$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft File: uokBTrxJS2f9iz-C6LOO9vbFck0.mft (raw, json) Hash identifier: wQwoUL/drZ1/XnXUR8L2+ODnKI7Z33fX0h65qmdsC3s= Subject key identifier: E3:9B:7D:65:6B:B7:7C:9D:95:31:33:EB:ED:B1:23:13:71:C9:F7:82 Authority key identifier: BA:89:01:4E:BC:49:4B:67:FD:8B:3F:82:E8:B3:8E:F6:F6:C5:72:4D Certificate issuer: /CN=A91C4EC7/serialNumber=BA89014EBC494B67FD8B3F82E8B38EF6F6C5724D Certificate serial: 0204 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft Manifest number: 01F8 Signing time: Wed 23 Sep 2026 03:12:39 +0000 Manifest this update: Wed 23 Sep 2026 03:12:39 +0000 Manifest next update: Wed 30 Sep 2026 03:12:39 +0000 Files and hashes: 1: uokBTrxJS2f9iz-C6LOO9vbFck0.crl (hash: RICit/BnnEwQi4uDL8D0fQD1G5cjMSQ882eE+frr2MQ=) 2: ED352AAEBFE511EEBB3B4D25C4F9AE02.roa (hash: 92db4sEQBXgKR1xndwR6hGmE1/F52FkQLZCxaqtLE4U=) 3: 7FC61EDC2E1D11EF933E9981C4F9AE02.roa (hash: 8to8ysOqqFD6evQaOy6tyviqmwLWEUIY429pE2R6UEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.crl rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 03:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 516 (0x204) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4EC7, serialNumber=BA89014EBC494B67FD8B3F82E8B38EF6F6C5724D Validity Not Before: Sep 23 03:12:39 2026 GMT Not After : Sep 30 03:12:39 2026 GMT Subject: CN=6ab343a7-5986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0c:55:7f:1c:58:76:c7:6a:77:6f:b8:99:60: b6:f7:0c:db:b8:90:94:96:e8:4d:bb:48:1d:f3:bd: c8:7e:f8:e9:4c:3f:6a:d0:1c:c0:09:fc:e2:85:43: 07:75:3f:a4:95:e6:94:f8:7b:34:62:47:75:4d:51: 32:43:6b:ce:32:29:e4:84:0e:60:ca:de:a7:3f:e1: 43:e5:73:b5:c1:ef:70:23:93:94:d7:2d:c2:1f:7f: 3c:01:53:eb:be:6d:23:0d:3e:1b:a0:7e:40:de:6c: 22:2c:a6:49:c9:dd:3d:04:f7:78:76:2f:d5:f1:35: 3c:94:b4:2f:1d:22:f4:f5:76:9c:12:b5:51:f8:48: bb:c2:c9:0a:13:b0:16:26:d7:18:a0:6b:7d:2a:8e: 30:d7:2a:77:ab:3a:cf:ee:61:9b:04:ed:77:ef:0a: fa:41:f0:c0:91:3d:c6:43:68:73:b8:fc:2c:3e:38: 0e:07:46:1d:42:63:de:d0:4a:d5:07:9e:02:d2:28: f2:0e:73:7d:d7:66:52:ea:8a:12:e0:23:3f:6f:13: 75:dd:91:3b:0d:6a:fe:4a:c6:a0:41:8c:04:f6:1f: 7e:b9:1c:56:e0:ed:e1:9f:41:2f:ee:f1:f4:29:fe: 53:40:71:37:21:01:c8:3a:d8:28:65:dd:47:5e:32: bb:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:9B:7D:65:6B:B7:7C:9D:95:31:33:EB:ED:B1:23:13:71:C9:F7:82 X509v3 Authority Key Identifier: keyid:BA:89:01:4E:BC:49:4B:67:FD:8B:3F:82:E8:B3:8E:F6:F6:C5:72:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:d8:c2:b6:c6:ad:31:25:43:f2:0d:3f:90:e5:6d:92:06:21: 8e:e7:1e:67:aa:c5:09:4b:14:88:a4:a6:10:22:8d:fe:8f:aa: 3e:1d:0a:c2:d2:be:3c:5f:0c:22:3f:5d:c8:8a:82:b1:5e:43: b5:15:13:0e:8b:a3:6d:1a:a5:6c:fd:a3:ae:78:a5:e3:08:d1: 8b:c9:78:96:80:a1:fe:2b:9e:43:54:9e:40:e5:6d:fb:d8:c1: 1d:08:69:76:bf:62:07:d5:80:4f:05:36:bd:c4:b8:d7:0f:ae: b2:63:c1:44:31:4e:1d:34:ad:c8:b9:ba:4f:12:2a:50:2d:e0: 77:8a:bd:2e:0e:c0:e7:a1:c8:c4:1d:2a:a9:5d:09:08:b1:23: b9:d5:d6:4d:3a:55:4b:c8:8a:11:ea:03:ca:b1:4a:06:e9:06: a5:ef:f8:f4:3b:eb:d6:ae:e0:28:42:82:0d:3e:7d:7f:65:c2: fb:2a:ab:11:31:0a:e3:69:b4:e9:b0:1a:e9:93:df:29:a3:1c: 3f:3e:22:ba:c4:b4:52:c6:ef:da:69:22:9c:1f:d7:6d:06:98: ff:c0:84:39:b6:1f:b0:3a:32:94:48:05:41:7e:44:a3:e7:99: a7:bf:dc:49:80:60:fb:3c:b3:a3:91:cb:ed:d0:2e:9f:f7:0e: 19:91:86:3c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRFQzcxMTAvBgNVBAUTKEJBODkwMTRFQkM0OTRCNjdGRDhCM0Y4MkU4QjM4RUY2 RjZDNTcyNEQwHhcNMjYwOTIzMDMxMjM5WhcNMjYwOTMwMDMxMjM5WjAYMRYwFAYD VQQDEw02YWIzNDNhNy01OTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQxVfxxYdsdqd2+4mWC29wzbuJCUluhNu0gd873IfvjpTD9q0BzACfzihUMH dT+kleaU+Hs0Ykd1TVEyQ2vOMinkhA5gyt6nP+FD5XO1we9wI5OU1y3CH388AVPr vm0jDT4boH5A3mwiLKZJyd09BPd4di/V8TU8lLQvHSL09XacErVR+Ei7wskKE7AW JtcYoGt9Ko4w1yp3qzrP7mGbBO137wr6QfDAkT3GQ2hzuPwsPjgOB0YdQmPe0ErV B54C0ijyDnN912ZS6ooS4CM/bxN13ZE7DWr+SsagQYwE9h9+uRxW4O3hn0Ev7vH0 Kf5TQHE3IQHIOtgoZd1HXjK7qwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOObfWVr t3ydlTEz6+2xIxNxyfeCMB8GA1UdIwQYMBaAFLqJAU68SUtn/Ys/guizjvb2xXJN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEVDNy83NTc1Nzg3MEJG RTUxMUVFQUFDRTQzMTJDNEY5QUUwMi91b2tCVHJ4SlMyZjlpei1DNkxPTzl2YkZj azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Vva0JUcnhKUzJmOWl6LUM2TE9POXZiRmNrMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEVDNy83NTc1Nzg3MEJGRTUxMUVFQUFDRTQzMTJDNEY5QUUwMi91b2tCVHJ4SlMy Zjlpei1DNkxPTzl2YkZjazAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACtjCtsatMSVD8g0/kOVtkgYhjuceZ6rFCUsUiKSmECKN/o+qPh0KwtK+PF8M Ij9dyIqCsV5DtRUTDoujbRqlbP2jrnil4wjRi8l4loCh/iueQ1SeQOVt+9jBHQhp dr9iB9WATwU2vcS41w+usmPBRDFOHTStyLm6TxIqUC3gd4q9Lg7A56HIxB0qqV0J CLEjudXWTTpVS8iKEeoDyrFKBukGpe/49Dvr1q7gKEKCDT59f2XC+yqrETEK42m0 6bAa6ZPfKaMcPz4iusS0Usbv2mkinB/XbQaY/8CEObYfsDoylEgFQX5Eo+eZp7/c SYBg+zyzo5HL7dAun/cOGZGGPA== -----END CERTIFICATE-----Generated at Wed Sep 23 07:48:28 2026 by rpki-client