$ rpki-client -vvvf rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft File: uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft (raw, json) Hash identifier: QxnRY9aMxjGWbMae2sdxRMoHIA5WmnDQBeMzG9eciBo= Subject key identifier: 6B:65:E1:4C:A9:B8:DB:4C:1E:B4:31:D0:14:68:73:7C:2C:62:37:FF Authority key identifier: B8:4C:23:96:9E:D7:9C:0E:31:C1:3C:14:50:01:2E:22:46:D3:F9:4D Certificate issuer: /CN=A911F2DF/serialNumber=B84C23969ED79C0E31C13C1450012E2246D3F94D Certificate serial: 01E2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uEwjlp7XnA4xwTwUUAEuIkbT-U0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft Manifest number: 01C7 Signing time: Sun 25 Oct 2026 04:15:24 +0000 Manifest this update: Sun 25 Oct 2026 04:15:23 +0000 Manifest next update: Sun 01 Nov 2026 04:15:23 +0000 Files and hashes: 1: uEwjlp7XnA4xwTwUUAEuIkbT-U0.crl (hash: O9ALb20+HDis/jAcF+LVIzNQddGamnCPB4kaFMMnnWQ=) 2: 7FAE29E8958E11EF9CC0DD0AC4F9AE02.roa (hash: fhAGA7U+T9cLvdjqCVwOeUhhQP8Fkcx/sUcd0jEHT6k=) 3: 92E390AC958E11EF87A4040BC4F9AE02.roa (hash: bFWyMjM59KpMl2IdJ0Vj6yC7NnD6EqeOW3IYGS46pNA=) 4: 659B37E4958E11EFAFF1870AC4F9AE02.roa (hash: Oq52N/ekiWeIII4g9u3Cj+mGMLq4I3r8aDPxQbni/Mo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.crl rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uEwjlp7XnA4xwTwUUAEuIkbT-U0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 04:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 482 (0x1e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F2DF, serialNumber=B84C23969ED79C0E31C13C1450012E2246D3F94D Validity Not Before: Oct 25 04:15:23 2026 GMT Not After : Nov 1 04:15:23 2026 GMT Subject: CN=6add825c-89f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:49:65:1b:e2:98:d5:74:f2:47:4b:38:06:1d: a1:99:77:04:63:c5:54:b8:a1:c5:fc:d4:d5:ee:33: 71:aa:1e:a8:c1:48:ed:f4:de:a8:1d:d9:75:02:9b: c9:24:bc:e2:2d:52:74:d8:52:10:92:aa:6f:58:38: 01:5c:96:f2:da:3b:c5:43:e6:df:e2:fb:2e:67:51: c2:21:b6:9d:33:f5:ce:3d:ef:3a:3e:11:9d:06:97: 24:44:5a:4d:c5:19:cf:ba:2d:38:e6:10:c7:e1:37: a1:c7:15:33:c8:76:71:9e:bc:1e:f8:72:6a:63:be: 9b:b8:fb:3b:7d:56:82:ab:93:28:7a:3e:b2:d6:56: 1b:45:24:ab:6f:bc:9a:2b:20:61:a7:fa:77:4e:87: 39:61:f5:b3:e5:18:fd:b8:a8:11:d1:50:e7:4e:50: c0:ac:69:5c:67:6c:03:e3:d8:18:a6:43:1d:5a:2e: 9d:08:f2:5f:e4:21:8f:f2:76:9b:a9:e0:84:db:8c: ca:8c:32:28:b0:38:62:ac:4b:1c:cf:3c:1b:a8:7c: 69:53:f1:35:01:64:58:6f:21:14:7c:27:db:3f:d1: 88:57:f8:cb:56:81:0d:32:31:88:ec:f8:e0:d8:bb: 2a:dd:0c:d6:9c:c1:e1:51:8e:ec:bf:7b:83:bc:c7: fb:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:65:E1:4C:A9:B8:DB:4C:1E:B4:31:D0:14:68:73:7C:2C:62:37:FF X509v3 Authority Key Identifier: keyid:B8:4C:23:96:9E:D7:9C:0E:31:C1:3C:14:50:01:2E:22:46:D3:F9:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uEwjlp7XnA4xwTwUUAEuIkbT-U0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F2DF/00501FD223AE11EF9493F45CC4F9AE02/uEwjlp7XnA4xwTwUUAEuIkbT-U0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:c5:e1:14:2e:30:9c:fe:eb:32:41:58:36:f3:44:35:0a:8c: 9d:3c:e6:37:27:39:94:17:90:7e:b9:a4:0a:08:10:39:23:b2: b9:f2:6c:14:aa:7c:0a:fc:25:8d:1b:a1:71:41:1c:4c:3d:3a: aa:4f:02:3a:d9:6f:ab:a1:8e:e7:96:3a:d4:02:44:70:2c:c6: 43:65:d1:88:3f:a1:74:f1:99:db:f4:c3:b2:52:f7:05:ad:85: 98:c7:55:58:5a:03:15:b0:4b:3a:08:c4:cc:5b:b9:82:95:17: 46:8c:f0:d7:3b:1b:9f:39:09:9d:5a:cc:4c:d4:cd:46:cc:0e: ba:d1:c2:00:79:ae:ed:a7:80:3f:58:65:ec:8e:4a:57:a3:fb: 51:de:bf:50:8d:f6:dc:95:84:47:b8:a0:75:c4:e4:58:e2:ab: 57:91:be:c5:df:3c:45:a2:b5:b9:12:dc:31:58:2e:63:87:f7: 16:1d:d5:92:20:b7:20:bb:4c:66:3e:25:b0:48:f7:2e:d5:d3: ba:dc:7e:22:82:61:9d:bd:be:46:65:40:c3:df:fe:ed:87:55: 61:a9:28:ca:bb:54:e9:1a:ba:74:f6:c2:ce:fc:7c:3a:2b:fb: fb:65:9c:71:0d:a8:9a:99:46:10:d4:18:03:bd:d7:13:de:d7: b8:77:9a:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUYyREYxMTAvBgNVBAUTKEI4NEMyMzk2OUVENzlDMEUzMUMxM0MxNDUwMDEyRTIy NDZEM0Y5NEQwHhcNMjYxMDI1MDQxNTIzWhcNMjYxMTAxMDQxNTIzWjAYMRYwFAYD VQQDEw02YWRkODI1Yy04OWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxkllG+KY1XTyR0s4Bh2hmXcEY8VUuKHF/NTV7jNxqh6owUjt9N6oHdl1ApvJ JLziLVJ02FIQkqpvWDgBXJby2jvFQ+bf4vsuZ1HCIbadM/XOPe86PhGdBpckRFpN xRnPui045hDH4TehxxUzyHZxnrwe+HJqY76buPs7fVaCq5Moej6y1lYbRSSrb7ya KyBhp/p3Toc5YfWz5Rj9uKgR0VDnTlDArGlcZ2wD49gYpkMdWi6dCPJf5CGP8nab qeCE24zKjDIosDhirEsczzwbqHxpU/E1AWRYbyEUfCfbP9GIV/jLVoENMjGI7Pjg 2Lsq3QzWnMHhUY7sv3uDvMf79wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGtl4Uyp uNtMHrQx0BRoc3wsYjf/MB8GA1UdIwQYMBaAFLhMI5ae15wOMcE8FFABLiJG0/lN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjJERi8wMDUwMUZEMjIz QUUxMUVGOTQ5M0Y0NUNDNEY5QUUwMi91RXdqbHA3WG5BNHh3VHdVVUFFdUlrYlQt VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3VFd2pscDdYbkE0eHdUd1VVQUV1SWtiVC1VMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjJERi8wMDUwMUZEMjIzQUUxMUVGOTQ5M0Y0NUNDNEY5QUUwMi91RXdqbHA3WG5B NHh3VHdVVUFFdUlrYlQtVTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAE8XhFC4wnP7rMkFYNvNENQqMnTzmNyc5lBeQfrmkCggQOSOyufJsFKp8Cvwl jRuhcUEcTD06qk8COtlvq6GO55Y61AJEcCzGQ2XRiD+hdPGZ2/TDslL3Ba2FmMdV WFoDFbBLOgjEzFu5gpUXRozw1zsbnzkJnVrMTNTNRswOutHCAHmu7aeAP1hl7I5K V6P7Ud6/UI323JWER7igdcTkWOKrV5G+xd88RaK1uRLcMVguY4f3Fh3VkiC3ILtM Zj4lsEj3LtXTutx+IoJhnb2+RmVAw9/+7YdVYakoyrtU6Rq6dPbCzvx8Oiv7+2Wc cQ2omplGENQYA73XE97XuHeaVA== -----END CERTIFICATE-----Generated at Tue Oct 27 04:39:33 2026 by rpki-client