$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft File: uokBTrxJS2f9iz-C6LOO9vbFck0.mft (raw, json) Hash identifier: XfdvfXZmr860KHPn4Zte1MtmeVwSv8AYCDse1TDy0Zc= Subject key identifier: 6D:20:68:D2:AB:AF:8D:F2:FA:92:F0:E1:DC:43:CC:65:F7:7B:80:E3 Authority key identifier: BA:89:01:4E:BC:49:4B:67:FD:8B:3F:82:E8:B3:8E:F6:F6:C5:72:4D Certificate issuer: /CN=A91C4EC7/serialNumber=BA89014EBC494B67FD8B3F82E8B38EF6F6C5724D Certificate serial: 01F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft Manifest number: 01E7 Signing time: Fri 21 Aug 2026 03:33:47 +0000 Manifest this update: Fri 21 Aug 2026 03:33:46 +0000 Manifest next update: Fri 28 Aug 2026 03:33:46 +0000 Files and hashes: 1: uokBTrxJS2f9iz-C6LOO9vbFck0.crl (hash: 9j5Y4BGU4mn+uFh7AchXPsN1SCT8//ZWBUTONydxrJs=) 2: 7FC61EDC2E1D11EF933E9981C4F9AE02.roa (hash: 8to8ysOqqFD6evQaOy6tyviqmwLWEUIY429pE2R6UEM=) 3: ED352AAEBFE511EEBB3B4D25C4F9AE02.roa (hash: 92db4sEQBXgKR1xndwR6hGmE1/F52FkQLZCxaqtLE4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.crl rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 499 (0x1f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4EC7, serialNumber=BA89014EBC494B67FD8B3F82E8B38EF6F6C5724D Validity Not Before: Aug 21 03:33:46 2026 GMT Not After : Aug 28 03:33:46 2026 GMT Subject: CN=6a87c71b-a537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ec:bd:19:be:c9:5c:f3:3c:31:6d:1a:fa:5f: 14:df:ab:4f:22:cb:d6:7b:25:61:8e:43:61:10:7c: a7:fd:b5:70:2f:cd:bc:d6:47:4a:98:37:45:78:b7: f9:b5:b2:d5:5f:59:a8:91:7a:2a:b8:0e:b6:29:e1: 0b:8d:f6:dc:e1:76:9e:46:27:72:aa:25:1b:f6:53: 87:3c:0b:d3:1c:9a:65:cf:e2:3e:0a:39:8f:91:c5: d5:f4:51:ce:4a:bd:6f:b7:ba:17:05:2a:20:d2:24: d2:c5:3a:4e:72:37:c7:1a:03:80:08:c7:4f:66:57: 76:ef:31:79:55:0c:58:ca:a9:55:99:77:83:92:08: ce:65:98:6d:ed:14:f7:1c:18:71:35:37:8c:d9:58: 44:7d:8f:98:d0:a3:71:01:5a:95:3f:d5:ff:05:30: c8:88:f3:57:46:46:66:33:ac:46:25:88:41:e1:97: da:cb:7c:02:5b:bc:e1:fc:86:6e:3d:d8:0f:59:b3: a0:cf:fc:de:1c:a6:45:ac:63:18:6b:0b:1a:4b:0d: a6:96:d2:f6:23:4c:51:72:7b:83:e0:3f:d0:b9:a0: f2:c4:10:9a:16:c2:2f:d7:bf:35:c4:5d:f8:f6:85: 09:2d:22:68:d4:b8:95:38:69:77:77:bc:d4:b1:3a: d9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:20:68:D2:AB:AF:8D:F2:FA:92:F0:E1:DC:43:CC:65:F7:7B:80:E3 X509v3 Authority Key Identifier: keyid:BA:89:01:4E:BC:49:4B:67:FD:8B:3F:82:E8:B3:8E:F6:F6:C5:72:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:a6:97:90:99:3e:24:51:32:3e:7e:bd:3e:1c:91:cb:b1:de: 