$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.mft File: UKcRa7nzaXvF4-Ii7wNfcDQs3aM.mft (raw, json) Hash identifier: cH0/nzyZAgiWmCJfRMxWQbE2rhRvDe7c7pZY0FOKMjc= Subject key identifier: FC:E6:7A:E0:74:2C:0E:9D:92:8F:E0:D8:2A:0A:95:A1:53:2D:5A:72 Authority key identifier: 50:A7:11:6B:B9:F3:69:7B:C5:E3:E2:22:EF:03:5F:70:34:2C:DD:A3 Certificate issuer: /CN=A91E5191/serialNumber=50A7116BB9F3697BC5E3E222EF035F70342CDDA3 Certificate serial: 0836 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.mft Manifest number: 0829 Signing time: Wed 20 May 2026 21:05:48 +0000 Manifest this update: Wed 20 May 2026 21:05:47 +0000 Manifest next update: Wed 27 May 2026 21:05:47 +0000 Files and hashes: 1: UKcRa7nzaXvF4-Ii7wNfcDQs3aM.crl (hash: uHMOgDLOXRqYou7oilmnwML7tKeQzidlofnDBskufZg=) 2: 3E78F3541E2D11EB95754317C4F9AE02.roa (hash: SQ6zwcvQ5au49qPHtRFj85d+H63jUBLTmi4VuDL7FV4=) 3: B3C29AE8D3C711F09E46353CC4F9AE02.roa (hash: tXcl1fBoWO8w30UDVXKFhjr8bG8EJt2SCP07PWyeSSs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.crl rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 21:05:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2102 (0x836) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5191, serialNumber=50A7116BB9F3697BC5E3E222EF035F70342CDDA3 Validity Not Before: May 20 21:05:47 2026 GMT Not After : May 27 21:05:47 2026 GMT Subject: CN=6a0e222c-e4fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4c:84:55:01:1a:6a:41:33:f2:64:a3:00:d8: e6:c9:e1:bd:fc:64:7f:ce:4d:3d:a9:40:13:5d:14: 99:7c:91:a2:a8:07:86:67:82:26:71:96:0d:e1:4f: 7d:a1:97:46:e7:2b:9a:6e:31:94:d4:c1:fd:c3:75: ca:a5:3f:f8:dd:cf:82:b8:89:77:e9:47:56:48:f9: d2:39:6e:63:3a:23:d5:6c:a1:c8:2a:92:9f:8b:a8: cc:86:bd:35:c7:f7:11:7a:42:e2:4e:33:4a:35:7a: 94:80:0c:b5:35:7d:f7:61:0f:b9:12:92:e2:52:d4: 5c:b1:ee:4c:0e:a3:62:e3:62:6e:0c:bf:49:52:2e: 21:28:af:65:c7:6d:fb:78:81:a9:8e:f6:e6:4d:01: 29:0f:80:6b:6c:15:40:e9:3c:77:04:01:5e:cf:32: 23:c2:6c:1f:21:d4:84:a0:00:10:fc:de:d8:c7:8a: 81:e9:24:a0:a1:3f:fd:74:3b:bc:1c:92:12:4d:dd: 4c:1b:ea:e5:18:35:03:cb:d8:49:ac:92:f3:a1:49: 75:b8:c2:72:fc:26:da:73:2e:63:9e:67:5c:18:d4: 2f:49:10:df:f7:ba:f5:e1:c9:0c:3f:77:bc:b9:3c: d1:60:f9:82:4f:eb:58:bd:ca:3c:7f:0d:f4:31:e9: d9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:E6:7A:E0:74:2C:0E:9D:92:8F:E0:D8:2A:0A:95:A1:53:2D:5A:72 X509v3 Authority Key Identifier: keyid:50:A7:11:6B:B9:F3:69:7B:C5:E3:E2:22:EF:03:5F:70:34:2C:DD:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:d5:c4:3d:f7:d7:5e:a6:fa:89:be:04:df:de:8e:eb:db:c6: 