$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB95D/8A35B11857EA11F1B6A8C17A93833773/UM34bAX-9Pzk0kjdt1qwDbH7F-g.mft File: UM34bAX-9Pzk0kjdt1qwDbH7F-g.mft (raw, json) Hash identifier: XwppP/M+neK7w/it+Zrj2BTuEdqwvmya+9Fku+B0nD8= Subject key identifier: 20:08:AA:5B:21:76:17:36:02:A0:71:69:73:7E:BC:89:68:EF:57:FB Authority key identifier: 50:CD:F8:6C:05:FE:F4:FC:E4:D2:48:DD:B7:5A:B0:0D:B1:FB:17:E8 Certificate issuer: /CN=A91FB95D/serialNumber=50CDF86C05FEF4FCE4D248DDB75AB00DB1FB17E8 Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UM34bAX-9Pzk0kjdt1qwDbH7F-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB95D/8A35B11857EA11F1B6A8C17A93833773/UM34bAX-9Pzk0kjdt1qwDbH7F-g.mft Manifest number: 07 Signing time: Mon 01 Jun 2026 10:00:31 +0000 Manifest this update: Mon 01 Jun 2026 10:00:31 +0000 Manifest next update: Mon 08 Jun 2026 10:00:31 +0000 Files and hashes: 1: UM34bAX-9Pzk0kjdt1qwDbH7F-g.crl (hash: ByDRlbWVq3tv33rJz5tRXaqDYaRqYB1b8OoFB/mbeG4=) 2: FAA05C1E57EA11F1850E3A8D93833773.roa (hash: EhC0uehK9atplVY2H7sxubg42UzW+RldO5jjtPhRdMI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB95D/8A35B11857EA11F1B6A8C17A93833773/UM34bAX-9Pzk0kjdt1qwDbH7F-g.crl rsync://rpki.apnic.net/member_repository/A91FB95D/8A35B11857EA11F1B6A8C17A93833773/UM34bAX-9Pzk0kjdt1qwDbH7F-g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UM34bAX-9Pzk0kjdt1qwDbH7F-g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB95D, serialNumber=50CDF86C05FEF4FCE4D248DDB75AB00DB1FB17E8 Validity Not Before: Jun 1 10:00:31 2026 GMT Not After : Jun 8 10:00:31 2026 GMT Subject: CN=6a1d583f-5df1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a2:d5:82:a5:f3:19:89:70:95:2c:19:5b:66: 66:74:8a:c2:50:51:ed:78:2e:2c:30:7a:d7:80:0f: d4:27:2a:47:a5:6f:72:cf:9a:26:3c:02:34:b3:88: f2:54:8c:76:9c:ee:d9:2a:92:c3:eb:75:62:0f:9f: 3b:7f:38:b8:3c:49:c6:91:2a:93:ae:33:98:a9:d7: 6d:e3:ca:95:c9:de:9c:a2:0f:2a:0d:66:96:34:0d: 4d:4b:38:12:91:53:83:4f:cc:9d:04:c8:e0:76:fb: 08:a0:18:ee:d5:fb:58:c4:ae:6c:f8:94:df:ee:c2: 08:14:24:f1:40:c8:fc:12:38:d3:5b:0e:78:e2:f0: c5:ac:19:43:8b:b3:95:5b:b6:39:ba:4f:00:a2:74: 2d:58:6f:4a:95:30:46:83:d1:85:19:92:b4:98:ad: dd:43:66:8e:e1:db:7c:2a:78:08:c2:8f:ad:22:98: a9:22:2a:8a:8a:18:2e:2a:3c:b2:4f:a9:a0:2f:24: 81:d2:3e:5c:43:08:54:96:46:61:8f:54:8e:df:81: 0a:8a:af:ba:9c:9b:f1:72:a8:72:87:8f:3c:43:7f: 31:c2:67:1e:d8:50:76:77:27:9d:57:ed:3b:7f:30: 16:43:72:c5:bb:51:f5:1c:31:d8:bc:c0:0a:56:b3: 01:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:08:AA:5B:21:76:17:36:02:A0:71:69:73:7E:BC:89:68:EF:57:FB