57:6b:16:c7:5a:0d:73:fb:8b:a4:5f:77:ea:54:43:3b:fc:45: 0c:9a:54:27:ab:cf:9f:24:98:8f:c9:53:f9:f3:01:93:e3:3d: 7a:77:8a:8a:6c:f5:f4:58:56:0b:a3:3b:ac:f8:da:bc:b3:97: a4:96:0f:1c:1f:cf:e1:5d:e5:c3:4b:99:4a:67:cb:ca:e8:55: db:02:17:f1:83:46:5b:b8:c5:7c:9b:0a:22:b2:5a:2a:a5:99: fa:32:d5:14:bd:b8:ed:4c:15:03:ac:d3:c4:69:25:fb:a9:f0: ab:5e:84:b9:c1:ff:08:01:9a:a8:b4:5b:56:75:15:d9:58:29: 3d:43:ea:e7:8a:66:f5:56:94:cb:c3:67:5f:d0:03:69:05:15: e5:41:05:e5:8f:58:04:8e:8a:9e:8f:db:a5:7e:44:c9:4d:b9: 45:e7:64:f5:01:c9:49:c5:98:14:21:20:59:be:87:bd:d6:14: 2b:6e:4a:3c:3b:cf:56:ae:fa:27:9e:37:47:42:54:a6:fc:cf: 9e:f6:da:c3:c5:33:bf:bb:db:d8:ae:b9:4d:c4:47:44:d3:9a: 15:c1:e8:9c:ef:90:bc:36:2d:6d:31:c3:b1:8d:90:89:9f:52: de:77:3b:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRFQzcxMTAvBgNVBAUTKEJBODkwMTRFQkM0OTRCNjdGRDhCM0Y4MkU4QjM4RUY2 RjZDNTcyNEQwHhcNMjYwODIxMDMzMzQ2WhcNMjYwODI4MDMzMzQ2WjAYMRYwFAYD VQQDEw02YTg3YzcxYi1hNTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp+y9Gb7JXPM8MW0a+l8U36tPIsvWeyVhjkNhEHyn/bVwL8281kdKmDdFeLf5 tbLVX1mokXoquA62KeELjfbc4XaeRidyqiUb9lOHPAvTHJplz+I+CjmPkcXV9FHO Sr1vt7oXBSog0iTSxTpOcjfHGgOACMdPZld27zF5VQxYyqlVmXeDkgjOZZht7RT3 HBhxNTeM2VhEfY+Y0KNxAVqVP9X/BTDIiPNXRkZmM6xGJYhB4Zfay3wCW7zh/IZu PdgPWbOgz/zeHKZFrGMYawsaSw2mltL2I0xRcnuD4D/QuaDyxBCaFsIv1781xF34 9oUJLSJo1LiVOGl3d7zUsTrZ3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG0gaNKr r43y+pLw4dxDzGX3e4DjMB8GA1UdIwQYMBaAFLqJAU68SUtn/Ys/guizjvb2xXJN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEVDNy83NTc1Nzg3MEJG RTUxMUVFQUFDRTQzMTJDNEY5QUUwMi91b2tCVHJ4SlMyZjlpei1DNkxPTzl2YkZj azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Vva0JUcnhKUzJmOWl6LUM2TE9POXZiRmNrMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEVDNy83NTc1Nzg3MEJGRTUxMUVFQUFDRTQzMTJDNEY5QUUwMi91b2tCVHJ4SlMy Zjlpei1DNkxPTzl2YkZjazAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbaaXkJk+JFEyPn69PhyRy7HeV2sWx1oNc/uLpF936lRDO/xFDJpUJ6vPnySY j8lT+fMBk+M9eneKimz19FhWC6M7rPjavLOXpJYPHB/P4V3lw0uZSmfLyuhV2wIX 8YNGW7jFfJsKIrJaKqWZ+jLVFL247UwVA6zTxGkl+6nwq16EucH/CAGaqLRbVnUV 2VgpPUPq54pm9VaUy8NnX9ADaQUV5UEF5Y9YBI6Kno/bpX5EyU25Redk9QHJScWY FCEgWb6HvdYUK25KPDvPVq76J543R0JUpvzPnvbaw8Uzv7vb2K65TcRHRNOaFcHo nO+QvDYtbTHDsY2QiZ9S3nc7Aw== -----END CERTIFICATE-----Generated at Fri Aug 21 23:08:08 2026 by rpki-client