$ rpki-client -vvvf rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft File: UoKkZCr301eZKRu6RH6hQlGk1fw.mft (raw, json) Hash identifier: xdH4weIWmUT2vyacrDRTxDMmUmB7h9c1WM3/Q6W0md8= Subject key identifier: D8:51:C2:FE:77:E3:CB:09:D6:B9:E8:61:1E:C5:61:83:FB:12:9D:3D Authority key identifier: 52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC Certificate issuer: /CN=A91582D9/serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC Certificate serial: 094A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft Manifest number: 2177 Signing time: Fri 04 Sep 2026 16:27:51 +0000 Manifest this update: Fri 04 Sep 2026 16:27:50 +0000 Manifest next update: Fri 11 Sep 2026 16:27:50 +0000 Files and hashes: 1: UoKkZCr301eZKRu6RH6hQlGk1fw.crl (hash: AhHs5beMjZ1IaOkYQCmhC4Ili61Jo2tZap+R6wgg73Y=) 2: 654665EA197611F09D2B1C76C4F9AE02.roa (hash: aK8dqHQhP2CUMG60oejQ+2Rxxxws0ICOGcDSSEAi96I=) 3: B5E806CC8BC711EE899A5284C4F9AE02.roa (hash: pG1gOVXE63UYc9AyhiiVgfCEyYC0TiV2X+6UTDaMUPk=) 4: 172C2B96197711F0A993397AC4F9AE02.roa (hash: ir/GeOIsxHOGomsodazZ8n+xn9VJzyKDT2xRQQSi3To=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.crl rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 16:27:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2378 (0x94a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91582D9, serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC Validity Not Before: Sep 4 16:27:50 2026 GMT Not After : Sep 11 16:27:50 2026 GMT Subject: CN=6a9af187-aa6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:70:60:b6:20:4b:8e:5d:74:1c:28:1e:09:3c: 9a:5b:69:ee:32:b7:ab:a1:0d:ed:5a:ba:4b:df:fd: ee:b3:57:ee:fe:33:87:7f:b5:44:f7:d5:95:f8:9f: 53:b4:5c:a4:d1:21:fd:8f:62:30:96:e9:7a:c2:08: 2e:06:71:76:f4:9f:93:64:27:96:e6:cf:ba:50:32: 03:52:ff:61:20:75:86:e9:10:cd:e2:67:ee:08:bc: 06:37:75:1f:7f:d8:f6:70:1a:33:cb:e8:20:15:63: 99:36:d7:55:8f:87:5a:8d:05:4a:33:59:ba:80:6f: a7:70:b0:c6:53:b4:9f:6c:ec:ee:37:31:e7:aa:37: 10:7b:b3:0e:5c:d4:71:f6:db:06:68:50:e9:2f:a9: f1:ca:33:d9:c7:1d:34:f7:eb:72:b6:05:46:40:c5: 30:eb:f6:60:9e:9d:7a:b2:5f:67:2c:b1:61:c3:7a: 3b:f6:e8:35:9e:34:38:3a:19:2a:87:d5:73:1c:77: ab:99:18:99:a4:fd:3d:a5:a8:ac:f1:8c:a2:42:15: 2f:e6:17:c4:a0:51:b7:a8:3b:3a:d5:c8:5d:5c:bd: d3:9f:e4:77:04:27:cf:5b:21:ba:92:53:d7:a4:53: 1d:de:4b:3e:d3:08:00:35:8d:e3:8f:e0:22:6a:f6: 49:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:51:C2:FE:77:E3:CB:09:D6:B9:E8:61:1E:C5:61:83:FB:12:9D:3D X509v3 