$ rpki-client -vvvf rpki.apnic.net/member_repository/A917FFCC/06C55AE816D311F1BAA410C8303D8C67/UG49HcCtxzidnNuq-lFwdBtVhho.mft File: UG49HcCtxzidnNuq-lFwdBtVhho.mft (raw, json) Hash identifier: u8Ky3uuTJGTzCZ8h7Z3ImTOqdd3gUx7rKF5zYFoUO3A= Subject key identifier: A0:1E:05:FA:5E:53:51:6D:23:95:4C:BE:A8:42:38:AB:8A:95:9E:8E Authority key identifier: 50:6E:3D:1D:C0:AD:C7:38:9D:9C:DB:AA:FA:51:70:74:1B:55:86:1A Certificate issuer: /CN=A917FFCC/serialNumber=506E3D1DC0ADC7389D9CDBAAFA5170741B55861A Certificate serial: 74 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UG49HcCtxzidnNuq-lFwdBtVhho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FFCC/06C55AE816D311F1BAA410C8303D8C67/UG49HcCtxzidnNuq-lFwdBtVhho.mft Manifest number: 72 Signing time: Fri 09 Oct 2026 08:37:02 +0000 Manifest this update: Fri 09 Oct 2026 08:37:01 +0000 Manifest next update: Fri 16 Oct 2026 08:37:01 +0000 Files and hashes: 1: UG49HcCtxzidnNuq-lFwdBtVhho.crl (hash: rLbu4lsCpNhRWps2WbUGZL7BL1nYhT0GmPYxmJFl7Ak=) 2: F780D776194611F1871644483C3D8C67.roa (hash: ho5eEvE3UY6na6Rt/OnfOdSf9aaBbnbQUdpdtiKwfI4=) 3: D040E1BC16D311F18D1B19D1303D8C67.roa (hash: FW4iyNzwJYx2pnIdKFnPL+9FFZZIBrzKM+GhxItUIOM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FFCC/06C55AE816D311F1BAA410C8303D8C67/UG49HcCtxzidnNuq-lFwdBtVhho.crl rsync://rpki.apnic.net/member_repository/A917FFCC/06C55AE816D311F1BAA410C8303D8C67/UG49HcCtxzidnNuq-lFwdBtVhho.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UG49HcCtxzidnNuq-lFwdBtVhho.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 08:37:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FFCC, serialNumber=506E3D1DC0ADC7389D9CDBAAFA5170741B55861A Validity Not Before: Oct 9 08:37:01 2026 GMT Not After : Oct 16 08:37:01 2026 GMT Subject: CN=6ac8a7ae-9cab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:bf:c4:7e:31:54:7b:a1:16:2a:b1:3f:fe:0a: 8b:ea:2c:74:a7:83:61:6e:71:5f:26:95:a8:ef:e7: 26:d3:4e:17:62:b1:49:50:38:2a:2a:ce:03:03:59: 95:e7:f7:a4:6f:9d:d8:aa:df:13:f1:c3:7c:47:77: 37:9d:5c:cf:3a:06:eb:03:47:f1:6f:89:42:e3:4f: b7:b6:4f:27:08:b0:1f:73:a5:e8:49:9e:73:08:28: 7f:18:2a:03:7b:5c:a7:eb:c7:a8:ae:ee:a0:bb:14: 3c:62:6b:7c:87:11:29:e6:aa:fc:40:6f:f3:4f:d6: 0f:2a:51:02:39:3d:ab:ad:33:3d:9a:11:39:b4:a2: 6c:ec:cc:4b:00:6b:61:b0:49:7f:97:2a:c2:79:4c: 4e:7e:f2:51:83:87:b0:4f:77:cf:f4:02:a6:19:13: f0:df:e9:e8:7e:f0:0e:64:49:76:b9:1f:d1:5d:bd: dd:38:f1:0e:39:3d:1c:53:4b:86:b9:ad:f4:39:bf: 4e:ed:46:2e:d7:02:2d:ef:c5:08:fd:ae:5d:46:6d: 92:9c:c4:89:75:be:a1:d9:8f:fa:ed:a0:3e:cd:63: 66:d0:3a:47:d5:3d:37:61:e0:d3:74:88:2b:8f:78: f0:ab:59:e3:98:8d:f7:10:fb:f3:ad:df:76:3e:8c: d1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:1E:05:FA:5E:53:51:6D:23:95:4C:BE:A8:42:38:AB:8A:95:9E:8E X509v3 Authority Key Identifier: keyid:50:6E:3D:1D:C0:AD:C7:38:9D:9C:DB:AA:FA:51:70:74:1B:55:86:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FFCC/06C55AE816D311F1BAA410C8303D8C67/UG49HcCtxzidnNuq-lFwdBtVhho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UG49HcCtxzidnNuq-lFwdBtVhho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FFCC/06C55AE816D311F1BAA410C8303D8C67/UG49HcCtxzidnNuq-lFwdBtVhho.