$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft File: U4JkLr15mg-ChtBlSCntdoQw-eQ.mft (raw, json) Hash identifier: ygvCPBKMmtNFtgBpXjc3oc29tqcFXHaNEWBD6zJFrf4= Subject key identifier: 93:59:36:FF:1C:78:D3:6B:94:2C:A5:3E:B1:EB:2C:7C:12:E3:9E:E4 Authority key identifier: 53:82:64:2E:BD:79:9A:0F:82:86:D0:65:48:29:ED:76:84:30:F9:E4 Certificate issuer: /CN=A91E6856/serialNumber=5382642EBD799A0F8286D0654829ED768430F9E4 Certificate serial: 0F03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft Manifest number: 0EF9 Signing time: Sat 18 Apr 2026 17:32:02 +0000 Manifest this update: Sat 18 Apr 2026 17:32:02 +0000 Manifest next update: Sat 25 Apr 2026 17:32:02 +0000 Files and hashes: 1: U4JkLr15mg-ChtBlSCntdoQw-eQ.crl (hash: Y5Dywk9KI0iUGN3lpgb/oNy6bP5r3DG6LXrRQ47T0rE=) 2: 350711FA881211EE9710F928C4F9AE02.roa (hash: /Sl1+zcuYzALlR5FExQ8VOIo7ICRp9RWUJXD4AKkevs=) 3: C2213CFC2CC311F1A8A01C5D8F833773.roa (hash: tkrVJ/cVpoiHk0cmXy2YYFkJoXN9OgcqITOcYSO8FI4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.crl rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 17:32:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3843 (0xf03) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6856, serialNumber=5382642EBD799A0F8286D0654829ED768430F9E4 Validity Not Before: Apr 18 17:32:02 2026 GMT Not After : Apr 25 17:32:02 2026 GMT Subject: CN=69e3c012-a0f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:06:da:97:00:53:39:66:f7:af:14:c3:6b:fa: 0a:cc:45:b3:71:b5:64:0d:ff:1c:8c:60:9a:fa:f4: 97:36:b1:ed:12:98:67:b9:33:70:0b:9c:04:3a:43: fb:73:ad:2b:ce:97:43:51:8e:3d:63:c4:fa:4f:98: a9:d6:bb:0c:8b:1b:73:08:5c:0b:40:b6:d1:1c:d4: 28:f1:56:44:51:ab:44:f7:a7:65:15:6b:4d:ff:e5: c6:0b:73:06:09:65:ac:ec:05:f0:80:44:ed:c1:59: 78:28:83:05:46:ed:cf:e0:11:6a:cc:b9:59:75:c1: 88:31:91:a7:1c:00:4e:90:1a:ba:4e:a2:69:52:3b: 11:9e:4a:c1:ab:1a:0a:12:c7:34:46:e4:4b:38:cf: 23:70:fb:e1:0a:4e:20:a2:51:26:2f:02:54:5f:46: 5b:e8:03:fa:41:a0:b4:dd:1b:e1:d6:29:8d:81:a0: 0e:69:69:ea:f7:4e:e4:10:8e:c3:5c:bd:f1:42:ea: 08:bb:74:51:21:e5:32:1d:23:11:4e:ae:3d:8b:2c: 2f:5e:21:5b:1f:f2:a9:48:38:3a:97:9a:e1:26:eb: 0b:c4:05:07:70:96:10:73:ec:23:52:0c:cf:b1:8f: a3:40:04:6f:b0:e4:7a:69:e1:9a:d9:c4:04:87:93: f5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:59:36:FF:1C:78:D3:6B:94:2C:A5:3E:B1:EB:2C:7C:12:E3:9E:E4 X509v3 Authority Key Identifier: keyid:53:82:64:2E:BD:79:9A:0F:82:86:D0:65:48:29:ED:76:84:30:F9:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:03:30:45:eb:a2:89:ff:80:f5:d2:06:c2:e7:dc:04:5a:46: fe:de:d6:4e:ff:cd:a1:6b:08:48:21:b7:91:a4:4f:f4:51:81: 54:2b:5c:c9:46:e6:68:e8:e4:e4:71:4f:1b:fc:ad:9b:dd:e9: 17:85:a1:fe:9b:83:48:94:17:a6:ab:32:57:56:f9:17:3b:09: da:20:45:c5:2c:4e:bb:3f:8d:68:5e:e4:5f:46:97:5e:2f:6c: 46:02:aa:51:60:83:d5:cd:31:a7:73:9a:81:1f:bb:0f:48:c3: 77:a5:59:fb:46:29:65:83:8a:3a:b0:da:3c:1a:7b:08:92:e3: 36:32:1e:86:20:de:84:c1:5d:e0:de:14:43:ff:d0:36:1e:75: eb:b2:b6:da:f5:56:57:53:d6:ce:9e:38:0a:fc:d2:cc:47:d2: c2:2a:49:7d:70:b5:db:ff:41:bd:33:8e:d0:5e:c4:3c:6d:ed: 53:94:60:d3:91:1e:9c:c3:c7:a4:54:9f:3b:3b:49:ed:83:60: e6:95:de:be:a4:19:29:dc:02:9c:9d:04:de:f6:c8:31:24:78: 0c:6b:c2:0b:65:d2:e1:d6:98:45:1b:eb:4a:6d:3a:fc:f0:c4: a4:d0:e2:c0:ee:7e:c5:0d:9c:c4:3c:43:1b:7d:9e:1f:05:fa: 6d:48:04:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDwMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY4NTYxMTAvBgNVBAUTKDUzODI2NDJFQkQ3OTlBMEY4Mjg2RDA2NTQ4MjlFRDc2 ODQzMEY5RTQwHhcNMjYwNDE4MTczMjAyWhcNMjYwNDI1MTczMjAyWjAYMRYwFAYD VQQDEw02OWUzYzAxMi1hMGYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvgbalwBTOWb3rxTDa/oKzEWzcbVkDf8cjGCa+vSXNrHtEphnuTNwC5wEOkP7 c60rzpdDUY49Y8T6T5ip1rsMixtzCFwLQLbRHNQo8VZEUatE96dlFWtN/+XGC3MG CWWs7AXwgETtwVl4KIMFRu3P4BFqzLlZdcGIMZGnHABOkBq6TqJpUjsRnkrBqxoK Esc0RuRLOM8jcPvhCk4golEmLwJUX0Zb6AP6QaC03Rvh1imNgaAOaWnq907kEI7D XL3xQuoIu3RRIeUyHSMRTq49iywvXiFbH/KpSDg6l5rhJusLxAUHcJYQc+wjUgzP sY+jQARvsOR6aeGa2cQEh5P1CwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJNZNv8c eNNrlCylPrHrLHwS457kMB8GA1UdIwQYMBaAFFOCZC69eZoPgobQZUgp7XaEMPnk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjg1Ni8yQ0Q0NUZCQTlF MjQxMUU5QjE0M0JFNzFDNEY5QUUwMi9VNEprTHIxNW1nLUNodEJsU0NudGRvUXct ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U0SmtMcjE1bWctQ2h0QmxTQ250ZG9Rdy1lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Njg1Ni8yQ0Q0NUZCQTlFMjQxMUU5QjE0M0JFNzFDNEY5QUUwMi9VNEprTHIxNW1n LUNodEJsU0NudGRvUXctZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAewMwReuiif+A9dIGwufcBFpG/t7WTv/NoWsISCG3kaRP9FGBVCtcyUbmaOjk 5HFPG/ytm93pF4Wh/puDSJQXpqsyV1b5FzsJ2iBFxSxOuz+NaF7kX0aXXi9sRgKq UWCD1c0xp3OagR+7D0jDd6VZ+0YpZYOKOrDaPBp7CJLjNjIehiDehMFd4N4UQ//Q Nh5167K22vVWV1PWzp44CvzSzEfSwipJfXC12/9BvTOO0F7EPG3tU5Rg05EenMPH pFSfOztJ7YNg5pXevqQZKdwCnJ0E3vbIMSR4DGvCC2XS4daYRRvrSm06/PDEpNDi wO5+xQ2cxDxDG32eHwX6bUgE4Q== -----END CERTIFICATE-----Generated at Sun Apr 19 03:43:59 2026 by rpki-client