$ rpki-client -vvvf rpki.apnic.net/member_repository/A9190E6C/8A0AAF7A696711F1A9E0AEE07847A888/UkKKuo4K7IH5nXzYknKnEHQIbEY.mft File: UkKKuo4K7IH5nXzYknKnEHQIbEY.mft (raw, json) Hash identifier: bQPP+xCD6568epVH4lPFwd47eJzqo44ZwgexPHN8OLE= Subject key identifier: 14:8C:22:BA:9E:A5:2E:8C:AB:3B:7B:C4:14:8A:41:B2:77:53:8D:8A Authority key identifier: 52:42:8A:BA:8E:0A:EC:81:F9:9D:7C:D8:92:72:A7:10:74:08:6C:46 Certificate issuer: /CN=A9190E6C/serialNumber=52428ABA8E0AEC81F99D7CD89272A71074086C46 Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UkKKuo4K7IH5nXzYknKnEHQIbEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190E6C/8A0AAF7A696711F1A9E0AEE07847A888/UkKKuo4K7IH5nXzYknKnEHQIbEY.mft Manifest number: 38 Signing time: Mon 28 Sep 2026 17:52:12 +0000 Manifest this update: Mon 28 Sep 2026 17:52:12 +0000 Manifest next update: Mon 05 Oct 2026 17:52:12 +0000 Files and hashes: 1: UkKKuo4K7IH5nXzYknKnEHQIbEY.crl (hash: P3jE1jGeS+oer3564kzmZ0Ywuljz638o9+ADPH5RWZ0=) 2: 3F551C74696A11F19F0E96FC7847A888.roa (hash: LOeF5oKzX3hsnldQfxTGyeCZaIlHTWbNNaHQcrweuJQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190E6C/8A0AAF7A696711F1A9E0AEE07847A888/UkKKuo4K7IH5nXzYknKnEHQIbEY.crl rsync://rpki.apnic.net/member_repository/A9190E6C/8A0AAF7A696711F1A9E0AEE07847A888/UkKKuo4K7IH5nXzYknKnEHQIbEY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UkKKuo4K7IH5nXzYknKnEHQIbEY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 17:52:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190E6C, serialNumber=52428ABA8E0AEC81F99D7CD89272A71074086C46 Validity Not Before: Sep 28 17:52:12 2026 GMT Not After : Oct 5 17:52:12 2026 GMT Subject: CN=6abaa94c-e93b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:33:93:72:f6:50:6f:84:72:bd:2d:9d:36:17: 52:26:95:25:c8:df:e8:71:31:cd:10:34:99:e8:85: 99:12:1c:d2:2c:34:98:aa:da:90:d8:f8:d1:63:8e: 78:00:47:76:56:2b:a0:a7:94:eb:4d:62:9e:07:ef: b9:4c:ab:23:66:f1:9d:cd:95:95:97:b3:bb:fe:08: 4d:12:37:41:ab:90:fa:92:05:bc:a1:d8:c7:8e:4a: 4b:c7:7f:cf:a2:ce:51:8b:f4:76:0d:01:1c:97:1e: a3:ad:38:e9:f9:95:99:44:e9:bb:e7:73:3b:57:36: c3:96:c4:6e:c6:2a:8c:3b:56:24:71:cc:ab:db:5b: e4:fe:e3:9a:2f:df:df:f4:40:b1:d2:21:1b:2a:2b: 0c:1d:98:dc:a0:39:f1:34:c9:ac:a7:01:b7:15:f6: e2:da:6e:48:19:c0:e6:97:0d:b7:c2:1f:23:1c:67: af:9c:9b:98:e2:70:bf:30:b8:bd:03:5a:77:e4:dd: 03:0d:5f:6d:a7:6e:e1:1d:bd:74:e3:c6:9d:7a:14: b5:be:7f:6e:fc:eb:cd:a7:3b:75:7c:22:3a:18:58: a1:61:ed:11:fa:08:06:3d:48:20:50:20:f0:d6:27: 52:da:a6:b9:58:e3:b1:fb:8f:40:20:17:dc:e5:fd: 06:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:8C:22:BA:9E:A5:2E:8C:AB:3B:7B:C4:14:8A:41:B2:77:53:8D:8A X509v3 Authority Key Identifier: keyid:52:42:8A:BA:8E:0A:EC:81:F9:9D:7C:D8:92:72:A7:10:74:08:6C:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190E6C/8A0AAF7A696711F1A9E0AEE07847A888/UkKKuo4K7IH5nXzYknKnEHQIbEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UkKKuo4K7IH5nXzYknKnEHQIbEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190E6C/8A0AAF7A696711F1A9E0AEE07847A888/UkKKuo4K7IH5nXzYknKnEHQIbEY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:1c:1f:47:46:17:d7:83:e3:1b:33:da:80:b7:99:2b:9f:a4: 80:1e:59:da:e0:45:6d:bd:17:ab:6f:9e:5b:bd:8f:76:96:b8: 5d:0c:0b:da:b4:07:e4:c7:d7:68:c0:34:e2:f4:89:af:3e:00: fc:19:99:d1:d0:05:50:72:d8:21:e1:49:f6:a9:ab:da:e1:df: ad:2c:00:a4:de:f6:a0:1f:10:c8:a8:ee:d3:98:30:f1:51:76: 67:d8:b9:c8:39:57:08:90:28:95:b0:57:e3:50:fc:bc:db:58: af:87:c4:f1:e9:a3:a6:73:e9:98:94:6b:d6:86:a2:77:00:90: 23:89:2d:b1:49:b7:77:5f:a4:d1:c1:e0:6b:b4:ca:d1:ed:9b: 70:43:b0:df:83:12:9d:a5:aa:e0:bf:54:6a:37:d3:d5:0e:37: f7:a6:2c:c0:96:58:f7:f4:57:4b:54:b5:0d:82:cb:64:67:2d: c0:64:c1:86:63:ff:70:71:f7:0d:52:ba:e6:c6:f4:6b:05:dd: ed:9e:07:7f:38:27:ff:6a:b8:b8:71:10:da:de:54:ea:9d:b0: f8:fe:db:4c:59:26:e3:cd:79:0c:a8:7f:0d:ef:02:4a:e6:56: 94:85:08:d7:58:d2:ea:61:f8:6c:9f:d4:b8:c4:18:32:4b:15: 81:e7:0c:0b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MEU2QzExMC8GA1UEBRMoNTI0MjhBQkE4RTBBRUM4MUY5OUQ3Q0Q4OTI3MkE3MTA3 NDA4NkM0NjAeFw0yNjA5MjgxNzUyMTJaFw0yNjEwMDUxNzUyMTJaMBgxFjAUBgNV BAMTDTZhYmFhOTRjLWU5M2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfM5Ny9lBvhHK9LZ02F1ImlSXI3+hxMc0QNJnohZkSHNIsNJiq2pDY+NFjjngA R3ZWK6CnlOtNYp4H77lMqyNm8Z3NlZWXs7v+CE0SN0GrkPqSBbyh2MeOSkvHf8+i zlGL9HYNARyXHqOtOOn5lZlE6bvncztXNsOWxG7GKow7ViRxzKvbW+T+45ov39/0 QLHSIRsqKwwdmNygOfE0yaynAbcV9uLabkgZwOaXDbfCHyMcZ6+cm5jicL8wuL0D Wnfk3QMNX22nbuEdvXTjxp16FLW+f278682nO3V8IjoYWKFh7RH6CAY9SCBQIPDW J1LaprlY47H7j0AgF9zl/QYPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUFIwiup6l LoyrO3vEFIpBsndTjYowHwYDVR0jBBgwFoAUUkKKuo4K7IH5nXzYknKnEHQIbEYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkwRTZDLzhBMEFBRjdBNjk2 NzExRjFBOUUwQUVFMDc4NDdBODg4L1VrS0t1bzRLN0lINW5YellrbktuRUhRSWJF WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVWtLS3VvNEs3SUg1blh6WWtuS25FSFFJYkVZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkw RTZDLzhBMEFBRjdBNjk2NzExRjFBOUUwQUVFMDc4NDdBODg4L1VrS0t1bzRLN0lI NW5YellrbktuRUhRSWJFWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCEHB9HRhfXg+MbM9qAt5krn6SAHlna4EVtvRerb55bvY92lrhdDAvatAfkx9do wDTi9ImvPgD8GZnR0AVQctgh4Un2qava4d+tLACk3vagHxDIqO7TmDDxUXZn2LnI OVcIkCiVsFfjUPy821ivh8Tx6aOmc+mYlGvWhqJ3AJAjiS2xSbd3X6TRweBrtMrR 7ZtwQ7DfgxKdpargv1RqN9PVDjf3pizAllj39FdLVLUNgstkZy3AZMGGY/9wcfcN UrrmxvRrBd3tngd/OCf/ari4cRDa3lTqnbD4/ttMWSbjzXkMqH8N7wJK5laUhQjX WNLqYfhsn9S4xBgySxWB5wwL -----END CERTIFICATE-----Generated at Tue Sep 29 03:37:16 2026 by rpki-client