$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft File: UMP9EvajMVgZtSurzBmPsNv9QTo.mft (raw, json) Hash identifier: VFMgc04t2HlWbCB0/0HrJx8nNYJzwGLANUkSnKUvbME= Subject key identifier: BC:C6:77:32:7A:DB:E4:AF:BF:84:59:33:1A:27:9A:5A:C3:AE:37:C0 Authority key identifier: 50:C3:FD:12:F6:A3:31:58:19:B5:2B:AB:CC:19:8F:B0:DB:FD:41:3A Certificate issuer: /CN=A91CE616/serialNumber=50C3FD12F6A3315819B52BABCC198FB0DBFD413A Certificate serial: 04DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UMP9EvajMVgZtSurzBmPsNv9QTo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft Manifest number: 04D2 Signing time: Tue 22 Sep 2026 23:27:06 +0000 Manifest this update: Tue 22 Sep 2026 23:27:05 +0000 Manifest next update: Tue 29 Sep 2026 23:27:05 +0000 Files and hashes: 1: UMP9EvajMVgZtSurzBmPsNv9QTo.crl (hash: 7Rlo6fWIleVXoGPZolO78cKZC1Fnw25DEcLxHEDkW+g=) 2: Z_YG6dhQKTsWfLWtRCzo9lMOd0Y.asa (hash: Pj1CoMftu5JyT/x7Oa6gFZSdV0R5bE6ahqyEKoH3VDw=) 3: 296C190484AD11EC9C3F837CC4F9AE02.roa (hash: lbtzXOv7fCZ9ldssOYWEkCJAJ4leYPGz3mQ8urYvDU8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.crl rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UMP9EvajMVgZtSurzBmPsNv9QTo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 23:27:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1247 (0x4df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE616, serialNumber=50C3FD12F6A3315819B52BABCC198FB0DBFD413A Validity Not Before: Sep 22 23:27:05 2026 GMT Not After : Sep 29 23:27:05 2026 GMT Subject: CN=6ab30eca-3d2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:57:0c:3e:f9:aa:a0:dd:d8:40:47:67:76:c5: 32:5d:11:bd:a8:d2:18:dc:e0:0e:11:92:69:5c:dc: be:57:cc:01:a8:88:8e:e3:ea:2e:19:3f:48:d8:f2: 1b:d1:ba:15:34:fb:d8:80:e4:2c:d4:53:56:c2:61: 21:55:29:e6:7b:d7:8c:c8:0c:43:d9:43:e2:dc:a6: 65:7e:71:1f:09:b8:88:13:81:c1:22:d7:9c:ab:a3: 8a:18:db:a4:af:a6:8f:83:8b:53:8c:55:d3:78:75: 5b:b8:36:09:34:e4:97:7f:eb:8e:f7:94:d6:6a:df: 46:e5:0d:93:13:a3:f9:c2:cb:e4:e9:4c:88:1a:85: ac:a2:a3:f8:87:7a:9f:ea:3a:c2:43:ec:e0:6a:9a: 81:02:7e:44:ac:ce:6d:33:ee:67:44:1f:c5:99:37: 17:ca:ca:21:99:81:61:b1:04:b4:74:c3:bf:8c:93: 32:65:5f:4a:63:f6:c3:83:c6:05:81:e6:e3:7f:39: 14:ea:51:04:0c:45:a8:be:03:77:f0:aa:85:4b:4f: 40:8b:db:a0:5f:8d:b7:25:6f:ac:71:73:36:22:09: 8b:af:50:b7:28:39:93:1a:b4:d2:70:5f:05:c9:cd: 7a:de:3b:ca:dd:25:ed:12:6c:7c:7c:30:9c:b4:1c: 54:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:C6:77:32:7A:DB:E4:AF:BF:84:59:33:1A:27:9A:5A:C3:AE:37:C0 X509v3 Authority Key Identifier: keyid:50:C3:FD:12:F6:A3:31:58:19:B5:2B:AB:CC:19:8F:B0:DB:FD:41:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UMP9EvajMVgZtSurzBmPsNv9QTo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:71:33:56:63:5b:a2:4b:29:f0:2c:9a:a2:da:56:af:64:a6: bf:e8:d3:a7:d6:84:b5:89:9d:a6:50:b5:b0:1f:86:c7:48:b5: 1e:8d:6f:4f:ce:43:ac:b6:4d:8e:5a:5a:9f:4c:b9:04:03:41: a7:35:cc:cd:af:c3:62:b4:a9:c9:67:28:6d:fe:47:f1:d7:2e: 64:33:7b:3b:18:e7:2f:b5:c9:ad:4e:54:f2:4b:f0:f0:13:f7: 33:16:0c:bd:62:53:e2:fe:22:27:5e:06:f0:f7:6d:32:5b:dc: 10:72:f7:d5:e9:41:8e:76:d8:9e:90:e9:c2:1f:43:60:3c:ad: a6:03:0b:cb:d6:6e:4a:a1:d2:61:f2:6e:0e:42:fa:d5:24:d7: 56:6f:3b:bc:52:a4:9c:3d:12:ee:b5:60:cd:c6:c3:39:ab:bf: e5:a4:a9:71:2a:b9:fa:93:75:b6:8d:48:3f:fa:d0:1a:03:d4: 56:d9:ef:66:23:fa:a2:2e:c6:8f:5f:d9:ec:a4:2d:8b:95:c1: 38:df:49:ea:d0:80:2b:e7:42:49:87:25:2f:85:c2:0c:3b:20: aa:5d:ef:df:73:12:bd:fa:66:bb:1b:43:62:d1:5c:99:c3:c4: 2f:08:60:c7:d3:43:0a:af:e5:f5:ed:33:3f:1a:39:eb:80:96: c3:8d:b2:cb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U2MTYxMTAvBgNVBAUTKDUwQzNGRDEyRjZBMzMxNTgxOUI1MkJBQkNDMTk4RkIw REJGRDQxM0EwHhcNMjYwOTIyMjMyNzA1WhcNMjYwOTI5MjMyNzA1WjAYMRYwFAYD VQQDEw02YWIzMGVjYS0zZDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx1cMPvmqoN3YQEdndsUyXRG9qNIY3OAOEZJpXNy+V8wBqIiO4+ouGT9I2PIb 0boVNPvYgOQs1FNWwmEhVSnme9eMyAxD2UPi3KZlfnEfCbiIE4HBItecq6OKGNuk r6aPg4tTjFXTeHVbuDYJNOSXf+uO95TWat9G5Q2TE6P5wsvk6UyIGoWsoqP4h3qf 6jrCQ+zgapqBAn5ErM5tM+5nRB/FmTcXysohmYFhsQS0dMO/jJMyZV9KY/bDg8YF gebjfzkU6lEEDEWovgN38KqFS09Ai9ugX423JW+scXM2IgmLr1C3KDmTGrTScF8F yc163jvK3SXtEmx8fDCctBxU0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLzGdzJ6 2+Svv4RZMxonmlrDrjfAMB8GA1UdIwQYMBaAFFDD/RL2ozFYGbUrq8wZj7Db/UE6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTYxNi9BN0U0MjkxNjg0 QTgxMUVDQjI1MDA4NzFDNEY5QUUwMi9VTVA5RXZhak1WZ1p0U3VyekJtUHNOdjlR VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VNUDlFdmFqTVZnWnRTdXJ6Qm1Qc052OVFUby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTYxNi9BN0U0MjkxNjg0QTgxMUVDQjI1MDA4NzFDNEY5QUUwMi9VTVA5RXZhak1W Z1p0U3VyekJtUHNOdjlRVG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAe3EzVmNboksp8CyaotpWr2Smv+jTp9aEtYmdplC1sB+Gx0i1Ho1vT85DrLZN jlpan0y5BANBpzXMza/DYrSpyWcobf5H8dcuZDN7OxjnL7XJrU5U8kvw8BP3MxYM vWJT4v4iJ14G8PdtMlvcEHL31elBjnbYnpDpwh9DYDytpgMLy9ZuSqHSYfJuDkL6 1STXVm87vFKknD0S7rVgzcbDOau/5aSpcSq5+pN1to1IP/rQGgPUVtnvZiP6oi7G j1/Z7KQti5XBON9J6tCAK+dCSYclL4XCDDsgql3v33MSvfpmuxtDYtFcmcPELwhg x9NDCq/l9e0zPxo564CWw42yyw== -----END CERTIFICATE-----Generated at Wed Sep 23 12:51:42 2026 by rpki-client