$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.mft File: UzSpQuM2kLKBJhu645cTXb6kE5c.mft (raw, json) Hash identifier: HUOSPBLZ9tNtM0mckCLkC7bmeV3nZwN022uvwKyBAnI= Subject key identifier: 4D:D3:08:CB:31:C4:C7:7E:0D:03:9A:CA:98:C4:8A:E9:5E:4F:64:6D Authority key identifier: 53:34:A9:42:E3:36:90:B2:81:26:1B:BA:E3:97:13:5D:BE:A4:13:97 Certificate issuer: /CN=A91DA022/serialNumber=5334A942E33690B281261BBAE397135DBEA41397 Certificate serial: 08DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzSpQuM2kLKBJhu645cTXb6kE5c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.mft Manifest number: 08D4 Signing time: Sat 04 Apr 2026 20:11:19 +0000 Manifest this update: Sat 04 Apr 2026 20:11:19 +0000 Manifest next update: Sat 11 Apr 2026 20:11:19 +0000 Files and hashes: 1: UzSpQuM2kLKBJhu645cTXb6kE5c.crl (hash: cwATHGEEoXtjD/+jgQ/uyR8SIZDWXdflt3KJZa++Xb0=) 2: DF3136A2CFF011EAB2F1D086C4F9AE02.roa (hash: bCHE5nI4rqzx/kCg0rTMONZHHcxfxtmtXkLR2EjPLb0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.crl rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzSpQuM2kLKBJhu645cTXb6kE5c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 20:11:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2269 (0x8dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA022, serialNumber=5334A942E33690B281261BBAE397135DBEA41397 Validity Not Before: Apr 4 20:11:19 2026 GMT Not After : Apr 11 20:11:19 2026 GMT Subject: CN=69d17067-4308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c9:c6:c3:32:93:9e:c4:89:7b:68:6c:8b:35: 28:97:cc:5f:00:34:53:d5:fa:dc:e5:93:15:9f:32: 2b:d1:7d:eb:36:e0:3d:3c:d4:eb:92:a8:8f:73:e8: c3:03:37:62:94:f7:a3:8f:7f:e0:7a:af:35:d1:a2: 4c:b9:85:51:03:94:15:2a:66:de:ac:36:aa:7c:e9: 70:38:16:21:52:c8:a8:82:c0:1d:3a:cc:bd:46:73: fd:2d:4d:8e:10:0e:66:d6:23:45:f5:5e:a5:d4:67: 02:d5:6a:dd:c7:12:48:f7:e5:2f:4e:d7:e4:9e:d6: 1c:39:94:a1:63:26:bc:50:ba:ff:e4:de:51:c9:1a: bd:29:3c:e9:ac:02:c2:d4:d2:2a:45:44:ba:38:b6: 9a:34:b2:43:a4:82:63:33:53:91:d6:8f:71:89:5d: ba:4c:e0:49:3c:58:c2:fb:7a:d4:04:e9:d3:02:2a: 62:09:53:ef:f6:c3:86:81:5c:00:40:89:8e:c0:6b: 9a:12:9c:6a:8d:2c:8d:9d:2d:d9:2a:2e:89:7d:75: 7f:63:1d:43:96:ac:c7:2f:ff:57:84:f8:77:a2:b9: 0b:44:4b:06:22:c1:4d:f9:c3:8c:9b:a2:c2:01:b8: cf:cb:33:73:b3:40:36:ae:d6:2e:66:8b:be:7e:d6: d3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:D3:08:CB:31:C4:C7:7E:0D:03:9A:CA:98:C4:8A:E9:5E:4F:64:6D X509v3 Authority Key Identifier: keyid:53:34:A9:42:E3:36:90:B2:81:26:1B:BA:E3:97:13:5D:BE:A4:13:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzSpQuM2kLKBJhu645cTXb6kE5c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:65:d9:1c:6a:57:23:22:11:fd:8a:54:6d:b7:fc:20:41:89: 1c:0e:c5:f6:7e:8a:1a:a7:af:c9:b9:fa:a7:a0:b7:6b:e5:fa: 65:0a:48:e1:ab:93:68:e6:f3:e3:68:ea:24:e7:2f:8b:98:06: d5:9e:e8:79:6a:18:58:ce:43:f1:1b:b0:a3:8b:b1:35:1f:99: b9:9a:61:99:2a:72:36:43:fd:ce:3f:a6:24:88:f0:b7:98:ae: 71:90:37:46:90:6e:32:32:c2:21:25:72:d8:6d:10:37:1a:09: 64:32:76:0f:90:54:fa:4c:28:a0:95:83:7b:dc:a2:b8:9b:79: d5:da:ef:a9:1d:d5:c3:85:1d:8d:5b:2b:2c:fe:bd:a8:db:3e: 03:58:ab:a5:8d:5f:86:a6:c2:73:63:bb:96:f0:5d:ef:00:a7: ab:4b:d9:85:db:7f:6e:56:6a:a9:f3:06:4d:05:22:83:fc:be: a0:f9:b5:b0:b7:bc:14:20:5a:4e:ed:0b:1c:a2:17:6f:3d:c2: a6:ff:b3:00:85:73:89:36:87:5d:65:09:7c:1a:39:35:82:36: f4:53:16:e1:9c:10:18:ae:89:1b:05:64:46:6a:23:6c:2c:7d: 89:eb:2c:4f:55:69:e6:34:74:7e:74:71:88:b0:09:b3:c1:89: 50:37:ad:9a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REEwMjIxMTAvBgNVBAUTKDUzMzRBOTQyRTMzNjkwQjI4MTI2MUJCQUUzOTcxMzVE QkVBNDEzOTcwHhcNMjYwNDA0MjAxMTE5WhcNMjYwNDExMjAxMTE5WjAYMRYwFAYD VQQDEw02OWQxNzA2Ny00MzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkcnGwzKTnsSJe2hsizUol8xfADRT1frc5ZMVnzIr0X3rNuA9PNTrkqiPc+jD AzdilPejj3/geq810aJMuYVRA5QVKmberDaqfOlwOBYhUsiogsAdOsy9RnP9LU2O EA5m1iNF9V6l1GcC1WrdxxJI9+UvTtfkntYcOZShYya8ULr/5N5RyRq9KTzprALC 1NIqRUS6OLaaNLJDpIJjM1OR1o9xiV26TOBJPFjC+3rUBOnTAipiCVPv9sOGgVwA QImOwGuaEpxqjSyNnS3ZKi6JfXV/Yx1DlqzHL/9XhPh3orkLREsGIsFN+cOMm6LC AbjPyzNzs0A2rtYuZou+ftbTNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE3TCMsx xMd+DQOaypjEiuleT2RtMB8GA1UdIwQYMBaAFFM0qULjNpCygSYbuuOXE12+pBOX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTAyMi85RDhEOTQ1OENG RUYxMUVBQjJDQjg4ODVDNEY5QUUwMi9VelNwUXVNMmtMS0JKaHU2NDVjVFhiNmtF NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V6U3BRdU0ya0xLQkpodTY0NWNUWGI2a0U1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTAyMi85RDhEOTQ1OENGRUYxMUVBQjJDQjg4ODVDNEY5QUUwMi9VelNwUXVNMmtM S0JKaHU2NDVjVFhiNmtFNWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAI2XZHGpXIyIR/YpUbbf8IEGJHA7F9n6KGqevybn6p6C3a+X6ZQpI4auTaObz 42jqJOcvi5gG1Z7oeWoYWM5D8Ruwo4uxNR+ZuZphmSpyNkP9zj+mJIjwt5iucZA3 RpBuMjLCISVy2G0QNxoJZDJ2D5BU+kwooJWDe9yiuJt51drvqR3Vw4UdjVsrLP69 qNs+A1irpY1fhqbCc2O7lvBd7wCnq0vZhdt/blZqqfMGTQUig/y+oPm1sLe8FCBa Tu0LHKIXbz3Cpv+zAIVziTaHXWUJfBo5NYI29FMW4ZwQGK6JGwVkRmojbCx9iess T1Vp5jR0fnRxiLAJs8GJUDetmg== -----END CERTIFICATE-----Generated at Mon Apr 6 09:52:51 2026 by rpki-client