$ rpki-client -vvvf rpki.apnic.net/member_repository/A9195B3B/52D1F40C8A2111F1A0CBBFFD6911F970/umbyZbiRG9ItoRaulw1wnTIGQK0.mft File: umbyZbiRG9ItoRaulw1wnTIGQK0.mft (raw, json) Hash identifier: zmAxi6es92aladToOLuQrPS7/XsvUnzS4aSdZu7r7+8= Subject key identifier: BE:09:C5:27:92:5C:D6:F0:2F:81:3C:EB:E3:64:29:5A:8B:E5:5D:24 Authority key identifier: BA:66:F2:65:B8:91:1B:D2:2D:A1:16:AE:97:0D:70:9D:32:06:40:AD Certificate issuer: /CN=A9195B3B/serialNumber=BA66F265B8911BD22DA116AE970D709D320640AD Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umbyZbiRG9ItoRaulw1wnTIGQK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195B3B/52D1F40C8A2111F1A0CBBFFD6911F970/umbyZbiRG9ItoRaulw1wnTIGQK0.mft Manifest number: 25 Signing time: Sat 03 Oct 2026 09:33:51 +0000 Manifest this update: Sat 03 Oct 2026 09:33:50 +0000 Manifest next update: Sat 10 Oct 2026 09:33:50 +0000 Files and hashes: 1: umbyZbiRG9ItoRaulw1wnTIGQK0.crl (hash: ky0nyIHUd3oAtI2wSIws7yBTgB7HTmNZdWCmDDPRapU=) 2: 724543648A2311F187384F3F6A11F970.roa (hash: D66quyR1bQNbhI57Y/JKPXB9cl9F0VyVuzBoZx7JEzA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195B3B/52D1F40C8A2111F1A0CBBFFD6911F970/umbyZbiRG9ItoRaulw1wnTIGQK0.crl rsync://rpki.apnic.net/member_repository/A9195B3B/52D1F40C8A2111F1A0CBBFFD6911F970/umbyZbiRG9ItoRaulw1wnTIGQK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umbyZbiRG9ItoRaulw1wnTIGQK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 09:33:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195B3B, serialNumber=BA66F265B8911BD22DA116AE970D709D320640AD Validity Not Before: Oct 3 09:33:50 2026 GMT Not After : Oct 10 09:33:50 2026 GMT Subject: CN=6ac0cbfe-8dc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:36:db:7b:ca:3d:fd:b5:2f:fb:cc:b0:66:2c: 29:1a:3d:9a:09:4b:a4:08:a8:b4:a6:3c:48:07:61: 8e:4e:d0:e8:43:96:2a:44:7a:58:ec:0e:bf:fc:f9: 2e:2b:ab:64:81:60:0a:1c:2e:d0:3f:7c:7a:ae:89: 0d:af:a3:fa:79:f1:01:5a:dc:7a:33:c3:ad:ee:26: cd:75:f3:04:29:55:33:dc:75:a1:dd:02:45:28:17: 05:26:cd:f8:84:45:08:76:15:cf:0a:a0:11:75:98: 34:63:a1:48:c0:4e:22:3e:c9:04:82:73:58:e1:4e: 6e:4d:4a:51:b2:f3:f6:3e:6d:54:6b:99:43:f5:65: 4f:b3:42:26:d1:18:ba:6e:00:82:de:11:49:1a:f5: 68:31:4a:51:9f:27:c3:25:2e:0e:c8:6e:75:77:39: 93:a1:20:37:84:51:68:24:3a:5b:ba:16:3f:cb:17: 0a:8b:94:02:cb:f8:0d:e6:a7:b4:1b:2e:ba:e7:c0: 39:4e:64:fd:53:2d:41:fe:c7:d1:95:77:e0:d5:39: 10:ab:ea:23:07:9c:c9:a6:5c:1d:42:18:cc:1b:6f: 34:37:92:db:c3:df:f2:6b:42:2c:99:4a:e9:7d:f2: 2f:05:68:7b:45:74:94:bb:e3:02:45:76:2e:60:a8: 80:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:09:C5:27:92:5C:D6:F0:2F:81:3C:EB:E3:64:29:5A:8B:E5:5D:24 X509v3 Authority Key Identifier: keyid:BA:66:F2:65:B8:91:1B:D2:2D:A1:16:AE:97:0D:70:9D:32:06:40:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195B3B/52D1F40C8A2111F1A0CBBFFD6911F970/umbyZbiRG9ItoRaulw1wnTIGQK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umbyZbiRG9ItoRaulw1wnTIGQK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195B3B/52D1F40C8A2111F1A0CBBFFD6911F970/umbyZbiRG9ItoRaulw1wnTIGQK0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:ce:e9:ec:45:71:8a:f4:a3:97:5c:e9:43:bf:e4:b7:bc:8a: 6c:27:96:10:af:e6:ca:94:d6:9f:bf:5c:cc:6e:b6:2f:4c:e1: 17:8c:3c:0d:3a:3f:f6:13:06:c6:43:8b:7b:97:2b:25:dd:04: 31:97:0a:01:9a:60:16:66:89:ee:b9:32:fa:f9:f8:e1:8b:bd: 57:3b:a8:8e:93:7d:72:f8:14:ed:ac:13:ac:08:c3:a2:dc:37: 30:e5:c2:97:68:23:d5:05:f4:dd:67:5c:60:f0:39:2d:72:14: 6a:c4:48:7f:4d:c5:1e:0a:23:ec:74:da:5f:09:e2:e9:ce:30: 3a:09:cb:dc:40:8d:3d:81:08:41:01:f8:ba:82:40:1a:cc:d2: 8b:fb:8f:69:55:9d:a8:e9:25:dd:00:25:7e:81:06:ee:94:55: 63:00:24:9e:69:69:e9:e7:a0:be:c1:fa:97:b9:98:56:8d:e8: 3e:47:70:f1:4b:fd:98:7c:b8:85:e4:75:d3:a5:72:4b:7d:99: 09:3a:96:9f:0b:fb:3f:b5:c7:a4:e8:a7:30:e3:e0:7b:59:e7: b0:c1:30:df:92:20:0f:7d:8c:51:da:09:53:a4:df:a6:22:bc: 8d:44:36:f1:cf:a1:57:74:61:59:0a:01:27:3b:10:fe:ad:34: 65:fc:25:3f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NUIzQjExMC8GA1UEBRMoQkE2NkYyNjVCODkxMUJEMjJEQTExNkFFOTcwRDcwOUQz MjA2NDBBRDAeFw0yNjEwMDMwOTMzNTBaFw0yNjEwMTAwOTMzNTBaMBgxFjAUBgNV BAMTDTZhYzBjYmZlLThkYzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDiNtt7yj39tS/7zLBmLCkaPZoJS6QIqLSmPEgHYY5O0OhDlipEeljsDr/8+S4r q2SBYAocLtA/fHquiQ2vo/p58QFa3Hozw63uJs118wQpVTPcdaHdAkUoFwUmzfiE RQh2Fc8KoBF1mDRjoUjATiI+yQSCc1jhTm5NSlGy8/Y+bVRrmUP1ZU+zQibRGLpu AILeEUka9WgxSlGfJ8MlLg7IbnV3OZOhIDeEUWgkOlu6Fj/LFwqLlALL+A3mp7Qb LrrnwDlOZP1TLUH+x9GVd+DVORCr6iMHnMmmXB1CGMwbbzQ3ktvD3/JrQiyZSul9 8i8FaHtFdJS74wJFdi5gqIDxAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUvgnFJ5Jc 1vAvgTzr42QpWovlXSQwHwYDVR0jBBgwFoAUumbyZbiRG9ItoRaulw1wnTIGQK0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1QjNCLzUyRDFGNDBDOEEy MTExRjFBMENCQkZGRDY5MTFGOTcwL3VtYnlaYmlSRzlJdG9SYXVsdzF3blRJR1FL MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdW1ieVpiaVJHOUl0b1JhdWx3MXduVElHUUswLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1 QjNCLzUyRDFGNDBDOEEyMTExRjFBMENCQkZGRDY5MTFGOTcwL3VtYnlaYmlSRzlJ dG9SYXVsdzF3blRJR1FLMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCFzunsRXGK9KOXXOlDv+S3vIpsJ5YQr+bKlNafv1zMbrYvTOEXjDwNOj/2EwbG Q4t7lysl3QQxlwoBmmAWZonuuTL6+fjhi71XO6iOk31y+BTtrBOsCMOi3Dcw5cKX aCPVBfTdZ1xg8DktchRqxEh/TcUeCiPsdNpfCeLpzjA6CcvcQI09gQhBAfi6gkAa zNKL+49pVZ2o6SXdACV+gQbulFVjACSeaWnp56C+wfqXuZhWjeg+R3DxS/2YfLiF 5HXTpXJLfZkJOpafC/s/tcek6Kcw4+B7WeewwTDfkiAPfYxR2glTpN+mIryNRDbx z6FXdGFZCgEnOxD+rTRl/CU/ -----END CERTIFICATE-----Generated at Sun Oct 4 20:11:46 2026 by rpki-client