$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB95D/8A35B11857EA11F1B6A8C17A93833773/UM34bAX-9Pzk0kjdt1qwDbH7F-g.mft File: UM34bAX-9Pzk0kjdt1qwDbH7F-g.mft (raw, json) Hash identifier: 7z4yPTJ5tZfxL5FJqYeJrEKTvKL50pj+BHtFBzxTr3I= Subject key identifier: 1F:1B:8E:38:CE:82:4B:E6:6C:EA:49:AE:8E:37:90:8B:97:77:F0:01 Authority key identifier: 50:CD:F8:6C:05:FE:F4:FC:E4:D2:48:DD:B7:5A:B0:0D:B1:FB:17:E8 Certificate issuer: /CN=A91FB95D/serialNumber=50CDF86C05FEF4FCE4D248DDB75AB00DB1FB17E8 Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UM34bAX-9Pzk0kjdt1qwDbH7F-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB95D/8A35B11857EA11F1B6A8C17A93833773/UM34bAX-9Pzk0kjdt1qwDbH7F-g.mft Manifest number: 1F Signing time: Thu 23 Jul 2026 10:58:46 +0000 Manifest this update: Thu 23 Jul 2026 10:58:45 +0000 Manifest next update: Thu 30 Jul 2026 10:58:45 +0000 Files and hashes: 1: UM34bAX-9Pzk0kjdt1qwDbH7F-g.crl (hash: 1xIOH0uc5EWPqmLbm+OPOjZmcHa7q2jYAzRIUafgq6g=) 2: FAA05C1E57EA11F1850E3A8D93833773.roa (hash: EhC0uehK9atplVY2H7sxubg42UzW+RldO5jjtPhRdMI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB95D/8A35B11857EA11F1B6A8C17A93833773/UM34bAX-9Pzk0kjdt1qwDbH7F-g.crl rsync://rpki.apnic.net/member_repository/A91FB95D/8A35B11857EA11F1B6A8C17A93833773/UM34bAX-9Pzk0kjdt1qwDbH7F-g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UM34bAX-9Pzk0kjdt1qwDbH7F-g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:58:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB95D, serialNumber=50CDF86C05FEF4FCE4D248DDB75AB00DB1FB17E8 Validity Not Before: Jul 23 10:58:45 2026 GMT Not After : Jul 30 10:58:45 2026 GMT Subject: CN=6a61f3e6-5fcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:55:2f:b3:08:90:b3:ba:ed:8b:44:32:51:d1: e7:5b:45:8f:d4:68:16:4a:cd:3a:fc:d1:96:39:7b: 4f:f7:5c:8d:8f:bd:44:97:4a:9b:20:b0:83:b1:2b: 28:72:6b:9a:4f:ce:94:da:c6:ab:17:cb:8a:de:32: e3:cb:c2:06:5e:20:fe:f1:46:c9:49:da:8e:3d:1c: f6:ef:24:48:07:15:69:c1:73:fa:a0:76:02:6e:b5: b5:eb:27:31:be:ef:64:ac:3f:1d:54:93:53:d6:ec: 70:37:b2:d8:06:af:67:6b:32:8f:70:f0:b4:69:53: 49:b9:47:99:2c:a8:33:bb:a0:ad:9f:8e:1b:d7:d6: 4a:b6:b6:ce:17:d0:5b:19:3c:af:ad:03:75:fd:aa: 86:69:f9:bc:49:3b:29:68:4a:e1:73:14:71:59:5d: cb:ba:8f:bd:1c:cd:ae:63:cb:73:15:a5:0e:4a:4c: 81:d6:db:f9:5d:20:86:81:00:4d:54:a6:fa:56:02: fc:ec:b8:56:1b:5a:37:60:fc:12:bb:6d:0d:f0:fa: 56:2c:cb:eb:bb:de:11:aa:22:83:ec:66:97:e1:24: 00:2f:95:ee:76:28:ce:3e:7b:f7:75:d2:10:bf:91: cc:ae:fe:fb:67:d9:8b:0d:cf:43:57:a3:52:1b:ae: e3:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:1B:8E:38:CE:82:4B:E6:6C:EA:49:AE:8E:37:90:8B:97:77:F0:01 X509v3 Authority Key Identifier: keyid:50:CD:F8:6C:05:FE:F4:FC:E4:D2:48:DD:B7:5A:B0:0D:B1:FB:17:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB95D/8A35B11857EA11F1B6A8C17A93833773/UM34bAX-9Pzk0kjdt1qwDbH7F-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UM34bAX-9Pzk0kjdt1qwDbH7F-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB95D/8A35B11857EA11F1B6A8C17A93833773/UM34bAX-9Pzk0kjdt1qwDbH7F-g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:26:f9:e4:d5:64:3e:1f:70:5f:f0:dd:62:a9:27:80:ba:89: 53:d5:8f:d3:f0:cd:59:dd:b4:69:22:49:f6:9d:24:b1:4d:bd: 15:89:99:51:95:32:3c:0f:57:c5:54:a4:81:66:28:d7:eb:ea: d8:59:ec:79:61:e9:b5:4a:3b:26:e9:d3:5b:66:db:8c:47:f7: 67:aa:34:38:9b:7b:96:45:c0:4c:5b:19:3e:6d:c1:61:d9:e3: 0a:2b:37:2c:15:51:54:ef:68:99:3d:35:5a:bb:a8:e2:7f:ef: 09:46:6d:df:d3:8a:ca:f9:0a:e5:b9:88:70:70:5d:e6:27:be: 30:4b:4f:00:35:f1:b1:f8:15:26:3a:b9:f6:f7:ee:b5:26:c1: ca:4f:d4:eb:f8:37:56:bb:77:0a:e7:37:7b:4f:34:23:b6:aa: f1:d6:75:85:d2:95:19:02:8d:5c:a9:ff:16:43:3c:ca:43:c8: 99:4c:b8:99:bd:93:c4:92:52:b0:38:65:7d:12:cb:84:dc:d5: ee:0a:9a:6d:5f:6f:26:cd:2c:77:51:cf:c2:ec:dd:2b:e0:9b: 2e:b1:45:b5:7c:7a:b4:50:45:eb:5d:ed:03:8d:f1:f7:ea:7c: ef:39:fd:f6:aa:15:68:24:4d:4a:e4:e5:f7:61:0a:40:09:75: 75:6a:88:e5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG Qjk1RDExMC8GA1UEBRMoNTBDREY4NkMwNUZFRjRGQ0U0RDI0OEREQjc1QUIwMERC MUZCMTdFODAeFw0yNjA3MjMxMDU4NDVaFw0yNjA3MzAxMDU4NDVaMBgxFjAUBgNV BAMTDTZhNjFmM2U2LTVmY2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYVS+zCJCzuu2LRDJR0edbRY/UaBZKzTr80ZY5e0/3XI2PvUSXSpsgsIOxKyhy a5pPzpTaxqsXy4reMuPLwgZeIP7xRslJ2o49HPbvJEgHFWnBc/qgdgJutbXrJzG+ 72SsPx1Uk1PW7HA3stgGr2drMo9w8LRpU0m5R5ksqDO7oK2fjhvX1kq2ts4X0FsZ PK+tA3X9qoZp+bxJOyloSuFzFHFZXcu6j70cza5jy3MVpQ5KTIHW2/ldIIaBAE1U pvpWAvzsuFYbWjdg/BK7bQ3w+lYsy+u73hGqIoPsZpfhJAAvle52KM4+e/d10hC/ kcyu/vtn2YsNz0NXo1IbruM/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUHxuOOM6C S+Zs6kmujjeQi5d38AEwHwYDVR0jBBgwFoAUUM34bAX+9Pzk0kjdt1qwDbH7F+gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCOTVELzhBMzVCMTE4NTdF QTExRjFCNkE4QzE3QTkzODMzNzczL1VNMzRiQVgtOVB6azBramR0MXF3RGJIN0Yt Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVU0zNGJBWC05UHprMGtqZHQxcXdEYkg3Ri1nLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC OTVELzhBMzVCMTE4NTdFQTExRjFCNkE4QzE3QTkzODMzNzczL1VNMzRiQVgtOVB6 azBramR0MXF3RGJIN0YtZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCqJvnk1WQ+H3Bf8N1iqSeAuolT1Y/T8M1Z3bRpIkn2nSSxTb0ViZlRlTI8D1fF VKSBZijX6+rYWex5Yem1Sjsm6dNbZtuMR/dnqjQ4m3uWRcBMWxk+bcFh2eMKKzcs FVFU72iZPTVau6jif+8JRm3f04rK+QrluYhwcF3mJ74wS08ANfGx+BUmOrn29+61 JsHKT9Tr+DdWu3cK5zd7TzQjtqrx1nWF0pUZAo1cqf8WQzzKQ8iZTLiZvZPEklKw OGV9EsuE3NXuCpptX28mzSx3Uc/C7N0r4JsusUW1fHq0UEXrXe0DjfH36nzvOf32 qhVoJE1K5OX3YQpACXV1aojl -----END CERTIFICATE-----Generated at Fri Jul 24 16:43:13 2026 by rpki-client