$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FB95D/8A35B11857EA11F1B6A8C17A93833773/UM34bAX-9Pzk0kjdt1qwDbH7F-g.mft File: UM34bAX-9Pzk0kjdt1qwDbH7F-g.mft (raw, json) Hash identifier: S0Gso5V6WSVDHMFyn6lzD+wokO6+Kt9T3Vf0smtIKSk= Subject key identifier: 10:2D:81:F7:D6:5C:69:BC:38:18:D9:FB:44:FC:E4:B1:93:22:DA:6A Authority key identifier: 50:CD:F8:6C:05:FE:F4:FC:E4:D2:48:DD:B7:5A:B0:0D:B1:FB:17:E8 Certificate issuer: /CN=A91FB95D/serialNumber=50CDF86C05FEF4FCE4D248DDB75AB00DB1FB17E8 Certificate serial: 58 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UM34bAX-9Pzk0kjdt1qwDbH7F-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB95D/8A35B11857EA11F1B6A8C17A93833773/UM34bAX-9Pzk0kjdt1qwDbH7F-g.mft Manifest number: 50 Signing time: Wed 07 Oct 2026 09:01:42 +0000 Manifest this update: Wed 07 Oct 2026 09:01:41 +0000 Manifest next update: Wed 14 Oct 2026 09:01:41 +0000 Files and hashes: 1: UM34bAX-9Pzk0kjdt1qwDbH7F-g.crl (hash: zJpQ2+4wizBpLND3h3J25AKY+tkBJVOJYXELst/Enrc=) 2: C4B1F19088EF11F1BEAD5A114511F970.roa (hash: xo/UHdXsxPGdn9koRsNyDMlw86tZjm0AwgRBi0XgpeY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB95D/8A35B11857EA11F1B6A8C17A93833773/UM34bAX-9Pzk0kjdt1qwDbH7F-g.crl rsync://rpki.apnic.net/member_repository/A91FB95D/8A35B11857EA11F1B6A8C17A93833773/UM34bAX-9Pzk0kjdt1qwDbH7F-g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UM34bAX-9Pzk0kjdt1qwDbH7F-g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 09:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB95D, serialNumber=50CDF86C05FEF4FCE4D248DDB75AB00DB1FB17E8 Validity Not Before: Oct 7 09:01:41 2026 GMT Not After : Oct 14 09:01:41 2026 GMT Subject: CN=6ac60a76-1d4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:42:2d:a7:20:0e:33:3b:13:9e:5e:9f:0d:00: 5f:67:6f:b4:79:15:07:52:9e:e2:95:58:9b:ce:d8: a5:67:01:a8:53:51:ca:a2:17:f5:9a:62:a0:6b:c3: 7e:ac:da:82:e3:ac:b1:b8:4c:7e:5b:64:35:c1:f3: cd:d7:40:01:05:fb:42:f1:80:d0:be:62:6c:3c:53: f8:35:29:0f:64:d7:cc:d4:04:ad:c5:65:af:ba:70: e3:18:67:a3:7f:80:18:9b:27:87:f8:32:98:8b:d2: f6:8d:8b:78:f1:da:e1:5d:b3:7e:1c:49:8f:ac:67: 84:bc:29:2a:34:09:c9:d3:0f:3b:58:19:bf:f3:0c: eb:04:aa:9a:c8:67:9f:cd:e8:68:79:27:77:b9:4c: 70:07:da:ea:71:bc:cf:76:65:06:c5:4e:0e:44:db: 4c:d4:f0:47:45:a3:8c:f9:d7:c1:90:b0:f6:66:b6: 97:a2:d7:95:ad:40:2a:2f:02:90:c8:16:4a:de:f0: c9:2b:8d:d3:47:15:fb:79:22:3f:73:e8:64:c3:ff: a0:21:61:f7:16:fd:fc:49:7d:82:e4:4d:a5:84:62: 11:6e:f5:9e:f6:72:92:4c:bc:27:5c:13:8f:61:a3: 77:58:b4:c1:a7:0f:51:53:28:40:97:12:6d:99:31: 00:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:2D:81:F7:D6:5C:69:BC:38:18:D9:FB:44:FC:E4:B1:93:22:DA:6A X509v3 Authority Key Identifier: keyid:50:CD:F8:6C:05:FE:F4:FC:E4:D2:48:DD:B7:5A:B0:0D:B1:FB:17:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB95D/8A35B11857EA11F1B6A8C17A93833773/UM34bAX-9Pzk0kjdt1qwDbH7F-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UM34bAX-9Pzk0kjdt1qwDbH7F-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB95D/8A35B11857EA11F1B6A8C17A93833773/UM34bAX-9Pzk0kjdt1qwDbH7F-g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:92:32:50:ab:74:24:3b:38:ef:2e:bf:eb:b2:f5:a6:11:f4: f5:49:7d:3d:e8:b7:69:d6:00:48:12:1a:b6:62:fe:d2:22:59: a0:d7:8b:82:fa:86:ee:d4:0b:5e:bd:8a:2a:b2:76:41:c3:e3: ff:0c:22:ad:3a:f8:7b:7d:8f:27:03:4c:49:69:8d:19:0a:19: c7:51:2c:dc:4f:a4:fc:e5:87:cb:ce:43:95:de:cf:fa:50:a3: e2:0e:ca:73:75:f4:7f:61:c4:96:54:ff:2e:ef:8c:12:7b:1e: 69:6f:6b:1d:8a:5f:89:b2:d7:d2:b3:ef:a3:99:4c:ac:a6:34: 85:fa:15:94:e7:4c:59:74:7a:c7:c3:b4:62:50:b9:bf:0d:1e: b8:84:2f:0c:a4:c9:8b:b2:82:8b:e4:d4:f7:bf:58:75:42:be: 4d:22:9d:d8:5d:78:ad:c4:c6:34:e5:80:0d:8c:96:8a:be:27: 54:f2:2a:3e:fe:46:d0:58:6b:dc:18:cc:b6:37:31:34:c3:65: 3f:d5:22:d7:72:f2:6c:f2:fa:c7:30:a6:75:f7:3f:ea:26:1e: 71:22:32:4d:e2:1e:6e:a4:28:dd:29:83:64:31:1c:88:5f:fc: 30:9f:1f:45:70:75:41:51:db:0a:16:0f:6c:03:1a:33:56:0d: da:d0:0e:0a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG Qjk1RDExMC8GA1UEBRMoNTBDREY4NkMwNUZFRjRGQ0U0RDI0OEREQjc1QUIwMERC MUZCMTdFODAeFw0yNjEwMDcwOTAxNDFaFw0yNjEwMTQwOTAxNDFaMBgxFjAUBgNV BAMTDTZhYzYwYTc2LTFkNGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDQi2nIA4zOxOeXp8NAF9nb7R5FQdSnuKVWJvO2KVnAahTUcqiF/WaYqBrw36s 2oLjrLG4TH5bZDXB883XQAEF+0LxgNC+Ymw8U/g1KQ9k18zUBK3FZa+6cOMYZ6N/ gBibJ4f4MpiL0vaNi3jx2uFds34cSY+sZ4S8KSo0CcnTDztYGb/zDOsEqprIZ5/N 6Gh5J3e5THAH2upxvM92ZQbFTg5E20zU8EdFo4z518GQsPZmtpei15WtQCovApDI Fkre8MkrjdNHFft5Ij9z6GTD/6AhYfcW/fxJfYLkTaWEYhFu9Z72cpJMvCdcE49h o3dYtMGnD1FTKECXEm2ZMQCxAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUEC2B99Zc abw4GNn7RPzksZMi2mowHwYDVR0jBBgwFoAUUM34bAX+9Pzk0kjdt1qwDbH7F+gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCOTVELzhBMzVCMTE4NTdF QTExRjFCNkE4QzE3QTkzODMzNzczL1VNMzRiQVgtOVB6azBramR0MXF3RGJIN0Yt Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVU0zNGJBWC05UHprMGtqZHQxcXdEYkg3Ri1nLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC OTVELzhBMzVCMTE4NTdFQTExRjFCNkE4QzE3QTkzODMzNzczL1VNMzRiQVgtOVB6 azBramR0MXF3RGJIN0YtZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAwkjJQq3QkOzjvLr/rsvWmEfT1SX096Ldp1gBIEhq2Yv7SIlmg14uC+obu1Ate vYoqsnZBw+P/DCKtOvh7fY8nA0xJaY0ZChnHUSzcT6T85YfLzkOV3s/6UKPiDspz dfR/YcSWVP8u74wSex5pb2sdil+JstfSs++jmUyspjSF+hWU50xZdHrHw7RiULm/ DR64hC8MpMmLsoKL5NT3v1h1Qr5NIp3YXXitxMY05YANjJaKvidU8io+/kbQWGvc GMy2NzE0w2U/1SLXcvJs8vrHMKZ19z/qJh5xIjJN4h5upCjdKYNkMRyIX/wwnx9F cHVBUdsKFg9sAxozVg3a0A4K -----END CERTIFICATE-----Generated at Thu Oct 8 02:23:55 2026 by rpki-client