$ rpki-client -vvf rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft File: uFvtmb90CrrVo5nJ31_plipt6PE.mft (raw, json) Hash identifier: KagqEP3P7942CmjTlKLDg5H44EVVfXbVlaV12CiNq/Q= Subject key identifier: CE:05:F1:37:90:CD:0A:C9:D7:B1:16:C1:DD:06:4D:8F:45:DD:50:0D Authority key identifier: B8:5B:ED:99:BF:74:0A:BA:D5:A3:99:C9:DF:5F:E9:96:2A:6D:E8:F1 Certificate issuer: /CN=A9195DE5/serialNumber=B85BED99BF740ABAD5A399C9DF5FE9962A6DE8F1 Certificate serial: 089F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft Manifest number: 087D Signing time: Sun 26 Apr 2026 20:34:55 +0000 Manifest this update: Sun 26 Apr 2026 20:34:54 +0000 Manifest next update: Sun 03 May 2026 20:34:54 +0000 Files and hashes: 1: uFvtmb90CrrVo5nJ31_plipt6PE.crl (hash: Kklwy1vDF5U48vWW+vV82q0jcQLqZqyPFREHLj5ktzs=) 2: C7ADA138F4C011EAA7B25986C4F9AE02.roa (hash: ZkPeqkCK4GzWM6lROTZZvtSHrWSOnvfHR71wg6XscYk=) 3: 70017B5CF74111EF98C99938C4F9AE02.roa (hash: jxl3GtZdPk/wIlS8xEDXVQsh03gFjRHfreaaVHkcJzI=) 4: C8633DEAF4C011EAA7B25986C4F9AE02.roa (hash: 2UKR5Ne+INL3gYP5vC9gTKEWBFAKo4pvwX1cl9KzfiQ=) 5: 709F917AF74111EF98C99938C4F9AE02.roa (hash: eYc05p+UNzblqab1mmE9/I2cp5gOiQU4HhXVCP3mmJg=) 6: C6EDD52EF4C011EAA7B25986C4F9AE02.roa (hash: qaJjlXwaj9JptzN90zbu/ByDY7c80MUFCf+ZwtqowYg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.crl rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:34:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2207 (0x89f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195DE5, serialNumber=B85BED99BF740ABAD5A399C9DF5FE9962A6DE8F1 Validity Not Before: Apr 26 20:34:54 2026 GMT Not After : May 3 20:34:54 2026 GMT Subject: CN=69ee76ee-e73d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:64:09:17:9c:de:e6:49:09:e3:c9:af:f9:44: 06:f2:24:6b:b3:03:ce:da:b7:5e:35:f4:53:ea:d5: 25:9a:7c:cd:5b:31:e6:b6:14:5e:39:0d:f7:ff:77: b2:8f:b8:ab:ce:e3:51:6c:19:0a:e9:e9:ba:3c:13: bd:52:60:7f:79:c4:ab:91:8d:5c:3c:30:1c:b0:c6: 71:cc:29:42:7f:7b:7e:e1:27:c5:ff:b6:56:0c:6c: 27:7d:9d:69:4f:8a:9e:5a:e3:e4:91:f5:04:14:42: 2c:55:92:47:82:fc:0f:1e:ad:07:b3:dd:2e:a0:54: 92:c1:c0:d2:82:a7:c0:e3:dd:0c:42:7d:6a:c2:79: 46:01:09:fe:6a:c9:ac:cc:e2:b2:12:0d:bf:5a:87: 1d:bf:84:27:47:5f:9b:15:74:00:d4:b9:14:0a:f0: 07:37:8f:a9:0c:82:a4:59:bf:c6:ad:62:6c:c3:a9: cf:fa:2a:a1:49:01:02:05:a3:40:b8:10:ee:5b:e6: 37:1a:47:e6:56:5f:90:bf:fa:b3:e3:f8:2c:94:f9: 48:ac:b3:35:e8:a6:1d:80:c8:0e:c1:2f:e3:fd:8c: 44:e9:f0:0f:37:78:f8:6b:81:86:a5:25:9f:0b:f7: 6e:2f:95:00:3f:87:b9:3f:2d:89:01:e1:e0:87:30: 00:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:05:F1:37:90:CD:0A:C9:D7:B1:16:C1:DD:06:4D:8F:45:DD:50:0D