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:17:25:0f:e4:48:06:37:19:44:5d:c4:38:29:4a:be:0a:1a: f2:47:77:8c:dc:b8:11:8c:18:ab:38:98:f3:c4:c2:5d:4e:26: 17:6f:91:5a:c2:af:7c:c3:a0:68:44:d4:61:3b:72:75:23:3d: 5e:5c:26:d5:18:47:21:4f:10:72:64:30:66:ab:55:ca:4e:32: 31:00:d8:53:1e:e4:91:13:2e:21:b4:de:c7:95:a9:27:4d:3f: 88:bc:1b:5e:85:dd:77:e0:ea:a5:6b:5c:46:0a:37:ce:7d:0f: 6b:c0:a7:d0:d1:58:d4:b2:ae:a6:98:2a:96:78:31:36:72:ea: 36:a8:35:3c:97:f0:06:28:4d:04:6b:f0:5a:6a:e2:49:79:40: 10:7e:2d:4a:72:25:c8:3f:4c:43:05:af:19:fa:a6:6f:58:71: 2a:90:91:9b:76:dc:b9:57:24:08:c3:62:83:c1:d1:e0:c3:ef: 33:72:89:d3:55:d1:2e:cf:85:d3:e5:f6:85:7f:18:d0:c9:7a: c5:25:4d:b5:2e:42:db:91:ea:3b:64:2c:5d:1e:82:37:a1:05: 1a:50:66:e1:18:79:a2:90:1b:12:0c:bf:46:67:d4:e4:c9:8b: eb:81:c4:c4:79:cc:2a:66:70:a3:3a:0d:a9:28:63:a6:d3:46: 9e:53:1c:2c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RkZDQzExMC8GA1UEBRMoNTA2RTNEMURDMEFEQzczODlEOUNEQkFBRkE1MTcwNzQx QjU1ODYxQTAeFw0yNjEwMDkwODM3MDFaFw0yNjEwMTYwODM3MDFaMBgxFjAUBgNV BAMTDTZhYzhhN2FlLTljYWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDjv8R+MVR7oRYqsT/+CovqLHSng2FucV8mlajv5ybTThdisUlQOCoqzgMDWZXn 96Rvndiq3xPxw3xHdzedXM86BusDR/FviULjT7e2TycIsB9zpehJnnMIKH8YKgN7 XKfrx6iu7qC7FDxia3yHESnmqvxAb/NP1g8qUQI5PautMz2aETm0omzszEsAa2Gw SX+XKsJ5TE5+8lGDh7BPd8/0AqYZE/Df6eh+8A5kSXa5H9Fdvd048Q45PRxTS4a5 rfQ5v07tRi7XAi3vxQj9rl1GbZKcxIl1vqHZj/rtoD7NY2bQOkfVPTdh4NN0iCuP ePCrWeOYjfcQ+/Ot33Y+jNFDAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUoB4F+l5T UW0jlUy+qEI4q4qVno4wHwYDVR0jBBgwFoAUUG49HcCtxzidnNuq+lFwdBtVhhow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdGRkNDLzA2QzU1QUU4MTZE MzExRjFCQUE0MTBDODMwM0Q4QzY3L1VHNDlIY0N0eHppZG5OdXEtbEZ3ZEJ0Vmho by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVUc0OUhjQ3R4emlkbk51cS1sRndkQnRWaGhvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdG RkNDLzA2QzU1QUU4MTZEMzExRjFCQUE0MTBDODMwM0Q4QzY3L1VHNDlIY0N0eHpp ZG5OdXEtbEZ3ZEJ0Vmhoby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQArFyUP5EgGNxlEXcQ4KUq+ChryR3eM3LgRjBirOJjzxMJdTiYXb5Fawq98w6Bo RNRhO3J1Iz1eXCbVGEchTxByZDBmq1XKTjIxANhTHuSREy4htN7HlaknTT+IvBte hd134Oqla1xGCjfOfQ9rwKfQ0VjUsq6mmCqWeDE2cuo2qDU8l/AGKE0Ea/BaauJJ eUAQfi1KciXIP0xDBa8Z+qZvWHEqkJGbdty5VyQIw2KDwdHgw+8zconTVdEuz4XT 5faFfxjQyXrFJU21LkLbkeo7ZCxdHoI3oQUaUGbhGHmikBsSDL9GZ9TkyYvrgcTE ecwqZnCjOg2pKGOm00aeUxws -----END CERTIFICATE-----Generated at Fri Oct 9 21:49:38 2026 by rpki-client