$ rpki-client -vvvf rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft File: UoKkZCr301eZKRu6RH6hQlGk1fw.mft (raw, json) Hash identifier: 3RTzPdALyjSvjhAIGCzXVXpEL9vU2TsbWQQe1RTvvt0= Subject key identifier: B0:EE:30:9D:C4:99:E2:4A:58:E7:52:09:D8:7A:23:22:BF:E6:A9:FE Authority key identifier: 52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC Certificate issuer: /CN=A91582D9/serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC Certificate serial: 095C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft Manifest number: 219B Signing time: Sat 10 Oct 2026 16:29:58 +0000 Manifest this update: Sat 10 Oct 2026 16:29:58 +0000 Manifest next update: Sat 17 Oct 2026 16:29:58 +0000 Files and hashes: 1: UoKkZCr301eZKRu6RH6hQlGk1fw.crl (hash: CaXYf5BcRrUWEXDAM+TAgf4bR1HxxGiKwHIVvJwceoA=) 2: 172C2B96197711F0A993397AC4F9AE02.roa (hash: ir/GeOIsxHOGomsodazZ8n+xn9VJzyKDT2xRQQSi3To=) 3: 654665EA197611F09D2B1C76C4F9AE02.roa (hash: aK8dqHQhP2CUMG60oejQ+2Rxxxws0ICOGcDSSEAi96I=) 4: B5E806CC8BC711EE899A5284C4F9AE02.roa (hash: pG1gOVXE63UYc9AyhiiVgfCEyYC0TiV2X+6UTDaMUPk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.crl rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 16:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2396 (0x95c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91582D9, serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC Validity Not Before: Oct 10 16:29:58 2026 GMT Not After : Oct 17 16:29:58 2026 GMT Subject: CN=6aca6806-efeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:10:75:90:1a:da:d4:9b:26:31:64:b5:0d:83: ae:1f:5b:13:fe:cb:18:f7:de:04:8e:9a:2c:e7:01: b8:c4:0b:ee:01:ae:70:ff:31:24:88:94:66:b3:de: 04:fc:f4:9c:45:0f:eb:6a:b4:b2:7b:b7:c8:2d:94: 3f:62:b0:09:f4:23:83:a4:20:b6:37:d8:a4:fe:22: 3b:70:89:a4:ef:a1:98:eb:21:02:2c:97:63:bd:f0: ff:e9:d9:8e:69:71:74:f2:dc:88:da:22:2d:da:e9: 3e:d2:d4:f9:81:65:10:52:25:4b:d2:1f:45:d5:bc: 37:f9:86:49:bc:b5:08:e6:8d:cd:d2:b6:15:bf:f2: 50:d7:47:21:99:bc:9b:ee:1a:5a:d9:6b:7f:f3:86: 72:9e:6c:54:d2:f0:38:4d:e7:ce:5b:3b:7a:5d:d7: 5f:14:a5:84:50:bf:64:5b:f2:ba:e8:6b:29:61:cf: 3c:df:c3:bb:e6:81:90:ac:94:49:8b:0f:04:9f:70: 83:1f:bf:22:83:8e:64:1e:de:13:34:36:dc:5f:ca: ea:17:54:cd:76:8f:3f:bc:42:43:c5:47:35:14:63: a5:cf:e7:9e:50:a6:06:4e:63:01:64:ff:df:bc:e3: 4e:ed:9c:59:ec:b5:df:b2:b7:47:13:84:c8:25:e5: 7f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:EE:30:9D:C4:99:E2:4A:58:E7:52:09:D8:7A:23:22:BF:E6:A9:FE X509v3 