$ rpki-client -vvvf rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft File: UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft (raw, json) Hash identifier: 3VbDV0Lbs9p8tfHOyM/tc2u2mhq0JwujEhdffRAGbGQ= Subject key identifier: DE:3E:40:D3:4D:FF:6E:9D:1F:81:73:71:CB:50:65:C9:EA:97:CB:6B Authority key identifier: 50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4 Certificate issuer: /CN=A915DE6C/serialNumber=50AAFC6A3EF75B22B7683CAB63D84BE4291954B4 Certificate serial: 010D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft Manifest number: FE Signing time: Sat 05 Sep 2026 06:10:11 +0000 Manifest this update: Sat 05 Sep 2026 06:10:10 +0000 Manifest next update: Sat 12 Sep 2026 06:10:10 +0000 Files and hashes: 1: UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl (hash: 2e0EbZbYfi2I5OknvNaq+CLcz38Yc32mTRwKwPMFZ0o=) 2: CD4B9F72A7A311F1BB9A07DE4B11F970.roa (hash: zWIuDWlTYenslwF/guKCoexbagcN5F6gVm8I3tB4OnE=) 3: 8732879E95BA11F1B9CA092C4311F970.roa (hash: MEGlRUYhB4SHO0VLh+MIz2x8hOoJV3bR04uKQvrICwE=) 4: DB303ECE6F9811F1B69CA1B570A30FBC.roa (hash: XFNNeelaHq9NO2Z7h8a7z57DLRA2ynbSaBlRbBBa/TU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 04:31:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 269 (0x10d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915DE6C, serialNumber=50AAFC6A3EF75B22B7683CAB63D84BE4291954B4 Validity Not Before: Sep 5 06:10:10 2026 GMT Not After : Sep 12 06:10:10 2026 GMT Subject: CN=6a9bb242-6ec4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:36:04:99:eb:b5:61:cf:e3:f8:d1:01:90:eb: 87:e5:e9:b5:80:1a:c1:b6:31:89:97:35:b2:49:bc: 1b:a6:3b:f2:ec:27:d6:55:4c:11:7e:36:3d:85:ad: 8b:4d:f7:7a:8d:65:95:cf:b7:0e:fe:d3:56:1a:d0: 49:c7:b3:81:b5:b4:c2:ae:bc:a7:da:56:88:e5:24: d9:23:b6:f5:81:b2:87:cb:e4:d4:2f:be:24:e3:c9: 14:14:db:f9:df:7f:33:01:a3:e8:77:5f:60:9b:ec: 18:d8:b0:c2:ef:fe:c9:a0:80:6d:5a:d6:2d:f4:12: 61:5b:01:20:42:ef:73:7d:9c:4c:d4:5d:e5:f6:dd: 15:cd:86:b4:cb:e9:10:67:2f:5d:51:e5:c9:4a:18: c9:82:40:93:28:a8:48:98:59:da:d8:c6:34:2b:72: e8:7f:41:21:85:51:a6:b2:d5:00:6b:cd:7c:da:9d: 49:43:aa:cc:0a:68:08:24:cf:94:cc:69:8e:8d:b1: 7f:a4:a8:cd:e1:c1:82:9e:3b:fd:f3:60:c8:16:f1: a3:d1:14:f3:ba:e9:ac:fa:c4:3a:f7:0a:16:db:30: 51:d1:20:f9:63:22:01:e0:0a:c2:7a:ab:90:26:75: a9:8e:0e:90:f8:b3:e2:cc:82:c4:e4:38:a7:b5:52: 29:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:3E:40:D3:4D:FF:6E:9D:1F:81:73:71:CB:50:65:C9:EA:97:CB:6B X509v3 Authority