$ rpki-client -vvf rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft File: UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft (raw, json) Hash identifier: Maz9KoE8WzNxb6QVVHYAvOwCyrJ7PnDuDZEKe3ILITc= Subject key identifier: 44:72:07:AB:0C:59:05:1A:18:BF:ED:ED:BB:A0:D6:D6:59:94:68:B5 Authority key identifier: 50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4 Certificate issuer: /CN=A915DE6C/serialNumber=50AAFC6A3EF75B22B7683CAB63D84BE4291954B4 Certificate serial: 9F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft Manifest number: 9B Signing time: Wed 25 Mar 2026 20:57:54 +0000 Manifest this update: Wed 25 Mar 2026 20:57:53 +0000 Manifest next update: Wed 01 Apr 2026 20:57:53 +0000 Files and hashes: 1: UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl (hash: rb0hoKfuWTo+P3+8YokH2eEW0N118LIxSKM3pmT0zbA=) 2: 4881B000288D11F19BDD6B76AC833773.roa (hash: rEN37lmGj7miwKByIvFWg1gtu5AStLDZq19R48cidBk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 20:57:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 159 (0x9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915DE6C, serialNumber=50AAFC6A3EF75B22B7683CAB63D84BE4291954B4 Validity Not Before: Mar 25 20:57:53 2026 GMT Not After : Apr 1 20:57:53 2026 GMT Subject: CN=69c44c52-7804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:fd:3e:b7:e9:38:d5:cc:d9:79:27:a0:4a:60: 87:f0:b2:81:21:d5:4e:e3:d3:cb:47:5a:a9:7b:52: 16:42:27:d0:f0:91:6b:2d:4d:8a:4e:f1:b7:9d:81: 92:b1:9b:12:54:f1:3e:c3:2e:1d:54:59:a9:41:2b: 25:f8:3f:0d:e7:95:dc:59:2e:9b:45:b8:5e:d5:05: f5:12:4a:f8:0d:68:b4:d3:f1:2d:44:9b:9b:ca:e8: bc:91:61:1f:88:84:94:8c:6f:17:2d:aa:f9:6f:0a: 88:bd:fd:6b:b5:c4:ea:f7:57:87:1c:e0:ee:aa:c6: 4e:38:10:4c:84:0a:c0:cc:71:78:4d:aa:89:32:a9: ac:11:26:50:4c:12:e4:4e:52:a4:b7:2b:65:bf:12: 30:0d:55:0e:a2:a6:3c:ad:60:cc:da:f4:a4:9e:92: 4e:03:e6:56:d2:00:3c:19:6d:28:2b:e5:75:86:8b: be:fb:f2:00:6e:f4:0d:7d:50:b8:f2:22:c8:f4:16: 01:9c:27:38:18:ce:17:2d:65:fb:1d:99:69:36:9b: 60:42:c7:0d:16:33:3c:0d:af:63:ea:df:00:7d:60: c4:cd:89:9d:44:6b:3c:e6:54:91:51:0e:db:47:a6: f2:0c:28:7f:1c:ee:5e:11:5a:52:53:d8:d6:e5:87: 40:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:72:07:AB:0C:59:05:1A:18:BF:ED:ED:BB:A0:D6:D6:59:94:68:B5 X509v3 Authority Key Identifier: keyid:50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:03:2a:a9:ea:f2:a5:ab:4f:30:3e:47:74:f6:1c:47:34:34: d9:a2:ae:0d:f6:a3:3f:35:58:02:17:10:3d:ad:ec:7f:95:aa: 4e:37:ff:58:fc:f3:d6:92:cf:19:70:9c:3c:62:e0:b0:8b:5a: 3b:08:52:d6:16:77:66:f7:7a:f3:ab:02:bd:d6:a0:cf:6b:17: 3a:54:c1:05:d0:cc:47:0a:0b:f1:e4:bb:27:45:be:24:28:a1: d9:9c:cc:75:d9:95:8e:d0:e0:47:3d:75:20:8a:88:25:e5:23: b2:1f:7d:27:4a:31:78:8c:f4:4d:29:31:e9:86:f1:ab:2d:72: 97:81:b1:0a:f7:da:56:18:ea:a0:3d:f7:f5:63:a6:b1:59:61: 44:38:94:55:ee:0f:b8:4f:e5:de:ad:49:af:1e:bd:65:10:92: 94:de:84:1d:a0:5f:07:15:41:d5:a6:c6:11:38:8c:33:b8:72: 5f:16:87:14:e1:99:09:ae:0c:a0:50:ee:f5:b4:af:0a:40:4c: 76:86:f0:55:4c:6f:fe:57:0d:20:89:8b:34:e7:0c:d8:c2:a0: 63:2a:ed:05:25:ac:a1:4c:94:71:c0:be:d9:de:52:e5:e1:3e: b0:2c:0e:18:28:8a:89:d7:4f:fa:38:07:00:e3:0d:8e:90:98: 67:43:62:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NURFNkMxMTAvBgNVBAUTKDUwQUFGQzZBM0VGNzVCMjJCNzY4M0NBQjYzRDg0QkU0 MjkxOTU0QjQwHhcNMjYwMzI1MjA1NzUzWhcNMjYwNDAxMjA1NzUzWjAYMRYwFAYD VQQDEw02OWM0NGM1Mi03ODA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmf0+t+k41czZeSegSmCH8LKBIdVO49PLR1qpe1IWQifQ8JFrLU2KTvG3nYGS sZsSVPE+wy4dVFmpQSsl+D8N55XcWS6bRbhe1QX1Ekr4DWi00/EtRJubyui8kWEf iISUjG8XLar5bwqIvf1rtcTq91eHHODuqsZOOBBMhArAzHF4TaqJMqmsESZQTBLk TlKktytlvxIwDVUOoqY8rWDM2vSknpJOA+ZW0gA8GW0oK+V1hou++/IAbvQNfVC4 8iLI9BYBnCc4GM4XLWX7HZlpNptgQscNFjM8Da9j6t8AfWDEzYmdRGs85lSRUQ7b R6byDCh/HO5eEVpSU9jW5YdAdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFERyB6sM WQUaGL/t7bug1tZZlGi1MB8GA1UdIwQYMBaAFFCq/Go+91sit2g8q2PYS+QpGVS0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REU2Qy82QkMzNzVCMDQz RDQxMUYwOTBCNDc2NjhDNEY5QUUwMi9VS3I4YWo3M1d5SzNhRHlyWTloTDVDa1pW TFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1VLcjhhajczV3lLM2FEeXJZOWhMNUNrWlZMUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 REU2Qy82QkMzNzVCMDQzRDQxMUYwOTBCNDc2NjhDNEY5QUUwMi9VS3I4YWo3M1d5 SzNhRHlyWTloTDVDa1pWTFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAawMqqerypatPMD5HdPYcRzQ02aKuDfajPzVYAhcQPa3sf5WqTjf/WPzz1pLP GXCcPGLgsItaOwhS1hZ3Zvd686sCvdagz2sXOlTBBdDMRwoL8eS7J0W+JCih2ZzM ddmVjtDgRz11IIqIJeUjsh99J0oxeIz0TSkx6Ybxqy1yl4GxCvfaVhjqoD339WOm sVlhRDiUVe4PuE/l3q1Jrx69ZRCSlN6EHaBfBxVB1abGETiMM7hyXxaHFOGZCa4M oFDu9bSvCkBMdobwVUxv/lcNIImLNOcM2MKgYyrtBSWsoUyUccC+2d5S5eE+sCwO GCiKiddP+jgHAOMNjpCYZ0Ni0Q== -----END CERTIFICATE-----Generated at Thu Mar 26 19:10:39 2026 by rpki-client