$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft File: uokBTrxJS2f9iz-C6LOO9vbFck0.mft (raw, json) Hash identifier: CiW+jHCcQIMOeHDsNt4G/KqrIp3yW/pqJHrZgrqYV0g= Subject key identifier: 6C:EC:E8:41:5F:08:F2:D2:5C:5E:2D:8F:47:00:BB:B7:CA:B9:66:0E Authority key identifier: BA:89:01:4E:BC:49:4B:67:FD:8B:3F:82:E8:B3:8E:F6:F6:C5:72:4D Certificate issuer: /CN=A91C4EC7/serialNumber=BA89014EBC494B67FD8B3F82E8B38EF6F6C5724D Certificate serial: 020A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft Manifest number: 01FE Signing time: Mon 05 Oct 2026 03:37:22 +0000 Manifest this update: Mon 05 Oct 2026 03:37:22 +0000 Manifest next update: Mon 12 Oct 2026 03:37:22 +0000 Files and hashes: 1: uokBTrxJS2f9iz-C6LOO9vbFck0.crl (hash: anl/ZLKZax1DUqMdCIMJx0yJeoazrJqJ0k83Xwyfc2k=) 2: 7FC61EDC2E1D11EF933E9981C4F9AE02.roa (hash: 8to8ysOqqFD6evQaOy6tyviqmwLWEUIY429pE2R6UEM=) 3: ED352AAEBFE511EEBB3B4D25C4F9AE02.roa (hash: 92db4sEQBXgKR1xndwR6hGmE1/F52FkQLZCxaqtLE4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.crl rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 03:37:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 522 (0x20a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4EC7, serialNumber=BA89014EBC494B67FD8B3F82E8B38EF6F6C5724D Validity Not Before: Oct 5 03:37:22 2026 GMT Not After : Oct 12 03:37:22 2026 GMT Subject: CN=6ac31b72-3ee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:52:9d:6b:a2:e5:6d:8d:ce:f5:ef:5c:17:c0: 36:62:b1:be:d8:81:5d:82:56:d5:0e:c2:04:6a:41: 79:87:17:06:80:97:6a:b0:8c:c5:b6:aa:22:89:3e: b6:c5:e7:3f:55:3a:b8:7d:7f:9e:7f:3a:a4:11:63: 7a:d0:16:ef:63:15:6b:4a:20:8a:7c:eb:4f:ad:c8: e0:c9:a3:df:68:33:23:ea:1c:83:85:d6:75:2c:48: e3:1b:7f:ab:39:ec:01:dd:94:34:00:b6:97:50:b4: 5b:bb:92:77:26:40:ec:5b:25:5b:74:e1:6a:e5:e8: 7a:b2:fb:af:11:fd:02:d5:95:56:e7:57:a5:cd:25: 45:09:d8:ba:d2:fd:87:97:ed:92:a4:85:43:df:b7: 01:7f:78:a0:4f:5f:a2:67:4e:51:df:74:39:9c:49: 69:86:ab:87:f3:28:d9:5e:5a:ad:d4:9c:8a:52:15: b5:aa:e3:e7:1c:a4:21:04:fd:5c:2b:c7:86:1d:fb: 46:93:77:32:4e:ec:af:41:1e:14:50:20:8e:56:13: ad:ae:4a:54:36:0a:4a:82:7f:e8:e6:e5:24:4d:18: e9:0b:28:c9:6f:e1:08:d2:71:ea:1d:35:10:ec:1a: d4:5f:61:0f:d3:81:c1:a1:7e:05:32:bf:42:e6:48: cb:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:EC:E8:41:5F:08:F2:D2:5C:5E:2D:8F:47:00:BB:B7:CA:B9:66:0E X509v3 Authority Key Identifier: keyid:BA:89:01:4E:BC:49:4B:67:FD:8B:3F:82:E8:B3:8E:F6:F6:C5:72:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:83:d5:15:0d:9d:ab:02:99:4a:ac:38:f1:d6:5d:64:9d:6d: 95:2c:58:2e:e6:6b:ce:ec:93:49:c4:43:11:78:9c:78:08:43: fc:5b:68:5b:76:f9:28:0a:45:67:cb:8b:37:4d:ff:c7:c5:ba: 6a:44:80:bd:30:23:49:0d:0e:88:e9:dc:61:6d:61:76:53:6b: f6:c2:87:2b:ea:96:db:c5:38:10:52:42:3b:4f:37:f5:25:e9: 2c:19:dc:73:22:80:3d:4a:19:3a:0a:ae:a8:42:51:22:74:46: 80:f0:90:bb:2a:b8:e8:fa:ba:45:9e:9a:2f:e7:4c:a1:bf:c2: 22:0f:3f:46:23:c9:50:0b:3f:dd:46:ab:84:50:98:4f:e4:06: f3:19:aa:6c:22:cc:b0:30:8a:4f:ec:19:9f:0c:68:3a:7a:12: aa:b8:54:40:32:2e:6b:22:52:e6:61:9f:78:8a:29:31:1f:cc: 5c:7a:f8:8e:80:e3:f6:97:6f:b2:55:fc:3f:5b:e4:51:09:2a: 38:a0:af:f0:8a:1f:b6:ea:b1:19:82:58:cc:19:86:d6:78:48: 17:e7:65:56:4a:32:08:65:f0:d1:56:e9:50:11:bb:31:8e:93: e1:8d:3d:1c:38:ec:ad:4a:0a:af:97:dc:13:f0:f6:b5:b2:84: fd:6d:a9:b2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRFQzcxMTAvBgNVBAUTKEJBODkwMTRFQkM0OTRCNjdGRDhCM0Y4MkU4QjM4RUY2 RjZDNTcyNEQwHhcNMjYxMDA1MDMzNzIyWhcNMjYxMDEyMDMzNzIyWjAYMRYwFAYD VQQDEw02YWMzMWI3Mi0zZWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/VKda6LlbY3O9e9cF8A2YrG+2IFdglbVDsIEakF5hxcGgJdqsIzFtqoiiT62 xec/VTq4fX+efzqkEWN60BbvYxVrSiCKfOtPrcjgyaPfaDMj6hyDhdZ1LEjjG3+r OewB3ZQ0ALaXULRbu5J3JkDsWyVbdOFq5eh6svuvEf0C1ZVW51elzSVFCdi60v2H l+2SpIVD37cBf3igT1+iZ05R33Q5nElphquH8yjZXlqt1JyKUhW1quPnHKQhBP1c K8eGHftGk3cyTuyvQR4UUCCOVhOtrkpUNgpKgn/o5uUkTRjpCyjJb+EI0nHqHTUQ 7BrUX2EP04HBoX4FMr9C5kjLBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGzs6EFf CPLSXF4tj0cAu7fKuWYOMB8GA1UdIwQYMBaAFLqJAU68SUtn/Ys/guizjvb2xXJN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEVDNy83NTc1Nzg3MEJG RTUxMUVFQUFDRTQzMTJDNEY5QUUwMi91b2tCVHJ4SlMyZjlpei1DNkxPTzl2YkZj azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Vva0JUcnhKUzJmOWl6LUM2TE9POXZiRmNrMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEVDNy83NTc1Nzg3MEJGRTUxMUVFQUFDRTQzMTJDNEY5QUUwMi91b2tCVHJ4SlMy Zjlpei1DNkxPTzl2YkZjazAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAs4PVFQ2dqwKZSqw48dZdZJ1tlSxYLuZrzuyTScRDEXiceAhD/FtoW3b5KApF Z8uLN03/x8W6akSAvTAjSQ0OiOncYW1hdlNr9sKHK+qW28U4EFJCO0839SXpLBnc cyKAPUoZOgquqEJRInRGgPCQuyq46Pq6RZ6aL+dMob/CIg8/RiPJUAs/3UarhFCY T+QG8xmqbCLMsDCKT+wZnwxoOnoSqrhUQDIuayJS5mGfeIopMR/MXHr4joDj9pdv slX8P1vkUQkqOKCv8IoftuqxGYJYzBmG1nhIF+dlVkoyCGXw0VbpUBG7MY6T4Y09 HDjsrUoKr5fcE/D2tbKE/W2psg== -----END CERTIFICATE-----Generated at Tue Oct 6 20:06:55 2026 by rpki-client