$ rpki-client -vvf rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.mft File: uko-NN2arQAtSR0TxciM5c3Jk6o.mft (raw, json) Hash identifier: ylS0HUxbT1Qx4uavlsQO/bV1rWwHrpdcXMgLytMRazM= Subject key identifier: B3:81:1C:60:DA:C3:33:56:38:F0:B6:B8:AA:9B:BC:1D:A8:6F:F7:15 Authority key identifier: BA:4A:3E:34:DD:9A:AD:00:2D:49:1D:13:C5:C8:8C:E5:CD:C9:93:AA Certificate issuer: /CN=A9142127/serialNumber=BA4A3E34DD9AAD002D491D13C5C88CE5CDC993AA Certificate serial: 0B6E Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uko-NN2arQAtSR0TxciM5c3Jk6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.mft Manifest number: 0B60 Signing time: Tue 28 Apr 2026 19:28:33 +0000 Manifest this update: Tue 28 Apr 2026 19:28:32 +0000 Manifest next update: Tue 05 May 2026 19:28:32 +0000 Files and hashes: 1: uko-NN2arQAtSR0TxciM5c3Jk6o.crl (hash: NSFMo0S0MMsJucdDdLIkWJc/JjO1xTXSqsCrCliY0gY=) 2: 2FCB8FBA56DC11EA8D75187CC4F9AE02.roa (hash: xuUvIJ8eAw9K5qU0uP7UNuu0jZ+MgcXKquXu8ktwO3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.crl rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uko-NN2arQAtSR0TxciM5c3Jk6o.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 05 May 2026 19:28:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2926 (0xb6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142127, serialNumber=BA4A3E34DD9AAD002D491D13C5C88CE5CDC993AA Validity Not Before: Apr 28 19:28:32 2026 GMT Not After : May 5 19:28:32 2026 GMT Subject: CN=69f10a61-ada7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ce:da:7d:83:97:b5:73:fe:96:ed:2f:40:9a: 3e:24:ff:fa:ca:a8:40:9a:60:6a:50:1a:9d:66:7a: fb:af:c7:aa:82:61:fb:6d:98:9f:a1:5c:31:4b:fa: c8:c5:f9:31:bc:f7:2a:51:9d:6c:4e:cc:4e:f6:55: 7c:6f:69:17:1e:1f:fb:0d:b0:4c:8c:42:61:fd:43: 32:53:4d:04:c7:8d:77:f4:71:55:49:db:5f:2f:2b: 39:25:37:94:cc:b5:c4:27:3b:17:61:e4:ca:83:fb: 4f:7b:22:47:d9:ba:03:a0:d9:2f:e4:e9:5d:ea:24: cb:28:fb:a3:98:80:f3:9e:80:47:26:d0:20:ed:84: 9e:5e:3b:27:a7:f6:3d:8d:91:a0:d3:d0:15:db:bc: ab:b1:ea:53:5e:94:f1:54:ed:0f:63:14:15:62:cb: 23:10:1d:d0:2e:fd:a7:b5:f2:bd:f4:df:60:ce:4a: c9:4c:05:ae:ca:a5:75:01:d1:19:c8:ac:9d:66:75: da:e4:48:6a:1c:ab:5b:43:60:34:14:25:90:25:c8: a4:af:e7:0f:7e:a8:2d:65:d1:ac:3c:9e:44:c1:8c: 66:52:ef:aa:84:c6:82:25:07:9a:e8:2e:07:9e:48: 9b:c8:d6:a4:85:a1:30:03:6a:f9:47:ed:ae:32:24: 73:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:81:1C:60:DA:C3:33:56:38:F0:B6:B8:AA:9B:BC:1D:A8:6F:F7:15 X509v3 Authority Key Identifier: keyid:BA:4A:3E:34:DD:9A:AD:00:2D:49:1D:13:C5:C8:8C:E5:CD:C9:93:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uko-NN2arQAtSR0TxciM5c3Jk6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:0b:2c:44:c1:40:8d:86:a6:e1:ae:84:4b:03:58:24:6a:18: 77:17:4e:39:bf:57:98:1e:19:67:81:d8:c3:7b:d5:92:ed:8d: 6e:45:4c:71:9f:7e:de:e3:65:71:88:4a:29:8e:cc:dc:dc:e5: b2:67:3a:16:1d:44:53:09:84:a9:1b:df:67:86:ea:1a:e1:2d: 65:2b:85:11:d8:74:bc:aa:fc:48:73:32:aa:72:d0:1c:ce:0d: 8c:a9:1e:e0:a2:09:2b:33:59:66:41:15:fd:61:16:f7:fa:dd: 39:12:44:c8:1a:5e:35:0d:b4:56:8d:3b:61:e6:55:30:82:2c: 61:4f:b8:8e:e2:66:df:b6:2c:c0:64:ea:fc:1c:ad:19:24:c4: 58:59:b5:25:97:97:82:6c:0e:19:20:6a:6d:9d:83:ce:f6:7b: dd:15:7e:ac:d0:81:ec:d5:db:83:19:60:8d:ee:bd:6d:5c:13: b8:27:1e:07:43:28:5a:ba:ff:c1:60:d0:a2:5e:22:67:2e:f5: 8d:cc:63:87:7f:47:9d:fd:3c:0e:b7:5f:eb:f7:24:2e:87:f6: a4:b7:b8:ca:46:be:d2:34:81:76:aa:ea:14:6a:b3:7b:81:a1: 6d:c8:4e:cc:04:b7:fa:51:6a:86:4d:fb:fa:dd:6a:d6:d4:e3: e6:1d:1e:fc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC24wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIxMjcxMTAvBgNVBAUTKEJBNEEzRTM0REQ5QUFEMDAyRDQ5MUQxM0M1Qzg4Q0U1 Q0RDOTkzQUEwHhcNMjYwNDI4MTkyODMyWhcNMjYwNTA1MTkyODMyWjAYMRYwFAYD VQQDEw02OWYxMGE2MS1hZGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5c7afYOXtXP+lu0vQJo+JP/6yqhAmmBqUBqdZnr7r8eqgmH7bZifoVwxS/rI xfkxvPcqUZ1sTsxO9lV8b2kXHh/7DbBMjEJh/UMyU00Ex4139HFVSdtfLys5JTeU zLXEJzsXYeTKg/tPeyJH2boDoNkv5Old6iTLKPujmIDznoBHJtAg7YSeXjsnp/Y9 jZGg09AV27yrsepTXpTxVO0PYxQVYssjEB3QLv2ntfK99N9gzkrJTAWuyqV1AdEZ yKydZnXa5EhqHKtbQ2A0FCWQJcikr+cPfqgtZdGsPJ5EwYxmUu+qhMaCJQea6C4H nkibyNakhaEwA2r5R+2uMiRzbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLOBHGDa wzNWOPC2uKqbvB2ob/cVMB8GA1UdIwQYMBaAFLpKPjTdmq0ALUkdE8XIjOXNyZOq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjEyNy8zMzdGQkE0NDU0 NkQxMUVBQkREM0MxMTdDNEY5QUUwMi91a28tTk4yYXJRQXRTUjBUeGNpTTVjM0pr Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3Vrby1OTjJhclFBdFNSMFR4Y2lNNWMzSms2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjEyNy8zMzdGQkE0NDU0NkQxMUVBQkREM0MxMTdDNEY5QUUwMi91a28tTk4yYXJR QXRTUjBUeGNpTTVjM0prNm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYgssRMFAjYam4a6ESwNYJGoYdxdOOb9XmB4ZZ4HYw3vVku2NbkVMcZ9+3uNl cYhKKY7M3Nzlsmc6Fh1EUwmEqRvfZ4bqGuEtZSuFEdh0vKr8SHMyqnLQHM4NjKke 4KIJKzNZZkEV/WEW9/rdORJEyBpeNQ20Vo07YeZVMIIsYU+4juJm37YswGTq/Byt GSTEWFm1JZeXgmwOGSBqbZ2DzvZ73RV+rNCB7NXbgxlgje69bVwTuCceB0MoWrr/ wWDQol4iZy71jcxjh39Hnf08Drdf6/ckLof2pLe4yka+0jSBdqrqFGqze4GhbchO zAS3+lFqhk37+t1q1tTj5h0e/A== -----END CERTIFICATE-----Generated at Wed Apr 29 13:41:43 2026 by rpki-client