$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft File: UCfzGS691UlQo5w9EwlKcfHTMmY.mft (raw, json) Hash identifier: rFoPvf99deaAWTVKj5pTiQJ5rTirQDcBJJ15fRndRw0= Subject key identifier: DC:56:D9:CF:4A:6F:B6:E2:77:02:3B:59:DA:F0:45:B9:E0:9A:FC:9F Authority key identifier: 50:27:F3:19:2E:BD:D5:49:50:A3:9C:3D:13:09:4A:71:F1:D3:32:66 Certificate issuer: /CN=A91A3078/serialNumber=5027F3192EBDD54950A39C3D13094A71F1D33266 Certificate serial: 0C05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft Manifest number: 0BDD Signing time: Thu 10 Sep 2026 18:58:28 +0000 Manifest this update: Thu 10 Sep 2026 18:58:28 +0000 Manifest next update: Thu 17 Sep 2026 18:58:28 +0000 Files and hashes: 1: UCfzGS691UlQo5w9EwlKcfHTMmY.crl (hash: c+6IAurYmsvHaFXwbzHX+0EiY3OZmEry8s7xcbZz5Vs=) 2: CEFEEFEA854E11EBA2CFDC87C4F9AE02.roa (hash: STVj2nhR43tdaUjvSJVzwF108t0kdD6iF4pS76haPJU=) 3: F3F7D2B0CE9711ECA2477C19C4F9AE02.roa (hash: GKFcFl36b7LnjNX4oCJ7zVjBqwtdvTCKUrd14r3mvVc=) 4: CDD62642854E11EBA2CFDC87C4F9AE02.roa (hash: y3tBCZ/zj5uXK4iELgDoXwmRBCPYOm3bLLdNGBDaIUc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.crl rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 18:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3077 (0xc05) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3078, serialNumber=5027F3192EBDD54950A39C3D13094A71F1D33266 Validity Not Before: Sep 10 18:58:28 2026 GMT Not After : Sep 17 18:58:28 2026 GMT Subject: CN=6aa2fdd4-5597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:31:bb:a6:d4:74:06:cb:3e:a1:70:b5:0c:8c: f7:e6:1b:c3:e7:f8:0d:77:26:33:e5:75:32:45:38: bb:fb:f9:e9:4a:8f:ba:fa:b7:5c:68:fa:a3:83:6f: 63:63:86:7d:d3:91:80:6f:44:e9:81:93:9f:ad:b6: 33:bb:e9:0d:db:3c:4b:f0:fb:46:a6:42:8f:eb:92: 69:d2:bc:bb:ea:4d:aa:63:23:8f:37:60:c4:71:66: fc:9d:3e:67:37:54:a2:bc:5c:26:08:5a:0e:18:0c: fe:d5:ca:70:0a:bd:d6:d5:83:44:dc:6d:fb:6a:24: 05:9a:f4:e1:69:ed:22:01:66:5a:4c:71:7b:44:09: 7e:30:53:da:f7:d1:40:12:f5:42:04:d8:d2:45:c9: a4:9d:32:e6:d1:a3:45:49:0f:4a:e6:d5:ff:45:ba: 46:9e:68:29:fc:e4:f8:42:7a:95:1d:50:be:31:98: 79:0f:69:a6:74:bf:55:5a:03:97:af:36:b3:d9:df: f7:67:14:a1:46:f2:c6:4a:b9:26:ec:bd:8c:6f:20: fb:53:7b:19:7d:42:7a:92:98:e8:d5:c4:1f:69:40: f9:ca:07:d3:1b:73:e7:1d:29:69:1a:e9:af:63:48: bf:4b:95:1f:93:14:36:89:29:a9:67:8e:c2:90:84: 3d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:56:D9:CF:4A:6F:B6:E2:77:02:3B:59:DA:F0:45:B9:E0:9A:FC:9F X509v3 Authority Key Identifier: keyid:50:27:F3:19:2E:BD:D5:49:50:A3:9C:3D:13:09:4A:71:F1:D3:32:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:67:39:dd:93:c6:a1:c1:f5:8c:45:6d:d8:e4:f3:89:3f:96: cc:c4:66:bd:8e:c3:80:8c:d0:e9:35:67:9e:f0:ee:68:17:93: fc:fb:d7:99:d2:45:9b:3f:80:8a:20:16:c6:af:5c:5a:22:33: a8:af:19:33:ae:6d:30:d1:67:dd:ba:f8:28:ae:ee:e4:29:7a: 10:b9:ea:1b:3e:01:8b:6c:66:35:73:fb:90:c6:7e:24:fa:5f: fe:3f:93:80:cf:ff:fb:34:8d:2f:8e:2f:64:85:c0:6b:30:40: 0c:de:28:01:21:8b:77:3a:cd:8e:bb:ee:ea:3a:92:89:84:05: ad:16:c3:d8:39:58:32:9c:b6:61:7b:d2:cc:82:2d:dd:e1:a2: 55:63:9b:0c:74:c2:3f:69:2d:89:54:2a:1e:93:0f:71:04:86: a9:9c:b2:fc:f8:d6:54:07:f2:c3:6c:7f:24:cb:9d:0e:6c:65: 27:a9:dd:93:75:d1:82:69:f3:35:a3:85:e5:b1:de:91:5c:25: 1b:a5:9f:b3:97:f1:87:1c:1e:82:be:5f:b8:04:28:01:79:cb: 4f:bd:38:34:a8:3c:e2:14:08:08:29:6f:eb:e0:4f:d4:23:b8: 31:34:c4:77:55:45:c8:cb:df:47:d9:0c:10:98:02:04:9d:1d: 9b:8f:cb:b7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDAUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTMwNzgxMTAvBgNVBAUTKDUwMjdGMzE5MkVCREQ1NDk1MEEzOUMzRDEzMDk0QTcx RjFEMzMyNjYwHhcNMjYwOTEwMTg1ODI4WhcNMjYwOTE3MTg1ODI4WjAYMRYwFAYD VQQDEw02YWEyZmRkNC01NTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuTG7ptR0Bss+oXC1DIz35hvD5/gNdyYz5XUyRTi7+/npSo+6+rdcaPqjg29j Y4Z905GAb0TpgZOfrbYzu+kN2zxL8PtGpkKP65Jp0ry76k2qYyOPN2DEcWb8nT5n N1SivFwmCFoOGAz+1cpwCr3W1YNE3G37aiQFmvThae0iAWZaTHF7RAl+MFPa99FA EvVCBNjSRcmknTLm0aNFSQ9K5tX/RbpGnmgp/OT4QnqVHVC+MZh5D2mmdL9VWgOX rzaz2d/3ZxShRvLGSrkm7L2MbyD7U3sZfUJ6kpjo1cQfaUD5ygfTG3PnHSlpGumv Y0i/S5UfkxQ2iSmpZ47CkIQ9gQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNxW2c9K b7bidwI7WdrwRbngmvyfMB8GA1UdIwQYMBaAFFAn8xkuvdVJUKOcPRMJSnHx0zJm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzA3OC84NjMwQjFDODRD OEMxMUVBQjlFMjcwNTdDNEY5QUUwMi9VQ2Z6R1M2OTFVbFFvNXc5RXdsS2NmSFRN bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VDZnpHUzY5MVVsUW81dzlFd2xLY2ZIVE1tWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzA3OC84NjMwQjFDODRDOEMxMUVBQjlFMjcwNTdDNEY5QUUwMi9VQ2Z6R1M2OTFV bFFvNXc5RXdsS2NmSFRNbVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOGc53ZPGocH1jEVt2OTziT+WzMRmvY7DgIzQ6TVnnvDuaBeT/PvXmdJFmz+A iiAWxq9cWiIzqK8ZM65tMNFn3br4KK7u5Cl6ELnqGz4Bi2xmNXP7kMZ+JPpf/j+T gM//+zSNL44vZIXAazBADN4oASGLdzrNjrvu6jqSiYQFrRbD2DlYMpy2YXvSzIIt 3eGiVWObDHTCP2ktiVQqHpMPcQSGqZyy/PjWVAfyw2x/JMudDmxlJ6ndk3XRgmnz NaOF5bHekVwlG6Wfs5fxhxwegr5fuAQoAXnLT704NKg84hQICClv6+BP1CO4MTTE d1VFyMvfR9kMEJgCBJ0dm4/Ltw== -----END CERTIFICATE-----Generated at Fri Sep 11 14:53:01 2026 by rpki-client