$ rpki-client -vvf rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.mft File: uMGYUq7H2lGkUL59p9lYc77eNzQ.mft (raw, json) Hash identifier: qtL76ME1MG19l0rS4Mc5N5oTQJScJtJ0Y1eFUDkvDaM= Subject key identifier: 3A:CC:D4:C5:7C:9A:EF:A2:64:5B:0D:4C:65:AA:BC:CC:A9:BB:E8:18 Authority key identifier: B8:C1:98:52:AE:C7:DA:51:A4:50:BE:7D:A7:D9:58:73:BE:DE:37:34 Certificate issuer: /CN=A917C78E/serialNumber=B8C19852AEC7DA51A450BE7DA7D95873BEDE3734 Certificate serial: 0145 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMGYUq7H2lGkUL59p9lYc77eNzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.mft Manifest number: 0141 Signing time: Tue 23 Jun 2026 05:34:33 +0000 Manifest this update: Tue 23 Jun 2026 05:34:32 +0000 Manifest next update: Tue 30 Jun 2026 05:34:32 +0000 Files and hashes: 1: uMGYUq7H2lGkUL59p9lYc77eNzQ.crl (hash: Ava2g4ugI3AQHYC2XXAGrmLGB5Xw+f+wJP3QurptZJk=) 2: 91F29F5E86DD11EFB3D7A929C4F9AE02.roa (hash: NaEScBIeGfqeqtY23FBVtMrm6wm6IYSTw8AJnU7Al0E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.crl rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMGYUq7H2lGkUL59p9lYc77eNzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jun 2026 05:34:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 325 (0x145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C78E, serialNumber=B8C19852AEC7DA51A450BE7DA7D95873BEDE3734 Validity Not Before: Jun 23 05:34:32 2026 GMT Not After : Jun 30 05:34:32 2026 GMT Subject: CN=6a3a1ae9-f5e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:59:42:38:1b:7f:5b:f8:9e:39:22:84:bf:b4: 83:0e:29:c5:cd:93:b0:05:a8:8b:b4:6b:61:bd:0c: cf:56:b1:b2:c9:10:65:f2:e1:4b:10:2b:ae:15:94: a5:4d:a6:bc:12:b5:5e:8c:59:04:54:3c:34:4e:cd: d1:f5:d0:e8:4a:c8:60:af:1f:9e:07:54:83:7b:e0: f1:bf:d1:62:bd:54:d6:d5:53:e6:88:f2:a0:54:73: ee:25:00:d5:b5:83:a8:d4:75:6a:f6:33:d7:1d:5e: 31:3f:c4:62:9c:11:eb:a8:04:78:db:3c:65:04:53: e6:20:e9:f1:e8:a5:c9:25:ed:20:d9:37:ee:65:7d: 1e:84:8c:83:ef:0a:8d:2f:3d:86:c3:a4:5b:10:98: c2:52:bd:72:f2:45:49:37:a2:5d:98:45:5b:04:c5: 29:96:b5:1f:da:49:3d:f2:7a:01:d4:a8:7c:8e:07: ec:2d:4c:db:47:1e:7d:e9:99:79:2f:81:8e:3b:b1: d1:af:ea:43:9b:05:0e:63:f4:64:e6:21:f9:e5:86: 9a:cc:f4:3e:83:dd:94:9d:64:20:76:93:69:69:f2: 61:31:3d:fb:57:65:53:32:83:c6:17:a2:73:c0:60: f9:7a:64:71:43:fc:8e:12:8b:2c:a0:ab:0b:cd:04: 71:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:CC:D4:C5:7C:9A:EF:A2:64:5B:0D:4C:65:AA:BC:CC:A9:BB:E8:18 X509v3 Authority Key Identifier: