$ rpki-client -vvf rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft File: ukny4CpjXdB19WQWbxEfX63lp8s.mft (raw, json) Hash identifier: XqFcfhnSab+IBXkSywCMY4723ihY4smKcbDB9l504wU= Subject key identifier: 9B:BA:C9:C1:0A:E8:BB:C7:54:33:AB:D5:D7:F2:43:47:A6:8C:0C:F9 Authority key identifier: BA:49:F2:E0:2A:63:5D:D0:75:F5:64:16:6F:11:1F:5F:AD:E5:A7:CB Certificate issuer: /CN=A916988B/serialNumber=BA49F2E02A635DD075F564166F111F5FADE5A7CB Certificate serial: 072A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft Manifest number: 070D Signing time: Tue 24 Mar 2026 21:41:58 +0000 Manifest this update: Tue 24 Mar 2026 21:41:58 +0000 Manifest next update: Tue 31 Mar 2026 21:41:58 +0000 Files and hashes: 1: ukny4CpjXdB19WQWbxEfX63lp8s.crl (hash: v3SyGuRiksGUSlm6+ez7IsSZyVl76MZaz2zihBOmaIY=) 2: D24316B48D6D11EB9DB49A32C4F9AE02.roa (hash: ky5ZB0zmCFJ4ZhtIcZDO2A/tVio+hB2OepjdPThGIFI=) 3: A44DBD8486F811F0BCE74679C4F9AE02.roa (hash: mmFkgE0L1sreVpQhtYAV83v46s2MaftdRM1lyxnQjlY=) 4: D1B6FD008D6D11EB9DB49A32C4F9AE02.roa (hash: rBLmCstaiSTAZIiJ78MwP1Xx8bjB/LfaaqELF4UDGXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.crl rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:41:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1834 (0x72a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916988B, serialNumber=BA49F2E02A635DD075F564166F111F5FADE5A7CB Validity Not Before: Mar 24 21:41:58 2026 GMT Not After : Mar 31 21:41:58 2026 GMT Subject: CN=69c30526-29d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:76:50:d3:cb:ea:20:c4:98:8b:8d:1c:dc:70: ca:97:e6:8b:2c:65:0b:a9:c1:c4:58:e5:81:24:97: 26:86:bd:cc:8a:fa:ab:b0:ba:b2:b2:6d:21:ef:7e: 13:80:d1:5f:22:16:d3:72:f5:d1:5f:43:b9:7d:f7: fb:21:10:37:9b:76:6e:fc:7c:58:62:06:06:03:4e: 11:a0:6d:95:75:c5:60:ca:ce:b9:0f:d7:45:e2:ef: 81:1e:de:e4:34:bb:55:f5:ad:a4:a8:42:c2:56:d4: 09:c5:d2:94:cf:35:c3:f0:d3:50:6d:e5:fb:b9:54: 7e:01:0e:c0:f5:2d:ea:b1:0f:c2:bf:55:60:14:7c: 48:d2:d6:62:c9:f8:23:dc:eb:54:64:c6:de:bf:d9: 8f:f7:e1:67:42:c6:1f:d5:3d:56:17:47:2f:89:c4: cd:19:ac:7c:56:c8:8d:c3:f4:5c:6b:91:7f:0c:25: 0b:12:73:9e:e2:ee:b2:b9:b7:09:c8:60:5a:39:3f: f5:0d:4d:25:a2:48:e5:14:b1:63:83:dd:e7:ba:75: f5:fd:c9:bd:93:50:2a:f9:02:0b:75:dc:70:a2:b0: f9:e5:c4:4a:4f:9f:33:82:fa:30:1e:7f:62:38:99: e7:7b:3b:99:67:5e:f9:e9:e8:fb:7d:28:a8:9f:f2: 3e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:BA:C9:C1:0A:E8:BB:C7:54:33:AB:D5:D7:F2:43:47:A6:8C:0C:F9 X509v3 Authority Key Identifier: keyid:BA:49:F2:E0:2A:63:5D:D0:75:F5:64:16:6F:11:1F:5F:AD:E5:A7:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:39:68:88:1e:b9:24:c1:c7:5b:90:7f:b8:33:e9:5e:12:cf: 51:05:0f:ec:d8:e5:0f:3f:da:52:4f:7e:d7:ba:24:d3:3f:c1: ab:a3:3c:e0:a8:f1:7c:8b:3f:0a:1f:d2:39:d9:fb:ef:5f:29: 19:fa:3d:f9:7e:1a:d1:3e:1c:f7:ad:ae:08:f0:d5:db:37:13: 2d:54:3f:47:9a:be:ac:bd:1b:d7:56:cc:56:70:17:b0:9f:34: 87:90:94:db:21:5f:7c:06:f4:d5:36:7f:5c:37:67:61:91:58: 98:12:66:98:b9:31:7e:8c:3e:89:9b:01:ee:47:08:f5:af:16: 6d:2d:1e:86:5e:7f:6f:b5:64:9d:d6:ba:a2:83:26:0e:c8:42: 9e:42:73:b0:6a:d4:a3:c4:5b:d1:0a:8f:ab:0a:42:91:ac:29: 78:38:84:51:71:57:79:81:b6:f1:0f:37:e8:77:b5:58:9f:a2: db:47:0c:31:2e:82:4b:f4:2f:a1:8b:49:bb:cc:70:4c:ce:a7: 93:76:96:d4:3b:b2:db:64:04:90:af:d3:5d:f7:d4:79:e0:c6: 61:66:ac:f3:80:81:bf:38:3b:3f:5a:08:bd:18:1f:e5:43:53: 5e:d7:2b:d9:ba:19:5c:83:44:f8:2f:17:31:a5:b0:a0:9f:cc: 0a:cb:06:90 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICByowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk4OEIxMTAvBgNVBAUTKEJBNDlGMkUwMkE2MzVERDA3NUY1NjQxNjZGMTExRjVG QURFNUE3Q0IwHhcNMjYwMzI0MjE0MTU4WhcNMjYwMzMxMjE0MTU4WjAYMRYwFAYD VQQDEw02OWMzMDUyNi0yOWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA03ZQ08vqIMSYi40c3HDKl+aLLGULqcHEWOWBJJcmhr3MivqrsLqysm0h734T gNFfIhbTcvXRX0O5fff7IRA3m3Zu/HxYYgYGA04RoG2VdcVgys65D9dF4u+BHt7k NLtV9a2kqELCVtQJxdKUzzXD8NNQbeX7uVR+AQ7A9S3qsQ/Cv1VgFHxI0tZiyfgj 3OtUZMbev9mP9+FnQsYf1T1WF0cvicTNGax8VsiNw/Rca5F/DCULEnOe4u6yubcJ yGBaOT/1DU0lokjlFLFjg93nunX1/cm9k1Aq+QILddxworD55cRKT58zgvowHn9i OJnnezuZZ1756ej7fSion/I+MQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJu6ycEK 6LvHVDOr1dfyQ0emjAz5MB8GA1UdIwQYMBaAFLpJ8uAqY13QdfVkFm8RH1+t5afL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTg4Qi9GMzZCNzlCMDgw NzcxMUVCQjkyNUYxNTRDNEY5QUUwMi91a255NENwalhkQjE5V1FXYnhFZlg2M2xw OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Vrbnk0Q3BqWGRCMTlXUVdieEVmWDYzbHA4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTg4Qi9GMzZCNzlCMDgwNzcxMUVCQjkyNUYxNTRDNEY5QUUwMi91a255NENwalhk QjE5V1FXYnhFZlg2M2xwOHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgDloiB65JMHHW5B/uDPpXhLPUQUP7NjlDz/aUk9+17ok0z/Bq6M84KjxfIs/ Ch/SOdn7718pGfo9+X4a0T4c962uCPDV2zcTLVQ/R5q+rL0b11bMVnAXsJ80h5CU 2yFffAb01TZ/XDdnYZFYmBJmmLkxfow+iZsB7kcI9a8WbS0ehl5/b7Vknda6ooMm DshCnkJzsGrUo8Rb0QqPqwpCkawpeDiEUXFXeYG28Q836He1WJ+i20cMMS6CS/Qv oYtJu8xwTM6nk3aW1Duy22QEkK/TXffUeeDGYWas84CBvzg7P1oIvRgf5UNTXtcr 2boZXINE+C8XMaWwoJ/MCssGkA== -----END CERTIFICATE-----Generated at Thu Mar 26 19:08:13 2026 by rpki-client