Key Identifier: keyid:50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:4b:37:0f:e4:77:cf:00:08:66:ac:18:55:04:04:3e:3a:bc: cf:50:eb:f5:56:a9:60:26:a1:a5:d2:fa:d2:0b:14:d6:c7:e8: bc:8e:f8:be:b8:92:a7:1d:28:30:9e:fa:0b:30:a0:77:10:7e: ae:2b:70:97:14:eb:42:88:30:1f:3f:ba:2b:cf:6d:bc:7b:e1: 30:94:3f:4a:d4:ab:3f:bb:29:94:ef:4b:e4:5b:83:a8:33:73: 08:0e:99:1d:87:0d:c0:7a:c0:f6:dd:43:d2:94:6c:64:db:95: 8d:64:e9:49:0b:75:bb:c5:f3:ef:07:33:91:bf:3a:20:ec:8f: 43:2d:19:17:dd:93:83:1f:4e:42:78:1d:2e:ca:cf:c1:0e:a1: c5:f8:80:cf:91:89:2a:0c:28:a0:5c:a5:ac:e8:6d:9d:e2:b0: fa:bf:71:8d:a4:2f:8b:4e:38:80:2b:88:ac:28:c9:99:d5:15: 4e:4f:e7:a6:90:30:25:e7:94:46:05:5a:2c:2d:65:36:87:e6: de:fc:95:a2:b4:cc:13:22:9b:6f:99:58:43:2a:6f:4f:12:fd: 74:4e:2c:22:05:0e:40:8f:76:ba:3f:28:24:ef:74:43:27:14: bd:ce:b0:d8:04:14:46:62:e3:ce:10:ef:3f:84:90:b0:42:46: d7:b8:d0:29 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NURFNkMxMTAvBgNVBAUTKDUwQUFGQzZBM0VGNzVCMjJCNzY4M0NBQjYzRDg0QkU0 MjkxOTU0QjQwHhcNMjYwOTA1MDYxMDEwWhcNMjYwOTEyMDYxMDEwWjAYMRYwFAYD VQQDEw02YTliYjI0Mi02ZWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmTYEmeu1Yc/j+NEBkOuH5em1gBrBtjGJlzWySbwbpjvy7CfWVUwRfjY9ha2L Tfd6jWWVz7cO/tNWGtBJx7OBtbTCrryn2laI5STZI7b1gbKHy+TUL74k48kUFNv5 338zAaPod19gm+wY2LDC7/7JoIBtWtYt9BJhWwEgQu9zfZxM1F3l9t0VzYa0y+kQ Zy9dUeXJShjJgkCTKKhImFna2MY0K3Lof0EhhVGmstUAa8182p1JQ6rMCmgIJM+U zGmOjbF/pKjN4cGCnjv982DIFvGj0RTzuums+sQ69woW2zBR0SD5YyIB4ArCequQ JnWpjg6Q+LPizILE5DintVIpUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN4+QNNN /26dH4FzcctQZcnql8trMB8GA1UdIwQYMBaAFFCq/Go+91sit2g8q2PYS+QpGVS0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REU2Qy82QkMzNzVCMDQz RDQxMUYwOTBCNDc2NjhDNEY5QUUwMi9VS3I4YWo3M1d5SzNhRHlyWTloTDVDa1pW TFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1VLcjhhajczV3lLM2FEeXJZOWhMNUNrWlZMUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 REU2Qy82QkMzNzVCMDQzRDQxMUYwOTBCNDc2NjhDNEY5QUUwMi9VS3I4YWo3M1d5 SzNhRHlyWTloTDVDa1pWTFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMEs3D+R3zwAIZqwYVQQEPjq8z1Dr9VapYCahpdL60gsU1sfovI74vriSpx0o MJ76CzCgdxB+ritwlxTrQogwHz+6K89tvHvhMJQ/StSrP7splO9L5FuDqDNzCA6Z HYcNwHrA9t1D0pRsZNuVjWTpSQt1u8Xz7wczkb86IOyPQy0ZF92Tgx9OQngdLsrP wQ6hxfiAz5GJKgwooFylrOhtneKw+r9xjaQvi044gCuIrCjJmdUVTk/nppAwJeeU RgVaLC1lNofm3vyVorTMEyKbb5lYQypvTxL9dE4sIgUOQI92uj8oJO90QycUvc6w 2AQURmLjzhDvP4SQsEJG17jQKQ== -----END CERTIFICATE-----Generated at Sat Sep 5 13:32:22 2026 by rpki-client