$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.mft File: UlhBQeXpBP16_D4Noo2QCKGvkhI.mft (raw, json) Hash identifier: P/GIFQWSKww1s5UIXiYZi+VPemKqLP4yP3WiviCMwms= Subject key identifier: 93:B9:6B:33:D7:D5:C8:82:75:F2:B8:78:D7:E6:83:AE:DC:A2:4A:EE Authority key identifier: 52:58:41:41:E5:E9:04:FD:7A:FC:3E:0D:A2:8D:90:08:A1:AF:92:12 Certificate issuer: /CN=A91C2CCD/serialNumber=52584141E5E904FD7AFC3E0DA28D9008A1AF9212 Certificate serial: 0259 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UlhBQeXpBP16_D4Noo2QCKGvkhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.mft Manifest number: 0253 Signing time: Wed 23 Sep 2026 02:09:02 +0000 Manifest this update: Wed 23 Sep 2026 02:09:01 +0000 Manifest next update: Wed 30 Sep 2026 02:09:01 +0000 Files and hashes: 1: UlhBQeXpBP16_D4Noo2QCKGvkhI.crl (hash: gNeoEGt5Nyf72W7eq3Iwd9ZC8Cwmxurid9gY+EDrUR8=) 2: 41D133CC2B5911EE85AD762BC4F9AE02.roa (hash: js8xICC+uo4E5pknpNk0KkzoVevnkz6o6MdDYMenHmc=) 3: YQD1sMPSEOIvp6ejZTR_ZqI5gi0.asa (hash: FgNS4rG/VrXvutFh5DEQ0VgrBP013/BwvJ/5sm0ioH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.crl rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UlhBQeXpBP16_D4Noo2QCKGvkhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 02:09:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 601 (0x259) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2CCD, serialNumber=52584141E5E904FD7AFC3E0DA28D9008A1AF9212 Validity Not Before: Sep 23 02:09:01 2026 GMT Not After : Sep 30 02:09:01 2026 GMT Subject: CN=6ab334bd-b642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ac:0c:9a:1a:84:90:c4:1c:8e:05:33:25:cb: 0c:f9:ea:58:0a:08:43:8c:b4:a2:9b:dd:23:30:4d: b2:da:67:1e:f7:ad:42:52:8d:6c:ca:29:dc:86:d8: b1:f3:cb:1b:11:52:49:5d:d9:c2:92:05:8e:34:4b: 38:50:60:34:fb:b4:5c:3a:2b:b9:ac:88:41:a9:e0: 77:9d:43:73:1b:16:7d:14:43:17:d9:85:40:ca:bf: e1:69:d4:af:3f:9b:89:ca:49:ee:b6:c3:72:07:af: 9f:96:c1:15:7f:5a:37:98:22:c1:c2:d6:69:be:92: 13:74:31:1c:c7:d1:e1:49:58:94:92:2b:4c:f6:c1: 50:56:1e:45:92:3b:1a:a1:81:70:8b:11:a8:55:e6: f5:cf:ac:33:a5:6d:a6:4f:84:59:98:57:ca:53:73: 14:98:35:96:cc:26:6d:49:bc:de:f1:2c:e2:43:1e: cc:fa:b9:15:5f:34:2e:66:39:ba:48:33:d7:61:d4: d2:fd:e3:35:9e:fb:7b:88:a0:0b:1a:64:0c:07:a5: eb:4e:40:7e:62:ca:f0:b2:fc:4f:53:e0:2f:4a:92: 34:32:58:04:3e:98:17:25:de:98:67:0b:41:66:23: d9:80:bf:5e:fe:ab:94:8c:56:59:a3:4f:75:32:c6: a7:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B9:6B:33:D7:D5:C8:82:75:F2:B8:78:D7:E6:83:AE:DC:A2:4A:EE X509v3 Authority Key Identifier: keyid:52:58:41:41:E5:E9:04:FD:7A:FC:3E:0D:A2:8D:90:08:A1:AF:92:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UlhBQeXpBP16_D4Noo2QCKGvkhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:c1:09:aa:e2:ce:a6:60:cf:d2:69:a8:d0:14:95:d4:03:99: 26:d0:a5:e8:76:0b:d5:69:17:fd:b7:6b:fe:14:f5:40:a3:86: be:cf:87:73:cc:95:f0:35:0a:93:d0:e1:40:49:9c:8a:10:4e: 48:fd:2b:51:c1:8d:dc:f1:ff:a8:36:aa:11:38:60:13:42:db: 4e:30:82:49:ca:1a:60:42:d1:21:aa:61:f8:d5:a9:e0:13:03: db:a2:83:47:7d:2c:db:06:5f:17:48:19:81:c7:b4:ba:b4:fe: d8:54:bd:2e:7e:3d:98:68:f8:41:24:71:49:cc:27:aa:36:c7: bf:dd:98:5e:33:20:02:25:21:6c:00:2e:95:e2:77:18:47:1a: c3:41:f0:08:23:3a:b8:07:49:e4:a7:27:03:a5:c5:5e:28:2a: 69:a2:0c:3f:7f:64:19:5a:04:24:bc:23:86:f8:2c:f8:f6:9f: c2:d2:69:a5:46:a1:d4:0e:e0:8d:3a:6d:f3:ea:10:6a:14:d6: 46:29:71:b3:e7:6a:62:79:81:c1:2f:b2:f0:6f:c8:0f:76:f3: f1:13:f5:4c:9b:23:77:ef:b7:1b:50:57:11:50:b9:07:7b:4f: ac:56:be:7a:1d:fe:08:1c:70:59:d0:39:9a:9a:40:a6:b5:1e: 8c:a4:a0:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJDQ0QxMTAvBgNVBAUTKDUyNTg0MTQxRTVFOTA0RkQ3QUZDM0UwREEyOEQ5MDA4 QTFBRjkyMTIwHhcNMjYwOTIzMDIwOTAxWhcNMjYwOTMwMDIwOTAxWjAYMRYwFAYD VQQDEw02YWIzMzRiZC1iNjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsKwMmhqEkMQcjgUzJcsM+epYCghDjLSim90jME2y2mce961CUo1syinchtix 88sbEVJJXdnCkgWONEs4UGA0+7RcOiu5rIhBqeB3nUNzGxZ9FEMX2YVAyr/hadSv P5uJyknutsNyB6+flsEVf1o3mCLBwtZpvpITdDEcx9HhSViUkitM9sFQVh5Fkjsa oYFwixGoVeb1z6wzpW2mT4RZmFfKU3MUmDWWzCZtSbze8SziQx7M+rkVXzQuZjm6 SDPXYdTS/eM1nvt7iKALGmQMB6XrTkB+YsrwsvxPU+AvSpI0MlgEPpgXJd6YZwtB ZiPZgL9e/quUjFZZo091MsanfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJO5azPX 1ciCdfK4eNfmg67cokruMB8GA1UdIwQYMBaAFFJYQUHl6QT9evw+DaKNkAihr5IS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkNDRC9EQzM1MkI1RTJC NTgxMUVFQjdDMkRFMkFDNEY5QUUwMi9VbGhCUWVYcEJQMTZfRDROb28yUUNLR3Zr aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VsaEJRZVhwQlAxNl9ENE5vbzJRQ0tHdmtoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkNDRC9EQzM1MkI1RTJCNTgxMUVFQjdDMkRFMkFDNEY5QUUwMi9VbGhCUWVYcEJQ MTZfRDROb28yUUNLR3ZraEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAP8EJquLOpmDP0mmo0BSV1AOZJtCl6HYL1WkX/bdr/hT1QKOGvs+Hc8yV8DUK k9DhQEmcihBOSP0rUcGN3PH/qDaqEThgE0LbTjCCScoaYELRIaph+NWp4BMD26KD R30s2wZfF0gZgce0urT+2FS9Ln49mGj4QSRxScwnqjbHv92YXjMgAiUhbAAuleJ3 GEcaw0HwCCM6uAdJ5KcnA6XFXigqaaIMP39kGVoEJLwjhvgs+PafwtJppUah1A7g jTpt8+oQahTWRilxs+dqYnmBwS+y8G/ID3bz8RP1TJsjd++3G1BXEVC5B3tPrFa+ eh3+CBxwWdA5mppAprUejKSgIw== -----END CERTIFICATE-----Generated at Wed Sep 23 21:49:02 2026 by rpki-client