$ rpki-client -vvvf rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft File: uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft (raw, json) Hash identifier: +hs4i329HCmyX6xhK13VemauXZvP+jd/jm3oRLv3zCU= Subject key identifier: 35:B8:31:FF:C4:D3:74:18:6A:20:7E:5F:86:C7:9B:C9:76:B6:CD:42 Authority key identifier: B8:4C:23:96:9E:D7:9C:0E:31:C1:3C:14:50:01:2E:22:46:D3:F9:4D Certificate issuer: /CN=A911F2DF/serialNumber=B84C23969ED79C0E31C13C1450012E2246D3F94D Certificate serial: 01D3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uEwjlp7XnA4xwTwUUAEuIkbT-U0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft Manifest number: 01B8 Signing time: Fri 25 Sep 2026 04:04:13 +0000 Manifest this update: Fri 25 Sep 2026 04:04:12 +0000 Manifest next update: Fri 02 Oct 2026 04:04:12 +0000 Files and hashes: 1: uEwjlp7XnA4xwTwUUAEuIkbT-U0.crl (hash: oRAHeJgaVKpnEQgVVk0TSJbs9/EpnEeUo7xgjEWMcw4=) 2: 7FAE29E8958E11EF9CC0DD0AC4F9AE02.roa (hash: fhAGA7U+T9cLvdjqCVwOeUhhQP8Fkcx/sUcd0jEHT6k=) 3: 92E390AC958E11EF87A4040BC4F9AE02.roa (hash: bFWyMjM59KpMl2IdJ0Vj6yC7NnD6EqeOW3IYGS46pNA=) 4: 659B37E4958E11EFAFF1870AC4F9AE02.roa (hash: Oq52N/ekiWeIII4g9u3Cj+mGMLq4I3r8aDPxQbni/Mo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.crl rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uEwjlp7XnA4xwTwUUAEuIkbT-U0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 04:04:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 467 (0x1d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F2DF, serialNumber=B84C23969ED79C0E31C13C1450012E2246D3F94D Validity Not Before: Sep 25 04:04:12 2026 GMT Not After : Oct 2 04:04:12 2026 GMT Subject: CN=6ab5f2bd-570f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:8f:ff:9b:1d:c7:e5:ef:14:8a:49:94:db:dd: 67:d4:2e:36:94:c7:82:b4:68:53:12:ae:0a:ca:fc: f1:8d:c1:6a:da:01:8c:00:35:8e:d2:1f:df:03:4e: 40:c5:65:e9:19:4d:c1:a6:a8:b0:41:9b:ca:93:31: 4e:79:cb:58:c7:84:fa:d1:c0:7a:f1:e1:24:ea:66: be:57:db:a3:24:e4:b9:8b:97:21:ac:af:84:7a:b8: bd:c8:d6:6d:83:89:49:af:d2:a1:82:d0:54:bc:7d: 9d:e1:78:47:f2:a5:64:3e:25:63:d6:5b:a9:d0:58: c2:ed:c1:25:8c:af:09:1a:e4:f3:cd:e5:b7:cc:f2: 1d:18:82:02:e4:18:c2:d0:a2:be:cc:d6:8f:b7:c6: 8c:a7:6d:03:38:06:ee:89:b7:62:ce:8f:b0:c2:32: cd:bb:46:67:52:59:66:c9:47:0f:6b:fb:b8:f0:6d: f5:49:12:29:44:e0:1f:09:03:39:d6:19:42:61:2f: c6:cc:ec:f8:bc:d9:de:68:d1:26:33:3a:55:9a:1d: 70:b1:09:ee:2d:2d:4b:ee:dd:7b:49:af:67:9e:36: f4:1b:0a:b2:f4:d0:65:ec:b6:5d:e6:e3:a3:20:3d: ab:85:07:f7:66:5f:90:a5:0c:98:84:ca:ac:72:de: 2c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:B8:31:FF:C4:D3:74:18:6A:20:7E:5F:86:C7:9B:C9:76:B6:CD:42 