Authority Key Identifier: keyid:52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:76:74:a4:a7:35:93:32:b7:f2:cc:dd:2e:f7:22:ef:98:e2: 37:6e:16:5d:f3:a5:9f:cc:db:b1:3d:92:16:a3:ec:d8:93:69: d4:ad:9e:f1:d4:48:ca:4a:9e:61:61:58:9c:37:4c:d9:ae:31: 23:9f:bb:4e:c1:c2:c6:e6:67:88:dd:01:08:fb:6e:07:5a:d4: d2:58:61:54:53:0e:40:91:5c:91:20:ca:b4:85:8e:94:f5:ad: 73:14:98:b6:0c:1e:a5:c9:f8:8b:b7:f9:fc:ab:48:5c:b7:16: f4:f3:b9:a6:2f:cb:f6:22:c5:58:d7:2b:27:11:7f:ab:37:6e: f4:0a:55:32:ff:8c:9e:c5:a8:13:aa:9c:cd:93:69:ee:e5:07: 5e:b9:e3:e7:33:1c:0b:6a:0e:e0:de:63:d1:3a:fc:05:8c:ad: d5:8f:4b:5a:79:76:24:a4:c6:df:02:1f:01:1d:c0:36:0e:a1: d5:16:4d:41:08:ac:a4:fa:21:e5:16:e7:ac:30:33:d1:2b:c6: 7c:db:f9:2d:92:20:a1:f2:90:72:c8:01:3f:f1:ea:a6:90:7e: 6f:f5:2c:9a:1e:b6:fa:24:82:3a:01:91:37:e5:5a:9d:5e:0c: 84:52:c3:98:f2:20:a7:01:ec:e0:54:0d:f3:30:a6:b7:7f:fa: e5:60:5e:ec -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgyRDkxMTAvBgNVBAUTKDUyODJBNDY0MkFGN0QzNTc5OTI5MUJCQTQ0N0VBMTQy NTFBNEQ1RkMwHhcNMjYxMDEwMTYyOTU4WhcNMjYxMDE3MTYyOTU4WjAYMRYwFAYD VQQDEw02YWNhNjgwNi1lZmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzhB1kBra1JsmMWS1DYOuH1sT/ssY994Ejpos5wG4xAvuAa5w/zEkiJRms94E /PScRQ/rarSye7fILZQ/YrAJ9CODpCC2N9ik/iI7cImk76GY6yECLJdjvfD/6dmO aXF08tyI2iIt2uk+0tT5gWUQUiVL0h9F1bw3+YZJvLUI5o3N0rYVv/JQ10chmbyb 7hpa2Wt/84ZynmxU0vA4TefOWzt6XddfFKWEUL9kW/K66GspYc8838O75oGQrJRJ iw8En3CDH78ig45kHt4TNDbcX8rqF1TNdo8/vEJDxUc1FGOlz+eeUKYGTmMBZP/f vONO7ZxZ7LXfsrdHE4TIJeV/4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLDuMJ3E meJKWOdSCdh6IyK/5qn+MB8GA1UdIwQYMBaAFFKCpGQq99NXmSkbukR+oUJRpNX8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODJEOS8wRURBNkQ1RUNE REExMUU3QkRFQThDMkJDNEY5QUUwMi9Vb0trWkNyMzAxZVpLUnU2Ukg2aFFsR2sx ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VvS2taQ3IzMDFlWktSdTZSSDZoUWxHazFmdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODJEOS8wRURBNkQ1RUNEREExMUU3QkRFQThDMkJDNEY5QUUwMi9Vb0trWkNyMzAx ZVpLUnU2Ukg2aFFsR2sxZncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqnZ0pKc1kzK38szdLvci75jiN24WXfOln8zbsT2SFqPs2JNp1K2e8dRIykqe YWFYnDdM2a4xI5+7TsHCxuZniN0BCPtuB1rU0lhhVFMOQJFckSDKtIWOlPWtcxSY tgwepcn4i7f5/KtIXLcW9PO5pi/L9iLFWNcrJxF/qzdu9ApVMv+MnsWoE6qczZNp 7uUHXrnj5zMcC2oO4N5j0Tr8BYyt1Y9LWnl2JKTG3wIfAR3ANg6h1RZNQQispPoh 5RbnrDAz0SvGfNv5LZIgofKQcsgBP/HqppB+b/Usmh62+iSCOgGRN+VanV4MhFLD mPIgpwHs4FQN8zCmt3/65WBe7A== -----END CERTIFICATE-----Generated at Sun Oct 11 09:37:11 2026 by rpki-client