$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.mft File: UK5xbz02ub7q4n8QBo-eNqIzq5E.mft (raw, json) Hash identifier: gZ8QQIoIT+8sM1NjBVX/L5Db6eQcxTyxeN6YoXiEKEg= Subject key identifier: 7D:7A:E4:2E:69:35:D7:B3:D1:20:19:AB:E1:27:A6:AB:71:4E:6F:66 Authority key identifier: 50:AE:71:6F:3D:36:B9:BE:EA:E2:7F:10:06:8F:9E:36:A2:33:AB:91 Certificate issuer: /CN=A91CB4E9/serialNumber=50AE716F3D36B9BEEAE27F10068F9E36A233AB91 Certificate serial: D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK5xbz02ub7q4n8QBo-eNqIzq5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.mft Manifest number: CA Signing time: Tue 23 Jun 2026 07:06:34 +0000 Manifest this update: Tue 23 Jun 2026 07:06:33 +0000 Manifest next update: Tue 30 Jun 2026 07:06:33 +0000 Files and hashes: 1: UK5xbz02ub7q4n8QBo-eNqIzq5E.crl (hash: OTytiLgu/qxtb695gRDp6DusrRrLqxmgv2d5N6YD6f0=) 2: BA23C0E440EF11F099D6761DC4F9AE02.roa (hash: C4Pv7/ZcXpfnIfO2ZraIiYNBzqr9mEhRQSdvTyPYip4=) 3: 539EAC9440EF11F08CFAFB1CC4F9AE02.roa (hash: p+/O/N2cnrVHm7O6YEqosl6vnHVBYYkRwfwZCmypB2U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.crl rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK5xbz02ub7q4n8QBo-eNqIzq5E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jun 2026 07:06:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB4E9, serialNumber=50AE716F3D36B9BEEAE27F10068F9E36A233AB91 Validity Not Before: Jun 23 07:06:33 2026 GMT Not After : Jun 30 07:06:33 2026 GMT Subject: CN=6a3a3079-ee4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7d:24:74:0e:34:4a:f0:cd:68:32:6f:ef:f1: e5:13:79:af:b8:bf:fe:e7:64:a5:5f:92:e9:f7:c9: 4e:9e:f3:4c:ec:a0:0a:e5:66:a7:02:e5:e1:74:b8: f3:c7:a7:63:55:e4:76:bf:cf:19:26:1c:3e:ce:83: 9b:af:8e:c4:88:32:c5:04:77:b4:a4:87:30:fc:20: 11:2f:34:0c:05:51:51:d1:e7:6a:f1:a9:03:5d:e4: a7:9e:87:0a:06:a1:bc:43:17:ef:26:52:80:86:bc: 44:88:b3:e1:60:c0:72:f5:48:8f:86:6e:e3:cd:8f: e5:a6:f0:9f:e7:20:a5:09:32:06:d0:24:37:ed:fe: 45:1c:a3:5e:38:e1:08:1f:e7:da:c9:b2:b2:33:ef: 15:dd:2d:ca:44:f3:80:6d:eb:a7:6b:52:8f:ca:58: 47:84:e9:83:17:0d:ca:3f:60:1f:38:98:03:fc:97: 5b:d5:72:46:0d:de:8f:0b:db:ed:7a:36:d7:73:d0: e0:0d:26:8f:8b:26:a7:b7:e5:22:cb:d0:1d:80:06: 8f:d1:59:da:35:c8:07:36:06:a7:84:1a:01:2d:bf: 16:c9:f3:db:bb:92:c1:63:80:40:78:92:8f:70:b5: 18:7c:3d:a8:be:c2:ee:71:52:82:4b:96:73:55:5c: f7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:7A:E4:2E:69:35:D7:B3:D1:20:19:AB:E1:27:A6:AB:71:4E:6F:66 X509v3 Authority Key Identifier: keyid:50:AE:71:6F:3D:36:B9:BE:EA:E2:7F:10:06:8F:9E:36:A2:33:AB:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK5xbz02ub7q4n8QBo-eNqIzq5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:26:11:4a:65:23:34:0d:e8:5b:3f:41:0d:00:bf:a4:4a:76: c8:91:93:39:35:45:67:c9:6b:6b:b6:c9:a6:9c:7d:65:1c:58: a1:e6:5e:bf:e3:5c:a8:1b:37:d9:dd:43:02:b5:26:97:3c:80: 2c:bf:d7:8e:35:5c:7c:e8:c5:1d:a8:d8:43:9a:32:3c:ad:55: c4:fc:d2:2d:8e:29:25:51:b8:17:ad:24:e7:3a:2c:02:51:55: 97:10:d1:09:7d:14:9e:d6:ff:2a:d0:f4:ee:ed:48:ca:c6:8f: 5a:bf:e1:99:4e:ab:65:a7:01:32:c8:2a:25:b5:33:54:8c:1c: cc:a6:26:ff:6b:f1:e8:33:8f:e9:7b:63:4e:2e:aa:0a:a0:d1: ca:30:c6:0a:93:7e:da:4b:fd:03:f0:f3:0e:2f:8e:d3:55:65: c4:88:d2:2d:95:c4:95:bb:e4:5b:51:81:38:da:66:3a:9d:c6: 2a:f7:c7:2b:d9:4f:d8:0c:9d:e8:b4:90:50:1d:6e:c9:2b:79: be:58:1d:db:bc:b3:51:61:dc:77:02:e2:20:53:64:03:8e:73: 90:86:44:e4:4e:75:7b:74:11:0f:f4:3a:35:29:14:d8:fd:08: e9:b4:39:83:68:7e:9f:72:1a:ed:8a:b6:b3:9a:84:e7:ed:42: 9c:47:ce:cf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I0RTkxMTAvBgNVBAUTKDUwQUU3MTZGM0QzNkI5QkVFQUUyN0YxMDA2OEY5RTM2 QTIzM0FCOTEwHhcNMjYwNjIzMDcwNjMzWhcNMjYwNjMwMDcwNjMzWjAYMRYwFAYD VQQDEw02YTNhMzA3OS1lZTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoX0kdA40SvDNaDJv7/HlE3mvuL/+52SlX5Lp98lOnvNM7KAK5WanAuXhdLjz x6djVeR2v88ZJhw+zoObr47EiDLFBHe0pIcw/CARLzQMBVFR0edq8akDXeSnnocK BqG8QxfvJlKAhrxEiLPhYMBy9UiPhm7jzY/lpvCf5yClCTIG0CQ37f5FHKNeOOEI H+faybKyM+8V3S3KRPOAbeuna1KPylhHhOmDFw3KP2AfOJgD/Jdb1XJGDd6PC9vt ejbXc9DgDSaPiyant+Uiy9AdgAaP0VnaNcgHNganhBoBLb8WyfPbu5LBY4BAeJKP cLUYfD2ovsLucVKCS5ZzVVz3PQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH165C5p Ndez0SAZq+EnpqtxTm9mMB8GA1UdIwQYMBaAFFCucW89Nrm+6uJ/EAaPnjaiM6uR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjRFOS9EMzg2MTM0NDQw RUUxMUYwOUU5MzM1MUNDNEY5QUUwMi9VSzV4YnowMnViN3E0bjhRQm8tZU5xSXpx NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VLNXhiejAydWI3cTRuOFFCby1lTnFJenE1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjRFOS9EMzg2MTM0NDQwRUUxMUYwOUU5MzM1MUNDNEY5QUUwMi9VSzV4YnowMnVi N3E0bjhRQm8tZU5xSXpxNUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmiYRSmUjNA3oWz9BDQC/pEp2yJGTOTVFZ8lra7bJppx9ZRxYoeZev+NcqBs3 2d1DArUmlzyALL/XjjVcfOjFHajYQ5oyPK1VxPzSLY4pJVG4F60k5zosAlFVlxDR CX0Untb/KtD07u1IysaPWr/hmU6rZacBMsgqJbUzVIwczKYm/2vx6DOP6XtjTi6q CqDRyjDGCpN+2kv9A/DzDi+O01VlxIjSLZXElbvkW1GBONpmOp3GKvfHK9lP2Ayd 6LSQUB1uySt5vlgd27yzUWHcdwLiIFNkA45zkIZE5E51e3QRD/Q6NSkU2P0I6bQ5 g2h+n3Ia7Yq2s5qE5+1CnEfOzw== -----END CERTIFICATE-----Generated at Wed Jun 24 11:29:59 2026 by rpki-client