$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft File: u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft (raw, json) Hash identifier: OV+ghWt0Dh7x64mWCYTRFgDuqwsjllBaJhAwnjvpxtw= Subject key identifier: 0B:E9:E1:FA:70:BD:BE:28:30:CB:42:3C:16:B6:0E:CE:32:AE:9A:19 Authority key identifier: BB:EC:21:0E:75:29:FD:39:7F:13:38:FF:AC:1D:DD:78:3C:0F:AA:32 Certificate issuer: /CN=A91A2265/serialNumber=BBEC210E7529FD397F1338FFAC1DDD783C0FAA32 Certificate serial: 01FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft Manifest number: 01ED Signing time: Mon 27 Apr 2026 03:07:47 +0000 Manifest this update: Mon 27 Apr 2026 03:07:46 +0000 Manifest next update: Mon 04 May 2026 03:07:46 +0000 Files and hashes: 1: u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl (hash: XnQR8aGMWbAKqgG4EUDxVg9226NFAG/XnEqWt7FkW9s=) 2: FCD162AE508511EEBA4C0E2BC4F9AE02.roa (hash: 59acFeQy4V5pQjYYCiasQgZVB5QvS3oo/PphMyeS6gg=) 3: FD57EA90508511EEBA4C0E2BC4F9AE02.roa (hash: Hlrpuim6i7fHk0KlEnhldHqMP2jG8T1/tqWjQFLYvbs=) 4: 9F5C80A8F3EB11EFBAF62455C4F9AE02.roa (hash: dicUkqJpWBQlhJi+bO6jbQ3e2lQm0aq0QA9SUOerdpM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 03:07:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 507 (0x1fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2265, serialNumber=BBEC210E7529FD397F1338FFAC1DDD783C0FAA32 Validity Not Before: Apr 27 03:07:46 2026 GMT Not After : May 4 03:07:46 2026 GMT Subject: CN=69eed303-f37b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bc:3f:de:1a:9a:04:41:5b:15:b8:b2:ae:b2: 30:8b:fd:0f:d8:d5:a9:d0:b9:4c:c9:d5:da:c6:9c: c4:8f:04:d9:e7:97:a7:18:8d:0a:c2:b5:2a:f2:dc: a6:34:7b:eb:5f:30:09:a8:9f:e5:f3:f8:9c:62:30: 5d:9d:cd:78:d4:fa:c6:74:85:ba:c6:85:c0:43:85: b8:63:20:71:dd:3c:4d:9b:e3:9e:6c:00:52:78:a1: f7:04:51:b0:5a:18:59:12:c8:36:fb:7a:4b:9b:e6: 4b:d2:0b:a3:4a:90:5f:a3:36:1d:52:7c:4a:dd:6f: cf:79:94:45:86:24:00:19:57:0a:96:ed:fe:49:c9: e8:0a:fd:b8:70:c9:8b:c9:4c:af:bb:d0:31:c2:c6: ac:26:c4:a0:b4:5b:a4:87:2f:1c:fd:9a:85:d5:b3: 9c:ff:15:2b:fc:ba:30:32:9f:39:cf:c0:00:fa:4c: f5:bc:ac:4a:24:5d:51:c8:53:7f:8c:53:1f:b8:79: 02:61:60:44:7a:1b:49:ee:75:7f:e7:3b:f2:66:dc: 51:d2:4b:7a:1f:0f:34:c8:7f:d2:90:30:8c:3c:97: c3:08:52:2b:02:a1:37:73:10:d7:02:3c:23:13:15: a2:e1:c0:6c:28:f4:54:82:5e:d3:2c:99:20:6b:22: cd:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:E9:E1:FA:70:BD:BE:28:30:CB:42:3C:16:B6:0E:CE:32:AE:9A:19 X509v3 Authority Key Identifier: keyid:BB:EC:21:0E:75:29:FD:39:7F:13:38:FF:AC:1D:DD:78:3C:0F:AA:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:ca:39:28:ae:cc:25:ef:a9:59:60:39:ea:01:f1:9a:95:80: 51:c1:9b:54:71:8d:d6:76:5e:7e:ea:9d:6e:05:48:db:71:23: f4:2e:06:27:49:86:74:e0:76:f2:0f:5e:30:3a:18:3c:88:b2: a9:43:49:b3:09:20:67:c5:3d:ab:d9:e7:46:64:44:fa:6b:d2: 5c:a7:2b:ef:06:e0:d4:21:cd:ea:1a:05:b8:47:f2:20:ef:24: 0f:44:c4:d8:3b:47:f9:9b:bd:3f:f9:61:b4:01:6b:ff:f5:b0: d8:ff:6f:9c:93:cd:1e:56:79:20:d1:da:0b:fe:7b:ea:ac:58: 99:f1:38:26:19:ed:0b:8a:5f:f0:64:01:28:92:76:2d:33:2f: e5:d4:b5:1d:a9:0a:1a:e4:a0:60:36:27:df:11:ca:dd:53:30: 36:b5:5c:ed:c0:12:a4:6f:2d:9e:02:21:41:14:7b:6c:e7:17: f7:f4:da:1c:6d:ae:9c:d2:ae:88:35:bb:31:1f:05:06:c4:0c: 55:25:c1:d1:78:8e:c4:54:33:41:29:15:8f:9c:3a:04:5b:c7: 69:6e:37:4e:3c:d3:f9:af:25:0c:b9:ea:3c:04:5b:0b:08:fa: 54:1f:0c:b8:8e:e5:09:f8:65:ec:be:0f:a5:56:3c:4f:b5:4c: f0:0f:ec:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTIyNjUxMTAvBgNVBAUTKEJCRUMyMTBFNzUyOUZEMzk3RjEzMzhGRkFDMURERDc4 M0MwRkFBMzIwHhcNMjYwNDI3MDMwNzQ2WhcNMjYwNTA0MDMwNzQ2WjAYMRYwFAYD VQQDEw02OWVlZDMwMy1mMzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLw/3hqaBEFbFbiyrrIwi/0P2NWp0LlMydXaxpzEjwTZ55enGI0KwrUq8tym NHvrXzAJqJ/l8/icYjBdnc141PrGdIW6xoXAQ4W4YyBx3TxNm+OebABSeKH3BFGw WhhZEsg2+3pLm+ZL0gujSpBfozYdUnxK3W/PeZRFhiQAGVcKlu3+ScnoCv24cMmL yUyvu9AxwsasJsSgtFukhy8c/ZqF1bOc/xUr/LowMp85z8AA+kz1vKxKJF1RyFN/ jFMfuHkCYWBEehtJ7nV/5zvyZtxR0kt6Hw80yH/SkDCMPJfDCFIrAqE3cxDXAjwj ExWi4cBsKPRUgl7TLJkgayLNuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAvp4fpw vb4oMMtCPBa2Ds4yrpoZMB8GA1UdIwQYMBaAFLvsIQ51Kf05fxM4/6wd3Xg8D6oy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjI2NS85QTY2QUFERTUw ODUxMUVFQkEzRUZDMTFDNEY5QUUwMi91LXdoRG5VcF9UbF9FempfckIzZGVEd1Bx akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Utd2hEblVwX1RsX0V6al9yQjNkZUR3UHFqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjI2NS85QTY2QUFERTUwODUxMUVFQkEzRUZDMTFDNEY5QUUwMi91LXdoRG5VcF9U bF9FempfckIzZGVEd1BxakkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyco5KK7MJe+pWWA56gHxmpWAUcGbVHGN1nZefuqdbgVI23Ej9C4GJ0mGdOB2 8g9eMDoYPIiyqUNJswkgZ8U9q9nnRmRE+mvSXKcr7wbg1CHN6hoFuEfyIO8kD0TE 2DtH+Zu9P/lhtAFr//Ww2P9vnJPNHlZ5INHaC/576qxYmfE4JhntC4pf8GQBKJJ2 LTMv5dS1HakKGuSgYDYn3xHK3VMwNrVc7cASpG8tngIhQRR7bOcX9/TaHG2unNKu iDW7MR8FBsQMVSXB0XiOxFQzQSkVj5w6BFvHaW43TjzT+a8lDLnqPARbCwj6VB8M uI7lCfhl7L4PpVY8T7VM8A/scA== -----END CERTIFICATE-----Generated at Tue Apr 28 03:05:28 2026 by rpki-client