$ rpki-client -vvf rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.mft File: uko-NN2arQAtSR0TxciM5c3Jk6o.mft (raw, json) Hash identifier: F+tbSJiObSx6T5oNIViU6D5Oh4LrwtgxUOmDaYZs7/s= Subject key identifier: 46:B9:F8:18:A4:9F:9C:A7:77:9E:3D:62:2C:99:6E:92:67:A5:E5:E3 Authority key identifier: BA:4A:3E:34:DD:9A:AD:00:2D:49:1D:13:C5:C8:8C:E5:CD:C9:93:AA Certificate issuer: /CN=A9142127/serialNumber=BA4A3E34DD9AAD002D491D13C5C88CE5CDC993AA Certificate serial: 0B75 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uko-NN2arQAtSR0TxciM5c3Jk6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.mft Manifest number: 0B67 Signing time: Tue 12 May 2026 19:15:09 +0000 Manifest this update: Tue 12 May 2026 19:15:09 +0000 Manifest next update: Tue 19 May 2026 19:15:09 +0000 Files and hashes: 1: uko-NN2arQAtSR0TxciM5c3Jk6o.crl (hash: 8w4jNOzIgjAATcxCuNRN+3MYHVpUZ+k0OFMX9VZyYGE=) 2: 2FCB8FBA56DC11EA8D75187CC4F9AE02.roa (hash: xuUvIJ8eAw9K5qU0uP7UNuu0jZ+MgcXKquXu8ktwO3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.crl rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uko-NN2arQAtSR0TxciM5c3Jk6o.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 14:50:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2933 (0xb75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142127, serialNumber=BA4A3E34DD9AAD002D491D13C5C88CE5CDC993AA Validity Not Before: May 12 19:15:09 2026 GMT Not After : May 19 19:15:09 2026 GMT Subject: CN=6a037c3d-55a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:51:48:62:56:46:78:15:a9:08:44:44:88:f8: c4:d4:62:c6:25:98:94:42:50:44:31:e5:0e:b9:98: 09:7d:83:89:66:ef:06:6d:67:07:a0:24:77:6a:84: 38:f1:76:5a:23:36:1a:29:f2:40:6e:51:de:62:53: 3e:07:fd:22:32:e8:f9:e9:ec:07:ca:9a:33:94:37: 05:77:e2:82:5d:b0:28:75:82:3c:1d:b1:ae:08:d3: 64:35:71:96:39:0a:07:e7:75:05:00:45:11:09:e1: 97:1d:74:78:53:ee:ab:98:ef:cc:45:f9:9c:ad:d4: 17:e6:fe:c2:05:e3:f2:86:ca:76:ec:1c:c8:67:43: 01:71:63:75:6b:2f:a5:b7:f8:5e:ee:ab:60:1a:df: 87:d6:bb:f5:b8:97:0d:89:19:c8:98:d7:b8:d4:28: d9:af:7f:13:9f:2a:2c:dc:43:a7:01:9e:b0:cc:7d: f3:8c:b7:cb:68:b3:dd:a9:59:06:fe:27:22:49:e6: f9:68:48:5a:58:40:39:cd:42:aa:63:c2:6f:6c:18: 9f:11:eb:93:60:8d:ce:ad:69:cb:8f:8c:b7:53:c1: f4:d4:ae:09:7b:90:1d:93:f7:13:e3:73:e8:ee:c3: 81:d6:44:2a:4f:ea:36:8c:b7:20:9f:1e:86:1b:29: 86:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:B9:F8:18:A4:9F:9C:A7:77:9E:3D:62:2C:99:6E:92:67:A5:E5:E3 X509v3 Authority Key Identifier: