$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft File: uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft (raw, json) Hash identifier: VcqJnMfnaUFPAQuWHObLtJYBn/mtr1bGxKDjmj/CDes= Subject key identifier: 34:A6:E6:B3:CD:28:86:B8:18:58:52:40:22:31:3E:64:C4:DD:51:36 Authority key identifier: B8:89:11:17:80:68:D5:75:DF:DD:F8:49:40:CA:BE:AF:45:1C:8C:2B Certificate issuer: /CN=A91B4DC7/serialNumber=B88911178068D575DFDDF84940CABEAF451C8C2B Certificate serial: 0428 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft Manifest number: 040A Signing time: Fri 15 May 2026 00:33:33 +0000 Manifest this update: Fri 15 May 2026 00:33:32 +0000 Manifest next update: Fri 22 May 2026 00:33:32 +0000 Files and hashes: 1: uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl (hash: jzObW64yLHBeajQX2lrkjvnvjKZZr5+6PlORs0F2co8=) 2: 9ABED502176711EFA0260C6DC4F9AE02.roa (hash: KniUex6Br3kVd8ZFa5IvlRLLvtXYDCxf0DDbHMrohjA=) 3: F8400A20C80811ED9ADBA05EC4F9AE02.roa (hash: ZoRg8H9EdcG1KZ48qLjcZYnWfQFTwAAseWDLCkJqZiQ=) 4: A6168350176711EFA13E2C6DC4F9AE02.roa (hash: qX8tOJbBF02ErsmjyRjd2vo7Vt289wtwBfMF3iMN9FA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 May 2026 00:33:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1064 (0x428) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4DC7, serialNumber=B88911178068D575DFDDF84940CABEAF451C8C2B Validity Not Before: May 15 00:33:32 2026 GMT Not After : May 22 00:33:32 2026 GMT Subject: CN=6a0669dd-73bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:a8:a3:2f:4c:37:fa:59:10:20:65:92:fd:63: e0:17:48:76:d2:a9:da:a5:a3:2b:99:1d:2b:a6:3b: c8:4f:a0:ae:bc:f3:50:8e:26:9a:04:d4:f4:61:8c: 0f:07:98:9c:c4:0d:24:6c:64:95:13:24:89:ae:25: 2e:35:1f:6f:34:8e:48:57:a4:a3:65:26:03:4b:65: be:14:2e:cd:f0:f6:97:a7:4c:65:0a:75:0b:51:3b: 0c:60:8c:b1:65:ed:48:d3:57:24:12:83:bf:4f:6f: 04:dc:d5:02:2a:eb:19:19:79:31:89:e7:65:bf:94: 4f:b0:4e:36:0e:f9:04:3e:bf:32:4f:86:5c:8d:23: e7:b7:3d:96:51:f5:7c:98:30:f1:04:6c:d6:6d:64: f2:41:21:c3:97:47:72:ca:06:50:8d:12:de:a4:df: 22:e0:be:79:2f:cc:c3:d6:ab:d6:15:8a:25:06:18: ca:26:ab:ce:0e:2a:39:f8:02:99:a4:73:32:85:e1: e5:c4:4d:3e:c2:ea:1f:08:1d:7d:99:f4:de:4b:e7: fc:f1:eb:73:71:d9:0f:b3:2f:73:5f:1b:3c:39:27: 7f:25:aa:c5:7f:db:97:d1:61:65:48:33:ee:d9:7c: 4e:e4:04:28:40:0f:23:eb:b3:ea:9a:9a:aa:12:1e: a7:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:A6:E6:B3:CD:28:86:B8:18:58:52:40:22:31:3E:64:C4:DD:51:36 X509v3 Authority Key Identifier: keyid:B8:89:11:17:80:68:D5:75:DF:DD:F8:49:40:CA:BE:AF:45:1C:8C:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:89:46:12:7d:f4:ae:82:46:38:0d:65:04:b9:d4:cf:41:24: 79:38:4d:01:e9:91:89:af:9b:39:3c:d6:91:8a:97:5b:70:fa: 3e:c4:4d:09:22:12:33:22:3e:3e:62:3f:b5:7d:ec:6a:3f:ad: a6:87:dd:36:3e:eb:79:0e:79:14:85:93:83:2c:10:20:42:73: ca:95:4d:81:1e:17:1e:9a:10:5f:83:a1:1c:6c:f8:2b:03:d8: 4e:80:92:07:cf:c7:ae:38:66:36:ee:b2:28:b8:a0:6f:89:6e: 68:a6:7b:47:65:77:84:51:1c:90:d2:69:3d:ef:da:d8:d7:bb: 1f:f4:12:92:6f:32:20:2d:d2:e0:70:2b:bd:8e:0a:1f:05:f8: 0f:99:43:6e:bf:b8:e3:52:60:f6:de:34:43:0a:7f:80:25:fb: 05:b4:13:41:4e:79:aa:46:2c:21:9d:e5:00:aa:e4:67:ef:55: 5c:b9:02:fa:42:fc:ee:fa:5d:18:99:28:24:3b:40:29:47:03: a3:01:f7:ab:5e:1a:fe:13:05:e8:a5:aa:3a:56:63:58:53:f5: 3e:48:b2:5a:1d:2f:dd:1c:22:3b:b0:05:96:7f:95:de:6a:aa: a1:7a:08:2b:3c:7e:2b:4f:ef:d5:bd:81:62:85:8c:ba:e4:04: a5:08:29:a1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjREQzcxMTAvBgNVBAUTKEI4ODkxMTE3ODA2OEQ1NzVERkRERjg0OTQwQ0FCRUFG NDUxQzhDMkIwHhcNMjYwNTE1MDAzMzMyWhcNMjYwNTIyMDAzMzMyWjAYMRYwFAYD VQQDEw02YTA2NjlkZC03M2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6qijL0w3+lkQIGWS/WPgF0h20qnapaMrmR0rpjvIT6CuvPNQjiaaBNT0YYwP B5icxA0kbGSVEySJriUuNR9vNI5IV6SjZSYDS2W+FC7N8PaXp0xlCnULUTsMYIyx Ze1I01ckEoO/T28E3NUCKusZGXkxiedlv5RPsE42DvkEPr8yT4ZcjSPntz2WUfV8 mDDxBGzWbWTyQSHDl0dyygZQjRLepN8i4L55L8zD1qvWFYolBhjKJqvODio5+AKZ pHMyheHlxE0+wuofCB19mfTeS+f88etzcdkPsy9zXxs8OSd/JarFf9uX0WFlSDPu 2XxO5AQoQA8j67PqmpqqEh6ntQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDSm5rPN KIa4GFhSQCIxPmTE3VE2MB8GA1UdIwQYMBaAFLiJEReAaNV13934SUDKvq9FHIwr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNERDNy9GM0YxMDIwRUJC MTAxMUVDQjY3NUVGNTFDNEY5QUUwMi91SWtSRjRCbzFYWGYzZmhKUU1xLXIwVWNq Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VJa1JGNEJvMVhYZjNmaEpRTXEtcjBVY2pDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NERDNy9GM0YxMDIwRUJCMTAxMUVDQjY3NUVGNTFDNEY5QUUwMi91SWtSRjRCbzFY WGYzZmhKUU1xLXIwVWNqQ3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEolGEn30roJGOA1lBLnUz0EkeThNAemRia+bOTzWkYqXW3D6PsRNCSISMyI+ PmI/tX3saj+tpofdNj7reQ55FIWTgywQIEJzypVNgR4XHpoQX4OhHGz4KwPYToCS B8/HrjhmNu6yKLigb4luaKZ7R2V3hFEckNJpPe/a2Ne7H/QSkm8yIC3S4HArvY4K HwX4D5lDbr+441Jg9t40Qwp/gCX7BbQTQU55qkYsIZ3lAKrkZ+9VXLkC+kL87vpd GJkoJDtAKUcDowH3q14a/hMF6KWqOlZjWFP1PkiyWh0v3RwiO7AFln+V3mqqoXoI Kzx+K0/v1b2BYoWMuuQEpQgpoQ== -----END CERTIFICATE-----Generated at Fri May 15 20:45:40 2026 by rpki-client