$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft File: UkWN1qz9QNreWs3IL01ZLaUp58c.mft (raw, json) Hash identifier: d5S6w4vNBiWJAcbwLfNqkbnL5xr4i8fplIotKYZpWEE= Subject key identifier: 59:4C:13:C0:6E:C1:AF:F0:B1:D3:0A:92:AD:79:AE:25:A5:C7:95:C4 Authority key identifier: 52:45:8D:D6:AC:FD:40:DA:DE:5A:CD:C8:2F:4D:59:2D:A5:29:E7:C7 Certificate issuer: /CN=A91DDDA7/serialNumber=52458DD6ACFD40DADE5ACDC82F4D592DA529E7C7 Certificate serial: 09AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UkWN1qz9QNreWs3IL01ZLaUp58c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft Manifest number: 09AF Signing time: Sat 04 Apr 2026 19:44:40 +0000 Manifest this update: Sat 04 Apr 2026 19:44:39 +0000 Manifest next update: Sat 11 Apr 2026 19:44:39 +0000 Files and hashes: 1: UkWN1qz9QNreWs3IL01ZLaUp58c.crl (hash: K1ESsordU5OxrgEdVZUOEEC8GbUhZsErLvN5n9IEdRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.crl rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UkWN1qz9QNreWs3IL01ZLaUp58c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 19:44:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2479 (0x9af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDDA7, serialNumber=52458DD6ACFD40DADE5ACDC82F4D592DA529E7C7 Validity Not Before: Apr 4 19:44:39 2026 GMT Not After : Apr 11 19:44:39 2026 GMT Subject: CN=69d16a28-8198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:89:2d:a7:d8:72:2d:bc:6e:9e:d1:e8:9b:21: a1:f3:55:9c:c9:06:47:e5:18:65:aa:02:f7:9a:16: ea:94:36:9b:0d:13:cb:b5:8d:d1:9d:27:da:66:57: 82:bb:b2:8c:3f:c8:2c:00:35:51:0c:0a:04:0c:51: f1:7b:7b:fb:9c:d3:e0:e3:a3:08:14:f7:9b:1d:49: 7e:4b:63:79:a3:52:e6:ec:35:62:8a:53:47:48:5e: 0b:cb:6a:18:9f:67:02:cb:77:e1:f1:9f:45:f7:25: f7:e7:0a:8d:1c:a2:c3:dd:bf:37:5e:09:8c:72:03: 1d:96:aa:99:9a:25:c1:d7:00:87:e7:fb:90:17:77: 7f:bc:b0:e4:3c:42:bc:bb:00:07:10:f4:e2:7c:2a: 01:e9:b4:db:2b:12:23:c5:c1:de:74:4a:ed:d8:98: 25:87:0f:28:d8:3b:bf:c3:8b:5f:b8:c6:83:81:57: b9:ee:16:b1:70:2f:10:77:11:64:07:31:8d:0d:fa: b9:74:70:09:3a:b3:4a:81:3c:cf:2b:59:7d:bc:e3: 97:a5:dd:06:79:3e:aa:07:bb:69:85:ab:99:b8:ba: 54:7f:cc:46:91:0f:00:f2:25:f5:95:5c:0d:bf:0c: 82:9d:2b:a5:41:17:4f:3f:66:89:ae:29:c1:27:f8: 19:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:4C:13:C0:6E:C1:AF:F0:B1:D3:0A:92:AD:79:AE:25:A5:C7:95:C4 X509v3 Authority Key Identifier: keyid:52:45:8D:D6:AC:FD:40:DA:DE:5A:CD:C8:2F:4D:59:2D:A5:29:E7:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UkWN1qz9QNreWs3IL01ZLaUp58c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDDA7/1CBFE644A52611EA846BBC1EC4F9AE02/UkWN1qz9QNreWs3IL01ZLaUp58c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:95:a8:14:f3:75:f8:bf:50:02:4d:cb:7e:ec:c5:b9:18:44: 4a:fb:74:b4:dc:39:88:be:03:c9:21:a8:43:8c:3c:09:b7:e6: 80:0d:bc:df:38:a6:56:f8:55:b1:8b:36:8c:f8:f1:7e:ba:78: 26:7b:7c:1d:e8:9a:5f:13:0f:a6:56:c9:4a:73:51:81:f0:71: 14:3c:19:ce:15:d8:b7:95:5b:5b:ac:80:76:e9:8c:02:c9:b9: 5b:11:72:67:e8:33:a6:83:6a:9f:c8:7e:f8:21:20:71:77:fa: c5:2a:58:cf:1d:dc:53:e6:32:a0:e3:60:42:e3:a3:a9:d7:c0: 67:9a:e6:35:8b:e7:97:bb:2e:9d:55:e1:a8:b5:83:7a:c4:79: 39:1a:88:40:b2:22:e7:8c:e0:67:d5:00:1c:11:4b:4f:33:84: a4:cf:9e:f0:7a:ed:47:bf:09:db:d1:0b:02:bd:ce:42:99:2f: dd:de:2d:7f:ea:87:49:ba:3e:25:b9:79:ff:a6:12:ca:94:0b: c2:e9:fd:01:b0:d4:2a:79:ae:67:d0:cc:b3:c2:b5:94:07:05: d5:eb:58:81:4b:37:a6:17:02:32:b0:c5:70:d5:20:c6:a9:4e: 5c:30:cf:9b:0d:8e:39:c0:83:f6:25:33:f2:48:b9:01:b8:48: 71:63:a8:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REREQTcxMTAvBgNVBAUTKDUyNDU4REQ2QUNGRDQwREFERTVBQ0RDODJGNEQ1OTJE QTUyOUU3QzcwHhcNMjYwNDA0MTk0NDM5WhcNMjYwNDExMTk0NDM5WjAYMRYwFAYD VQQDEw02OWQxNmEyOC04MTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApIktp9hyLbxuntHomyGh81WcyQZH5RhlqgL3mhbqlDabDRPLtY3RnSfaZleC u7KMP8gsADVRDAoEDFHxe3v7nNPg46MIFPebHUl+S2N5o1Lm7DViilNHSF4Ly2oY n2cCy3fh8Z9F9yX35wqNHKLD3b83XgmMcgMdlqqZmiXB1wCH5/uQF3d/vLDkPEK8 uwAHEPTifCoB6bTbKxIjxcHedErt2Jglhw8o2Du/w4tfuMaDgVe57haxcC8QdxFk BzGNDfq5dHAJOrNKgTzPK1l9vOOXpd0GeT6qB7tphauZuLpUf8xGkQ8A8iX1lVwN vwyCnSulQRdPP2aJrinBJ/gZMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFlME8Bu wa/wsdMKkq15riWlx5XEMB8GA1UdIwQYMBaAFFJFjdas/UDa3lrNyC9NWS2lKefH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERERBNy8xQ0JGRTY0NEE1 MjYxMUVBODQ2QkJDMUVDNEY5QUUwMi9Va1dOMXF6OVFOcmVXczNJTDAxWkxhVXA1 OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VrV04xcXo5UU5yZVdzM0lMMDFaTGFVcDU4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RERBNy8xQ0JGRTY0NEE1MjYxMUVBODQ2QkJDMUVDNEY5QUUwMi9Va1dOMXF6OVFO cmVXczNJTDAxWkxhVXA1OGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGZWoFPN1+L9QAk3LfuzFuRhESvt0tNw5iL4DySGoQ4w8CbfmgA283zimVvhV sYs2jPjxfrp4Jnt8HeiaXxMPplbJSnNRgfBxFDwZzhXYt5VbW6yAdumMAsm5WxFy Z+gzpoNqn8h++CEgcXf6xSpYzx3cU+YyoONgQuOjqdfAZ5rmNYvnl7sunVXhqLWD esR5ORqIQLIi54zgZ9UAHBFLTzOEpM+e8HrtR78J29ELAr3OQpkv3d4tf+qHSbo+ Jbl5/6YSypQLwun9AbDUKnmuZ9DMs8K1lAcF1etYgUs3phcCMrDFcNUgxqlOXDDP mw2OOcCD9iUz8ki5AbhIcWOokQ== -----END CERTIFICATE-----Generated at Mon Apr 6 08:29:40 2026 by rpki-client