$ rpki-client -vvvf rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.mft File: UoaLCQH1W0B4uRpzRRym0iMSyKs.mft (raw, json) Hash identifier: xyhf8klBFMwj2ulViCJLNgrWrjicmMsNoInz4VBpprc= Subject key identifier: CE:8C:B2:AA:B8:3A:51:17:0A:71:30:48:AB:8F:24:69:BB:61:AF:EE Authority key identifier: 52:86:8B:09:01:F5:5B:40:78:B9:1A:73:45:1C:A6:D2:23:12:C8:AB Certificate issuer: /CN=A913E2B3/serialNumber=52868B0901F55B4078B91A73451CA6D22312C8AB Certificate serial: 0D0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoaLCQH1W0B4uRpzRRym0iMSyKs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.mft Manifest number: 0CFA Signing time: Thu 24 Sep 2026 18:21:53 +0000 Manifest this update: Thu 24 Sep 2026 18:21:52 +0000 Manifest next update: Thu 01 Oct 2026 18:21:52 +0000 Files and hashes: 1: UoaLCQH1W0B4uRpzRRym0iMSyKs.crl (hash: MwCfMLanxCE142bE8jrp6BaMms7ObxB0g90udHb1hDI=) 2: 399AB6DA4ED511ED84336740C4F9AE02.roa (hash: 2gHhqtDJfKR0qJzs+P2axW63JoLu4G8a5q6M2TKtmYA=) 3: 3AB1E0D44ED511ED84336740C4F9AE02.roa (hash: 1xwZmu+W4i/TCA6GArfnAsx0Zkop8Nq8b1/wjpzQ/QY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.crl rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoaLCQH1W0B4uRpzRRym0iMSyKs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 18:21:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3340 (0xd0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E2B3, serialNumber=52868B0901F55B4078B91A73451CA6D22312C8AB Validity Not Before: Sep 24 18:21:52 2026 GMT Not After : Oct 1 18:21:52 2026 GMT Subject: CN=6ab56a41-cec8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8b:98:07:0c:06:a6:17:56:e0:b0:f7:92:11: 68:84:b1:42:de:32:1f:ab:ec:74:06:1a:51:10:d2: 95:1d:85:6e:c8:44:19:04:f6:28:2b:b6:85:41:ae: b4:10:10:8b:d9:f4:96:39:a4:5c:de:9e:6d:9a:5f: 1e:00:fe:2e:aa:8d:70:da:0f:f8:c3:60:1a:10:20: 1d:ab:c9:01:68:ba:9c:61:d8:a1:74:a3:44:2c:e8: 87:fa:59:9a:c0:81:d7:da:3d:8f:6f:3b:87:31:ce: 75:b2:22:33:69:56:85:d1:8a:5f:ec:07:e6:05:8a: c5:3d:b1:da:1a:0b:e6:1d:ab:85:ec:17:a8:c0:9f: f7:37:e9:be:80:ec:b1:1b:73:a6:8a:00:26:ad:4a: 69:30:80:df:93:c1:cd:37:26:c4:7c:3c:b3:3d:c6: da:51:86:eb:e7:9f:d1:ae:0d:78:42:73:3a:16:3f: 8c:64:b0:b1:f3:0b:c9:b9:d1:e6:8d:a3:e1:99:6f: c2:7f:ef:e1:ea:3a:fa:c2:70:0c:db:54:87:17:0b: 53:b8:34:b0:45:49:73:bb:cb:f7:84:90:f8:ca:13: 7f:d2:15:0b:25:a7:48:e6:cd:bc:83:85:f3:01:44: 02:18:c6:44:e5:66:e0:5a:4c:5d:82:d7:2c:61:e3: 75:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:8C:B2:AA:B8:3A:51:17:0A:71:30:48:AB:8F:24:69:BB:61:AF:EE X509v3 Authority Key Identifier: keyid:52:86:8B:09:01:F5:5B:40:78:B9:1A:73:45:1C:A6:D2:23:12:C8:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoaLCQH1W0B4uRpzRRym0iMSyKs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:0f:20:27:e8:11:66:ff:81:8f:23:95:eb:40:fe:5b:eb:c7: ef:9d:67:25:2f:c0:61:54:b2:73:96:1c:77:70:5b:a6:52:2b: 56:6b:b6:36:38:01:8b:ab:06:00:17:46:f1:ae:c3:96:e4:5f: 9c:d9:89:e4:e8:a6:42:c8:86:e3:ca:99:33:74:f6:35:60:e8: 8f:f8:1b:80:43:d3:4e:a4:5d:e2:08:21:20:c7:5e:f3:79:17: 4a:e0:03:8a:31:da:9f:58:d1:b1:35:1e:f8:25:12:1b:6c:2c: a7:82:15:40:1f:59:4a:ec:f0:0f:90:ed:5f:2f:7f:85:3b:ed: 17:67:26:b6:48:ee:fd:17:83:5e:6f:98:24:32:e7:35:d8:8c: 36:6b:60:0b:ee:db:0b:49:08:c3:b6:53:f1:81:16:27:9b:87: 7c:d1:54:de:59:f8:6b:9a:a1:2b:08:a8:44:12:01:a8:06:66: a3:c9:15:92:d7:57:13:8f:15:5c:60:13:e4:be:f8:ea:f7:ad: b5:de:1e:e4:a2:c3:db:a9:33:2c:83:04:17:fe:2c:e9:91:3f: f6:17:a3:bc:f7:b1:2a:3f:1d:1c:98:14:00:98:af:d4:e1:70: cb:cb:ec:0c:29:36:1b:1c:60:97:13:6f:37:4f:51:23:ee:d8: 53:50:cb:60 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UyQjMxMTAvBgNVBAUTKDUyODY4QjA5MDFGNTVCNDA3OEI5MUE3MzQ1MUNBNkQy MjMxMkM4QUIwHhcNMjYwOTI0MTgyMTUyWhcNMjYxMDAxMTgyMTUyWjAYMRYwFAYD VQQDEw02YWI1NmE0MS1jZWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy4uYBwwGphdW4LD3khFohLFC3jIfq+x0BhpRENKVHYVuyEQZBPYoK7aFQa60 EBCL2fSWOaRc3p5tml8eAP4uqo1w2g/4w2AaECAdq8kBaLqcYdihdKNELOiH+lma wIHX2j2PbzuHMc51siIzaVaF0Ypf7AfmBYrFPbHaGgvmHauF7BeowJ/3N+m+gOyx G3OmigAmrUppMIDfk8HNNybEfDyzPcbaUYbr55/Rrg14QnM6Fj+MZLCx8wvJudHm jaPhmW/Cf+/h6jr6wnAM21SHFwtTuDSwRUlzu8v3hJD4yhN/0hULJadI5s28g4Xz AUQCGMZE5WbgWkxdgtcsYeN1pwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM6Msqq4 OlEXCnEwSKuPJGm7Ya/uMB8GA1UdIwQYMBaAFFKGiwkB9VtAeLkac0UcptIjEsir MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTJCMy8yMEU2N0REODEy RjQxMUVBODk0MjA0MzBDNEY5QUUwMi9Vb2FMQ1FIMVcwQjR1UnB6UlJ5bTBpTVN5 S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VvYUxDUUgxVzBCNHVScHpSUnltMGlNU3lLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTJCMy8yMEU2N0REODEyRjQxMUVBODk0MjA0MzBDNEY5QUUwMi9Vb2FMQ1FIMVcw QjR1UnB6UlJ5bTBpTVN5S3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKw8gJ+gRZv+BjyOV60D+W+vH751nJS/AYVSyc5Ycd3BbplIrVmu2NjgBi6sG ABdG8a7DluRfnNmJ5OimQsiG48qZM3T2NWDoj/gbgEPTTqRd4gghIMde83kXSuAD ijHan1jRsTUe+CUSG2wsp4IVQB9ZSuzwD5DtXy9/hTvtF2cmtkju/ReDXm+YJDLn NdiMNmtgC+7bC0kIw7ZT8YEWJ5uHfNFU3ln4a5qhKwioRBIBqAZmo8kVktdXE48V XGAT5L746vettd4e5KLD26kzLIMEF/4s6ZE/9hejvPexKj8dHJgUAJiv1OFwy8vs DCk2GxxglxNvN09RI+7YU1DLYA== -----END CERTIFICATE-----Generated at Sat Sep 26 07:46:03 2026 by rpki-client