$ rpki-client -vvf rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.mft File: UiKhYZ3_8Eywl7tRagdMzR2v_Hg.mft (raw, json) Hash identifier: fcDu2npd5V6z+IKecea6uuq9TIqeaqIc2rCOaG+qovM= Subject key identifier: 3F:0B:58:35:A1:C0:68:A7:E8:9E:DC:BB:6E:7A:62:BB:EC:13:80:74 Authority key identifier: 52:22:A1:61:9D:FF:F0:4C:B0:97:BB:51:6A:07:4C:CD:1D:AF:FC:78 Certificate issuer: /CN=A9136D7D/serialNumber=5222A1619DFFF04CB097BB516A074CCD1DAFFC78 Certificate serial: 02FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.mft Manifest number: 02EF Signing time: Wed 13 May 2026 01:25:07 +0000 Manifest this update: Wed 13 May 2026 01:25:07 +0000 Manifest next update: Wed 20 May 2026 01:25:07 +0000 Files and hashes: 1: UiKhYZ3_8Eywl7tRagdMzR2v_Hg.crl (hash: zZe8t9jOfdIV6w/Rr96dA9j6TUWC4GGnMqL3Miqmyng=) 2: A9E3A5041C3411EFBF05095BC4F9AE02.roa (hash: +F1FZtsTrw14W4WmmJaPNvqLxkx0Lf//1RCLaJV77j0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.crl rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 01:25:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 763 (0x2fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136D7D, serialNumber=5222A1619DFFF04CB097BB516A074CCD1DAFFC78 Validity Not Before: May 13 01:25:07 2026 GMT Not After : May 20 01:25:07 2026 GMT Subject: CN=6a03d2f3-3abb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ec:5a:b4:ec:fd:8c:fa:a5:60:71:b8:78:9a: 2a:d1:de:45:02:f0:07:60:2c:cb:8b:68:ee:26:55: 05:89:d9:05:4c:34:b7:03:15:4f:2f:0b:52:f1:ce: 3b:9f:2e:0c:0c:24:e0:55:ba:59:0a:01:b2:0f:d4: 5b:2b:8e:bb:ba:31:75:cb:02:16:86:90:b1:34:68: b8:8a:d9:0a:9c:bc:ab:53:52:4c:af:a9:e6:2d:3d: 16:c8:2d:4e:2f:e6:3c:65:ea:86:03:51:29:46:80: 17:78:df:1c:33:16:39:cf:f3:6c:7e:33:60:18:3f: bf:fc:ea:8e:fc:95:a2:75:96:35:01:fd:a4:7b:e7: 67:31:18:56:cd:b4:9a:f1:85:f1:87:bf:e9:5a:99: b0:74:e9:7b:0a:4a:05:bf:6a:3c:6f:2b:d2:63:b7: f7:d6:86:78:62:ad:33:9e:d3:d6:90:18:30:c5:e1: 90:66:18:a4:7c:b4:bd:74:90:b4:79:a0:50:6c:fb: 1d:83:d0:68:59:a4:96:12:cf:84:70:8b:34:7c:bf: d5:ba:be:d3:d4:5f:19:b7:1c:3d:17:7e:bc:d1:f3: 16:10:0d:58:3f:c1:8e:78:31:dc:d9:f8:1f:f8:af: 99:89:21:1b:da:c9:0a:23:de:c2:1d:59:a9:d7:fe: f2:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:0B:58:35:A1:C0:68:A7:E8:9E:DC:BB:6E:7A:62:BB:EC:13:80:74 X509v3 Authority Key Identifier: keyid:52:22:A1:61:9D:FF:F0:4C:B0:97:BB:51:6A:07:4C:CD:1D:AF:FC:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:e1:69:9b:56:e7:87:04:79:36:6f:b2:61:24:55:12:c6:07: 