$ rpki-client -vvf rpki.apnic.net/member_repository/A917FFCC/06C55AE816D311F1BAA410C8303D8C67/UG49HcCtxzidnNuq-lFwdBtVhho.mft File: UG49HcCtxzidnNuq-lFwdBtVhho.mft (raw, json) Hash identifier: y0GUr15ai9N8J0wpzLtiN1pCc+EiRebDssBJkrUxDAk= Subject key identifier: AA:D4:6F:2D:CA:C0:2C:FA:04:4B:EF:0F:63:98:1C:7D:FD:8F:EA:2C Authority key identifier: 50:6E:3D:1D:C0:AD:C7:38:9D:9C:DB:AA:FA:51:70:74:1B:55:86:1A Certificate issuer: /CN=A917FFCC/serialNumber=506E3D1DC0ADC7389D9CDBAAFA5170741B55861A Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UG49HcCtxzidnNuq-lFwdBtVhho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FFCC/06C55AE816D311F1BAA410C8303D8C67/UG49HcCtxzidnNuq-lFwdBtVhho.mft Manifest number: 31 Signing time: Mon 01 Jun 2026 09:27:51 +0000 Manifest this update: Mon 01 Jun 2026 09:27:51 +0000 Manifest next update: Mon 08 Jun 2026 09:27:51 +0000 Files and hashes: 1: UG49HcCtxzidnNuq-lFwdBtVhho.crl (hash: qjreMJa9kf2G99HmnJkxGwpRoR8a1orOJMyzrKZa1j8=) 2: D040E1BC16D311F18D1B19D1303D8C67.roa (hash: FW4iyNzwJYx2pnIdKFnPL+9FFZZIBrzKM+GhxItUIOM=) 3: F780D776194611F1871644483C3D8C67.roa (hash: ho5eEvE3UY6na6Rt/OnfOdSf9aaBbnbQUdpdtiKwfI4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FFCC/06C55AE816D311F1BAA410C8303D8C67/UG49HcCtxzidnNuq-lFwdBtVhho.crl rsync://rpki.apnic.net/member_repository/A917FFCC/06C55AE816D311F1BAA410C8303D8C67/UG49HcCtxzidnNuq-lFwdBtVhho.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UG49HcCtxzidnNuq-lFwdBtVhho.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 09:27:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FFCC, serialNumber=506E3D1DC0ADC7389D9CDBAAFA5170741B55861A Validity Not Before: Jun 1 09:27:51 2026 GMT Not After : Jun 8 09:27:51 2026 GMT Subject: CN=6a1d5097-7a07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ca:4a:49:4d:87:94:c6:24:56:56:f3:aa:44: 36:e7:14:bf:71:4e:56:06:b7:83:ab:c4:ff:24:39: a3:08:38:ff:de:c8:e2:2a:e2:bf:a2:9f:0c:52:42: cd:d2:36:fa:7b:fd:44:17:49:bf:d8:a6:11:7f:86: ac:a0:90:49:a9:bb:82:46:30:36:66:d1:64:ea:f0: 11:1f:67:d7:3b:ee:61:e9:4a:69:66:4e:a6:f9:c3: bc:3f:6c:71:3c:ba:7d:62:3e:cc:be:d7:4e:38:ce: b8:f3:15:19:2e:30:02:6d:0d:77:22:59:0f:16:c9: 70:eb:b0:96:2e:43:d8:47:a4:5d:16:d2:cd:37:71: 49:9c:36:9c:4f:c5:de:5a:3c:c7:e0:f9:fa:14:36: 33:c8:1b:35:95:3a:ad:ef:6c:9b:69:fa:c2:6c:f9: 6d:d7:1b:ed:e3:33:a8:11:05:60:05:98:7c:bd:b5: c5:90:f9:2a:89:08:71:31:34:92:66:0d:05:bf:1c: ac:ec:60:d0:fd:7b:6a:d1:2c:a2:03:75:5d:75:4a: d7:f6:3c:7c:50:75:8c:d6:0c:8f:6d:2e:e0:5d:39: dd:18:57:02:5d:03:15:c1:5e:ee:c0:77:f8:ce:3f: 8f:55:63:d7:5f:ad:f5:37:8f:43:d0:e5:fe:13:9f: b6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:D4:6F:2D:CA:C0:2C:FA:04:4B:EF:0F:63:98:1C:7D:FD:8F:EA:2C X509v3 Authority Key Identifier: keyid:50:6E:3D:1D:C0:AD:C7:38:9D:9C:DB:AA:FA:51:70:74:1B:55:86:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FFCC/06C55AE816D311F1BAA410C8303D8C67/UG49HcCtxzidnNuq-lFwdBtVhho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UG49HcCtxzidnNuq-lFwdBtVhho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FFCC/06C55AE816D311F1BAA410C8303D8C67/UG49HcCtxzidnNuq-lFwdBtVhho.