X509v3 Authority Key Identifier: keyid:B8:4C:23:96:9E:D7:9C:0E:31:C1:3C:14:50:01:2E:22:46:D3:F9:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uEwjlp7XnA4xwTwUUAEuIkbT-U0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:34:61:b4:ac:96:c1:e1:ef:db:fa:91:02:36:28:09:bd:4e: ae:38:83:85:86:12:30:82:b9:c9:0e:54:e0:bb:81:6a:6f:af: 34:5c:da:ac:a3:52:99:c4:e1:3b:db:16:43:6f:f8:8d:eb:78: e8:8d:eb:0e:26:ea:87:8c:3a:db:b0:65:e2:14:bd:2d:27:1e: a0:4a:ea:d6:5d:9c:78:34:1c:8f:65:a0:b7:ad:0e:62:b3:86: aa:87:45:55:03:cf:ff:3f:f1:2a:44:d2:a9:0f:00:11:cf:0e: 30:c1:f5:80:ba:31:13:52:d1:7e:ac:ec:36:9e:56:a9:d2:15: 63:08:3a:f1:57:1f:f2:ad:23:dc:ae:fa:3d:a3:a2:f9:0b:82: 5a:d8:c5:d4:e9:6e:df:a9:c8:00:8f:b0:1c:b5:be:77:d5:fa: 63:31:db:b8:1c:23:13:e7:9e:7b:f7:03:5e:67:42:df:51:38: 53:5b:37:62:f3:67:5d:34:3f:3e:cc:37:66:39:fd:6d:1f:ab: 08:69:6b:d9:eb:76:70:05:08:b3:df:94:69:7b:3a:f5:3e:22: ad:e3:d1:c7:12:cc:88:40:99:b3:8e:58:28:23:4d:c2:98:a5: b9:02:a3:98:a9:43:70:35:30:14:04:7d:62:97:f3:1b:bc:2e: 3a:28:32:7b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUYyREYxMTAvBgNVBAUTKEI4NEMyMzk2OUVENzlDMEUzMUMxM0MxNDUwMDEyRTIy NDZEM0Y5NEQwHhcNMjYwOTI1MDQwNDEyWhcNMjYxMDAyMDQwNDEyWjAYMRYwFAYD VQQDEw02YWI1ZjJiZC01NzBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4I//mx3H5e8UikmU291n1C42lMeCtGhTEq4KyvzxjcFq2gGMADWO0h/fA05A xWXpGU3BpqiwQZvKkzFOectYx4T60cB68eEk6ma+V9ujJOS5i5chrK+Eeri9yNZt g4lJr9KhgtBUvH2d4XhH8qVkPiVj1lup0FjC7cEljK8JGuTzzeW3zPIdGIIC5BjC 0KK+zNaPt8aMp20DOAbuibdizo+wwjLNu0ZnUllmyUcPa/u48G31SRIpROAfCQM5 1hlCYS/GzOz4vNneaNEmMzpVmh1wsQnuLS1L7t17Sa9nnjb0Gwqy9NBl7LZd5uOj ID2rhQf3Zl+QpQyYhMqsct4sgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDW4Mf/E 03QYaiB+X4bHm8l2ts1CMB8GA1UdIwQYMBaAFLhMI5ae15wOMcE8FFABLiJG0/lN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjJERi8wMDUwMUZEMjIz QUUxMUVGOTQ5M0Y0NUNDNEY5QUUwMi91RXdqbHA3WG5BNHh3VHdVVUFFdUlrYlQt VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3VFd2pscDdYbkE0eHdUd1VVQUV1SWtiVC1VMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjJERi8wMDUwMUZEMjIzQUUxMUVGOTQ5M0Y0NUNDNEY5QUUwMi91RXdqbHA3WG5B NHh3VHdVVUFFdUlrYlQtVTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABDRhtKyWweHv2/qRAjYoCb1OrjiDhYYSMIK5yQ5U4LuBam+vNFzarKNSmcTh O9sWQ2/4jet46I3rDibqh4w627Bl4hS9LSceoErq1l2ceDQcj2Wgt60OYrOGqodF VQPP/z/xKkTSqQ8AEc8OMMH1gLoxE1LRfqzsNp5WqdIVYwg68Vcf8q0j3K76PaOi +QuCWtjF1Olu36nIAI+wHLW+d9X6YzHbuBwjE+eee/cDXmdC31E4U1s3YvNnXTQ/ Psw3Zjn9bR+rCGlr2et2cAUIs9+UaXs69T4irePRxxLMiECZs45YKCNNwpiluQKj mKlDcDUwFAR9YpfzG7wuOigyew== -----END CERTIFICATE-----Generated at Sat Sep 26 01:53:59 2026 by rpki-client