X509v3 Authority Key Identifier: keyid:B8:5B:ED:99:BF:74:0A:BA:D5:A3:99:C9:DF:5F:E9:96:2A:6D:E8:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:da:ed:ae:26:9e:04:de:49:c4:a1:d0:9a:0e:d0:67:54:98: f7:be:d7:b5:5e:07:9f:88:81:4b:36:8d:e5:de:d8:91:87:ea: 17:d0:96:ce:cd:d8:3d:66:9f:5d:a0:eb:66:42:b3:58:ec:77: 9e:af:62:0f:c8:70:0a:d8:4d:a3:a1:5b:8e:03:fb:20:c7:41: 1c:b3:42:4d:d3:56:82:b7:5b:a6:71:3a:9b:a0:83:9b:2c:42: f3:0b:d4:1f:bd:15:84:05:df:55:3f:db:e9:f4:dd:96:85:22: bb:77:59:8f:94:aa:97:b7:2a:c9:c4:46:57:dd:cd:66:70:a0: 1f:69:3c:fb:0e:ed:20:83:c3:6e:8e:be:a8:c6:78:29:70:00: e9:17:7b:4f:2d:ee:0d:3e:14:36:86:55:ae:7d:a3:9f:1b:ca: 3b:9a:f0:06:43:cd:e2:16:67:cc:63:1d:f2:64:f7:4d:1b:e5: e3:33:d4:b4:24:88:d9:cb:f5:cf:ca:9e:c7:06:df:7a:19:af: 33:4a:8b:4f:c6:14:47:cf:e2:da:54:68:90:39:86:d5:3a:bd: f3:13:e9:bd:00:64:3f:49:f6:3e:e0:db:aa:a1:c1:51:71:5c: 55:93:e2:30:65:51:fe:7e:2e:bf:5f:1e:b5:da:0f:60:3d:6c: b0:8e:d9:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVERTUxMTAvBgNVBAUTKEI4NUJFRDk5QkY3NDBBQkFENUEzOTlDOURGNUZFOTk2 MkE2REU4RjEwHhcNMjYwNDI2MjAzNDU0WhcNMjYwNTAzMjAzNDU0WjAYMRYwFAYD VQQDEw02OWVlNzZlZS1lNzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGQJF5ze5kkJ48mv+UQG8iRrswPO2rdeNfRT6tUlmnzNWzHmthReOQ33/3ey j7irzuNRbBkK6em6PBO9UmB/ecSrkY1cPDAcsMZxzClCf3t+4SfF/7ZWDGwnfZ1p T4qeWuPkkfUEFEIsVZJHgvwPHq0Hs90uoFSSwcDSgqfA490MQn1qwnlGAQn+asms zOKyEg2/Wocdv4QnR1+bFXQA1LkUCvAHN4+pDIKkWb/GrWJsw6nP+iqhSQECBaNA uBDuW+Y3GkfmVl+Qv/qz4/gslPlIrLM16KYdgMgOwS/j/YxE6fAPN3j4a4GGpSWf C/duL5UAP4e5Py2JAeHghzAAIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM4F8TeQ zQrJ17EWwd0GTY9F3VANMB8GA1UdIwQYMBaAFLhb7Zm/dAq61aOZyd9f6ZYqbejx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NURFNS9FM0VENjVEOEY0 QkUxMUVBOUMzNUZFNkFDNEY5QUUwMi91RnZ0bWI5MENyclZvNW5KMzFfcGxpcHQ2 UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VGdnRtYjkwQ3JyVm81bkozMV9wbGlwdDZQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NURFNS9FM0VENjVEOEY0QkUxMUVBOUMzNUZFNkFDNEY5QUUwMi91RnZ0bWI5MENy clZvNW5KMzFfcGxpcHQ2UEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbdrtriaeBN5JxKHQmg7QZ1SY977XtV4Hn4iBSzaN5d7YkYfqF9CWzs3YPWaf XaDrZkKzWOx3nq9iD8hwCthNo6FbjgP7IMdBHLNCTdNWgrdbpnE6m6CDmyxC8wvU H70VhAXfVT/b6fTdloUiu3dZj5Sql7cqycRGV93NZnCgH2k8+w7tIIPDbo6+qMZ4 KXAA6Rd7Ty3uDT4UNoZVrn2jnxvKO5rwBkPN4hZnzGMd8mT3TRvl4zPUtCSI2cv1 z8qexwbfehmvM0qLT8YUR8/i2lRokDmG1Tq98xPpvQBkP0n2PuDbqqHBUXFcVZPi MGVR/n4uv18etdoPYD1ssI7ZMQ== -----END CERTIFICATE-----Generated at Mon Apr 27 17:25:52 2026 by rpki-client