keyid:BA:4A:3E:34:DD:9A:AD:00:2D:49:1D:13:C5:C8:8C:E5:CD:C9:93:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uko-NN2arQAtSR0TxciM5c3Jk6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:3f:29:01:e1:d9:a9:9c:6f:b7:6b:d2:bd:e2:9a:83:ec:9f: 5f:36:df:dd:c5:bd:3c:88:32:47:d7:4e:cc:bb:94:57:3d:78: 42:a9:f9:b4:10:49:5c:c5:f6:dd:9e:0e:88:72:f2:b3:a3:fb: 2a:62:7d:5f:64:f3:c3:96:55:66:94:43:16:18:13:b1:50:5a: bc:5e:55:6b:7a:bb:9e:43:b0:c0:da:ea:80:05:d5:df:f2:23: ed:e7:12:89:b6:c6:9c:f7:97:0b:b0:8a:65:8a:fd:00:9c:32: 61:54:bd:3c:f6:6e:dc:49:35:9c:a9:dd:95:33:07:3f:ba:b0: c1:17:5f:c6:b3:a5:15:8c:31:6b:47:60:e4:88:32:9f:d4:73: 6c:0a:89:e4:b9:e7:30:a7:14:7b:1b:b0:7f:a8:76:f5:de:e0: c0:4e:a7:cf:2f:20:74:97:40:47:ec:61:5e:32:4d:89:e2:6e: 2c:3a:e8:a5:f8:91:e8:89:d8:33:4e:19:03:6c:6a:04:b7:10: 0f:22:48:fd:75:49:16:6b:ee:2f:53:a0:3f:91:eb:c9:1e:68: 58:04:81:58:b6:67:df:75:d9:43:31:2a:5f:6c:69:d6:27:f1: ba:61:82:d1:bd:99:88:72:fc:85:76:e0:6e:3c:71:84:56:ef: fd:d7:d5:ef -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC3UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIxMjcxMTAvBgNVBAUTKEJBNEEzRTM0REQ5QUFEMDAyRDQ5MUQxM0M1Qzg4Q0U1 Q0RDOTkzQUEwHhcNMjYwNTEyMTkxNTA5WhcNMjYwNTE5MTkxNTA5WjAYMRYwFAYD VQQDEw02YTAzN2MzZC01NWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7FFIYlZGeBWpCEREiPjE1GLGJZiUQlBEMeUOuZgJfYOJZu8GbWcHoCR3aoQ4 8XZaIzYaKfJAblHeYlM+B/0iMuj56ewHypozlDcFd+KCXbAodYI8HbGuCNNkNXGW OQoH53UFAEURCeGXHXR4U+6rmO/MRfmcrdQX5v7CBePyhsp27BzIZ0MBcWN1ay+l t/he7qtgGt+H1rv1uJcNiRnImNe41CjZr38Tnyos3EOnAZ6wzH3zjLfLaLPdqVkG /iciSeb5aEhaWEA5zUKqY8JvbBifEeuTYI3OrWnLj4y3U8H01K4Je5Adk/cT43Po 7sOB1kQqT+o2jLcgnx6GGymGFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEa5+Bik n5ynd549YiyZbpJnpeXjMB8GA1UdIwQYMBaAFLpKPjTdmq0ALUkdE8XIjOXNyZOq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjEyNy8zMzdGQkE0NDU0 NkQxMUVBQkREM0MxMTdDNEY5QUUwMi91a28tTk4yYXJRQXRTUjBUeGNpTTVjM0pr Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3Vrby1OTjJhclFBdFNSMFR4Y2lNNWMzSms2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjEyNy8zMzdGQkE0NDU0NkQxMUVBQkREM0MxMTdDNEY5QUUwMi91a28tTk4yYXJR QXRTUjBUeGNpTTVjM0prNm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAej8pAeHZqZxvt2vSveKag+yfXzbf3cW9PIgyR9dOzLuUVz14Qqn5tBBJXMX2 3Z4OiHLys6P7KmJ9X2Tzw5ZVZpRDFhgTsVBavF5Va3q7nkOwwNrqgAXV3/Ij7ecS ibbGnPeXC7CKZYr9AJwyYVS9PPZu3Ek1nKndlTMHP7qwwRdfxrOlFYwxa0dg5Igy n9RzbAqJ5LnnMKcUexuwf6h29d7gwE6nzy8gdJdAR+xhXjJNieJuLDropfiR6InY M04ZA2xqBLcQDyJI/XVJFmvuL1OgP5HryR5oWASBWLZn33XZQzEqX2xp1ifxumGC 0b2ZiHL8hXbgbjxxhFbv/dfV7w== -----END CERTIFICATE-----Generated at Wed May 13 00:53:30 2026 by rpki-client