$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.mft File: _uphQ5owmLhcyxg7WkGqEq9Fyh4.mft (raw, json) Hash identifier: RzAAf8sMEv0a4DsELUOo8GUf8HXm+vzEsTw5NrNSfLs= Subject key identifier: AF:75:EF:61:53:F9:F3:85:6A:9B:98:7A:D8:9B:E3:48:D6:B6:ED:89 Authority key identifier: FE:EA:61:43:9A:30:98:B8:5C:CB:18:3B:5A:41:AA:12:AF:45:CA:1E Certificate issuer: /CN=A91A19C8/serialNumber=FEEA61439A3098B85CCB183B5A41AA12AF45CA1E Certificate serial: 08D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uphQ5owmLhcyxg7WkGqEq9Fyh4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.mft Manifest number: 08BD Signing time: Tue 22 Sep 2026 20:23:20 +0000 Manifest this update: Tue 22 Sep 2026 20:23:20 +0000 Manifest next update: Tue 29 Sep 2026 20:23:20 +0000 Files and hashes: 1: _uphQ5owmLhcyxg7WkGqEq9Fyh4.crl (hash: FbCtPXJ3znND8O5Yx4tdbAf1o92m7AnikH8assntMAc=) 2: 9AAB8A10AABD11F18324D71C4011F970.roa (hash: 621XDjRjlNVr3wTxt/hPLQYaWUf2fqtMIKqD0yG6id0=) 3: 35119410AABD11F19DCB45E03F11F970.roa (hash: Dx1Kre4yEejFywkMAJ7xeIorQ9DFA2KCwqB+PMcj6VI=) 4: 3FA536CA38EE11F1A0707106A9833773.roa (hash: mUiOI8EcFxg0okwr3CRT18uhCpuSgMbB1bMOukLtLrw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.crl rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uphQ5owmLhcyxg7WkGqEq9Fyh4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 20:23:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2262 (0x8d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A19C8, serialNumber=FEEA61439A3098B85CCB183B5A41AA12AF45CA1E Validity Not Before: Sep 22 20:23:20 2026 GMT Not After : Sep 29 20:23:20 2026 GMT Subject: CN=6ab2e3b8-b0ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:60:d2:18:99:a9:13:6e:29:b0:4f:23:7f:73: 10:79:06:a8:f6:83:27:20:8f:9a:7e:8f:d3:7e:84: ad:2c:a1:57:c8:ff:cf:c4:f8:bc:72:68:c1:1c:a6: 70:f2:02:89:2c:c8:d0:82:86:6d:31:f6:dd:cb:1a: bf:33:17:82:ed:85:1d:21:3f:f1:69:32:8c:37:53: 99:f1:23:0d:e7:38:89:39:6f:6c:54:0b:34:9a:21: e4:76:d2:7d:cf:62:b6:69:37:b2:1c:d5:65:24:ef: 01:1c:0b:c1:7c:36:39:bf:05:4d:85:20:6f:64:6f: 05:6e:a0:31:68:3a:dc:2c:9d:6d:b4:02:f8:88:bc: 47:13:36:17:f0:22:f9:f0:26:4f:5d:83:ff:b4:ba: ba:12:f9:2a:f3:84:93:c6:d0:6d:1d:52:85:f0:f7: db:31:1b:96:40:1e:bf:0f:9d:c6:28:c7:7c:59:da: 74:f2:87:36:ce:07:60:81:ef:98:cd:cd:c8:47:c2: a8:7a:c3:21:7c:cc:91:ef:67:d3:27:82:d9:c0:c6: 77:49:27:e7:21:f3:40:dc:3d:18:83:b3:28:3f:06: 8c:77:26:f3:26:51:3b:ab:50:93:c8:f5:07:f5:39: eb:2b:e1:6a:c1:0f:fd:74:08:fb:58:d7:6c:9e:ce: d9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:75:EF:61:53:F9:F3:85:6A:9B:98:7A:D8:9B:E3:48:D6:B6:ED:89 X509v3 Authority Key Identifier: keyid:FE:EA:61:43:9A:30:98:B8:5C:CB:18:3B:5A:41:AA:12:AF:45:CA:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uphQ5owmLhcyxg7WkGqEq9Fyh4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:0a:42:77:b2:71:8a:87:95:6a:bd:1d:b6:81:7a:14:28:c5: e3:61:45:61:88:ae:b5:dc:20:59:a8:04:db:4a:fa:7c:71:0c: 31:e6:a5:7e:df:91:c5:d1:8b:5e:9d:b4:d4:a3:c1:cc:d1:e5: 5a:1d:a4:07:69:5a:b3:4a:09:70:30:83:9c:32:c7:a9:2e:5f: 57:b7:fe:29:da:9e:76:a3:3e:b7:58:7a:f8:8f:10:8f:44:0d: 56:48:ba:ab:c3:e5:03:b1:3b:9e:0b:78:66:66:c4:60:23:ea: d6:72:fb:bf:52:f0:e9:69:db:a3:43:28:90:b8:2d:93:7a:d6: c5:2e:4b:3d:ae:c2:bf:b2:e4:b2:70:84:1f:62:01:b8:25:0e: f3:d1:fc:47:46:fe:ab:c7:90:4c:8b:f2:6c:92:1b:9b:45:a9: 71:17:2d:aa:59:f5:7e:b7:a0:05:7f:b1:da:d1:92:56:eb:cd: 53:1f:e5:4b:54:a4:d9:85:bd:ec:e9:92:c7:42:b1:15:6d:45: e8:4b:75:56:14:3c:e9:59:00:22:69:10:a3:45:e8:c0:bd:36: 42:a5:4b:c4:d8:89:ed:2d:e5:cb:e5:e2:0f:23:c2:45:4d:67: 7c:54:ea:32:37:82:37:05:b2:c3:76:47:e7:18:37:39:4d:28: 02:59:3a:4e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCNYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTE5QzgxMTAvBgNVBAUTKEZFRUE2MTQzOUEzMDk4Qjg1Q0NCMTgzQjVBNDFBQTEy QUY0NUNBMUUwHhcNMjYwOTIyMjAyMzIwWhcNMjYwOTI5MjAyMzIwWjAYMRYwFAYD VQQDEw02YWIyZTNiOC1iMGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu2DSGJmpE24psE8jf3MQeQao9oMnII+afo/TfoStLKFXyP/PxPi8cmjBHKZw 8gKJLMjQgoZtMfbdyxq/MxeC7YUdIT/xaTKMN1OZ8SMN5ziJOW9sVAs0miHkdtJ9 z2K2aTeyHNVlJO8BHAvBfDY5vwVNhSBvZG8FbqAxaDrcLJ1ttAL4iLxHEzYX8CL5 8CZPXYP/tLq6Evkq84STxtBtHVKF8PfbMRuWQB6/D53GKMd8Wdp08oc2zgdgge+Y zc3IR8KoesMhfMyR72fTJ4LZwMZ3SSfnIfNA3D0Yg7MoPwaMdybzJlE7q1CTyPUH 9TnrK+FqwQ/9dAj7WNdsns7ZvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK9172FT +fOFapuYetib40jWtu2JMB8GA1UdIwQYMBaAFP7qYUOaMJi4XMsYO1pBqhKvRcoe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTlDOC9GNUE1RUVBQTAx NDExMUVCQTMzRjhFMTFDNEY5QUUwMi9fdXBoUTVvd21MaGN5eGc3V2tHcUVxOUZ5 aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL191cGhRNW93bUxoY3l4ZzdXa0dxRXE5RnloNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTlDOC9GNUE1RUVBQTAxNDExMUVCQTMzRjhFMTFDNEY5QUUwMi9fdXBoUTVvd21M aGN5eGc3V2tHcUVxOUZ5aDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACgpCd7JxioeVar0dtoF6FCjF42FFYYiutdwgWagE20r6fHEMMealft+RxdGL Xp201KPBzNHlWh2kB2las0oJcDCDnDLHqS5fV7f+KdqedqM+t1h6+I8Qj0QNVki6 q8PlA7E7ngt4ZmbEYCPq1nL7v1Lw6Wnbo0MokLgtk3rWxS5LPa7Cv7LksnCEH2IB uCUO89H8R0b+q8eQTIvybJIbm0WpcRctqln1fregBX+x2tGSVuvNUx/lS1Sk2YW9 7OmSx0KxFW1F6Et1VhQ86VkAImkQo0XowL02QqVLxNiJ7S3ly+XiDyPCRU1nfFTq MjeCNwWyw3ZH5xg3OU0oAlk6Tg== -----END CERTIFICATE-----Generated at Wed Sep 23 23:37:19 2026 by rpki-client