$ rpki-client -vvf rpki.apnic.net/member_repository/A911F587/C1BA1A22136E11F1AD791BA3313D8C67/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.mft File: ufxcFLLSdSnVDm5ZPajLCqh9ZRA.mft (raw, json) Hash identifier: t+9iOK42aw4re3Rl8jqvq3CqH7SQOiBzNxWeaF1d4Zw= Subject key identifier: C0:E6:13:E6:6C:8F:C2:4B:AB:C9:C1:DF:F9:D8:7D:52:BB:99:50:36 Authority key identifier: B9:FC:5C:14:B2:D2:75:29:D5:0E:6E:59:3D:A8:CB:0A:A8:7D:65:10 Certificate issuer: /CN=A911F587/serialNumber=B9FC5C14B2D27529D50E6E593DA8CB0AA87D6510 Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F587/C1BA1A22136E11F1AD791BA3313D8C67/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.mft Manifest number: 2D Signing time: Mon 11 May 2026 08:57:46 +0000 Manifest this update: Mon 11 May 2026 08:57:46 +0000 Manifest next update: Mon 18 May 2026 08:57:46 +0000 Files and hashes: 1: ufxcFLLSdSnVDm5ZPajLCqh9ZRA.crl (hash: QiQV+W/e4HO0U+798NJPRHGOlxKvz3ZeiDEWcwebbxs=) 2: CE3E7CF6136F11F1982A4804323D8C67.roa (hash: 433GVnEHsEmqM+RA2zhP/NFczVjY5LHUX58RsvVfVKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F587/C1BA1A22136E11F1AD791BA3313D8C67/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.crl rsync://rpki.apnic.net/member_repository/A911F587/C1BA1A22136E11F1AD791BA3313D8C67/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 08:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F587, serialNumber=B9FC5C14B2D27529D50E6E593DA8CB0AA87D6510 Validity Not Before: May 11 08:57:46 2026 GMT Not After : May 18 08:57:46 2026 GMT Subject: CN=6a019a0a-06ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e1:7b:ae:61:88:db:06:c9:ba:47:72:db:5f: 6c:39:18:f4:f0:14:fa:a7:c8:94:e9:b4:9e:6b:f4: 98:4d:54:58:bb:2f:e6:e8:d8:81:d5:bc:79:ea:84: 57:9f:fe:97:c0:04:6b:78:d4:0a:fe:9d:3d:5d:66: 2c:44:23:67:34:76:8f:a4:41:f7:53:35:f7:0e:e8: 36:e7:b9:ef:6e:34:35:be:b8:d7:48:23:25:6f:22: 40:61:b4:61:56:28:ca:29:81:83:ba:4c:8e:0b:ec: b2:0f:17:ba:68:2b:72:3c:03:1e:d4:86:dd:a3:09: 6c:35:cc:fa:eb:40:b4:75:d3:54:23:05:45:59:1a: a1:94:ce:7c:fd:05:af:10:38:7d:96:84:1c:79:5a: 4d:e5:1d:5d:19:71:bc:53:e7:08:f8:f1:86:6d:d6: c8:4b:1e:de:81:c1:32:c4:b2:a7:1c:61:60:bb:4d: 5e:41:c4:f7:c9:3f:e9:3e:ba:d5:d1:39:a8:e6:72: b6:4f:04:33:1f:c4:af:1f:a0:33:36:ca:24:8d:f1: d2:a3:51:29:4e:cd:96:17:b5:27:a2:77:49:5c:2d: 34:7d:8b:61:66:89:1c:78:af:68:32:e3:0b:3c:11: 26:8d:89:80:aa:58:1d:f4:46:04:1e:47:3d:ea:0b: 5d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:E6:13:E6:6C:8F:C2:4B:AB:C9:C1:DF:F9:D8:7D:52:BB:99:50:36 X509v3 Authority Key Identifier: keyid:B9:FC:5C:14:B2:D2:75:29:D5:0E:6E:59:3D:A8:CB:0A:A8:7D:65:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F587/C1BA1A22136E11F1AD791BA3313D8C67/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F587/C1BA1A22136E11F1AD791BA3313D8C67/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:96:ab:0c:f3:c8:2a:8a:7e:b8:1f:76:f0:87:e5:3c:68:76: ba:3b:92:34:d5:85:7e:15:da:45:c9:d1:28:09:40:6c:59:12: 32:6d:85:84:e7:d3:12:84:16:54:da:b4:4e:b5:25:f6:8e:5f: ef:c6:16:9a:48:e7:02:d8:8a:20:4a:d3:f1:5c:ff:ae:bd:a6: 08:7d:3a:e6:a8:58:5c:8c:51:8c:16:e9:11:f2:ff:df:26:2f: 1c:6a:11:17:f1:c7:9d:8d:54:34:b8:43:1c:03:07:05:b2:45: b9:6d:73:3c:f5:12:9c:81:80:c7:e4:2d:e1:ad:2c:34:10:6f: c5:34:a6:b3:93:c8:5a:fc:f3:fe:93:ed:bb:92:dc:9d:11:f2: 80:55:31:3d:fd:73:08:a3:c0:ca:26:98:a6:b8:a1:25:09:c9: 2b:5a:b9:93:9b:c3:b8:6d:a4:f6:e4:27:ba:02:85:a2:e1:0e: 0b:0c:43:70:fe:32:f1:48:d0:33:11:e8:c0:e6:a2:26:e1:dd: 5e:97:01:bf:d1:b5:52:e6:62:0a:27:af:34:12:0a:c5:e4:c5: c3:71:c5:c5:63:31:35:a2:d3:a1:4b:3b:f9:ca:7c:a0:85:7d: f1:2e:84:c7:31:c9:e5:35:7e:78:16:3b:c8:d4:b2:72:0f:bf: 34:a6:b1:74 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RjU4NzExMC8GA1UEBRMoQjlGQzVDMTRCMkQyNzUyOUQ1MEU2RTU5M0RBOENCMEFB ODdENjUxMDAeFw0yNjA1MTEwODU3NDZaFw0yNjA1MTgwODU3NDZaMBgxFjAUBgNV BAMTDTZhMDE5YTBhLTA2ZWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDY4XuuYYjbBsm6R3LbX2w5GPTwFPqnyJTptJ5r9JhNVFi7L+bo2IHVvHnqhFef /pfABGt41Ar+nT1dZixEI2c0do+kQfdTNfcO6Dbnue9uNDW+uNdIIyVvIkBhtGFW KMopgYO6TI4L7LIPF7poK3I8Ax7Uht2jCWw1zPrrQLR101QjBUVZGqGUznz9Ba8Q OH2WhBx5Wk3lHV0ZcbxT5wj48YZt1shLHt6BwTLEsqccYWC7TV5BxPfJP+k+utXR OajmcrZPBDMfxK8foDM2yiSN8dKjUSlOzZYXtSeid0lcLTR9i2FmiRx4r2gy4ws8 ESaNiYCqWB30RgQeRz3qC10LAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUwOYT5myP wkurycHf+dh9UruZUDYwHwYDVR0jBBgwFoAUufxcFLLSdSnVDm5ZPajLCqh9ZRAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFGNTg3L0MxQkExQTIyMTM2 RTExRjFBRDc5MUJBMzMxM0Q4QzY3L3VmeGNGTExTZFNuVkRtNVpQYWpMQ3FoOVpS QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdWZ4Y0ZMTFNkU25WRG01WlBhakxDcWg5WlJBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFG NTg3L0MxQkExQTIyMTM2RTExRjFBRDc5MUJBMzMxM0Q4QzY3L3VmeGNGTExTZFNu VkRtNVpQYWpMQ3FoOVpSQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCUlqsM88gqin64H3bwh+U8aHa6O5I01YV+FdpFydEoCUBsWRIybYWE59MShBZU 2rROtSX2jl/vxhaaSOcC2IogStPxXP+uvaYIfTrmqFhcjFGMFukR8v/fJi8cahEX 8cedjVQ0uEMcAwcFskW5bXM89RKcgYDH5C3hrSw0EG/FNKazk8ha/PP+k+27ktyd EfKAVTE9/XMIo8DKJpimuKElCckrWrmTm8O4baT25Ce6AoWi4Q4LDENw/jLxSNAz EejA5qIm4d1elwG/0bVS5mIKJ680EgrF5MXDccXFYzE1otOhSzv5ynyghX3xLoTH McnlNX54FjvI1LJyD780prF0 -----END CERTIFICATE-----Generated at Tue May 12 22:40:21 2026 by rpki-client