$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.mft File: UKcRa7nzaXvF4-Ii7wNfcDQs3aM.mft (raw, json) Hash identifier: bgslCTFhuiRyiWcceR875v3Upll1nDPo88nBJICpl30= Subject key identifier: D9:37:B3:DB:E4:74:D5:ED:83:92:DC:FD:71:35:4C:7A:35:04:AD:F6 Authority key identifier: 50:A7:11:6B:B9:F3:69:7B:C5:E3:E2:22:EF:03:5F:70:34:2C:DD:A3 Certificate issuer: /CN=A91E5191/serialNumber=50A7116BB9F3697BC5E3E222EF035F70342CDDA3 Certificate serial: 0832 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.mft Manifest number: 0825 Signing time: Tue 12 May 2026 21:08:41 +0000 Manifest this update: Tue 12 May 2026 21:08:41 +0000 Manifest next update: Tue 19 May 2026 21:08:41 +0000 Files and hashes: 1: UKcRa7nzaXvF4-Ii7wNfcDQs3aM.crl (hash: jX6v9Hk8klT3LhtHfDpmgNB5QE3+S4+FevBNtKATZSU=) 2: 3E78F3541E2D11EB95754317C4F9AE02.roa (hash: SQ6zwcvQ5au49qPHtRFj85d+H63jUBLTmi4VuDL7FV4=) 3: B3C29AE8D3C711F09E46353CC4F9AE02.roa (hash: tXcl1fBoWO8w30UDVXKFhjr8bG8EJt2SCP07PWyeSSs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.crl rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 21:08:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2098 (0x832) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5191, serialNumber=50A7116BB9F3697BC5E3E222EF035F70342CDDA3 Validity Not Before: May 12 21:08:41 2026 GMT Not After : May 19 21:08:41 2026 GMT Subject: CN=6a0396d9-54ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ac:17:33:dc:eb:35:71:68:16:0c:d1:3f:09: 6b:96:c1:70:d7:c8:90:bb:de:46:29:11:09:40:5b: 23:d7:65:5e:cb:68:ed:98:06:fa:69:1c:69:a2:db: 19:50:7d:3a:b6:90:43:0a:b5:8e:e0:8d:66:89:66: 52:c1:41:ed:ff:ab:88:cb:d3:7f:1c:57:77:70:16: 05:d7:5a:95:ea:36:a5:78:96:50:32:ae:e0:58:f9: 43:06:ab:d4:cb:0b:47:26:6e:f7:7b:ec:85:bc:d3: f4:81:cb:b9:6e:37:24:6c:e6:42:6f:c8:f7:e1:5c: cd:6c:5c:4c:4c:fe:48:61:c0:af:2e:5c:7e:a0:e4: a9:23:e0:47:76:44:0a:ef:97:fc:59:48:e1:a4:c0: c9:84:e6:45:d1:36:b9:e0:b0:f5:4d:af:61:29:b8: d0:75:e5:d9:1e:63:da:30:22:57:8f:7c:e3:54:44: bb:14:7f:32:af:e6:d0:6d:fd:a9:b1:2a:67:fc:1e: e1:10:cc:97:e4:8f:f8:d4:dc:8a:22:62:a9:44:e4: c3:f3:ef:99:bb:0d:ee:21:51:7a:be:0d:78:74:69: 48:65:32:09:3b:67:b9:c3:73:ce:41:bf:8d:48:6a: f4:77:61:fa:24:a2:7a:27:d0:a3:4d:26:7a:d7:92: 68:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:37:B3:DB:E4:74:D5:ED:83:92:DC:FD:71:35:4C:7A:35:04:AD:F6 X509v3 Authority Key Identifier: keyid:50:A7:11:6B:B9:F3:69:7B:C5:E3:E2:22:EF:03:5F:70:34:2C:DD:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:a5:89:dd:cf:a6:8e:b2:57:3d:09:54:47:b0:85:f0:20:cb: fd:fc:a4:50:d9:08:af:d2:c4:9b:d9:77:b6:0c:ab:3f:01:5d: 4c:31:94:32:f1:0a:7b:30:b9:72:75:a8:33:9b:16:cb:8d:e2: b4:b1:3a:a3:eb:b1:42:09:1d:8c:2b:2a:0d:cf:54:08:fe:8b: c8:f1:07:0f:46:df:7c:4c:c8:eb:ea:72:be:74:6d:fc:7b:a2: 29:fa:09:aa:62:06:05:f7:31:ef:79:f7:80:58:36:96:4a:b7: 52:bf:8b:8a:d9:c1:46:d9:6a:99:a1:a5:c7:48:4f:51:64:6a: f7:52:6c:78:21:c2:25:e9:79:ae:02:57:60:10:a3:ec:37:2d: 7f:ee:d7:c4:9a:64:d9:77:b4:27:b9:bd:59:c6:ea:ed:4f:df: 31:3e:f7:dc:0c:c0:d2:75:6f:44:e5:a2:67:00:90:67:d9:f9: 4a:99:34:66:a9:0b:56:fd:a0:5a:18:df:8f:64:b9:a2:19:90: a3:d4:b9:47:2f:99:4e:2a:c6:7b:05:e1:57:5c:b5:2c:52:c6: 6d:52:e8:b5:39:5e:16:39:53:57:0c:2e:08:27:60:ef:76:62: 4c:02:6b:0c:f7:56:49:4e:6c:5d:90:05:30:f4:4a:0b:31:48: 21:0e:45:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCDIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUxOTExMTAvBgNVBAUTKDUwQTcxMTZCQjlGMzY5N0JDNUUzRTIyMkVGMDM1Rjcw MzQyQ0REQTMwHhcNMjYwNTEyMjEwODQxWhcNMjYwNTE5MjEwODQxWjAYMRYwFAYD VQQDEw02YTAzOTZkOS01NGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqKwXM9zrNXFoFgzRPwlrlsFw18iQu95GKREJQFsj12Vey2jtmAb6aRxpotsZ UH06tpBDCrWO4I1miWZSwUHt/6uIy9N/HFd3cBYF11qV6jaleJZQMq7gWPlDBqvU ywtHJm73e+yFvNP0gcu5bjckbOZCb8j34VzNbFxMTP5IYcCvLlx+oOSpI+BHdkQK 75f8WUjhpMDJhOZF0Ta54LD1Ta9hKbjQdeXZHmPaMCJXj3zjVES7FH8yr+bQbf2p sSpn/B7hEMyX5I/41NyKImKpROTD8++Zuw3uIVF6vg14dGlIZTIJO2e5w3POQb+N SGr0d2H6JKJ6J9CjTSZ615Jo0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNk3s9vk dNXtg5Lc/XE1THo1BK32MB8GA1UdIwQYMBaAFFCnEWu582l7xePiIu8DX3A0LN2j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTE5MS80OEFBMDcwNjE5 NzIxMUVCODA1RTZCN0ZDNEY5QUUwMi9VS2NSYTduemFYdkY0LUlpN3dOZmNEUXMz YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VLY1JhN256YVh2RjQtSWk3d05mY0RRczNhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTE5MS80OEFBMDcwNjE5NzIxMUVCODA1RTZCN0ZDNEY5QUUwMi9VS2NSYTduemFY dkY0LUlpN3dOZmNEUXMzYU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWaWJ3c+mjrJXPQlUR7CF8CDL/fykUNkIr9LEm9l3tgyrPwFdTDGUMvEKezC5 cnWoM5sWy43itLE6o+uxQgkdjCsqDc9UCP6LyPEHD0bffEzI6+pyvnRt/HuiKfoJ qmIGBfcx73n3gFg2lkq3Ur+LitnBRtlqmaGlx0hPUWRq91JseCHCJel5rgJXYBCj 7Dctf+7XxJpk2Xe0J7m9Wcbq7U/fMT733AzA0nVvROWiZwCQZ9n5Spk0ZqkLVv2g Whjfj2S5ohmQo9S5Ry+ZTirGewXhV1y1LFLGbVLotTleFjlTVwwuCCdg73ZiTAJr DPdWSU5sXZAFMPRKCzFIIQ5Fqw== -----END CERTIFICATE-----Generated at Wed May 13 06:45:46 2026 by rpki-client