23:bf:70:d2:19:ac:68:e6:47:51:0a:4c:a1:aa:1d:aa:68:4a: 59:8e:ab:bd:89:3d:26:a0:32:f9:94:69:cb:d6:4b:e2:25:24: 91:29:84:21:c9:fc:e6:8c:98:7c:45:60:52:ed:98:bb:b2:78: 04:dd:1e:62:bb:5c:d4:ba:9a:84:f6:0f:e4:85:f8:a0:f1:99: f2:68:49:0e:58:a7:b7:46:67:f7:34:e3:76:3e:8e:38:e8:6e: f9:01:f7:1b:66:dc:79:98:e7:0f:20:bd:20:38:ed:20:7e:91: 1b:d8:96:99:67:0c:c3:3b:11:91:79:3c:be:8b:8e:e3:b5:69: d1:9a:9f:88:aa:c3:24:8e:b1:2e:cf:c9:27:24:42:a0:28:a7: 95:13:83:c0:d6:f1:c3:92:5b:4e:83:15:72:d7:ae:7f:75:e3: 02:d0:a3:bd:d0:82:06:28:fc:59:34:d6:1e:50:24:31:cf:ce: 33:4a:56:13:13:5e:83:d0:9f:98:3c:80:1d:8d:2d:e5:7c:a6: 18:41:ed:d2:81:24:e5:9e:af:86:3d:37:60:34:1a:0c:c8:ff: 31:51:33:14:67:f8:01:c2:64:29:e1:90:ec:c5:1b:3e:cb:71: 00:bc:a3:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAvswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZEN0QxMTAvBgNVBAUTKDUyMjJBMTYxOURGRkYwNENCMDk3QkI1MTZBMDc0Q0NE MURBRkZDNzgwHhcNMjYwNTEzMDEyNTA3WhcNMjYwNTIwMDEyNTA3WjAYMRYwFAYD VQQDEw02YTAzZDJmMy0zYWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwexatOz9jPqlYHG4eJoq0d5FAvAHYCzLi2juJlUFidkFTDS3AxVPLwtS8c47 ny4MDCTgVbpZCgGyD9RbK467ujF1ywIWhpCxNGi4itkKnLyrU1JMr6nmLT0WyC1O L+Y8ZeqGA1EpRoAXeN8cMxY5z/NsfjNgGD+//OqO/JWidZY1Af2ke+dnMRhWzbSa 8YXxh7/pWpmwdOl7CkoFv2o8byvSY7f31oZ4Yq0zntPWkBgwxeGQZhikfLS9dJC0 eaBQbPsdg9BoWaSWEs+EcIs0fL/Vur7T1F8Ztxw9F3680fMWEA1YP8GOeDHc2fgf +K+ZiSEb2skKI97CHVmp1/7y4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD8LWDWh wGin6J7cu256YrvsE4B0MB8GA1UdIwQYMBaAFFIioWGd//BMsJe7UWoHTM0dr/x4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkQ3RC9BMzM5NjMwRTI3 NTAxMUVEOTE0N0IyNzNDNEY5QUUwMi9VaUtoWVozXzhFeXdsN3RSYWdkTXpSMnZf SGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VpS2hZWjNfOEV5d2w3dFJhZ2RNelIydl9IZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkQ3RC9BMzM5NjMwRTI3NTAxMUVEOTE0N0IyNzNDNEY5QUUwMi9VaUtoWVozXzhF eXdsN3RSYWdkTXpSMnZfSGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL+Fpm1bnhwR5Nm+yYSRVEsYHI79w0hmsaOZHUQpMoaodqmhKWY6rvYk9JqAy +ZRpy9ZL4iUkkSmEIcn85oyYfEVgUu2Yu7J4BN0eYrtc1LqahPYP5IX4oPGZ8mhJ Dlint0Zn9zTjdj6OOOhu+QH3G2bceZjnDyC9IDjtIH6RG9iWmWcMwzsRkXk8vouO 47Vp0ZqfiKrDJI6xLs/JJyRCoCinlRODwNbxw5JbToMVcteuf3XjAtCjvdCCBij8 WTTWHlAkMc/OM0pWExNeg9CfmDyAHY0t5XymGEHt0oEk5Z6vhj03YDQaDMj/MVEz FGf4AcJkKeGQ7MUbPstxALyj0g== -----END CERTIFICATE-----Generated at Wed May 13 14:35:42 2026 by rpki-client