$ rpki-client -vvvf rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.mft File: UoaLCQH1W0B4uRpzRRym0iMSyKs.mft (raw, json) Hash identifier: cPWStmSu4+Tqc70E3cv1TkwzbGYGP7NmKNgwtDkWcas= Subject key identifier: 4D:68:23:C5:05:C8:A4:D4:C7:10:CE:51:E5:47:A9:7A:E1:2C:35:09 Authority key identifier: 52:86:8B:09:01:F5:5B:40:78:B9:1A:73:45:1C:A6:D2:23:12:C8:AB Certificate issuer: /CN=A913E2B3/serialNumber=52868B0901F55B4078B91A73451CA6D22312C8AB Certificate serial: 0D08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoaLCQH1W0B4uRpzRRym0iMSyKs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.mft Manifest number: 0CF6 Signing time: Wed 16 Sep 2026 18:25:41 +0000 Manifest this update: Wed 16 Sep 2026 18:25:40 +0000 Manifest next update: Wed 23 Sep 2026 18:25:40 +0000 Files and hashes: 1: UoaLCQH1W0B4uRpzRRym0iMSyKs.crl (hash: a5UlneJDqj/9sS6PcbYgVd/ymEgJg3+W0TsgWkjJRvg=) 2: 3AB1E0D44ED511ED84336740C4F9AE02.roa (hash: 1xwZmu+W4i/TCA6GArfnAsx0Zkop8Nq8b1/wjpzQ/QY=) 3: 399AB6DA4ED511ED84336740C4F9AE02.roa (hash: 2gHhqtDJfKR0qJzs+P2axW63JoLu4G8a5q6M2TKtmYA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.crl rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoaLCQH1W0B4uRpzRRym0iMSyKs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 18:25:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3336 (0xd08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E2B3, serialNumber=52868B0901F55B4078B91A73451CA6D22312C8AB Validity Not Before: Sep 16 18:25:40 2026 GMT Not After : Sep 23 18:25:40 2026 GMT Subject: CN=6aaadf25-e448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b7:20:c6:53:9c:5b:1f:0e:6e:20:a1:a2:e3: f6:20:92:f0:fa:cf:f2:2e:0d:44:96:01:c8:ce:68: 5e:0f:c7:c5:e7:c9:59:50:c8:44:70:8b:7f:25:04: 7b:d2:13:d9:bf:ba:64:3f:95:85:b7:64:3e:6e:eb: 7b:74:91:27:21:38:f0:47:43:ed:6c:57:50:05:7a: 3f:de:b1:2c:b3:7e:70:da:9f:e6:00:90:09:d9:c4: ce:77:32:13:7c:98:1b:24:cf:d8:6e:17:95:13:d4: 5f:b2:3c:57:6f:b6:79:5b:68:1a:6c:6d:d2:38:f1: a3:e0:88:8e:47:10:25:dc:db:96:31:ea:0e:91:a7: fd:87:36:31:7b:c0:99:17:a4:43:70:1a:9d:04:b8: 02:12:d4:18:94:ff:ef:94:3d:cd:f8:c3:0e:6c:fb: 6a:e8:f3:39:dc:4c:2e:e0:63:fc:2d:39:88:df:d5: c0:ff:7f:22:80:a9:ff:b2:d5:85:f2:cb:9a:aa:b7: 70:be:13:55:be:0c:c1:90:a1:1b:d2:1d:8d:97:b0: 7d:1a:f2:34:68:3e:cf:fa:39:61:e4:16:80:62:31: 16:4d:48:fe:2e:21:1b:34:7d:85:03:3c:67:19:e7: cb:b1:b3:67:8c:ec:13:53:b0:cf:8a:a8:51:22:91: 1b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:68:23:C5:05:C8:A4:D4:C7:10:CE:51:E5:47:A9:7A:E1:2C:35:09 X509v3 Authority Key Identifier: keyid:52:86:8B:09:01:F5:5B:40:78:B9:1A:73:45:1C:A6:D2:23:12:C8:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoaLCQH1W0B4uRpzRRym0iMSyKs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:dd:b0:8f:5f:d1:7c:e7:ec:9b:80:fc:06:d7:d1:c8:e6:89: e5:a9:84:2d:c1:2a:fc:4f:5b:3f:3f:2f:62:a3:0f:53:ac:01: 22:15:82:5d:b5:a6:1f:8e:af:9c:bb:c5:ea:d5:f3:5e:44:38: f3:39:20:06:90:a7:09:85:70:eb:3f:51:7c:bf:a3:78:58:3b: 76:9c:7a:76:1b:c3:4d:63:3f:45:0d:c4:ed:74:48:2b:79:e2: e7:e5:2b:25:52:1a:d3:94:2b:9c:e7:e9:78:76:a2:2c:e7:4d: 3b:f8:25:1a:2a:7d:d8:55:9e:a6:fa:46:3b:4c:f0:09:96:bf: 5d:f7:59:ce:b0:42:73:8e:e8:08:ca:20:6b:01:58:f0:07:65: e6:fa:24:ac:b5:32:52:4b:23:1b:db:ca:70:c6:d1:8d:51:a3: d6:f9:a6:34:8a:9e:c8:e2:c3:6c:d7:8a:06:02:9a:9f:f6:ec: df:bd:a7:49:3d:84:8d:0c:40:78:37:1e:13:d4:79:c2:d3:17: 1e:6b:30:90:57:13:59:f0:87:55:ce:1c:67:9f:84:8b:58:79: ac:6e:9a:d5:0d:33:ad:20:19:f0:f6:78:60:d1:b2:49:58:f5: 7a:db:6e:fb:11:4d:a7:37:77:61:92:41:81:03:e7:32:07:f5: 04:3d:ec:6b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UyQjMxMTAvBgNVBAUTKDUyODY4QjA5MDFGNTVCNDA3OEI5MUE3MzQ1MUNBNkQy MjMxMkM4QUIwHhcNMjYwOTE2MTgyNTQwWhcNMjYwOTIzMTgyNTQwWjAYMRYwFAYD VQQDEw02YWFhZGYyNS1lNDQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLcgxlOcWx8ObiChouP2IJLw+s/yLg1ElgHIzmheD8fF58lZUMhEcIt/JQR7 0hPZv7pkP5WFt2Q+but7dJEnITjwR0PtbFdQBXo/3rEss35w2p/mAJAJ2cTOdzIT fJgbJM/YbheVE9RfsjxXb7Z5W2gabG3SOPGj4IiORxAl3NuWMeoOkaf9hzYxe8CZ F6RDcBqdBLgCEtQYlP/vlD3N+MMObPtq6PM53Ewu4GP8LTmI39XA/38igKn/stWF 8suaqrdwvhNVvgzBkKEb0h2Nl7B9GvI0aD7P+jlh5BaAYjEWTUj+LiEbNH2FAzxn GefLsbNnjOwTU7DPiqhRIpEbawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE1oI8UF yKTUxxDOUeVHqXrhLDUJMB8GA1UdIwQYMBaAFFKGiwkB9VtAeLkac0UcptIjEsir MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTJCMy8yMEU2N0REODEy RjQxMUVBODk0MjA0MzBDNEY5QUUwMi9Vb2FMQ1FIMVcwQjR1UnB6UlJ5bTBpTVN5 S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VvYUxDUUgxVzBCNHVScHpSUnltMGlNU3lLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTJCMy8yMEU2N0REODEyRjQxMUVBODk0MjA0MzBDNEY5QUUwMi9Vb2FMQ1FIMVcw QjR1UnB6UlJ5bTBpTVN5S3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWN2wj1/RfOfsm4D8BtfRyOaJ5amELcEq/E9bPz8vYqMPU6wBIhWCXbWmH46v nLvF6tXzXkQ48zkgBpCnCYVw6z9RfL+jeFg7dpx6dhvDTWM/RQ3E7XRIK3ni5+Ur JVIa05QrnOfpeHaiLOdNO/glGip92FWepvpGO0zwCZa/XfdZzrBCc47oCMogawFY 8Adl5vokrLUyUksjG9vKcMbRjVGj1vmmNIqeyOLDbNeKBgKan/bs372nST2EjQxA eDceE9R5wtMXHmswkFcTWfCHVc4cZ5+Ei1h5rG6a1Q0zrSAZ8PZ4YNGySVj1ettu +xFNpzd3YZJBgQPnMgf1BD3saw== -----END CERTIFICATE-----Generated at Thu Sep 17 15:39:49 2026 by rpki-client