$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft File: uG8rXtaXoSH08p1YIDcs8UBVEgs.mft (raw, json) Hash identifier: kap2JrzkgIF7tJHo5BwV7owY5UIgJIz4/DWWn1nfGu0= Subject key identifier: 00:D9:1C:F8:14:B6:79:3D:CD:74:CD:A1:55:54:95:C0:E8:81:4D:C2 Authority key identifier: B8:6F:2B:5E:D6:97:A1:21:F4:F2:9D:58:20:37:2C:F1:40:55:12:0B Certificate issuer: /CN=A91AF0C6/serialNumber=B86F2B5ED697A121F4F29D5820372CF14055120B Certificate serial: 020E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uG8rXtaXoSH08p1YIDcs8UBVEgs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft Manifest number: 0207 Signing time: Thu 21 May 2026 03:05:36 +0000 Manifest this update: Thu 21 May 2026 03:05:35 +0000 Manifest next update: Thu 28 May 2026 03:05:35 +0000 Files and hashes: 1: uG8rXtaXoSH08p1YIDcs8UBVEgs.crl (hash: AgC0i6ru6SdrP5I/I4dWjtyL6hcsV270WPIjvFZopCU=) 2: A915A3543FEC11EE99AC0F43C4F9AE02.roa (hash: kQQtoUock6v51XesRrhDlErgmW8VAdf0TAeHQYio1TE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.crl rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uG8rXtaXoSH08p1YIDcs8UBVEgs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 03:05:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 526 (0x20e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF0C6, serialNumber=B86F2B5ED697A121F4F29D5820372CF14055120B Validity Not Before: May 21 03:05:35 2026 GMT Not After : May 28 03:05:35 2026 GMT Subject: CN=6a0e7680-9702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3d:26:d5:21:a6:67:5a:16:c7:34:39:0f:a2: b0:e7:ae:98:34:64:f7:b8:82:ba:b0:8a:e3:d2:a0: fb:7f:63:ba:dd:41:18:16:bf:21:8e:4f:ad:bc:44: f4:e9:40:ca:98:f7:0c:09:06:14:ac:f6:b9:62:7e: f8:b6:bd:ee:0a:43:e3:fc:6e:05:da:59:ec:ea:98: a5:05:58:87:64:37:c5:8f:1d:66:b5:3b:80:c3:da: 02:2a:76:eb:d3:5b:de:36:26:80:8f:6e:2c:18:e4: 1f:8b:4e:eb:05:27:4d:28:72:e7:20:58:04:65:a1: 8f:17:81:a6:56:69:d6:22:9a:ed:aa:7b:89:ce:09: ab:9f:09:bd:d8:55:46:ff:14:3a:ea:71:33:34:9a: 89:11:4b:a5:53:6d:1a:51:a4:9d:65:8d:58:33:f7: 96:0c:c5:7b:be:00:a2:24:cb:78:48:c3:3b:ed:5b: a1:67:81:4d:67:ca:d0:55:f7:cc:42:f5:3f:49:8e: 97:9b:ce:5d:56:fc:9a:b7:46:7f:8c:28:bd:e6:56: d3:76:72:18:c6:40:ab:0c:08:11:1a:70:2b:aa:64: f8:05:90:05:19:f4:66:26:fd:6f:33:55:e8:8e:41: c1:40:26:a1:44:56:8a:a2:9f:43:af:df:16:dd:b1: 9e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:D9:1C:F8:14:B6:79:3D:CD:74:CD:A1:55:54:95:C0:E8:81:4D:C2 X509v3 Authority Key Identifier: keyid:B8:6F:2B:5E:D6:97:A1:21:F4:F2:9D:58:20:37:2C:F1:40:55:12:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uG8rXtaXoSH08p1YIDcs8UBVEgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:11:76:17:10:2c:28:6a:23:9a:b0:62:fa:f4:b5:3a:72:40: e3:11:d6:d8:c3:71:06:d1:f0:a5:7e:8c:37:8b:5b:da:4a:4c: de:62:0d:4f:32:db:1f:1e:4c:13:71:03:6a:08:53:c5:de:ab: 63:c2:fb:02:2d:e9:0f:c5:7e:a9:7a:bf:0c:52:c3:47:99:e1: 76:cd:4b:50:50:87:1e:11:4d:b5:7e:ac:93:9a:ee:b4:fc:42: 32:d5:39:75:03:9c:f0:7a:8b:e1:11:5d:83:29:39:b1:31:5e: c0:a3:13:f4:fc:7f:a7:af:de:f2:90:3f:07:93:bc:47:a3:96: e3:80:bc:5d:f7:cf:cc:45:97:a8:0d:cb:69:f2:d8:e1:f1:76: 60:cd:03:cb:44:9d:64:cd:55:6b:77:39:94:fd:f4:41:a0:02: 61:ee:5d:6e:19:fc:e5:97:51:e2:a1:66:e5:e7:d2:0a:5c:32: e1:57:be:df:7f:bd:d6:cf:6d:b0:4a:09:05:f4:04:71:f7:cc: a0:71:bf:8d:22:52:e6:25:51:9e:ed:5f:3b:e1:a5:cd:17:e4: e7:3b:26:36:04:0c:35:d2:01:80:be:51:59:cb:a5:6d:cf:7f: 2f:4c:78:69:44:ce:ae:ac:61:b9:b1:84:b8:f9:86:e9:43:8c: cf:03:8d:e7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYwQzYxMTAvBgNVBAUTKEI4NkYyQjVFRDY5N0ExMjFGNEYyOUQ1ODIwMzcyQ0Yx NDA1NTEyMEIwHhcNMjYwNTIxMDMwNTM1WhcNMjYwNTI4MDMwNTM1WjAYMRYwFAYD VQQDEw02YTBlNzY4MC05NzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxj0m1SGmZ1oWxzQ5D6Kw566YNGT3uIK6sIrj0qD7f2O63UEYFr8hjk+tvET0 6UDKmPcMCQYUrPa5Yn74tr3uCkPj/G4F2lns6pilBViHZDfFjx1mtTuAw9oCKnbr 01veNiaAj24sGOQfi07rBSdNKHLnIFgEZaGPF4GmVmnWIprtqnuJzgmrnwm92FVG /xQ66nEzNJqJEUulU20aUaSdZY1YM/eWDMV7vgCiJMt4SMM77VuhZ4FNZ8rQVffM QvU/SY6Xm85dVvyat0Z/jCi95lbTdnIYxkCrDAgRGnArqmT4BZAFGfRmJv1vM1Xo jkHBQCahRFaKop9Dr98W3bGebwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFADZHPgU tnk9zXTNoVVUlcDogU3CMB8GA1UdIwQYMBaAFLhvK17Wl6Eh9PKdWCA3LPFAVRIL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjBDNi8zRkNFQkQyMjNG RUMxMUVFQURGNUQzMzhDNEY5QUUwMi91RzhyWHRhWG9TSDA4cDFZSURjczhVQlZF Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VHOHJYdGFYb1NIMDhwMVlJRGNzOFVCVkVncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjBDNi8zRkNFQkQyMjNGRUMxMUVFQURGNUQzMzhDNEY5QUUwMi91RzhyWHRhWG9T SDA4cDFZSURjczhVQlZFZ3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwhF2FxAsKGojmrBi+vS1OnJA4xHW2MNxBtHwpX6MN4tb2kpM3mINTzLbHx5M E3EDaghTxd6rY8L7Ai3pD8V+qXq/DFLDR5nhds1LUFCHHhFNtX6sk5rutPxCMtU5 dQOc8HqL4RFdgyk5sTFewKMT9Px/p6/e8pA/B5O8R6OW44C8XffPzEWXqA3LafLY 4fF2YM0Dy0SdZM1Va3c5lP30QaACYe5dbhn85ZdR4qFm5efSClwy4Ve+33+91s9t sEoJBfQEcffMoHG/jSJS5iVRnu1fO+GlzRfk5zsmNgQMNdIBgL5RWculbc9/L0x4 aUTOrqxhubGEuPmG6UOMzwON5w== -----END CERTIFICATE-----Generated at Thu May 21 09:36:57 2026 by rpki-client