$ rpki-client -vvvf rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft File: uHa2DaKzyctmxyu5_Kc77ssR_dE.mft (raw, json) Hash identifier: OfOCjU2Yt97SR1eG5yX7CB/6ms4p009GjSi99e8lIQo= Subject key identifier: 3C:A2:3B:F7:18:43:1C:08:E4:AD:1B:6D:B2:76:40:6F:3F:01:74:A6 Authority key identifier: B8:76:B6:0D:A2:B3:C9:CB:66:C7:2B:B9:FC:A7:3B:EE:CB:11:FD:D1 Certificate issuer: /CN=A912611F/serialNumber=B876B60DA2B3C9CB66C72BB9FCA73BEECB11FDD1 Certificate serial: 10E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHa2DaKzyctmxyu5_Kc77ssR_dE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft Manifest number: 1AFB Signing time: Fri 02 Oct 2026 17:27:41 +0000 Manifest this update: Fri 02 Oct 2026 17:27:40 +0000 Manifest next update: Fri 09 Oct 2026 17:27:40 +0000 Files and hashes: 1: uHa2DaKzyctmxyu5_Kc77ssR_dE.crl (hash: PrDvV+zFxdMbiDzklrCvxW60Bh7VrlX5QrxzVIf8vzk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.crl rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHa2DaKzyctmxyu5_Kc77ssR_dE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 17:27:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4325 (0x10e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912611F, serialNumber=B876B60DA2B3C9CB66C72BB9FCA73BEECB11FDD1 Validity Not Before: Oct 2 17:27:40 2026 GMT Not After : Oct 9 17:27:40 2026 GMT Subject: CN=6abfe98d-03b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c4:62:fc:83:75:b5:10:4e:41:f0:83:f2:a6: f6:61:c7:0f:c7:68:35:51:bb:8b:da:bc:2d:16:da: 5e:4a:36:a2:e7:22:51:d5:ad:59:bf:28:b6:28:77: c6:45:3e:f3:f9:a8:83:e2:73:99:fc:8b:8a:03:7d: bf:4e:8f:15:40:31:7e:97:a1:21:de:1f:70:13:ae: ec:93:e6:e0:3f:79:79:1e:1c:5b:54:d2:e1:e2:8e: 51:1c:2a:1d:e4:b6:94:39:68:5c:ee:86:3e:c2:1c: 54:db:9d:73:ad:cf:67:27:64:1e:84:d9:1d:1d:55: 54:ad:97:df:f6:24:de:a6:63:22:f6:54:af:18:b1: be:54:bd:b7:b6:8b:08:96:bd:7d:04:9b:07:c3:6c: 5b:7d:57:33:da:59:f9:9e:e5:7b:09:4f:1c:70:23: dc:1a:d0:1d:75:1d:97:2c:c0:9e:e1:dc:50:f6:48: 0e:31:f1:76:2e:b5:c2:90:77:01:68:e2:3b:08:10: cf:4e:6f:ac:bb:54:b8:72:c7:92:37:d4:de:13:63: d0:fb:81:57:c2:ed:ee:c5:1b:78:5c:35:c8:c4:0b: ba:aa:9b:69:8f:f8:d0:72:68:c3:27:e2:26:c1:e4: f6:c9:6b:88:15:43:e9:7e:54:31:32:85:5e:05:38: 56:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:A2:3B:F7:18:43:1C:08:E4:AD:1B:6D:B2:76:40:6F:3F:01:74:A6 X509v3 Authority Key Identifier: keyid:B8:76:B6:0D:A2:B3:C9:CB:66:C7:2B:B9:FC:A7:3B:EE:CB:11:FD:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHa2DaKzyctmxyu5_Kc77ssR_dE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:c3:11:6e:2d:d4:ba:b5:58:5e:4d:39:57:8e:fa:db:92:51: 7d:a9:48:43:98:95:c8:70:8a:65:d5:41:d8:f6:71:97:0f:6b: fe:97:b0:d7:fb:9a:38:fe:8c:c7:84:84:0f:3c:c9:a6:d3:d5: 4d:a4:ce:72:08:04:48:a1:ef:35:94:65:fa:9e:d6:bd:96:c8: ac:b5:bf:9d:30:c9:cf:79:0e:10:3b:6c:0e:64:b1:4d:fd:7f: 07:2f:bc:b4:6e:a7:6f:dc:ba:8a:6f:38:7e:cc:97:ef:92:d7: 0e:6e:a6:0f:7d:9b:ba:4b:07:7b:00:47:56:d5:a0:a6:75:4a: 26:05:59:d8:38:94:23:36:d9:49:e9:37:bf:5b:18:65:de:ad: a7:f7:83:59:90:54:f3:a3:30:aa:95:12:02:2c:3f:5f:5d:03: 65:f1:b4:cb:fa:09:61:7f:e5:a2:43:b3:9b:d7:d7:a6:ff:7b: 33:d9:ad:60:11:3d:38:44:eb:6c:2f:67:8e:f9:3b:5b:c5:39: b8:51:03:d5:49:4f:f2:52:ef:2f:6b:cd:2e:a4:ec:28:c8:89: c1:07:fa:d7:85:bb:59:47:14:d7:93:ee:76:ae:6c:65:34:b0: f3:00:36:28:2d:b2:16:91:c7:d9:73:ed:27:26:c2:1d:69:42: 7d:20:8a:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYxMUYxMTAvBgNVBAUTKEI4NzZCNjBEQTJCM0M5Q0I2NkM3MkJCOUZDQTczQkVF Q0IxMUZERDEwHhcNMjYxMDAyMTcyNzQwWhcNMjYxMDA5MTcyNzQwWjAYMRYwFAYD VQQDEw02YWJmZTk4ZC0wM2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwMRi/IN1tRBOQfCD8qb2YccPx2g1UbuL2rwtFtpeSjai5yJR1a1Zvyi2KHfG RT7z+aiD4nOZ/IuKA32/To8VQDF+l6Eh3h9wE67sk+bgP3l5HhxbVNLh4o5RHCod 5LaUOWhc7oY+whxU251zrc9nJ2QehNkdHVVUrZff9iTepmMi9lSvGLG+VL23tosI lr19BJsHw2xbfVcz2ln5nuV7CU8ccCPcGtAddR2XLMCe4dxQ9kgOMfF2LrXCkHcB aOI7CBDPTm+su1S4cseSN9TeE2PQ+4FXwu3uxRt4XDXIxAu6qptpj/jQcmjDJ+Im weT2yWuIFUPpflQxMoVeBThWQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDyiO/cY QxwI5K0bbbJ2QG8/AXSmMB8GA1UdIwQYMBaAFLh2tg2is8nLZscrufynO+7LEf3R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjExRi80QThCMDRFQTRD N0MxMUU5ODFBNDM5NjlDNEY5QUUwMi91SGEyRGFLenljdG14eXU1X0tjNzdzc1Jf ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VIYTJEYUt6eWN0bXh5dTVfS2M3N3NzUl9kRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjExRi80QThCMDRFQTRDN0MxMUU5ODFBNDM5NjlDNEY5QUUwMi91SGEyRGFLenlj dG14eXU1X0tjNzdzc1JfZEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzsMRbi3UurVYXk05V47625JRfalIQ5iVyHCKZdVB2PZxlw9r/pew1/uaOP6M x4SEDzzJptPVTaTOcggESKHvNZRl+p7WvZbIrLW/nTDJz3kOEDtsDmSxTf1/By+8 tG6nb9y6im84fsyX75LXDm6mD32buksHewBHVtWgpnVKJgVZ2DiUIzbZSek3v1sY Zd6tp/eDWZBU86MwqpUSAiw/X10DZfG0y/oJYX/lokOzm9fXpv97M9mtYBE9OETr bC9njvk7W8U5uFED1UlP8lLvL2vNLqTsKMiJwQf614W7WUcU15Pudq5sZTSw8wA2 KC2yFpHH2XPtJybCHWlCfSCKRA== -----END CERTIFICATE-----Generated at Sun Oct 4 10:23:56 2026 by rpki-client