$ rpki-client -vvvf rpki.apnic.net/member_repository/A911583F/72FF1B7690EB11F195245C824911F970/b7UKOK4znc1N9WDmz9N_y57UKGA.mft File: b7UKOK4znc1N9WDmz9N_y57UKGA.mft (raw, json) Hash identifier: DVf/mDcyo6aKqqXgLEmeXQQabnI9OChxOJO+35cKq2k= Subject key identifier: 4B:FB:E9:3E:BA:F0:EA:E9:D7:46:00:18:93:90:37:B2:4E:C2:B1:61 Authority key identifier: 6F:B5:0A:38:AE:33:9D:CD:4D:F5:60:E6:CF:D3:7F:CB:9E:D4:28:60 Certificate issuer: /CN=A911583F/serialNumber=6FB50A38AE339DCD4DF560E6CFD37FCB9ED42860 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b7UKOK4znc1N9WDmz9N_y57UKGA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911583F/72FF1B7690EB11F195245C824911F970/b7UKOK4znc1N9WDmz9N_y57UKGA.mft Manifest number: 20 Signing time: Sat 03 Oct 2026 09:37:46 +0000 Manifest this update: Sat 03 Oct 2026 09:37:46 +0000 Manifest next update: Sat 10 Oct 2026 09:37:46 +0000 Files and hashes: 1: b7UKOK4znc1N9WDmz9N_y57UKGA.crl (hash: /4E3Ktce+DA/sB1zZiA8WgyVQrehNjrt2mv4YBHncUE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911583F/72FF1B7690EB11F195245C824911F970/b7UKOK4znc1N9WDmz9N_y57UKGA.crl rsync://rpki.apnic.net/member_repository/A911583F/72FF1B7690EB11F195245C824911F970/b7UKOK4znc1N9WDmz9N_y57UKGA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b7UKOK4znc1N9WDmz9N_y57UKGA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 09:37:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911583F, serialNumber=6FB50A38AE339DCD4DF560E6CFD37FCB9ED42860 Validity Not Before: Oct 3 09:37:46 2026 GMT Not After : Oct 10 09:37:46 2026 GMT Subject: CN=6ac0ccea-b13f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8c:96:75:27:48:44:f3:df:07:0a:a5:77:6c: 55:e7:4c:b7:cf:ed:6d:23:ae:b2:8b:fb:5a:c1:52: 65:dc:89:b9:52:58:3c:00:4c:fd:24:f8:ca:4f:65: cf:20:65:7f:f8:fe:7e:4e:bb:ac:2e:fa:0b:3f:f0: 82:0f:1d:97:15:ce:f9:4f:6c:82:c0:07:b9:da:bb: 15:0e:81:d4:52:07:20:8f:7f:6c:e8:ea:3f:68:21: bc:fc:88:32:1c:22:b3:71:bc:19:8b:6a:b2:44:93: ba:e5:dd:65:b6:96:d0:f5:66:93:65:76:b4:1c:92: f9:c3:27:12:3b:55:0f:0e:23:bf:ca:76:37:54:24: 25:0f:e0:81:1b:0e:95:f8:50:dc:f7:24:89:76:42: 46:59:2b:8a:cc:18:6a:3d:5e:d5:24:0d:92:be:2e: 5a:10:25:36:59:c0:ff:e6:f3:32:58:2a:35:ec:d3: 8c:17:71:d3:c0:64:4b:e3:48:e2:eb:c5:6a:2c:06: 6b:66:49:7e:e2:3e:b8:22:98:cf:d9:dd:7a:4a:2b: e3:9b:dd:72:37:b4:33:7e:f0:65:74:f6:39:fb:f6: 39:5a:a0:5a:e9:fb:03:91:50:47:97:fe:53:1a:74: 51:b0:72:85:a3:89:cf:71:7c:bb:99:dd:26:81:de: 39:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:FB:E9:3E:BA:F0:EA:E9:D7:46:00:18:93:90:37:B2:4E:C2:B1:61 X509v3 Authority Key Identifier: keyid:6F:B5:0A:38:AE:33:9D:CD:4D:F5:60:E6:CF:D3:7F:CB:9E:D4:28:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911583F/72FF1B7690EB11F195245C824911F970/b7UKOK4znc1N9WDmz9N_y57UKGA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b7UKOK4znc1N9WDmz9N_y57UKGA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911583F/72FF1B7690EB11F195245C824911F970/b7UKOK4znc1N9WDmz9N_y57UKGA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:58:54:8c:2e:45:ad:60:ce:76:ff:09:b3:96:6b:a6:4e:33: 49:00:ff:d1:10:b5:d7:c5:66:78:37:7e:98:7a:f7:1a:bd:00: aa:ea:d9:43:88:5a:89:58:e5:af:6b:3f:97:2f:4c:5d:53:42: 72:c3:e3:c4:2a:ef:8c:5a:e4:da:3d:d8:8c:9c:ff:1e:57:14: 3b:9b:de:a3:7c:ba:ef:13:e4:6a:e7:8f:0c:c9:af:d5:da:ba: 9d:e1:58:be:e5:97:00:10:5f:0e:d6:b9:39:8c:d8:de:e8:1c: ba:db:ec:a6:a2:a3:1f:39:8c:36:23:c1:ed:52:5c:08:c1:97: 3a:c1:88:6b:24:e9:96:ac:8b:9f:e6:6f:cf:a1:e2:b1:f3:2f: ab:28:5f:2f:fa:e6:cd:30:ed:5a:18:19:45:74:f0:d9:5d:b6: 45:a9:36:d8:af:42:0d:66:1a:df:73:5d:e5:16:e3:23:da:7b: fe:79:5b:96:2b:94:79:01:f7:1f:89:0b:7f:f5:6c:1f:bd:98: 9e:4e:a6:d6:85:4b:77:89:ec:8b:21:0b:ab:4f:5c:f3:48:30: 52:b3:5f:57:7a:fb:84:96:d5:30:3f:42:22:d0:bd:07:4c:45: 0a:1b:a3:70:5d:30:bf:fe:0b:ac:05:24:f5:06:75:74:5f:09: 52:a2:cb:0f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NTgzRjExMC8GA1UEBRMoNkZCNTBBMzhBRTMzOURDRDRERjU2MEU2Q0ZEMzdGQ0I5 RUQ0Mjg2MDAeFw0yNjEwMDMwOTM3NDZaFw0yNjEwMTAwOTM3NDZaMBgxFjAUBgNV BAMTDTZhYzBjY2VhLWIxM2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHjJZ1J0hE898HCqV3bFXnTLfP7W0jrrKL+1rBUmXciblSWDwATP0k+MpPZc8g ZX/4/n5Ou6wu+gs/8IIPHZcVzvlPbILAB7nauxUOgdRSByCPf2zo6j9oIbz8iDIc IrNxvBmLarJEk7rl3WW2ltD1ZpNldrQckvnDJxI7VQ8OI7/KdjdUJCUP4IEbDpX4 UNz3JIl2QkZZK4rMGGo9XtUkDZK+LloQJTZZwP/m8zJYKjXs04wXcdPAZEvjSOLr xWosBmtmSX7iPrgimM/Z3XpKK+Ob3XI3tDN+8GV09jn79jlaoFrp+wORUEeX/lMa dFGwcoWjic9xfLuZ3SaB3jn/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUS/vpPrrw 6unXRgAYk5A3sk7CsWEwHwYDVR0jBBgwFoAUb7UKOK4znc1N9WDmz9N/y57UKGAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE1ODNGLzcyRkYxQjc2OTBF QjExRjE5NTI0NUM4MjQ5MTFGOTcwL2I3VUtPSzR6bmMxTjlXRG16OU5feTU3VUtH QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYjdVS09LNHpuYzFOOVdEbXo5Tl95NTdVS0dBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE1 ODNGLzcyRkYxQjc2OTBFQjExRjE5NTI0NUM4MjQ5MTFGOTcwL2I3VUtPSzR6bmMx TjlXRG16OU5feTU3VUtHQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAlWFSMLkWtYM52/wmzlmumTjNJAP/RELXXxWZ4N36YevcavQCq6tlDiFqJWOWv az+XL0xdU0Jyw+PEKu+MWuTaPdiMnP8eVxQ7m96jfLrvE+Rq548Mya/V2rqd4Vi+ 5ZcAEF8O1rk5jNje6By62+ymoqMfOYw2I8HtUlwIwZc6wYhrJOmWrIuf5m/PoeKx 8y+rKF8v+ubNMO1aGBlFdPDZXbZFqTbYr0INZhrfc13lFuMj2nv+eVuWK5R5Afcf iQt/9WwfvZieTqbWhUt3ieyLIQurT1zzSDBSs19XevuEltUwP0Ii0L0HTEUKG6Nw XTC//gusBST1BnV0XwlSossP -----END CERTIFICATE-----Generated at Sun Oct 4 09:47:07 2026 by rpki-client