$ rpki-client -vvvf rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft File: UG14DtF5dIDxUlE0f8KEQ9culQc.mft (raw, json) Hash identifier: unHNKOI0SIItfpnTL+4iOns/8nqreaeTiSv9C9eQ1LM= Subject key identifier: 10:9A:C2:CA:26:19:45:6A:CE:2B:80:30:73:BB:69:59:39:E7:37:35 Authority key identifier: 50:6D:78:0E:D1:79:74:80:F1:52:51:34:7F:C2:84:43:D7:2E:95:07 Certificate issuer: /CN=A917EB0C/serialNumber=506D780ED1797480F15251347FC28443D72E9507 Certificate serial: 0CE7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft Manifest number: 0CC4 Signing time: Thu 24 Sep 2026 18:33:04 +0000 Manifest this update: Thu 24 Sep 2026 18:33:04 +0000 Manifest next update: Thu 01 Oct 2026 18:33:04 +0000 Files and hashes: 1: UG14DtF5dIDxUlE0f8KEQ9culQc.crl (hash: q989WUT8UQ/j5G6/p8FmFGmE0uOAyQH5BPnEov9OSx8=) 2: E5B6117E2BC611EAB1456E4CC4F9AE02.roa (hash: 4wHwD6cPpHWdIAGlk+QPknVHSXJJAxVoDS9hDjhyH1o=) 3: FB2EC05CA3B111EE92169F16C4F9AE02.roa (hash: ZcWtfkepcoTH3hYySssNcb8QgN4PKAntgG2yhFuPzqs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.crl rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 18:33:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3303 (0xce7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EB0C, serialNumber=506D780ED1797480F15251347FC28443D72E9507 Validity Not Before: Sep 24 18:33:04 2026 GMT Not After : Oct 1 18:33:04 2026 GMT Subject: CN=6ab56ce0-a08c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f3:7e:43:d7:29:00:7e:2c:fb:5f:f9:82:fd: ec:06:bb:fc:3e:cd:cf:06:46:22:c3:6b:9a:99:de: 83:a5:16:94:d8:d8:87:68:0c:67:be:17:89:58:01: 10:a0:01:2b:90:d5:d4:75:81:a0:74:56:d7:1a:73: 59:fe:b5:f9:6e:28:a0:3c:b1:3d:82:41:25:fa:90: a6:0c:43:b6:db:d6:5d:d7:97:7e:ae:16:23:6b:72: 4f:c6:d5:ca:99:1d:aa:43:85:0d:ab:8b:e4:f8:ba: 5e:71:09:9a:97:a5:9f:fe:8d:0e:b1:8c:fb:45:88: 0e:e0:4c:0f:55:70:3c:4e:5e:1f:38:38:02:9d:08: 51:c6:f5:71:c3:05:f9:c8:96:bf:30:6d:00:bd:4a: 88:1a:3a:e1:12:e3:bd:fd:66:97:5d:09:b6:df:82: 29:06:6e:d6:df:1a:a0:33:3c:f9:5f:41:f8:b3:25: 12:9a:57:62:6f:27:b3:dc:13:93:7f:e7:f4:f6:3d: a2:81:32:b8:22:69:30:35:9a:2d:3d:b0:7b:58:df: cf:0e:6b:a4:97:86:b7:52:54:2c:11:e4:7a:fb:b7: 28:7a:5f:12:cc:fd:d8:9f:8e:ea:ea:91:1a:c2:d0: 35:d0:0a:ae:da:ad:b2:33:ab:72:e2:92:13:84:b1: ca:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:9A:C2:CA:26:19:45:6A:CE:2B:80:30:73:BB:69:59:39:E7:37:35 X509v3 Authority Key Identifier: keyid:50:6D:78:0E:D1:79:74:80:F1:52:51:34:7F:C2:84:43:D7:2E:95:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:d8:d6:e5:9a:10:d8:a3:f0:11:9a:3c:86:52:5c:c9:e3:42: dd:ba:ed:e5:09:8c:a3:d6:30:f9:98:cc:25:88:d0:2f:56:af: 88:1f:6b:09:5a:88:b4:cd:9d:f1:c4:9b:00:27:f8:60:bc:86: df:f6:c2:63:a2:34:c2:f5:89:c6:d6:8a:45:13:2f:89:47:40: b4:93:32:af:d1:1e:c2:24:87:e3:06:6e:94:0d:91:42:e6:68: 49:17:fb:d4:ff:18:81:b4:0f:8b:69:0e:7a:87:bb:c9:d3:24: 2e:11:61:1b:f2:2d:05:87:9f:14:7a:d1:c2:95:a8:5e:67:2c: b2:6b:a9:b6:8f:b4:d2:44:e0:0a:62:cf:cd:bf:c3:fd:28:09: be:a1:eb:be:af:be:1f:f0:17:ed:40:a7:8f:ce:80:98:2a:25: fb:46:bd:ab:dc:d4:1d:f1:49:19:b6:e5:db:d5:28:72:b2:d2: 4f:fc:d0:38:79:b3:ce:52:92:26:d8:ba:16:e7:f0:92:e9:47: 86:6a:93:a5:f5:52:88:5c:27:b1:75:01:63:0b:b1:b5:8b:55: 9c:cf:18:c6:d0:40:e3:1f:35:93:d6:a9:20:28:46:93:81:b5: 9e:3b:a9:4e:62:50:b5:fb:3e:97:b8:20:04:c8:70:96:8a:9a: 91:27:d3:2c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VCMEMxMTAvBgNVBAUTKDUwNkQ3ODBFRDE3OTc0ODBGMTUyNTEzNDdGQzI4NDQz RDcyRTk1MDcwHhcNMjYwOTI0MTgzMzA0WhcNMjYxMDAxMTgzMzA0WjAYMRYwFAYD VQQDEw02YWI1NmNlMC1hMDhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3fN+Q9cpAH4s+1/5gv3sBrv8Ps3PBkYiw2uamd6DpRaU2NiHaAxnvheJWAEQ oAErkNXUdYGgdFbXGnNZ/rX5biigPLE9gkEl+pCmDEO229Zd15d+rhYja3JPxtXK mR2qQ4UNq4vk+LpecQmal6Wf/o0OsYz7RYgO4EwPVXA8Tl4fODgCnQhRxvVxwwX5 yJa/MG0AvUqIGjrhEuO9/WaXXQm234IpBm7W3xqgMzz5X0H4syUSmldibyez3BOT f+f09j2igTK4ImkwNZotPbB7WN/PDmukl4a3UlQsEeR6+7coel8SzP3Yn47q6pEa wtA10Aqu2q2yM6ty4pIThLHKSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBCawsom GUVqziuAMHO7aVk55zc1MB8GA1UdIwQYMBaAFFBteA7ReXSA8VJRNH/ChEPXLpUH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUIwQy82MTM3NUI2QTIy MkExMUVBOUE4MjZENDVDNEY5QUUwMi9VRzE0RHRGNWRJRHhVbEUwZjhLRVE5Y3Vs UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VHMTREdEY1ZElEeFVsRTBmOEtFUTljdWxRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RUIwQy82MTM3NUI2QTIyMkExMUVBOUE4MjZENDVDNEY5QUUwMi9VRzE0RHRGNWRJ RHhVbEUwZjhLRVE5Y3VsUWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX9jW5ZoQ2KPwEZo8hlJcyeNC3brt5QmMo9Yw+ZjMJYjQL1aviB9rCVqItM2d 8cSbACf4YLyG3/bCY6I0wvWJxtaKRRMviUdAtJMyr9EewiSH4wZulA2RQuZoSRf7 1P8YgbQPi2kOeoe7ydMkLhFhG/ItBYefFHrRwpWoXmcssmupto+00kTgCmLPzb/D /SgJvqHrvq++H/AX7UCnj86AmCol+0a9q9zUHfFJGbbl29UocrLST/zQOHmzzlKS Jti6FufwkulHhmqTpfVSiFwnsXUBYwuxtYtVnM8YxtBA4x81k9apIChGk4G1njup TmJQtfs+l7ggBMhwloqakSfTLA== -----END CERTIFICATE-----Generated at Sat Sep 26 10:34:53 2026 by rpki-client