$ rpki-client -vvvf rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft File: UoKkZCr301eZKRu6RH6hQlGk1fw.mft (raw, json) Hash identifier: WZ3WnLbMuRLcRywcxrYch6nYekQlJpPy/V08pWNcNc0= Subject key identifier: 82:01:68:43:E9:DA:8E:5C:80:1E:B3:DF:20:51:42:90:F5:B4:F1:8D Authority key identifier: 52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC Certificate issuer: /CN=A91582D9/serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC Certificate serial: 0965 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft Manifest number: 21AD Signing time: Wed 28 Oct 2026 16:32:05 +0000 Manifest this update: Wed 28 Oct 2026 16:32:04 +0000 Manifest next update: Wed 04 Nov 2026 16:32:04 +0000 Files and hashes: 1: UoKkZCr301eZKRu6RH6hQlGk1fw.crl (hash: LTARVFXk5u/dUijOMDVjTTHHvLl4FLRdrZqgu3zx6Z8=) 2: 172C2B96197711F0A993397AC4F9AE02.roa (hash: ir/GeOIsxHOGomsodazZ8n+xn9VJzyKDT2xRQQSi3To=) 3: B5E806CC8BC711EE899A5284C4F9AE02.roa (hash: pG1gOVXE63UYc9AyhiiVgfCEyYC0TiV2X+6UTDaMUPk=) 4: 654665EA197611F09D2B1C76C4F9AE02.roa (hash: aK8dqHQhP2CUMG60oejQ+2Rxxxws0ICOGcDSSEAi96I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.crl rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 16:32:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2405 (0x965) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91582D9, serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC Validity Not Before: Oct 28 16:32:04 2026 GMT Not After : Nov 4 16:32:04 2026 GMT Subject: CN=6ae22384-930f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e9:29:ee:9f:da:a4:07:8a:55:9c:b8:f3:f6: 79:ae:61:43:a7:eb:4b:fe:4f:41:58:d5:35:2d:58: 5f:55:c9:63:0d:df:10:9d:38:e4:d7:e6:f6:aa:9d: 10:35:46:f7:2c:f4:08:7b:07:95:ef:6f:31:89:3b: 6f:7c:4b:3e:38:ff:e9:64:58:28:dd:99:11:41:39: d0:a4:a7:42:c9:8f:48:af:1c:7a:80:b2:1d:ec:14: 8e:fa:8b:96:be:89:5c:0e:b1:f8:c9:9b:7b:7a:01: 29:c5:b9:36:c7:0b:b5:80:c4:d1:3d:54:a6:6e:24: 7a:83:bf:a1:4c:64:cc:3b:8b:80:a3:e2:fc:55:38: 0b:33:6f:6b:18:a6:ae:aa:67:18:a7:52:51:78:ba: 2f:bd:bb:10:64:57:2d:12:59:f8:41:10:d7:4e:66: 41:0d:25:96:28:c5:73:69:67:87:3d:fb:12:63:58: b5:0e:49:5f:2e:5c:34:7b:12:08:a2:f1:04:ef:8e: d0:3d:4c:7b:b3:b9:fd:ec:45:3b:a3:fe:69:c5:e2: 02:ba:94:ba:8f:4b:5b:ce:e8:c7:61:cc:59:e9:c1: a9:f3:b9:63:0e:7d:37:9c:42:26:a3:bf:f2:b2:a3: ff:f7:6e:64:a9:50:58:5b:f9:61:21:fc:66:1b:19: aa:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:01:68:43:E9:DA:8E:5C:80:1E:B3:DF:20:51:42:90:F5:B4:F1:8D X509v3 