:33:5e:17:9a:57:1c:bb:06:61: f3:df:a6:26:72:93:93:8a:f5:fa:1f:8b:30:8f:07:f9:cd:47: f8:74:25:1b:97:f3:5a:c0:37:42:52:5f:cb:74:bb:85:00:d2: 1b:2d:f7:25:63:0b:db:e9:95:8d:44:28:89:14:e1:38:e2:c7: 63:ae:51:56 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBNwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JFQjAxMTAvBgNVBAUTKEJCQTk0RUE5MTBBM0YyMzJERjlGREYyQ0Q0RTNBMjdB MzQ5OTZCNzAwHhcNMjYwNDA0MjMzNzU4WhcNMjYwNDExMjMzNzU4WjAYMRYwFAYD VQQDEw02OWQxYTBkNi1mNGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz4l/tnhrDQlmQqzFbCGP4BpQJvD0Z9Q0iFkz7qXao5QB9vdyfH6tW97HgZVZ IeNbHYnrgJsPXHYE6kNzDTYXzUARWW8Nu7bfokyYUXh1wB+TRiS1huKNQxnzGuaa BnoiC2TcGExjrJqNUnKTEFj9+AWOWJK97H0ltKasu6Xyx52YT9+VpXJ1FjuiZnOU YJQc2k/ppBJieWCvj1wTTrEXKi1opyvXWt+1j1R4FOCznIY9WyXbd1Fyw72Gejts ANwJsEPBhs7M01+eBGGLw1hrkRORk8DfSeeqL4wjfFXzD3Ngs1Bx6RCPA52X3fld Q9+X25aIUx2rupLY+9I5t7sXGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHA8ifZp 0EParoMACu2SDBN7u3YDMB8GA1UdIwQYMBaAFLupTqkQo/Iy35/fLNTjono0mWtw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkVCMC8xODExM0Q0NDYx NUIxMUVDQkQ5OUQxNENDNEY5QUUwMi91NmxPcVJDajhqTGZuOThzMU9PaWVqU1ph M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U2bE9xUkNqOGpMZm45OHMxT09pZWpTWmEzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkVCMC8xODExM0Q0NDYxNUIxMUVDQkQ5OUQxNENDNEY5QUUwMi91NmxPcVJDajhq TGZuOThzMU9PaWVqU1phM0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASomBuUU00Ov4i/I8u30qrEWHjtJAAxHMGj6afT8iqFztgwLuX6drTfNMJs/p GfiMgqkxdx6+XYDI7QdEN6NmZh2JByayPWxg0TQCn+DeULb0uWcDNXTVA1XJcbQW IOb5QjhzoxAdfVypQrPMxBaZgJfHHi87mED267651Imwbo8EQ7a5oVeDv/iHPbK1 OotHM2ZOYe/txWLbRhuaIRZ5eX3zFXQA+u3m12nmHjOSzZSt/4f+lbo4USv7rWMJ M14XmlccuwZh89+mJnKTk4r1+h+LMI8H+c1H+HQlG5fzWsA3QlJfy3S7hQDSGy33 JWML2+mVjUQoiRThOOLHY65RVg== -----END CERTIFICATE-----Generated at Mon Apr 6 08:40:57 2026 by rpki-client