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:ad:93:a2:de:81:25:5e:8c:d5:f2:00:0c:e4:43:4c:49:50: dd:60:af:fd:9b:17:8b:5e:21:18:b8:2c:5d:e2:30:42:d9:49: 7c:c0:72:f8:21:42:55:a3:20:4f:71:72:ff:5a:18:99:45:17: bf:27:44:05:40:4f:b0:08:48:e2:9e:04:10:90:b7:f9:fa:7e: 9b:67:cb:0b:35:61:ba:8c:fd:9e:75:99:8d:37:15:a2:42:6a: 14:86:da:a7:81:5f:dd:ab:f4:70:65:2a:d1:4c:70:59:70:28: dd:6d:98:e1:58:db:15:a6:85:33:65:2f:3d:96:f5:56:d5:ab: f6:bd:ea:af:5e:b1:39:26:46:75:e7:ed:39:ab:a7:2e:6e:33: 25:2c:ab:9b:99:e9:5f:5e:1d:02:4d:23:6c:a0:15:31:5e:d0: 22:f9:e1:65:22:ed:08:e6:b8:e3:f9:c9:79:3d:f4:37:aa:7e: 5d:0e:5a:db:e8:5c:c6:2a:62:c0:99:27:76:ed:8d:e1:fb:c9: 8f:ff:ef:09:b8:1d:32:14:bc:84:41:59:bc:49:ca:4c:d8:39: 1c:0c:7b:e3:3f:b5:bf:b1:71:1c:de:4f:cb:d7:a6:f1:60:35: 7b:60:0b:e7:f0:4c:3f:b7:18:0d:be:75:a5:70:0b:bd:09:90: ad:38:7e:5c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RkZDQzExMC8GA1UEBRMoNTA2RTNEMURDMEFEQzczODlEOUNEQkFBRkE1MTcwNzQx QjU1ODYxQTAeFw0yNjA2MDEwOTI3NTFaFw0yNjA2MDgwOTI3NTFaMBgxFjAUBgNV BAMTDTZhMWQ1MDk3LTdhMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuykpJTYeUxiRWVvOqRDbnFL9xTlYGt4OrxP8kOaMIOP/eyOIq4r+inwxSQs3S Nvp7/UQXSb/YphF/hqygkEmpu4JGMDZm0WTq8BEfZ9c77mHpSmlmTqb5w7w/bHE8 un1iPsy+1044zrjzFRkuMAJtDXciWQ8WyXDrsJYuQ9hHpF0W0s03cUmcNpxPxd5a PMfg+foUNjPIGzWVOq3vbJtp+sJs+W3XG+3jM6gRBWAFmHy9tcWQ+SqJCHExNJJm DQW/HKzsYND9e2rRLKIDdV11Stf2PHxQdYzWDI9tLuBdOd0YVwJdAxXBXu7Ad/jO P49VY9dfrfU3j0PQ5f4Tn7aHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUqtRvLcrA LPoES+8PY5gcff2P6iwwHwYDVR0jBBgwFoAUUG49HcCtxzidnNuq+lFwdBtVhhow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdGRkNDLzA2QzU1QUU4MTZE MzExRjFCQUE0MTBDODMwM0Q4QzY3L1VHNDlIY0N0eHppZG5OdXEtbEZ3ZEJ0Vmho by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVUc0OUhjQ3R4emlkbk51cS1sRndkQnRWaGhvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdG RkNDLzA2QzU1QUU4MTZEMzExRjFCQUE0MTBDODMwM0Q4QzY3L1VHNDlIY0N0eHpp ZG5OdXEtbEZ3ZEJ0Vmhoby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAcrZOi3oElXozV8gAM5ENMSVDdYK/9mxeLXiEYuCxd4jBC2Ul8wHL4IUJVoyBP cXL/WhiZRRe/J0QFQE+wCEjingQQkLf5+n6bZ8sLNWG6jP2edZmNNxWiQmoUhtqn gV/dq/RwZSrRTHBZcCjdbZjhWNsVpoUzZS89lvVW1av2veqvXrE5JkZ15+05q6cu bjMlLKubmelfXh0CTSNsoBUxXtAi+eFlIu0I5rjj+cl5PfQ3qn5dDlrb6FzGKmLA mSd27Y3h+8mP/+8JuB0yFLyEQVm8ScpM2DkcDHvjP7W/sXEc3k/L16bxYDV7YAvn 8Ew/txgNvnWlcAu9CZCtOH5c -----END CERTIFICATE-----Generated at Tue Jun 2 21:41:45 2026 by rpki-client