$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.mft File: uko-NN2arQAtSR0TxciM5c3Jk6o.mft (raw, json) Hash identifier: DkCjPoniFekCXFqftkS8x3lEBm1tR7GnxzcSl3wWPPM= Subject key identifier: 20:A9:6A:1D:92:2B:1F:8E:84:C6:9C:B9:CF:AE:D0:FD:EC:A5:96:E1 Authority key identifier: BA:4A:3E:34:DD:9A:AD:00:2D:49:1D:13:C5:C8:8C:E5:CD:C9:93:AA Certificate issuer: /CN=A9142127/serialNumber=BA4A3E34DD9AAD002D491D13C5C88CE5CDC993AA Certificate serial: 0BD4 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uko-NN2arQAtSR0TxciM5c3Jk6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.mft Manifest number: 0BC6 Signing time: Sat 14 Nov 2026 18:56:58 +0000 Manifest this update: Sat 14 Nov 2026 18:56:58 +0000 Manifest next update: Sat 21 Nov 2026 18:56:58 +0000 Files and hashes: 1: uko-NN2arQAtSR0TxciM5c3Jk6o.crl (hash: CJUDGjprki/u1muKn6+vUgitj/rJ97eADogKtLHF+Pg=) 2: 2FCB8FBA56DC11EA8D75187CC4F9AE02.roa (hash: xuUvIJ8eAw9K5qU0uP7UNuu0jZ+MgcXKquXu8ktwO3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.crl rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uko-NN2arQAtSR0TxciM5c3Jk6o.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 14:50:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3028 (0xbd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142127, serialNumber=BA4A3E34DD9AAD002D491D13C5C88CE5CDC993AA Validity Not Before: Nov 14 18:56:58 2026 GMT Not After : Nov 21 18:56:58 2026 GMT Subject: CN=6af8aefa-4c90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9e:f3:fc:92:16:c5:a8:33:68:a6:9d:fd:3e: 3c:39:b4:57:aa:a2:e4:8e:c5:d4:34:a8:d8:8c:3c: e8:ec:d7:14:a8:f0:cb:74:cf:30:b3:a7:6f:1a:cd: 3a:5b:08:18:0c:84:85:d6:49:1b:bd:88:d9:83:b2: 2a:ec:79:19:2f:cd:9b:15:1e:7f:8e:f5:ee:33:f1: 1f:6f:d5:0f:6d:6d:99:15:a9:41:80:a6:18:0c:ea: d0:1b:b3:2f:1f:d7:e4:ff:71:62:e7:3e:f7:f7:87: f5:b5:52:fa:9f:50:fa:cf:27:74:7d:06:c6:2f:42: 06:40:ba:30:4b:14:4c:dd:ef:86:24:00:ad:c3:5c: 03:df:c6:74:44:bf:92:ed:f3:47:32:ef:0e:1a:8c: da:3f:13:23:49:53:8c:41:11:2d:de:bc:04:fc:bf: a0:26:e3:f0:b8:d8:4e:60:8f:85:49:aa:5d:bd:e7: 38:24:1f:c6:90:12:aa:0e:73:88:10:ab:1f:0d:4e: 07:78:46:69:2e:69:95:04:83:60:c8:cd:e9:52:40: 5e:4d:01:2f:6f:c0:f6:27:0e:88:67:0a:63:07:96: e5:fa:d3:fd:fc:c3:b2:c7:c4:c1:9a:8c:0b:8d:96: 00:5d:b8:59:cf:ce:7f:f6:d7:90:39:22:05:0f:e5: ba:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A9:6A:1D:92:2B:1F:8E:84:C6:9C:B9:CF:AE:D0:FD:EC:A5:96:E1 X509v3 Authority Key Identifier: keyid:BA:4A:3E:34:DD:9A:AD:00:2D:49:1D:13:C5:C8:8C:E5:CD:C9:93:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uko-NN2arQAtSR0TxciM5c3Jk6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:f5:09:8e:e5:37:45:18:0c:32:a8:db:20:b2:fe:b1:72:6c: ee:ff:64:2a:cd:5b:58:45:d1:13:e9:52:9e:8f:60:17:30:81: 65:48:e5:6b:8a:52:a1:7e:f3:b4:dc:c3:f5:f3:32:72:53:95: 99:c6:11:ee:71:4d:0d:73:ec:b7:fa:e0:43:f6:12:19:b4:18: a4:8c:7e:1a:52:aa:c5:d5:8a:55:9d:be:ec:bf:7d:b9:d1:d6: 68:b9:6d:f3:dd:5e:2e:e7:a4:3b:81:93:0c:70:75:66:2d:bd: 74:a3:f4:aa:73:73:6e:2f:09:60:41:4e:e2:e1:aa:d8:15:1a: 56:1d:17:b3:be:13:fc:59:e6:50:e2:33:e4:35:f4:93:3c:9d: 7e:0c:5d:59:1b:10:d5:e0:f4:23:86:9e:0e:4e:5b:e2:c5:51: 4a:0d:ed:80:49:6e:43:11:ee:c2:ba:a6:c8:fb:c0:ea:e8:ae: 9b:2c:85:8c:37:dd:b2:74:88:9e:9f:76:8b:02:47:e9:0a:d9: 69:7f:bf:04:46:7e:4d:1f:28:a4:40:bb:8b:56:2c:69:42:3e: 0a:da:f1:7e:34:f5:81:89:25:cd:fb:cc:82:a1:68:6c:8b:ce: 49:af:43:5a:dc:69:c9:1b:cf:53:56:01:e5:9d:33:a1:2d:c7: c3:e3:14:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC9QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIxMjcxMTAvBgNVBAUTKEJBNEEzRTM0REQ5QUFEMDAyRDQ5MUQxM0M1Qzg4Q0U1 Q0RDOTkzQUEwHhcNMjYxMTE0MTg1NjU4WhcNMjYxMTIxMTg1NjU4WjAYMRYwFAYD VQQDEw02YWY4YWVmYS00YzkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJ7z/JIWxagzaKad/T48ObRXqqLkjsXUNKjYjDzo7NcUqPDLdM8ws6dvGs06 WwgYDISF1kkbvYjZg7Iq7HkZL82bFR5/jvXuM/Efb9UPbW2ZFalBgKYYDOrQG7Mv H9fk/3Fi5z7394f1tVL6n1D6zyd0fQbGL0IGQLowSxRM3e+GJACtw1wD38Z0RL+S 7fNHMu8OGozaPxMjSVOMQREt3rwE/L+gJuPwuNhOYI+FSapdvec4JB/GkBKqDnOI EKsfDU4HeEZpLmmVBINgyM3pUkBeTQEvb8D2Jw6IZwpjB5bl+tP9/MOyx8TBmowL jZYAXbhZz85/9teQOSIFD+W6kQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCCpah2S Kx+OhMacuc+u0P3spZbhMB8GA1UdIwQYMBaAFLpKPjTdmq0ALUkdE8XIjOXNyZOq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjEyNy8zMzdGQkE0NDU0 NkQxMUVBQkREM0MxMTdDNEY5QUUwMi91a28tTk4yYXJRQXRTUjBUeGNpTTVjM0pr Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3Vrby1OTjJhclFBdFNSMFR4Y2lNNWMzSms2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjEyNy8zMzdGQkE0NDU0NkQxMUVBQkREM0MxMTdDNEY5QUUwMi91a28tTk4yYXJR QXRTUjBUeGNpTTVjM0prNm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnfUJjuU3RRgMMqjbILL+sXJs7v9kKs1bWEXRE+lSno9gFzCBZUjla4pSoX7z tNzD9fMyclOVmcYR7nFNDXPst/rgQ/YSGbQYpIx+GlKqxdWKVZ2+7L99udHWaLlt 891eLuekO4GTDHB1Zi29dKP0qnNzbi8JYEFO4uGq2BUaVh0Xs74T/FnmUOIz5DX0 kzydfgxdWRsQ1eD0I4aeDk5b4sVRSg3tgEluQxHuwrqmyPvA6uiumyyFjDfdsnSI np92iwJH6QrZaX+/BEZ+TR8opEC7i1YsaUI+CtrxfjT1gYklzfvMgqFobIvOSa9D WtxpyRvPU1YB5Z0zoS3Hw+MUNw== -----END CERTIFICATE-----Generated at Sun Nov 15 00:24:15 2026 by rpki-client