Authority Key Identifier: keyid:52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:26:c8:84:73:35:d9:b2:03:4e:e3:d7:71:7f:c5:1f:85:4b: e8:93:08:cf:78:dd:02:96:57:5a:32:71:bd:54:cd:9c:be:b9: 03:c6:f4:8e:da:81:d7:33:cd:ae:b1:61:6e:18:1c:20:6f:2c: e1:32:a9:f0:13:da:81:42:54:dc:46:1f:2e:9e:77:59:f4:3a: 34:0e:c7:74:b3:d4:3b:78:68:14:10:78:09:f2:d4:0b:2e:c3: b7:98:5f:8b:82:fe:4a:3b:f7:93:0b:98:89:7e:ea:aa:a9:11: 3f:c4:a6:bc:1a:35:1c:ca:e2:55:4f:9c:24:55:37:9f:b6:27: 63:1e:14:b2:03:3a:27:88:5b:6b:08:41:ff:8f:39:27:e4:63: 58:c5:2c:77:2c:2f:8c:c2:f8:32:86:7f:e7:fd:ef:0c:73:bd: 2d:5a:38:cb:e9:b6:b0:ab:8c:52:08:35:dd:83:1a:da:de:30: 23:ab:93:88:a4:97:90:63:3e:0a:2f:a0:80:2b:e9:36:20:9f: 72:26:f6:74:08:e4:79:7c:d9:9b:77:65:73:f5:85:71:0d:a4: 23:f5:5c:b1:85:ca:41:09:8b:53:87:8d:a6:31:7c:91:51:d7: 46:56:a0:c5:7f:8f:a5:41:51:9c:cf:32:81:0e:13:d9:4c:15: e9:52:c9:80 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgyRDkxMTAvBgNVBAUTKDUyODJBNDY0MkFGN0QzNTc5OTI5MUJCQTQ0N0VBMTQy NTFBNEQ1RkMwHhcNMjYxMDI4MTYzMjA0WhcNMjYxMTA0MTYzMjA0WjAYMRYwFAYD VQQDEw02YWUyMjM4NC05MzBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ukp7p/apAeKVZy48/Z5rmFDp+tL/k9BWNU1LVhfVcljDd8QnTjk1+b2qp0Q NUb3LPQIeweV728xiTtvfEs+OP/pZFgo3ZkRQTnQpKdCyY9Irxx6gLId7BSO+ouW volcDrH4yZt7egEpxbk2xwu1gMTRPVSmbiR6g7+hTGTMO4uAo+L8VTgLM29rGKau qmcYp1JReLovvbsQZFctEln4QRDXTmZBDSWWKMVzaWeHPfsSY1i1DklfLlw0exII ovEE747QPUx7s7n97EU7o/5pxeICupS6j0tbzujHYcxZ6cGp87ljDn03nEImo7/y sqP/925kqVBYW/lhIfxmGxmqawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIIBaEPp 2o5cgB6z3yBRQpD1tPGNMB8GA1UdIwQYMBaAFFKCpGQq99NXmSkbukR+oUJRpNX8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODJEOS8wRURBNkQ1RUNE REExMUU3QkRFQThDMkJDNEY5QUUwMi9Vb0trWkNyMzAxZVpLUnU2Ukg2aFFsR2sx ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VvS2taQ3IzMDFlWktSdTZSSDZoUWxHazFmdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODJEOS8wRURBNkQ1RUNEREExMUU3QkRFQThDMkJDNEY5QUUwMi9Vb0trWkNyMzAx ZVpLUnU2Ukg2aFFsR2sxZncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjCbIhHM12bIDTuPXcX/FH4VL6JMIz3jdApZXWjJxvVTNnL65A8b0jtqB1zPN rrFhbhgcIG8s4TKp8BPagUJU3EYfLp53WfQ6NA7HdLPUO3hoFBB4CfLUCy7Dt5hf i4L+Sjv3kwuYiX7qqqkRP8SmvBo1HMriVU+cJFU3n7YnYx4UsgM6J4hbawhB/485 J+RjWMUsdywvjML4MoZ/5/3vDHO9LVo4y+m2sKuMUgg13YMa2t4wI6uTiKSXkGM+ Ci+ggCvpNiCfcib2dAjkeXzZm3dlc/WFcQ2kI/VcsYXKQQmLU4eNpjF8kVHXRlag xX+PpUFRnM8ygQ4T2UwV6VLJgA== -----END CERTIFICATE-----Generated at Wed Oct 28 19:33:32 2026 by rpki-client