keyid:B8:C1:98:52:AE:C7:DA:51:A4:50:BE:7D:A7:D9:58:73:BE:DE:37:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMGYUq7H2lGkUL59p9lYc77eNzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:fa:31:8f:14:27:33:bc:ed:a1:2f:a4:39:4b:05:ba:97:c7: de:0c:88:50:6f:c6:eb:a7:ce:35:c3:6f:e4:7a:31:f9:ed:f8: 1f:c4:85:89:50:95:fe:ea:f8:c2:52:df:bf:5b:62:19:1c:05: 83:74:2d:3d:18:a9:6d:8e:4b:00:e5:06:c7:75:cc:c9:12:8d: db:fb:5d:ba:7d:fe:a0:21:86:8a:f9:85:43:47:e4:99:b4:dc: 26:2d:d3:59:e1:f8:ad:6a:78:5d:6d:aa:63:e2:64:68:0c:bc: a8:bc:3a:e5:6e:cd:b2:34:2e:79:df:81:10:c5:12:3a:74:82: c1:53:d4:73:5d:18:47:d6:41:a8:84:36:e3:b7:9e:da:94:d1: 01:d6:e2:51:67:b7:da:34:06:3f:af:f3:67:f9:8a:80:ca:63: 01:ff:14:00:db:1e:e9:01:de:67:99:eb:db:90:ee:24:bd:e4: a4:39:52:04:7a:2b:21:db:0d:5d:e7:f9:77:be:cf:0d:d1:d9: e6:d7:02:17:50:92:27:f8:70:49:ff:bb:6e:f6:2e:27:71:9b: 3d:df:b9:c7:ac:d2:34:c3:37:f3:26:36:7c:e0:76:9a:a4:36: 60:55:d4:17:e2:0a:d9:1a:d7:0e:f1:64:75:11:e7:b8:c7:8e: 7f:a9:4f:b2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M3OEUxMTAvBgNVBAUTKEI4QzE5ODUyQUVDN0RBNTFBNDUwQkU3REE3RDk1ODcz QkVERTM3MzQwHhcNMjYwNjIzMDUzNDMyWhcNMjYwNjMwMDUzNDMyWjAYMRYwFAYD VQQDEw02YTNhMWFlOS1mNWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr1lCOBt/W/ieOSKEv7SDDinFzZOwBaiLtGthvQzPVrGyyRBl8uFLECuuFZSl Taa8ErVejFkEVDw0Ts3R9dDoSshgrx+eB1SDe+Dxv9FivVTW1VPmiPKgVHPuJQDV tYOo1HVq9jPXHV4xP8RinBHrqAR42zxlBFPmIOnx6KXJJe0g2TfuZX0ehIyD7wqN Lz2Gw6RbEJjCUr1y8kVJN6JdmEVbBMUplrUf2kk98noB1Kh8jgfsLUzbRx596Zl5 L4GOO7HRr+pDmwUOY/Rk5iH55YaazPQ+g92UnWQgdpNpafJhMT37V2VTMoPGF6Jz wGD5emRxQ/yOEossoKsLzQRxsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDrM1MV8 mu+iZFsNTGWqvMypu+gYMB8GA1UdIwQYMBaAFLjBmFKux9pRpFC+fafZWHO+3jc0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Qzc4RS9BMDIwMUIyMDg2 REMxMUVGQjlFQUQwMjdDNEY5QUUwMi91TUdZVXE3SDJsR2tVTDU5cDlsWWM3N2VO elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VNR1lVcTdIMmxHa1VMNTlwOWxZYzc3ZU56US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Qzc4RS9BMDIwMUIyMDg2REMxMUVGQjlFQUQwMjdDNEY5QUUwMi91TUdZVXE3SDJs R2tVTDU5cDlsWWM3N2VOelEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZvoxjxQnM7ztoS+kOUsFupfH3gyIUG/G66fONcNv5Hox+e34H8SFiVCV/ur4 wlLfv1tiGRwFg3QtPRipbY5LAOUGx3XMyRKN2/tdun3+oCGGivmFQ0fkmbTcJi3T WeH4rWp4XW2qY+JkaAy8qLw65W7NsjQued+BEMUSOnSCwVPUc10YR9ZBqIQ247ee 2pTRAdbiUWe32jQGP6/zZ/mKgMpjAf8UANse6QHeZ5nr25DuJL3kpDlSBHorIdsN Xef5d77PDdHZ5tcCF1CSJ/hwSf+7bvYuJ3GbPd+5x6zSNMM38yY2fOB2mqQ2YFXU F+IK2RrXDvFkdRHnuMeOf6lPsg== -----END CERTIFICATE-----Generated at Wed Jun 24 11:29:32 2026 by rpki-client