$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft File: UgupTND7nnwUDfvAzFi5PPVMIvM.mft (raw, json) Hash identifier: ggFGFzaoIFKZsnEz5U7C7yms+HZGiQs3YPWd9OD0n0A= Subject key identifier: 2A:74:E2:B0:7B:80:FA:59:75:4D:9D:78:71:C2:45:FC:C6:2C:12:1F Authority key identifier: 52:0B:A9:4C:D0:FB:9E:7C:14:0D:FB:C0:CC:58:B9:3C:F5:4C:22:F3 Certificate issuer: /CN=A91F8981/serialNumber=520BA94CD0FB9E7C140DFBC0CC58B93CF54C22F3 Certificate serial: 0167 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UgupTND7nnwUDfvAzFi5PPVMIvM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft Manifest number: 015F Signing time: Thu 23 Jul 2026 06:32:50 +0000 Manifest this update: Thu 23 Jul 2026 06:32:49 +0000 Manifest next update: Thu 30 Jul 2026 06:32:49 +0000 Files and hashes: 1: UgupTND7nnwUDfvAzFi5PPVMIvM.crl (hash: H8lzL7+VOzCLmHqBqL7WD9Bd3uoOK1A+/gKf6BhpZ/I=) 2: D79D112E6C7F11EF92105459C4F9AE02.roa (hash: no0SNYKpXHhN7AscUH3ZSqjYzZJUuDSOCn7JYbnOM8o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.crl rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UgupTND7nnwUDfvAzFi5PPVMIvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 06:32:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 359 (0x167) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8981, serialNumber=520BA94CD0FB9E7C140DFBC0CC58B93CF54C22F3 Validity Not Before: Jul 23 06:32:49 2026 GMT Not After : Jul 30 06:32:49 2026 GMT Subject: CN=6a61b592-a1db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:65:34:34:b5:7e:10:72:c0:d1:b9:b3:f0:28: f2:88:fb:fb:68:19:d9:0d:6a:e0:35:4e:36:ef:43: a2:d6:67:c1:bf:7c:57:07:ad:85:42:29:e0:a8:68: b0:43:dc:50:f3:e2:05:3c:e8:ca:ca:ed:11:60:30: 60:41:0c:f7:c9:28:72:69:21:d4:54:c3:a4:1b:72: 52:e8:09:2a:db:80:df:34:ee:f4:a8:f9:2d:b9:d6: dd:21:d0:84:e2:ad:57:aa:57:fa:38:98:5e:19:50: ae:e7:1d:de:50:fd:63:8d:57:8f:96:d6:a0:94:8b: 0f:61:4a:50:0e:f8:7c:8d:e6:90:9e:67:be:09:91: f9:95:7c:97:29:3e:01:1f:27:95:2b:fb:20:b3:21: 84:5f:3c:64:3b:6b:8e:39:be:82:d5:8d:c4:e4:c0: e3:c8:5b:1a:66:bf:91:d9:cb:ad:b6:9d:00:c4:65: e4:85:a8:ba:e8:06:bf:2d:c7:1c:0a:af:2a:53:84: d2:d6:fe:7f:72:4e:92:08:b2:17:11:fe:59:b7:a7: 75:7e:f8:79:3f:5d:00:51:c5:1d:5b:f3:74:d2:66: b5:6b:a4:d3:32:27:16:70:c6:83:e3:d4:b1:9f:a6: fa:7c:8a:04:33:c0:d0:da:6a:87:51:3b:53:9e:ce: d7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:74:E2:B0:7B:80:FA:59:75:4D:9D:78:71:C2:45:FC:C6:2C:12:1F X509v3 Authority Key Identifier: keyid:52:0B:A9:4C:D0:FB:9E:7C:14:0D:FB:C0:CC:58:B9:3C:F5:4C:22:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UgupTND7nnwUDfvAzFi5PPVMIvM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:8d:23:fa:bb:2f:45:f3:a0:c7:d1:c6:d9:26:45:cd:36:6b: d9:44:61:01:a8:ed:50:6c:3c:1b:5b:b1:15:7e:82:99:b9:cd: 39:7e:f6:a1:a0:b9:dd:26:e4:87:ec:63:cd:7f:54:07:97:98: 5a:5b:41:d1:a1:a1:b1:55:08:5f:3b:d2:e9:56:04:45:72:fe: 81:f3:9f:30:cb:65:7b:7f:ca:d5:36:ef:75:a6:3f:db:e3:09: bc:df:63:71:02:b2:fb:ce:1c:34:1c:d0:d5:21:36:dc:44:9c: 2d:6e:65:b2:55:9f:2d:23:21:56:7c:f6:52:0f:4a:27:dc:bd: fe:2f:b1:ba:3f:06:ee:40:1f:ce:c7:66:1a:3c:ae:f7:e2:3d: 19:ad:97:e1:5e:3d:59:ba:7c:01:22:71:fe:e4:cd:2c:e3:1e: c8:d4:ef:3b:3f:e1:f2:5e:cf:0f:43:4a:c9:b5:22:87:45:eb: 24:1d:09:e8:7f:9b:a8:23:87:9a:a0:d0:ea:91:c3:91:0c:b2: 11:38:53:7f:dd:cb:20:05:07:4f:8d:a2:53:53:18:3e:35:36: 78:db:86:36:6f:35:b5:a2:24:0e:a0:e7:af:a3:8a:12:96:f0: 7b:89:80:6d:d6:20:3a:9e:fa:75:31:b9:53:e3:92:34:af:73: 55:df:68:15 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5ODExMTAvBgNVBAUTKDUyMEJBOTRDRDBGQjlFN0MxNDBERkJDMENDNThCOTND RjU0QzIyRjMwHhcNMjYwNzIzMDYzMjQ5WhcNMjYwNzMwMDYzMjQ5WjAYMRYwFAYD VQQDEw02YTYxYjU5Mi1hMWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqmU0NLV+EHLA0bmz8CjyiPv7aBnZDWrgNU4270Oi1mfBv3xXB62FQingqGiw Q9xQ8+IFPOjKyu0RYDBgQQz3yShyaSHUVMOkG3JS6Akq24DfNO70qPktudbdIdCE 4q1Xqlf6OJheGVCu5x3eUP1jjVePltaglIsPYUpQDvh8jeaQnme+CZH5lXyXKT4B HyeVK/sgsyGEXzxkO2uOOb6C1Y3E5MDjyFsaZr+R2cuttp0AxGXkhai66Aa/Lccc Cq8qU4TS1v5/ck6SCLIXEf5Zt6d1fvh5P10AUcUdW/N00ma1a6TTMicWcMaD49Sx n6b6fIoEM8DQ2mqHUTtTns7XWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCp04rB7 gPpZdU2deHHCRfzGLBIfMB8GA1UdIwQYMBaAFFILqUzQ+558FA37wMxYuTz1TCLz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODk4MS8xQ0Y2Q0Q3NDZD N0YxMUVGOTE0RDdENTdDNEY5QUUwMi9VZ3VwVE5EN25ud1VEZnZBekZpNVBQVk1J dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1VndXBUTkQ3bm53VURmdkF6Rmk1UFBWTUl2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODk4MS8xQ0Y2Q0Q3NDZDN0YxMUVGOTE0RDdENTdDNEY5QUUwMi9VZ3VwVE5EN25u d1VEZnZBekZpNVBQVk1Jdk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFo0j+rsvRfOgx9HG2SZFzTZr2URhAajtUGw8G1uxFX6CmbnNOX72oaC53Sbk h+xjzX9UB5eYWltB0aGhsVUIXzvS6VYERXL+gfOfMMtle3/K1TbvdaY/2+MJvN9j cQKy+84cNBzQ1SE23EScLW5lslWfLSMhVnz2Ug9KJ9y9/i+xuj8G7kAfzsdmGjyu 9+I9Ga2X4V49Wbp8ASJx/uTNLOMeyNTvOz/h8l7PD0NKybUih0XrJB0J6H+bqCOH mqDQ6pHDkQyyEThTf93LIAUHT42iU1MYPjU2eNuGNm81taIkDqDnr6OKEpbwe4mA bdYgOp76dTG5U+OSNK9zVd9oFQ== -----END CERTIFICATE-----Generated at Fri Jul 24 00:02:59 2026 by rpki-client