0d:ec:9d:2e:ce:4a:90:56:f5:a8:bd:24:3a:f2:6d:6a:59:16: 5c:f1:f8:4c:1d:b0:1c:07:d5:73:04:4f:c5:35:dc:76:25:c5: cf:ef:43:bf:a9:bb:f3:4c:d3:fb:14:fa:db:7f:ea:fc:83:0b: c0:d7:23:c1:02:a5:1d:74:76:68:a1:87:9d:18:9f:80:30:b4: 78:48:1b:89:8c:7a:da:a3:a7:cc:ab:4a:15:f3:40:73:f3:ab: b3:7c:4b:cd:8a:39:70:c0:51:90:37:d9:00:eb:e4:47:47:5b: cb:e7:13:23:1f:ec:91:ed:ea:e4:f9:a5:c3:ef:53:ea:48:41: 2a:66:41:ce:ad:e1:08:dc:f6:35:97:59:ef:07:c0:6f:a6:a3: e8:ba:fa:db:a8:3a:78:b8:7d:3c:50:34:e7:aa:b4:87:cf:b3: 7f:ed:a0:59:f2:e2:3b:8c:27:1d:31:f2:57:ab:b0:a9:e3:9b: f7:3d:06:66:11:3d:57:2c:bc:a2:04:4e:7b:c6:39:2e:1d:a6: 02:34:65:44:28:ac:32:bf:9d:1b:4c:9f:ee:7c:c0:87:97:7c: d1:5a:63:40:f7:04:d0:28:7c:b0:d1:ce:22:af:47:6a:f8:98: 12:df:9a:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCDYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUxOTExMTAvBgNVBAUTKDUwQTcxMTZCQjlGMzY5N0JDNUUzRTIyMkVGMDM1Rjcw MzQyQ0REQTMwHhcNMjYwNTIwMjEwNTQ3WhcNMjYwNTI3MjEwNTQ3WjAYMRYwFAYD VQQDEw02YTBlMjIyYy1lNGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuEyEVQEaakEz8mSjANjmyeG9/GR/zk09qUATXRSZfJGiqAeGZ4ImcZYN4U99 oZdG5yuabjGU1MH9w3XKpT/43c+CuIl36UdWSPnSOW5jOiPVbKHIKpKfi6jMhr01 x/cRekLiTjNKNXqUgAy1NX33YQ+5EpLiUtRcse5MDqNi42JuDL9JUi4hKK9lx237 eIGpjvbmTQEpD4BrbBVA6Tx3BAFezzIjwmwfIdSEoAAQ/N7Yx4qB6SSgoT/9dDu8 HJISTd1MG+rlGDUDy9hJrJLzoUl1uMJy/Cbacy5jnmdcGNQvSRDf97r14ckMP3e8 uTzRYPmCT+tYvco8fw30MenZpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPzmeuB0 LA6dko/g2CoKlaFTLVpyMB8GA1UdIwQYMBaAFFCnEWu582l7xePiIu8DX3A0LN2j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTE5MS80OEFBMDcwNjE5 NzIxMUVCODA1RTZCN0ZDNEY5QUUwMi9VS2NSYTduemFYdkY0LUlpN3dOZmNEUXMz YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VLY1JhN256YVh2RjQtSWk3d05mY0RRczNhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTE5MS80OEFBMDcwNjE5NzIxMUVCODA1RTZCN0ZDNEY5QUUwMi9VS2NSYTduemFY dkY0LUlpN3dOZmNEUXMzYU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAztXEPffXXqb6ib4E396O69vGDeydLs5KkFb1qL0kOvJtalkWXPH4TB2wHAfV cwRPxTXcdiXFz+9Dv6m780zT+xT623/q/IMLwNcjwQKlHXR2aKGHnRifgDC0eEgb iYx62qOnzKtKFfNAc/Ors3xLzYo5cMBRkDfZAOvkR0dby+cTIx/ske3q5Pmlw+9T 6khBKmZBzq3hCNz2NZdZ7wfAb6aj6Lr626g6eLh9PFA056q0h8+zf+2gWfLiO4wn HTHyV6uwqeOb9z0GZhE9Vyy8ogROe8Y5Lh2mAjRlRCisMr+dG0yf7nzAh5d80Vpj QPcE0Ch8sNHOIq9HaviYEt+aLg== -----END CERTIFICATE-----Generated at Thu May 21 12:35:58 2026 by rpki-client