$ rpki-client -vvvf rpki.apnic.net/member_repository/A91393AF/3293CD3E995B11F1BE0CE0905811F970/UW3hJq_UWnmZtCRiMNfxCVkuRQQ.mft File: UW3hJq_UWnmZtCRiMNfxCVkuRQQ.mft (raw, json) Hash identifier: TRur/1IGT/64mBGVAcCW3NhOlUki651vs2CsEGS9dX4= Subject key identifier: BF:7D:99:DE:EB:53:C9:86:87:F0:B2:A7:99:26:04:CC:5D:FD:36:22 Authority key identifier: 51:6D:E1:26:AF:D4:5A:79:99:B4:24:62:30:D7:F1:09:59:2E:45:04 Certificate issuer: /CN=A91393AF/serialNumber=516DE126AFD45A7999B4246230D7F109592E4504 Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UW3hJq_UWnmZtCRiMNfxCVkuRQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91393AF/3293CD3E995B11F1BE0CE0905811F970/UW3hJq_UWnmZtCRiMNfxCVkuRQQ.mft Manifest number: 23 Signing time: Sat 17 Oct 2026 09:36:57 +0000 Manifest this update: Sat 17 Oct 2026 09:36:56 +0000 Manifest next update: Sat 24 Oct 2026 09:36:56 +0000 Files and hashes: 1: UW3hJq_UWnmZtCRiMNfxCVkuRQQ.crl (hash: WF5NG4RuVpCTI2co5pbzbrEtwVjWIdAJ1hsnuPmCpAU=) 2: 93C6498C995C11F1995AA0EC5911F970.roa (hash: wmsoCB/db2wKRlA20ZjkWyIKPzPNHwP+rsCvc2YOh9I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91393AF/3293CD3E995B11F1BE0CE0905811F970/UW3hJq_UWnmZtCRiMNfxCVkuRQQ.crl rsync://rpki.apnic.net/member_repository/A91393AF/3293CD3E995B11F1BE0CE0905811F970/UW3hJq_UWnmZtCRiMNfxCVkuRQQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UW3hJq_UWnmZtCRiMNfxCVkuRQQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Oct 2026 09:36:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91393AF, serialNumber=516DE126AFD45A7999B4246230D7F109592E4504 Validity Not Before: Oct 17 09:36:56 2026 GMT Not After : Oct 24 09:36:56 2026 GMT Subject: CN=6ad341b8-83ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c4:be:ed:06:6f:09:78:21:0a:18:bf:be:30: b7:cf:0a:6a:9a:ed:41:a6:b7:ad:71:3a:05:bb:b1: ee:a9:a0:07:de:05:f9:8d:a9:1c:2a:08:7f:b7:54: 56:f1:8e:c6:5a:61:7b:f1:a1:cf:f8:0d:fa:24:1a: 65:15:ef:8f:60:3a:4f:d6:84:08:f9:fb:50:77:0c: 1a:45:96:f5:33:5b:9e:f5:06:dd:ce:6f:91:fa:f6: 99:97:f6:1c:f9:37:b8:ea:1f:92:fa:99:4a:0b:a2: 58:96:d8:16:4d:ba:37:fb:ac:81:21:dd:05:41:a5: 63:77:6e:cf:ff:db:f2:13:c9:11:b8:63:c6:39:64: 6d:1a:c9:16:5b:fa:23:cf:e3:fb:c9:f6:7e:a2:15: c0:71:85:26:1a:af:d2:e5:9a:79:b8:ca:f9:2a:9d: 0d:b8:65:3e:92:7f:c1:8f:f7:e2:6c:67:b8:6a:a6: eb:be:c1:2a:64:b7:c2:e6:19:23:b1:a6:bd:5c:f5: 2e:83:1f:9c:34:ce:83:6c:10:db:6f:77:55:66:fc: 8e:08:5e:51:b6:34:f0:39:b5:00:e6:ed:65:5e:95: f9:ef:d3:9f:82:eb:09:e2:ec:4e:34:03:cf:91:0c: 84:76:05:ef:3f:0b:f0:88:bd:68:43:99:c2:65:e2: 5e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:7D:99:DE:EB:53:C9:86:87:F0:B2:A7:99:26:04:CC:5D:FD:36:22 X509v3 Authority Key Identifier: keyid:51:6D:E1:26:AF:D4:5A:79:99:B4:24:62:30:D7:F1:09:59:2E:45:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91393AF/3293CD3E995B11F1BE0CE0905811F970/UW3hJq_UWnmZtCRiMNfxCVkuRQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UW3hJq_UWnmZtCRiMNfxCVkuRQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91393AF/3293CD3E995B11F1BE0CE0905811F970/UW3hJq_UWnmZtCRiMNfxCVkuRQQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:d4:70:4e:0e:3c:94:31:7e:db:e8:b0:33:d7:d5:b6:e1:87: 86:c9:3e:4f:53:d4:c3:79:58:6b:52:c5:71:e4:c5:8e:cf:90: ec:7c:23:31:79:1b:d4:31:92:a6:7f:b7:df:3b:31:16:fd:bc: 38:b5:1d:50:1d:c5:74:c1:23:5b:80:76:1e:8d:04:d7:51:85: 61:52:42:c9:60:1a:2c:09:86:8d:12:60:38:64:25:14:54:45: 98:19:4b:13:23:95:b9:00:eb:f4:ad:50:1e:1c:c8:50:88:e6: 31:31:7d:44:a3:10:5f:65:72:8f:b0:f5:97:ef:68:98:03:9d: d1:31:ae:8f:48:d4:5a:63:55:04:eb:00:52:2e:fd:18:f5:a3: 22:0a:20:29:ff:cf:37:8f:36:5d:af:d4:98:da:88:77:d5:5a: 11:2a:06:24:88:f8:40:75:05:b0:b9:a0:e1:58:ea:bc:6b:20: 56:b1:7d:a1:90:5b:5c:fd:02:01:7d:27:5a:4b:ff:c0:f6:fe: 39:5c:d3:db:aa:25:4c:c1:5a:66:bd:c4:e4:fe:6e:89:d1:9e: 29:5a:ab:68:9c:88:b2:27:7b:85:ee:b6:e4:e9:60:eb:6a:b3: f5:0c:52:0a:9c:9a:fb:91:9b:96:42:64:24:3f:69:b7:44:ee: 50:4e:df:d9 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz OTNBRjExMC8GA1UEBRMoNTE2REUxMjZBRkQ0NUE3OTk5QjQyNDYyMzBEN0YxMDk1 OTJFNDUwNDAeFw0yNjEwMTcwOTM2NTZaFw0yNjEwMjQwOTM2NTZaMBgxFjAUBgNV BAMTDTZhZDM0MWI4LTgzYWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCYxL7tBm8JeCEKGL++MLfPCmqa7UGmt61xOgW7se6poAfeBfmNqRwqCH+3VFbx jsZaYXvxoc/4DfokGmUV749gOk/WhAj5+1B3DBpFlvUzW571Bt3Ob5H69pmX9hz5 N7jqH5L6mUoLoliW2BZNujf7rIEh3QVBpWN3bs//2/ITyRG4Y8Y5ZG0ayRZb+iPP 4/vJ9n6iFcBxhSYar9Llmnm4yvkqnQ24ZT6Sf8GP9+JsZ7hqpuu+wSpkt8LmGSOx pr1c9S6DH5w0zoNsENtvd1Vm/I4IXlG2NPA5tQDm7WVelfnv05+C6wni7E40A8+R DIR2Be8/C/CIvWhDmcJl4l6tAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUv32Z3utT yYaH8LKnmSYEzF39NiIwHwYDVR0jBBgwFoAUUW3hJq/UWnmZtCRiMNfxCVkuRQQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5M0FGLzMyOTNDRDNFOTk1 QjExRjFCRTBDRTA5MDU4MTFGOTcwL1VXM2hKcV9VV25tWnRDUmlNTmZ4Q1ZrdVJR US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVVczaEpxX1VXbm1adENSaU1OZnhDVmt1UlFRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5 M0FGLzMyOTNDRDNFOTk1QjExRjFCRTBDRTA5MDU4MTFGOTcwL1VXM2hKcV9VV25t WnRDUmlNTmZ4Q1ZrdVJRUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBj1HBODjyUMX7b6LAz19W24YeGyT5PU9TDeVhrUsVx5MWOz5DsfCMxeRvUMZKm f7ffOzEW/bw4tR1QHcV0wSNbgHYejQTXUYVhUkLJYBosCYaNEmA4ZCUUVEWYGUsT I5W5AOv0rVAeHMhQiOYxMX1EoxBfZXKPsPWX72iYA53RMa6PSNRaY1UE6wBSLv0Y 9aMiCiAp/883jzZdr9SY2oh31VoRKgYkiPhAdQWwuaDhWOq8ayBWsX2hkFtc/QIB fSdaS//A9v45XNPbqiVMwVpmvcTk/m6J0Z4pWqtonIiyJ3uF7rbk6WDrarP1DFIK nJr7kZuWQmQkP2m3RO5QTt/Z -----END CERTIFICATE-----Generated at Sun Oct 18 11:50:42 2026 by rpki-client