$ rpki-client -vvvf rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft File: UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft (raw, json) Hash identifier: bqR0m6kUCfiVwf+8a1+Kpmn0xmHfeDFK2EsbeOhrqz4= Subject key identifier: E8:8E:1B:70:21:BD:60:68:89:38:DA:FE:7F:18:B2:8D:53:AD:3C:57 Authority key identifier: 50:7A:0E:AF:47:51:AC:B5:2C:2C:7F:BF:98:1D:11:BC:E8:35:8B:A1 Certificate issuer: /CN=A9130803/serialNumber=507A0EAF4751ACB52C2C7FBF981D11BCE8358BA1 Certificate serial: 0CEF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHoOr0dRrLUsLH-_mB0RvOg1i6E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft Manifest number: 0CE4 Signing time: Sat 26 Sep 2026 18:31:50 +0000 Manifest this update: Sat 26 Sep 2026 18:31:50 +0000 Manifest next update: Sat 03 Oct 2026 18:31:50 +0000 Files and hashes: 1: UHoOr0dRrLUsLH-_mB0RvOg1i6E.crl (hash: PTDiSfgqAdckwoLgJvdXPpsxOZ0xrIzOGpYIeq1V3Xs=) 2: 8DC4FE4C175F11EAB3DB1F61C4F9AE02.roa (hash: xp5zsEzN7zQEFnga7J3pKyc5OlYecxV9fEuTdBE9xxU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.crl rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHoOr0dRrLUsLH-_mB0RvOg1i6E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 18:31:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3311 (0xcef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130803, serialNumber=507A0EAF4751ACB52C2C7FBF981D11BCE8358BA1 Validity Not Before: Sep 26 18:31:50 2026 GMT Not After : Oct 3 18:31:50 2026 GMT Subject: CN=6ab80f96-b034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:26:66:11:22:01:d7:36:5e:05:14:29:74:db: 8d:c7:e5:37:e2:a1:cd:c3:bc:55:bc:f3:80:2f:35: 4c:23:46:c2:b7:5f:4f:70:29:3e:28:ff:55:08:b9: 76:27:46:3e:7b:bb:b1:ff:ed:48:67:f7:77:d1:fd: e8:34:f8:3e:23:0e:81:b1:26:81:cc:03:a9:92:fb: 02:24:b7:4f:09:d9:28:97:11:6d:bd:20:23:dc:c7: c0:c0:68:73:c7:01:b8:17:b7:00:3c:f5:10:2f:6e: 5e:77:82:4c:da:18:df:ad:ed:bd:5c:41:fd:b6:a9: 91:94:78:f2:2d:fe:24:46:71:7d:be:13:66:bd:77: ce:f9:84:19:ec:4f:6d:83:78:4e:bd:f1:12:a1:d5: a3:cf:71:c7:ec:15:35:6f:b0:4a:d3:68:60:cd:93: 86:1f:ab:ff:e8:94:69:a0:5f:6d:11:3e:58:1b:44: 70:cc:23:fe:f3:19:49:ff:44:5a:a4:c6:e7:dc:79: 7b:49:b5:9a:48:4a:ec:f8:56:8e:73:d1:87:65:3c: fe:06:c6:33:24:81:9b:58:84:97:c3:b9:65:09:c2: 2e:22:62:ca:63:47:1b:f4:72:e7:0e:9e:45:83:2e: 14:3b:eb:60:53:d2:ae:f7:e8:5a:71:1d:ea:15:45: 66:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:8E:1B:70:21:BD:60:68:89:38:DA:FE:7F:18:B2:8D:53:AD:3C:57 X509v3 Authority Key Identifier: keyid:50:7A:0E:AF:47:51:AC:B5:2C:2C:7F:BF:98:1D:11:BC:E8:35:8B:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHoOr0dRrLUsLH-_mB0RvOg1i6E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130803/D86ABF00175E11EAA8A33260C4F9AE02/UHoOr0dRrLUsLH-_mB0RvOg1i6E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:67:94:b6:08:1d:f2:7f:22:aa:db:5a:1e:d1:71:15:05:9f: c5:03:7a:d0:d8:d0:32:ad:70:51:1b:59:86:12:ca:78:04:2a: b7:71:33:c0:43:5a:6b:b0:19:f9:18:bf:83:9c:c2:4f:d4:51: e9:06:a6:7e:5f:d3:32:4b:6a:0d:db:d6:07:54:ff:cd:3b:92: 0f:61:0e:7a:85:f2:17:ac:3b:d9:e7:71:e7:7d:6a:52:d3:07: 6e:41:f9:f6:c9:34:ff:f1:e2:4a:90:5a:7f:b3:d9:88:d4:4c: d6:5b:e6:4d:33:8a:00:77:9f:5d:9e:7f:18:bb:b2:fa:8f:8a: cf:7f:20:6a:92:2b:0a:9b:ae:86:05:6a:da:c8:6b:b8:b5:b3: f1:08:6d:f2:55:ba:f6:3e:5f:c7:35:57:01:a4:15:72:ba:72: 5e:e5:f8:39:bf:60:91:d3:81:c3:63:57:f0:c2:b5:8f:a3:c1: a8:40:be:af:19:d2:88:68:6e:0c:95:56:79:fb:4a:30:d1:97: 8b:38:e6:1a:f8:a8:95:f1:1a:10:5d:25:5a:43:d1:e3:47:47: af:5c:de:8c:bd:4a:d2:1d:85:49:26:49:85:1d:2c:5f:89:32: 32:ff:42:3e:43:55:b9:bd:b4:64:56:ae:43:aa:df:71:3d:8a: 95:31:a5:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA4MDMxMTAvBgNVBAUTKDUwN0EwRUFGNDc1MUFDQjUyQzJDN0ZCRjk4MUQxMUJD RTgzNThCQTEwHhcNMjYwOTI2MTgzMTUwWhcNMjYxMDAzMTgzMTUwWjAYMRYwFAYD VQQDEw02YWI4MGY5Ni1iMDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuCZmESIB1zZeBRQpdNuNx+U34qHNw7xVvPOALzVMI0bCt19PcCk+KP9VCLl2 J0Y+e7ux/+1IZ/d30f3oNPg+Iw6BsSaBzAOpkvsCJLdPCdkolxFtvSAj3MfAwGhz xwG4F7cAPPUQL25ed4JM2hjfre29XEH9tqmRlHjyLf4kRnF9vhNmvXfO+YQZ7E9t g3hOvfESodWjz3HH7BU1b7BK02hgzZOGH6v/6JRpoF9tET5YG0RwzCP+8xlJ/0Ra pMbn3Hl7SbWaSErs+FaOc9GHZTz+BsYzJIGbWISXw7llCcIuImLKY0cb9HLnDp5F gy4UO+tgU9Ku9+hacR3qFUVmhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOiOG3Ah vWBoiTja/n8Yso1TrTxXMB8GA1UdIwQYMBaAFFB6Dq9HUay1LCx/v5gdEbzoNYuh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDgwMy9EODZBQkYwMDE3 NUUxMUVBQThBMzMyNjBDNEY5QUUwMi9VSG9PcjBkUnJMVXNMSC1fbUIwUnZPZzFp NkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VIb09yMGRSckxVc0xILV9tQjBSdk9nMWk2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDgwMy9EODZBQkYwMDE3NUUxMUVBQThBMzMyNjBDNEY5QUUwMi9VSG9PcjBkUnJM VXNMSC1fbUIwUnZPZzFpNkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAP2eUtggd8n8iqttaHtFxFQWfxQN60NjQMq1wURtZhhLKeAQqt3EzwENaa7AZ +Ri/g5zCT9RR6Qamfl/TMktqDdvWB1T/zTuSD2EOeoXyF6w72edx531qUtMHbkH5 9sk0//HiSpBaf7PZiNRM1lvmTTOKAHefXZ5/GLuy+o+Kz38gapIrCpuuhgVq2shr uLWz8Qht8lW69j5fxzVXAaQVcrpyXuX4Ob9gkdOBw2NX8MK1j6PBqEC+rxnSiGhu DJVWeftKMNGXizjmGviolfEaEF0lWkPR40dHr1zejL1K0h2FSSZJhR0sX4kyMv9C PkNVub20ZFauQ6rfcT2KlTGl9A== -----END CERTIFICATE-----Generated at Sun Sep 27 08:10:14 2026 by rpki-client