$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.mft File: UhSSEEqxqLu-vYCplinU4uZjI3A.mft (raw, json) Hash identifier: xo0BydG7q9o4Cjd0OjqSF2hWsWvZW8FNUmOUannxJk8= Subject key identifier: 48:2A:59:0A:29:4A:4D:F7:CE:31:CD:AE:B5:26:E6:B4:9F:EA:1D:B4 Authority key identifier: 52:14:92:10:4A:B1:A8:BB:BE:BD:80:A9:96:29:D4:E2:E6:63:23:70 Certificate issuer: /CN=A91C7409/serialNumber=521492104AB1A8BBBEBD80A99629D4E2E6632370 Certificate serial: D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhSSEEqxqLu-vYCplinU4uZjI3A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.mft Manifest number: CD Signing time: Mon 21 Sep 2026 06:42:59 +0000 Manifest this update: Mon 21 Sep 2026 06:42:58 +0000 Manifest next update: Mon 28 Sep 2026 06:42:58 +0000 Files and hashes: 1: UhSSEEqxqLu-vYCplinU4uZjI3A.crl (hash: yAYpmwf1SL1GCEw1RgSi/PAVfPpVJYI6rLwt4ldMzRs=) 2: E983DB547CB711F0AC8F9D6EC4F9AE02.roa (hash: VRMri+JmyP84ggb4uS0Bz/xwX6nfPL1abCeEWonYac4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.crl rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhSSEEqxqLu-vYCplinU4uZjI3A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:42:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 208 (0xd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7409, serialNumber=521492104AB1A8BBBEBD80A99629D4E2E6632370 Validity Not Before: Sep 21 06:42:58 2026 GMT Not After : Sep 28 06:42:58 2026 GMT Subject: CN=6ab0d1f2-ef86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:45:85:99:ee:90:15:5f:34:34:3a:91:41:a4: e3:f1:79:26:80:43:d8:13:bc:f8:34:76:58:f2:8f: bb:97:e3:ed:0c:73:90:fc:9a:29:df:18:2e:ec:01: c4:38:ef:2d:e1:4a:64:dc:71:28:9e:fb:39:47:0d: 90:bc:89:40:dc:28:1d:5d:b3:5e:75:e1:55:c7:bf: 95:ac:95:c9:29:22:fd:f5:fd:9a:ce:cd:8e:39:89: c6:89:c8:06:ec:3a:0d:bc:ef:ac:73:58:0f:58:f6: d4:64:ae:87:9c:51:cb:89:08:88:7a:28:96:07:da: fc:34:31:2f:3d:87:0c:1d:63:18:93:10:b1:f7:7f: 83:54:53:78:d0:c9:ae:bd:9d:7b:2e:60:09:b0:61: cb:bd:87:86:b2:6e:c9:0d:f7:5f:c5:16:03:d3:54: 66:24:c5:41:57:ad:bd:ec:84:78:cc:83:d7:d0:41: 30:8b:d0:18:5f:1e:1b:1d:c9:88:4f:5f:4e:28:97: a7:f4:5a:ab:8d:59:10:1d:4e:e5:4b:67:26:48:49: ab:6e:e3:90:08:9c:2b:be:73:e3:14:af:14:13:22: 20:7c:8b:b7:a9:fe:83:8c:d5:95:4d:fc:45:07:82: 40:c8:3c:87:7d:cd:c8:d4:4d:74:c3:27:df:12:b3: bb:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:2A:59:0A:29:4A:4D:F7:CE:31:CD:AE:B5:26:E6:B4:9F:EA:1D:B4 X509v3 Authority Key Identifier: keyid:52:14:92:10:4A:B1:A8:BB:BE:BD:80:A9:96:29:D4:E2:E6:63:23:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhSSEEqxqLu-vYCplinU4uZjI3A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7409/41D52D467CB611F08C5F7769C4F9AE02/UhSSEEqxqLu-vYCplinU4uZjI3A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:68:61:79:4c:d8:b2:5b:35:9b:07:b6:e6:24:d1:e6:71:1c: e1:ee:d2:8e:6d:ba:bf:30:50:e8:58:45:a7:62:81:43:24:77: 12:63:07:ef:b2:9d:13:77:de:ee:97:20:06:98:35:4f:c5:52: f7:24:13:63:41:f1:37:9d:bb:ac:d3:77:35:50:68:19:f7:b8: 4d:5b:69:cc:75:2d:bc:0f:4a:92:42:f0:6f:64:9b:f1:2a:fb: e0:97:40:36:7c:05:d3:63:ab:f5:96:c0:a7:d7:d8:59:e0:ee: 75:52:89:1d:96:fa:61:00:da:c9:a3:fe:a8:65:9c:9d:10:59: 37:45:8c:32:e0:1b:ad:b1:b7:63:50:49:bc:c1:22:d4:78:ee: 67:f1:98:0d:65:8e:ca:e8:2d:1b:fd:b2:7e:3d:4a:3a:74:5f: 6b:74:73:8d:df:1e:5d:66:58:49:51:6c:1d:2e:5f:10:96:b5: 9c:f1:5e:3f:e7:d1:2c:2a:85:66:df:4d:46:cd:f4:78:d4:5d: 0d:ab:96:98:00:15:d9:3c:b7:e4:48:91:3a:7b:3d:17:2a:09: bf:3f:3a:7f:0e:ca:90:40:ae:0a:74:9d:34:1a:d9:d9:ee:e5: e6:17:e6:7c:08:c2:e0:5f:a6:6f:eb:f1:48:cd:67:25:00:c0: e1:d0:7d:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc0MDkxMTAvBgNVBAUTKDUyMTQ5MjEwNEFCMUE4QkJCRUJEODBBOTk2MjlENEUy RTY2MzIzNzAwHhcNMjYwOTIxMDY0MjU4WhcNMjYwOTI4MDY0MjU4WjAYMRYwFAYD VQQDEw02YWIwZDFmMi1lZjg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo0WFme6QFV80NDqRQaTj8XkmgEPYE7z4NHZY8o+7l+PtDHOQ/Jop3xgu7AHE OO8t4Upk3HEonvs5Rw2QvIlA3CgdXbNedeFVx7+VrJXJKSL99f2azs2OOYnGicgG 7DoNvO+sc1gPWPbUZK6HnFHLiQiIeiiWB9r8NDEvPYcMHWMYkxCx93+DVFN40Mmu vZ17LmAJsGHLvYeGsm7JDfdfxRYD01RmJMVBV6297IR4zIPX0EEwi9AYXx4bHcmI T19OKJen9FqrjVkQHU7lS2cmSEmrbuOQCJwrvnPjFK8UEyIgfIu3qf6DjNWVTfxF B4JAyDyHfc3I1E10wyffErO7+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEgqWQop Sk33zjHNrrUm5rSf6h20MB8GA1UdIwQYMBaAFFIUkhBKsai7vr2AqZYp1OLmYyNw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzQwOS80MUQ1MkQ0NjdD QjYxMUYwOEM1Rjc3NjlDNEY5QUUwMi9VaFNTRUVxeHFMdS12WUNwbGluVTR1WmpJ M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VoU1NFRXF4cUx1LXZZQ3BsaW5VNHVaakkzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzQwOS80MUQ1MkQ0NjdDQjYxMUYwOEM1Rjc3NjlDNEY5QUUwMi9VaFNTRUVxeHFM dS12WUNwbGluVTR1WmpJM0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASGhheUzYsls1mwe25iTR5nEc4e7Sjm26vzBQ6FhFp2KBQyR3EmMH77KdE3fe 7pcgBpg1T8VS9yQTY0HxN527rNN3NVBoGfe4TVtpzHUtvA9KkkLwb2Sb8Sr74JdA NnwF02Or9ZbAp9fYWeDudVKJHZb6YQDayaP+qGWcnRBZN0WMMuAbrbG3Y1BJvMEi 1HjuZ/GYDWWOyugtG/2yfj1KOnRfa3Rzjd8eXWZYSVFsHS5fEJa1nPFeP+fRLCqF Zt9NRs30eNRdDauWmAAV2Ty35EiROns9FyoJvz86fw7KkECuCnSdNBrZ2e7l5hfm fAjC4F+mb+vxSM1nJQDA4dB98A== -----END CERTIFICATE-----Generated at Tue Sep 22 22:25:36 2026 by rpki-client