Authority Key Identifier: keyid:52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:f8:e9:50:20:ac:6d:99:ed:43:0d:cd:37:48:87:b2:f4:3f: ae:77:17:84:08:25:bd:9e:75:c2:3c:89:6d:b9:d5:b2:9f:d0: 22:d4:73:c6:e1:55:88:8a:33:0b:cf:96:3d:b0:1f:95:ea:31: 8a:4b:6d:6d:93:91:30:22:a3:22:8b:76:2f:fa:a9:a8:bb:e8: 53:0e:27:a0:bf:b9:3b:61:55:2e:ea:cb:28:83:e1:46:f5:c4: 1c:3d:fb:02:6c:05:0b:51:6d:30:53:6a:53:58:9d:24:a5:34: c8:64:27:ee:49:29:19:2c:ac:d8:04:d6:50:4f:7a:a2:ac:df: 72:30:9a:6b:8d:1a:5d:16:f2:e9:43:58:f6:83:ec:a2:98:f1: 4b:b8:94:f2:c4:95:b8:a4:36:22:87:0f:b3:6a:c7:f7:60:60: 17:70:9c:1b:19:7f:ec:83:4f:70:b8:33:13:86:93:ad:75:43: 2a:80:0e:29:f8:98:0d:48:eb:c6:fc:c1:20:2e:ba:17:31:1c: 19:3d:e5:6f:fd:19:39:11:48:2c:3b:3c:f2:ae:f2:ca:17:b8: 36:f9:34:6d:22:74:67:53:07:10:f9:53:f0:02:d5:30:6b:64: b6:dc:c7:74:fe:77:1d:b3:cf:b4:aa:aa:ed:80:fe:12:04:11: 53:aa:3f:a8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgyRDkxMTAvBgNVBAUTKDUyODJBNDY0MkFGN0QzNTc5OTI5MUJCQTQ0N0VBMTQy NTFBNEQ1RkMwHhcNMjYwOTA0MTYyNzUwWhcNMjYwOTExMTYyNzUwWjAYMRYwFAYD VQQDEw02YTlhZjE4Ny1hYTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlXBgtiBLjl10HCgeCTyaW2nuMreroQ3tWrpL3/3us1fu/jOHf7VE99WV+J9T tFyk0SH9j2Iwlul6wgguBnF29J+TZCeW5s+6UDIDUv9hIHWG6RDN4mfuCLwGN3Uf f9j2cBozy+ggFWOZNtdVj4dajQVKM1m6gG+ncLDGU7SfbOzuNzHnqjcQe7MOXNRx 9tsGaFDpL6nxyjPZxx009+tytgVGQMUw6/Zgnp16sl9nLLFhw3o79ug1njQ4Ohkq h9VzHHermRiZpP09pais8YyiQhUv5hfEoFG3qDs61chdXL3Tn+R3BCfPWyG6klPX pFMd3ks+0wgANY3jj+AiavZJewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNhRwv53 48sJ1rnoYR7FYYP7Ep09MB8GA1UdIwQYMBaAFFKCpGQq99NXmSkbukR+oUJRpNX8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODJEOS8wRURBNkQ1RUNE REExMUU3QkRFQThDMkJDNEY5QUUwMi9Vb0trWkNyMzAxZVpLUnU2Ukg2aFFsR2sx ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VvS2taQ3IzMDFlWktSdTZSSDZoUWxHazFmdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODJEOS8wRURBNkQ1RUNEREExMUU3QkRFQThDMkJDNEY5QUUwMi9Vb0trWkNyMzAx ZVpLUnU2Ukg2aFFsR2sxZncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYfjpUCCsbZntQw3NN0iHsvQ/rncXhAglvZ51wjyJbbnVsp/QItRzxuFViIoz C8+WPbAfleoxikttbZORMCKjIot2L/qpqLvoUw4noL+5O2FVLurLKIPhRvXEHD37 AmwFC1FtMFNqU1idJKU0yGQn7kkpGSys2ATWUE96oqzfcjCaa40aXRby6UNY9oPs opjxS7iU8sSVuKQ2IocPs2rH92BgF3CcGxl/7INPcLgzE4aTrXVDKoAOKfiYDUjr xvzBIC66FzEcGT3lb/0ZORFILDs88q7yyhe4Nvk0bSJ0Z1MHEPlT8ALVMGtkttzH dP53HbPPtKqq7YD+EgQRU6o/qA== -----END CERTIFICATE-----Generated at Sat Sep 5 02:36:02 2026 by rpki-client