$ rpki-client -vvf rpki.apnic.net/member_repository/A911F587/C1BA1A22136E11F1AD791BA3313D8C67/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.mft File: ufxcFLLSdSnVDm5ZPajLCqh9ZRA.mft (raw, json) Hash identifier: EsQ0Z/uZRkZMI87STlCpDAzxg1BVZORxWXyYD+R6or4= Subject key identifier: DB:7F:47:A0:3D:09:65:D4:37:C3:EC:79:98:8E:64:1B:97:DA:D6:68 Authority key identifier: B9:FC:5C:14:B2:D2:75:29:D5:0E:6E:59:3D:A8:CB:0A:A8:7D:65:10 Certificate issuer: /CN=A911F587/serialNumber=B9FC5C14B2D27529D50E6E593DA8CB0AA87D6510 Certificate serial: 67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F587/C1BA1A22136E11F1AD791BA3313D8C67/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.mft Manifest number: 5F Signing time: Wed 19 Aug 2026 08:53:38 +0000 Manifest this update: Wed 19 Aug 2026 08:53:37 +0000 Manifest next update: Wed 26 Aug 2026 08:53:37 +0000 Files and hashes: 1: ufxcFLLSdSnVDm5ZPajLCqh9ZRA.crl (hash: jltPNDmKrx0C7Cwh+zTpynWJj29+5iurEBoEtyiOKAU=) 2: CE3E7CF6136F11F1982A4804323D8C67.roa (hash: 433GVnEHsEmqM+RA2zhP/NFczVjY5LHUX58RsvVfVKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F587/C1BA1A22136E11F1AD791BA3313D8C67/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.crl rsync://rpki.apnic.net/member_repository/A911F587/C1BA1A22136E11F1AD791BA3313D8C67/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 08:53:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F587, serialNumber=B9FC5C14B2D27529D50E6E593DA8CB0AA87D6510 Validity Not Before: Aug 19 08:53:37 2026 GMT Not After : Aug 26 08:53:37 2026 GMT Subject: CN=6a856f12-e66d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:0c:1f:bc:5d:11:ca:b2:a6:02:34:44:b8:b6: 47:b6:de:4d:c8:48:15:7f:ea:fe:63:17:68:3c:b4: 2b:89:9f:b8:32:0c:fa:0c:55:2f:3d:3e:c0:0b:40: 2d:70:a9:7d:6c:45:fb:8b:65:5f:01:b1:41:31:76: 7a:58:2d:5d:26:b9:4f:24:ce:1a:cf:fe:a0:29:a9: 20:ae:4c:2e:f0:7a:b3:47:03:9d:80:70:fe:86:6c: f8:e1:3e:4a:49:99:29:f9:01:7b:4c:61:d1:81:62: 54:a4:23:38:35:19:83:f1:d3:a0:e2:fe:53:e5:94: 2f:e4:4e:c9:05:65:cd:e2:a8:08:94:a0:67:0e:00: d7:06:2f:c8:88:d2:b1:0a:e5:40:ba:8a:08:4b:0f: 2a:39:79:8c:7c:66:14:19:41:86:b6:15:24:45:d8: 2a:92:f3:ac:d9:cf:72:34:45:d2:35:a0:15:69:4b: 90:0b:40:ff:07:b6:9a:32:57:b9:26:88:5e:f7:f8: 56:ad:f0:1c:16:35:63:2b:a4:cb:a2:37:1c:53:94: c9:ab:ef:65:33:ea:31:67:11:07:8d:35:c0:bf:f7: 8b:38:c9:28:c4:33:d7:b4:87:40:52:16:e3:b8:43: 1d:39:d1:31:f8:e4:c6:c4:cc:54:44:c4:80:44:80: fa:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:7F:47:A0:3D:09:65:D4:37:C3:EC:79:98:8E:64:1B:97:DA:D6:68 X509v3 Authority Key Identifier: keyid:B9:FC:5C:14:B2:D2:75:29:D5:0E:6E:59:3D:A8:CB:0A:A8:7D:65:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F587/C1BA1A22136E11F1AD791BA3313D8C67/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F587/C1BA1A22136E11F1AD791BA3313D8C67/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:ad:f0:9a:f7:38:58:c7:a8:1e:d9:41:4a:c5:36:28:fc:2f: 09:82:52:56:2b:95:8f:43:79:55:34:24:a9:41:ae:0b:8e:80: 30:2b:21:4b:71:56:da:bc:62:b4:08:b0:ad:04:91:9c:69:68: 3f:04:7f:86:56:f5:6e:86:0a:f8:0e:0a:b2:25:d2:9d:5c:c2: 3b:ce:4c:d7:27:3d:10:76:6b:dd:26:78:7f:4e:8d:53:c7:86: 85:05:34:14:57:f2:38:bf:20:91:09:39:9c:e4:94:90:f5:04: 24:92:53:ac:81:70:40:79:46:b9:0a:00:b9:bc:08:cd:ea:8d: a6:96:1a:b3:26:bc:d1:a8:15:9c:77:54:39:e0:9d:9d:ec:22: 0d:9c:d1:88:1b:24:a3:cc:cc:e9:df:77:86:44:77:d3:d9:01: d9:1b:67:61:c7:97:09:5a:66:d9:88:d2:4d:e2:a6:c8:c0:d3: 07:75:cd:d8:64:91:85:33:16:bb:f5:96:35:b7:d9:0e:c4:69: 5b:49:a3:32:e8:f8:0b:79:6e:d3:4a:bb:d4:bc:e9:6d:ef:33: f0:fd:f3:7c:83:a8:6a:9b:92:41:cf:72:9c:a0:16:4e:09:a9: fa:33:54:fc:3f:1c:0e:0e:10:6a:f2:58:86:36:36:21:a3:cf: ea:b6:a4:02 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RjU4NzExMC8GA1UEBRMoQjlGQzVDMTRCMkQyNzUyOUQ1MEU2RTU5M0RBOENCMEFB ODdENjUxMDAeFw0yNjA4MTkwODUzMzdaFw0yNjA4MjYwODUzMzdaMBgxFjAUBgNV BAMTDTZhODU2ZjEyLWU2NmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCPDB+8XRHKsqYCNES4tke23k3ISBV/6v5jF2g8tCuJn7gyDPoMVS89PsALQC1w qX1sRfuLZV8BsUExdnpYLV0muU8kzhrP/qApqSCuTC7werNHA52AcP6GbPjhPkpJ mSn5AXtMYdGBYlSkIzg1GYPx06Di/lPllC/kTskFZc3iqAiUoGcOANcGL8iI0rEK 5UC6ighLDyo5eYx8ZhQZQYa2FSRF2CqS86zZz3I0RdI1oBVpS5ALQP8HtpoyV7km iF73+Fat8BwWNWMrpMuiNxxTlMmr72Uz6jFnEQeNNcC/94s4ySjEM9e0h0BSFuO4 Qx050TH45MbEzFRExIBEgPoDAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU239HoD0J ZdQ3w+x5mI5kG5fa1mgwHwYDVR0jBBgwFoAUufxcFLLSdSnVDm5ZPajLCqh9ZRAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFGNTg3L0MxQkExQTIyMTM2 RTExRjFBRDc5MUJBMzMxM0Q4QzY3L3VmeGNGTExTZFNuVkRtNVpQYWpMQ3FoOVpS QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdWZ4Y0ZMTFNkU25WRG01WlBhakxDcWg5WlJBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFG NTg3L0MxQkExQTIyMTM2RTExRjFBRDc5MUJBMzMxM0Q4QzY3L3VmeGNGTExTZFNu VkRtNVpQYWpMQ3FoOVpSQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCRrfCa9zhYx6ge2UFKxTYo/C8JglJWK5WPQ3lVNCSpQa4LjoAwKyFLcVbavGK0 CLCtBJGcaWg/BH+GVvVuhgr4DgqyJdKdXMI7zkzXJz0QdmvdJnh/To1Tx4aFBTQU V/I4vyCRCTmc5JSQ9QQkklOsgXBAeUa5CgC5vAjN6o2mlhqzJrzRqBWcd1Q54J2d 7CINnNGIGySjzMzp33eGRHfT2QHZG2dhx5cJWmbZiNJN4qbIwNMHdc3YZJGFMxa7 9ZY1t9kOxGlbSaMy6PgLeW7TSrvUvOlt7zPw/fN8g6hqm5JBz3KcoBZOCan6M1T8 PxwODhBq8liGNjYho8/qtqQC -----END CERTIFICATE-----Generated at Wed Aug 19 12:46:34 2026 by rpki-client