$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D0468/83AED23C866311F18896D37E96A30FBC/ucEIlrkeuEhv_5w16EvTW0n4Mfg.mft File: ucEIlrkeuEhv_5w16EvTW0n4Mfg.mft (raw, json) Hash identifier: Zz4Bo2bbJc4C2S63FDgNHDYGHFI88u3C5DwNhlWqt00= Subject key identifier: BD:4E:0D:F8:CB:F2:3D:3B:B3:31:A6:7B:85:97:BA:E5:B5:79:F3:DE Authority key identifier: B9:C1:08:96:B9:1E:B8:48:6F:FF:9C:35:E8:4B:D3:5B:49:F8:31:F8 Certificate issuer: /CN=A91D0468/serialNumber=B9C10896B91EB8486FFF9C35E84BD35B49F831F8 Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucEIlrkeuEhv_5w16EvTW0n4Mfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0468/83AED23C866311F18896D37E96A30FBC/ucEIlrkeuEhv_5w16EvTW0n4Mfg.mft Manifest number: 13 Signing time: Tue 25 Aug 2026 08:56:32 +0000 Manifest this update: Tue 25 Aug 2026 08:56:32 +0000 Manifest next update: Tue 01 Sep 2026 08:56:32 +0000 Files and hashes: 1: ucEIlrkeuEhv_5w16EvTW0n4Mfg.crl (hash: 6PcDD3AMQOkUpQSEzoJRXkUW47K5MW6AOnT913pbnOw=) 2: 0A4C9B3A866411F18B4C2F8396A30FBC.roa (hash: rne+liQvMq2ppRDgVz5rqnq10rEXiHIwzpvqAK3l3Lg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0468/83AED23C866311F18896D37E96A30FBC/ucEIlrkeuEhv_5w16EvTW0n4Mfg.crl rsync://rpki.apnic.net/member_repository/A91D0468/83AED23C866311F18896D37E96A30FBC/ucEIlrkeuEhv_5w16EvTW0n4Mfg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucEIlrkeuEhv_5w16EvTW0n4Mfg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 08:56:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0468, serialNumber=B9C10896B91EB8486FFF9C35E84BD35B49F831F8 Validity Not Before: Aug 25 08:56:32 2026 GMT Not After : Sep 1 08:56:32 2026 GMT Subject: CN=6a8d58c0-ef8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d7:91:db:e1:fc:63:9d:b9:fd:8d:c4:3c:7b: 7f:ed:31:3e:4c:c4:06:9b:2e:c0:46:a3:97:0c:72: b2:0a:f7:58:d3:11:93:cc:fd:7f:0a:16:23:e9:27: 92:27:ac:9b:ef:6c:19:5d:4b:b8:e4:06:d0:d0:2f: 5b:d8:e7:6f:fb:fe:c9:d3:eb:7e:8d:95:b9:b2:a7: 66:35:06:bc:b0:7d:c7:a2:ef:57:19:44:fb:6b:c2: 3d:f3:f5:f5:3c:85:5f:11:2d:3c:97:30:15:f4:6e: b0:7f:cc:35:91:43:37:e6:a2:78:9a:49:34:53:40: 42:02:b2:b1:57:da:0c:3a:17:94:d1:90:a0:d5:fa: 0d:44:d3:0c:b3:06:f1:a9:12:92:ff:d7:57:f7:72: 43:02:82:1f:97:35:3f:ae:ff:68:84:8c:03:9d:83: e0:99:e1:ed:1b:29:fd:1f:7a:ff:8c:23:0d:55:6f: 22:2f:1d:b3:09:e6:eb:f4:39:61:b2:05:e3:18:c7: 85:fe:b4:21:a5:9d:ef:a9:da:cd:62:99:24:fc:42: 81:f8:f6:86:83:12:f6:df:9c:b0:b0:e6:fb:5f:87: 52:c2:08:aa:2c:b3:cc:cf:d4:4e:06:32:0f:84:84: 62:3f:cc:dc:83:a0:ef:0f:30:35:26:40:2c:0c:de: 70:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:4E:0D:F8:CB:F2:3D:3B:B3:31:A6:7B:85:97:BA:E5:B5:79:F3:DE X509v3 Authority Key Identifier: keyid:B9:C1:08:96:B9:1E:B8:48:6F:FF:9C:35:E8:4B:D3:5B:49:F8:31:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0468/83AED23C866311F18896D37E96A30FBC/ucEIlrkeuEhv_5w16EvTW0n4Mfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucEIlrkeuEhv_5w16EvTW0n4Mfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0468/83AED23C866311F18896D37E96A30FBC/ucEIlrkeuEhv_5w16EvTW0n4Mfg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:c9:fb:e9:2e:92:fa:ce:55:ff:fa:b7:83:fb:3f:4c:4f:92: 31:0f:fe:4a:69:7b:a2:4c:03:0e:a6:6a:63:f7:ad:f6:fd:f6: 45:14:b7:93:7f:b9:85:d6:ec:18:ba:32:35:2b:b2:01:28:b7: 72:64:15:0d:b1:3a:e6:69:48:55:fd:e6:51:ab:db:f4:2a:ad: c2:b0:ec:6a:40:2f:98:83:32:f6:85:ec:e2:94:02:0b:5a:62: 87:91:88:d1:cd:45:66:99:2d:0c:b2:9c:fc:b2:a1:ee:87:d2: bf:56:36:42:d7:b0:32:e3:8f:1e:da:57:a6:23:e5:c4:89:12: e0:42:b1:5e:8a:7c:8b:28:4a:8f:bc:b0:77:a1:05:dd:b3:53: 03:4d:8d:42:f5:8a:8c:c4:ed:d7:31:01:10:28:06:32:97:19: 93:f2:9a:0a:66:3d:25:db:c0:7e:02:65:67:51:9d:5e:30:3d: ba:2a:04:42:64:8b:06:36:5c:02:1a:f4:ef:d7:0e:58:9e:90: 2d:ee:9e:90:31:95:46:71:10:38:e6:c2:4c:c5:70:0f:e6:1f: 42:0a:5d:55:67:ca:53:4c:79:41:b1:ac:5a:27:78:c6:1a:a8: b1:af:c7:dc:e9:2e:3b:51:11:09:d4:77:e8:67:96:af:28:31: e0:e7:6d:8f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MDQ2ODExMC8GA1UEBRMoQjlDMTA4OTZCOTFFQjg0ODZGRkY5QzM1RTg0QkQzNUI0 OUY4MzFGODAeFw0yNjA4MjUwODU2MzJaFw0yNjA5MDEwODU2MzJaMBgxFjAUBgNV BAMTDTZhOGQ1OGMwLWVmOGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDn15Hb4fxjnbn9jcQ8e3/tMT5MxAabLsBGo5cMcrIK91jTEZPM/X8KFiPpJ5In rJvvbBldS7jkBtDQL1vY52/7/snT636Nlbmyp2Y1Brywfcei71cZRPtrwj3z9fU8 hV8RLTyXMBX0brB/zDWRQzfmoniaSTRTQEICsrFX2gw6F5TRkKDV+g1E0wyzBvGp EpL/11f3ckMCgh+XNT+u/2iEjAOdg+CZ4e0bKf0fev+MIw1VbyIvHbMJ5uv0OWGy BeMYx4X+tCGlne+p2s1imST8QoH49oaDEvbfnLCw5vtfh1LCCKoss8zP1E4GMg+E hGI/zNyDoO8PMDUmQCwM3nDFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUvU4N+Mvy PTuzMaZ7hZe65bV5894wHwYDVR0jBBgwFoAUucEIlrkeuEhv/5w16EvTW0n4Mfgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQwNDY4LzgzQUVEMjNDODY2 MzExRjE4ODk2RDM3RTk2QTMwRkJDL3VjRUlscmtldUVodl81dzE2RXZUVzBuNE1m Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdWNFSWxya2V1RWh2XzV3MTZFdlRXMG40TWZnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQw NDY4LzgzQUVEMjNDODY2MzExRjE4ODk2RDM3RTk2QTMwRkJDL3VjRUlscmtldUVo dl81dzE2RXZUVzBuNE1mZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCOyfvpLpL6zlX/+reD+z9MT5IxD/5KaXuiTAMOpmpj9632/fZFFLeTf7mF1uwY ujI1K7IBKLdyZBUNsTrmaUhV/eZRq9v0Kq3CsOxqQC+YgzL2hezilAILWmKHkYjR zUVmmS0Mspz8sqHuh9K/VjZC17Ay448e2lemI+XEiRLgQrFeinyLKEqPvLB3oQXd s1MDTY1C9YqMxO3XMQEQKAYylxmT8poKZj0l28B+AmVnUZ1eMD26KgRCZIsGNlwC GvTv1w5YnpAt7p6QMZVGcRA45sJMxXAP5h9CCl1VZ8pTTHlBsaxaJ3jGGqixr8fc 6S47UREJ1HfoZ5avKDHg522P -----END CERTIFICATE-----Generated at Wed Aug 26 17:25:38 2026 by rpki-client