$ rpki-client -vvf rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.mft File: UKsTEAVD9kbAxVN13vhQXRTzZrg.mft (raw, json) Hash identifier: kx0FHjFug3R3NjyW/94UGG8GpYHdqXaN36T8nGffWPo= Subject key identifier: 44:39:49:39:46:E8:0D:27:FF:17:C9:23:F8:38:5C:20:72:85:9B:CA Authority key identifier: 50:AB:13:10:05:43:F6:46:C0:C5:53:75:DE:F8:50:5D:14:F3:66:B8 Certificate issuer: /CN=A911270F/serialNumber=50AB13100543F646C0C55375DEF8505D14F366B8 Certificate serial: 0BD3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKsTEAVD9kbAxVN13vhQXRTzZrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.mft Manifest number: 0BCC Signing time: Tue 24 Mar 2026 18:44:27 +0000 Manifest this update: Tue 24 Mar 2026 18:44:27 +0000 Manifest next update: Tue 31 Mar 2026 18:44:27 +0000 Files and hashes: 1: UKsTEAVD9kbAxVN13vhQXRTzZrg.crl (hash: cwS6gt01Xtfx4Ycex+cWH1pf8OSPrpD/0MdxKKkFsVY=) 2: 74D2ABEE39F811EAA4343534C4F9AE02.roa (hash: T6YrX1BU6dApOgowqkefgGFLCyA6KVTnb1TrMgGu4eQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.crl rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKsTEAVD9kbAxVN13vhQXRTzZrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:44:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3027 (0xbd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911270F, serialNumber=50AB13100543F646C0C55375DEF8505D14F366B8 Validity Not Before: Mar 24 18:44:27 2026 GMT Not After : Mar 31 18:44:27 2026 GMT Subject: CN=69c2db8b-be75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a1:fe:d1:b5:db:42:48:70:50:96:5f:f2:b3: e0:5d:d0:1b:4e:b4:7f:05:fe:c2:6f:62:92:47:77: 5b:a3:6a:35:14:77:7e:46:ba:23:fc:74:d5:35:e6: d6:2c:24:ea:cc:3e:d4:28:a1:26:c8:0c:6f:7f:72: b7:ad:c6:97:37:3d:31:5d:30:75:c4:cd:3a:dc:15: b4:4c:aa:54:6e:97:48:44:52:6c:d0:db:ef:e7:99: c3:ad:36:7d:5c:13:88:c6:90:08:2d:1a:37:45:b7: c4:22:57:10:5d:98:1a:6c:e7:38:36:f1:d1:49:2c: 53:49:75:57:63:67:71:b1:f3:17:1f:56:f0:83:3a: ad:c8:ed:99:a1:d7:2a:3f:e2:ad:e7:4a:ed:40:e1: 8c:75:d9:57:72:b3:24:7c:25:6f:a6:7e:01:3c:99: 4d:6f:0d:2b:7b:18:a3:88:05:9a:ab:14:38:7b:cf: a1:ce:0d:49:e8:d3:34:c8:86:c1:0e:ed:78:42:e0: fb:1c:fb:19:bd:c2:b3:48:32:e0:a0:03:d5:4c:43: 5d:37:0c:5d:27:50:37:56:c8:1e:4f:37:8b:a6:dd: f9:8b:e2:f6:9c:29:44:d1:a6:22:69:94:00:f1:6d: 44:02:4a:ff:49:38:2c:d6:cc:d0:68:db:21:09:ff: dd:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:39:49:39:46:E8:0D:27:FF:17:C9:23:F8:38:5C:20:72:85:9B:CA X509v3 Authority Key Identifier: keyid:50:AB:13:10:05:43:F6:46:C0:C5:53:75:DE:F8:50:5D:14:F3:66:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKsTEAVD9kbAxVN13vhQXRTzZrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:39:0b:64:cc:2c:92:87:6c:ce:99:86:9c:51:1b:f2:79:10: 0e:21:1c:4e:32:30:71:7e:89:c6:08:78:81:86:87:82:2d:44: ec:d3:ae:45:78:cd:e9:98:dc:fe:7c:b4:68:42:fd:96:c6:b0: c2:47:bc:75:bc:39:d9:92:a8:fa:28:2a:0e:a5:54:75:da:6b: 24:82:da:00:aa:1f:8a:72:c5:4c:19:46:e7:26:8d:a1:f9:7c: 8d:46:7e:53:42:29:87:32:ca:59:c8:7e:5f:a1:36:36:12:47: 93:2a:45:1f:1c:99:f1:ac:f1:a3:8b:d1:a6:51:4b:3f:5e:26: ea:11:7c:bf:31:d1:64:e9:7c:e6:d1:cd:b1:58:45:d7:63:40: a9:15:7d:6d:54:e1:83:c2:33:1a:a7:df:39:5a:c4:5d:f3:71: 16:9b:8f:b5:56:52:ab:23:13:4e:a5:22:57:53:77:bd:15:c9: 98:b8:fc:a1:f0:e9:8c:4d:7c:62:cd:a9:26:61:28:84:61:58: 25:e4:75:b4:09:1c:c0:62:26:97:f6:75:89:8e:87:26:ad:9c: 3f:29:6b:f6:7c:2c:02:cf:40:f2:a3:c3:81:3a:af:7e:fb:bf: 4d:39:55:8f:10:da:c6:37:1f:e9:fe:62:12:b6:d8:0f:d6:44: a7:c1:4b:59 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI3MEYxMTAvBgNVBAUTKDUwQUIxMzEwMDU0M0Y2NDZDMEM1NTM3NURFRjg1MDVE MTRGMzY2QjgwHhcNMjYwMzI0MTg0NDI3WhcNMjYwMzMxMTg0NDI3WjAYMRYwFAYD VQQDEw02OWMyZGI4Yi1iZTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1qH+0bXbQkhwUJZf8rPgXdAbTrR/Bf7Cb2KSR3dbo2o1FHd+Rroj/HTVNebW LCTqzD7UKKEmyAxvf3K3rcaXNz0xXTB1xM063BW0TKpUbpdIRFJs0Nvv55nDrTZ9 XBOIxpAILRo3RbfEIlcQXZgabOc4NvHRSSxTSXVXY2dxsfMXH1bwgzqtyO2Zodcq P+Kt50rtQOGMddlXcrMkfCVvpn4BPJlNbw0rexijiAWaqxQ4e8+hzg1J6NM0yIbB Du14QuD7HPsZvcKzSDLgoAPVTENdNwxdJ1A3VsgeTzeLpt35i+L2nClE0aYiaZQA 8W1EAkr/STgs1szQaNshCf/daQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEQ5STlG 6A0n/xfJI/g4XCByhZvKMB8GA1UdIwQYMBaAFFCrExAFQ/ZGwMVTdd74UF0U82a4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjcwRi8wNUQ4MkVFMDM5 RjcxMUVBOTY3RUJBMkVDNEY5QUUwMi9VS3NURUFWRDlrYkF4Vk4xM3ZoUVhSVHpa cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VLc1RFQVZEOWtiQXhWTjEzdmhRWFJUelpyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjcwRi8wNUQ4MkVFMDM5RjcxMUVBOTY3RUJBMkVDNEY5QUUwMi9VS3NURUFWRDlr YkF4Vk4xM3ZoUVhSVHpacmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlTkLZMwskodszpmGnFEb8nkQDiEcTjIwcX6Jxgh4gYaHgi1E7NOuRXjN6Zjc /ny0aEL9lsawwke8dbw52ZKo+igqDqVUddprJILaAKofinLFTBlG5yaNofl8jUZ+ U0IphzLKWch+X6E2NhJHkypFHxyZ8azxo4vRplFLP14m6hF8vzHRZOl85tHNsVhF 12NAqRV9bVThg8IzGqffOVrEXfNxFpuPtVZSqyMTTqUiV1N3vRXJmLj8ofDpjE18 Ys2pJmEohGFYJeR1tAkcwGIml/Z1iY6HJq2cPylr9nwsAs9A8qPDgTqvfvu/TTlV jxDaxjcf6f5iErbYD9ZEp8FLWQ== -----END CERTIFICATE-----Generated at Thu Mar 26 19:41:06 2026 by rpki-client