$ rpki-client -vvf rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft File: UZQtJe28pR36Vs4J7TYet6JtvSU.mft (raw, json) Hash identifier: TiXbafYSEdyCpyZkdHosE3M6skxNZ9xFQWA+MmaPqhw= Subject key identifier: 35:21:D6:C0:2E:6F:9B:13:5D:FB:5A:31:4E:C1:80:0C:96:6D:F1:A5 Authority key identifier: 51:94:2D:25:ED:BC:A5:1D:FA:56:CE:09:ED:36:1E:B7:A2:6D:BD:25 Certificate issuer: /CN=A912AFA4/serialNumber=51942D25EDBCA51DFA56CE09ED361EB7A26DBD25 Certificate serial: 0A72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft Manifest number: 0A2D Signing time: Tue 18 Aug 2026 20:10:41 +0000 Manifest this update: Tue 18 Aug 2026 20:10:41 +0000 Manifest next update: Tue 25 Aug 2026 20:10:41 +0000 Files and hashes: 1: UZQtJe28pR36Vs4J7TYet6JtvSU.crl (hash: QC5rX8bzkInvvh/WWr1vnugasAHYOgoI/zpAP759w14=) 2: A476C8C41EA011F187B67505113D8C67.roa (hash: W8WqvCmfqjbYm/Nsa9FcNN92lO+HROWGL8GeAXxnfuk=) 3: C37BD92A1EA111F1B2DD47B2123D8C67.roa (hash: ATlrZQLMN1i/u5Bq0wuL1/pAApfhNtO3TRUif4rFqr0=) 4: E2891A621EA111F1917EDCD9123D8C67.roa (hash: gEX8Atz/LLQf1n/y8rRUMSuwdmjVhyMahE2Jamzx/nI=) 5: C1D6AD981EA111F1B2DD47B2123D8C67.roa (hash: t7Va3DBJIf7NqIYUpRn9OjFokUb0h7zcGhor8Wmv+E4=) 6: A837ACBA072311F1857499832B3D8C67.roa (hash: kLIQMU/1+OWEQ00tXB9bahteZuevt4BTHzYh2B2K2I0=) 7: 4729B9CC10B011F19AF5FC353C3D8C67.roa (hash: XieuBOApj93vMX/PSd4DPB5YCJHLqVArIOgws7wb0zA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.crl rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 20:10:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2674 (0xa72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AFA4, serialNumber=51942D25EDBCA51DFA56CE09ED361EB7A26DBD25 Validity Not Before: Aug 18 20:10:41 2026 GMT Not After : Aug 25 20:10:41 2026 GMT Subject: CN=6a84bc41-8cc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b3:dc:fb:4a:d1:ca:3c:6d:44:89:b6:cf:02: fd:89:b3:30:8b:a9:ab:45:8a:1d:c6:40:38:0a:39: ca:06:11:e3:ec:2d:7f:0a:f0:1f:4e:dc:44:cb:38: 49:f5:a8:0e:24:87:64:09:b1:1d:d8:b1:7c:65:73: 4a:82:0b:d9:ca:d2:e4:7b:5d:4e:e6:8f:73:a7:25: ee:ee:19:dc:8c:cc:50:5d:fb:5a:6a:3e:70:1a:9f: 2c:3a:a3:25:3d:97:b7:b5:d2:5b:f3:d3:de:cd:c0: 74:a7:45:06:0c:e0:97:fb:04:80:45:a8:ef:c6:86: 7b:95:79:77:92:a1:2d:92:61:90:54:a5:73:f5:d9: e4:b0:f1:17:fc:48:15:77:c5:66:35:51:40:4f:92: e1:4a:29:31:fc:95:4f:6d:20:cf:7c:8a:3b:de:35: 4c:5f:cf:16:77:c7:2e:34:33:e4:be:85:f7:3d:75: 24:fd:0b:dd:38:8c:76:40:91:ba:47:9f:30:ba:d0: 17:a4:5f:b6:9c:e7:7a:4f:53:d5:ea:e0:4f:31:da: b7:2a:92:6c:71:37:cb:69:fa:af:be:cd:70:4e:cf: 3a:76:91:e1:6a:81:fd:5a:38:fb:c6:71:92:56:04: 46:0d:fd:83:b4:cc:eb:0a:7e:e6:e6:d4:0c:de:93: a6:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:21:D6:C0:2E:6F:9B:13:5D:FB:5A:31:4E:C1:80:0C:96:6D:F1:A5 X509v3 Authority Key Identifier: keyid:51:94:2D:25:ED:BC:A5:1D:FA:56:CE:09:ED:36:1E:B7:A2:6D:BD:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:cd:5f:90:58:04:90:23:be:08:e8:02:c9:c5:e0:03:76:fb: 58:bb:0a:3d:92:50:47:85:b1:1e:f3:e5:8a:8f:35:c9:b3:4a: 4f:e6:32:0c:7b:26:7f:b5:59:c9:fb:28:be:48:da:4f:ef:60: df:af:74:c8:32:47:d9:3d:e1:b8:2d:06:8b:38:97:1b:03:cb: 7b:11:21:4d:31:97:14:ad:ea:00:7b:07:63:38:28:37:39:4a: 5a:34:5f:97:6c:e9:3b:88:25:e9:c5:51:5f:e4:94:97:2e:39: 00:2e:e9:df:30:2e:36:ed:30:81:8b:f7:3d:bb:79:94:f7:4b: dd:df:f8:51:60:c8:1b:4c:ac:15:3c:7c:94:7c:26:cf:48:ef: db:91:bc:87:28:c7:64:df:3d:17:1f:87:e7:b1:05:98:59:75: 47:50:57:d1:91:e8:17:2e:d7:f4:02:1b:d9:92:f9:59:f2:44: 1d:84:2a:34:41:00:3e:61:78:7c:09:20:68:72:fd:58:1d:19: b1:33:71:b6:e6:5e:88:bf:a4:e8:eb:d1:4d:f8:61:45:5f:fa: e2:b1:c6:70:fe:a4:ab:80:67:8b:8d:2e:4e:43:00:72:f2:26: c1:23:b1:99:fb:57:fc:53:21:d5:9b:30:76:63:f9:2f:02:1e: 50:3a:f2:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFGQTQxMTAvBgNVBAUTKDUxOTQyRDI1RURCQ0E1MURGQTU2Q0UwOUVEMzYxRUI3 QTI2REJEMjUwHhcNMjYwODE4MjAxMDQxWhcNMjYwODI1MjAxMDQxWjAYMRYwFAYD VQQDEw02YTg0YmM0MS04Y2M2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAi7Pc+0rRyjxtRIm2zwL9ibMwi6mrRYodxkA4CjnKBhHj7C1/CvAfTtxEyzhJ 9agOJIdkCbEd2LF8ZXNKggvZytLke11O5o9zpyXu7hncjMxQXftaaj5wGp8sOqMl PZe3tdJb89PezcB0p0UGDOCX+wSARajvxoZ7lXl3kqEtkmGQVKVz9dnksPEX/EgV d8VmNVFAT5LhSikx/JVPbSDPfIo73jVMX88Wd8cuNDPkvoX3PXUk/QvdOIx2QJG6 R58wutAXpF+2nOd6T1PV6uBPMdq3KpJscTfLafqvvs1wTs86dpHhaoH9Wjj7xnGS VgRGDf2DtMzrCn7m5tQM3pOmvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDUh1sAu b5sTXftaMU7BgAyWbfGlMB8GA1UdIwQYMBaAFFGULSXtvKUd+lbOCe02Hreibb0l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUZBNC9CNjc4NjJGQUFC OTUxMUVBQjI1NTlDNUJDNEY5QUUwMi9VWlF0SmUyOHBSMzZWczRKN1RZZXQ2SnR2 U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VaUXRKZTI4cFIzNlZzNEo3VFlldDZKdHZTVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUZBNC9CNjc4NjJGQUFCOTUxMUVBQjI1NTlDNUJDNEY5QUUwMi9VWlF0SmUyOHBS MzZWczRKN1RZZXQ2SnR2U1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEs1fkFgEkCO+COgCycXgA3b7WLsKPZJQR4WxHvPlio81ybNKT+YyDHsmf7VZ yfsovkjaT+9g3690yDJH2T3huC0GiziXGwPLexEhTTGXFK3qAHsHYzgoNzlKWjRf l2zpO4gl6cVRX+SUly45AC7p3zAuNu0wgYv3Pbt5lPdL3d/4UWDIG0ysFTx8lHwm z0jv25G8hyjHZN89Fx+H57EFmFl1R1BX0ZHoFy7X9AIb2ZL5WfJEHYQqNEEAPmF4 fAkgaHL9WB0ZsTNxtuZeiL+k6OvRTfhhRV/64rHGcP6kq4Bni40uTkMAcvImwSOx mftX/FMh1ZswdmP5LwIeUDrydw== -----END CERTIFICATE-----Generated at Wed Aug 19 13:41:37 2026 by rpki-client