X509v3 Authority Key Identifier: keyid:50:CD:F8:6C:05:FE:F4:FC:E4:D2:48:DD:B7:5A:B0:0D:B1:FB:17:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB95D/8A35B11857EA11F1B6A8C17A93833773/UM34bAX-9Pzk0kjdt1qwDbH7F-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UM34bAX-9Pzk0kjdt1qwDbH7F-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB95D/8A35B11857EA11F1B6A8C17A93833773/UM34bAX-9Pzk0kjdt1qwDbH7F-g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:42:08:7d:2c:93:1d:d9:7f:5d:12:bf:7d:91:c5:cf:99:cc: c2:b7:89:18:be:11:28:7b:7b:60:ca:f5:83:da:89:90:dd:26: 98:fd:43:c1:04:4c:2d:25:0c:2c:cd:b9:a9:b7:71:76:42:69: f5:49:73:bb:5b:d3:bc:6b:d8:09:bc:87:5a:46:22:a1:38:7a: 5a:48:09:57:dd:9c:ab:0f:cc:5f:93:a8:af:1a:1a:a0:66:cd: cd:bf:95:00:d2:ee:5f:d7:f4:93:cb:7a:48:88:13:b2:4e:61: ea:8b:02:69:23:27:8d:32:50:e7:8e:8d:53:bb:dd:7b:08:47: 46:d2:a2:51:73:63:2d:5a:53:4d:ba:fc:05:05:55:01:2b:5c: ad:99:cd:0f:bd:4f:27:b2:c2:85:7a:84:8d:ec:a6:11:b2:fd: d1:c7:96:52:c8:92:1a:78:ef:1b:80:93:19:92:7f:ad:86:f2: 98:e6:8e:86:f4:c0:c4:81:90:4b:a0:27:27:68:4a:13:4c:fd: c4:ac:e5:45:72:61:31:e1:f2:8c:db:c3:00:ef:d3:d1:ea:73: d7:93:ec:be:b1:ec:73:13:78:ee:49:8f:43:77:0a:30:9e:05: fc:df:7e:b4:9a:8d:8d:09:20:34:25:57:55:d0:f3:8c:19:3e: b8:43:4b:0f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG Qjk1RDExMC8GA1UEBRMoNTBDREY4NkMwNUZFRjRGQ0U0RDI0OEREQjc1QUIwMERC MUZCMTdFODAeFw0yNjA2MDExMDAwMzFaFw0yNjA2MDgxMDAwMzFaMBgxFjAUBgNV BAMTDTZhMWQ1ODNmLTVkZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5otWCpfMZiXCVLBlbZmZ0isJQUe14LiwweteAD9QnKkelb3LPmiY8AjSziPJU jHac7tkqksPrdWIPnzt/OLg8ScaRKpOuM5ip123jypXJ3pyiDyoNZpY0DU1LOBKR U4NPzJ0EyOB2+wigGO7V+1jErmz4lN/uwggUJPFAyPwSONNbDnji8MWsGUOLs5Vb tjm6TwCidC1Yb0qVMEaD0YUZkrSYrd1DZo7h23wqeAjCj60imKkiKoqKGC4qPLJP qaAvJIHSPlxDCFSWRmGPVI7fgQqKr7qcm/FyqHKHjzxDfzHCZx7YUHZ3J51X7Tt/ MBZDcsW7UfUcMdi8wApWswHPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUIAiqWyF2 FzYCoHFpc368iWjvV/swHwYDVR0jBBgwFoAUUM34bAX+9Pzk0kjdt1qwDbH7F+gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCOTVELzhBMzVCMTE4NTdF QTExRjFCNkE4QzE3QTkzODMzNzczL1VNMzRiQVgtOVB6azBramR0MXF3RGJIN0Yt Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVU0zNGJBWC05UHprMGtqZHQxcXdEYkg3Ri1nLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC OTVELzhBMzVCMTE4NTdFQTExRjFCNkE4QzE3QTkzODMzNzczL1VNMzRiQVgtOVB6 azBramR0MXF3RGJIN0YtZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB6Qgh9LJMd2X9dEr99kcXPmczCt4kYvhEoe3tgyvWD2omQ3SaY/UPBBEwtJQws zbmpt3F2Qmn1SXO7W9O8a9gJvIdaRiKhOHpaSAlX3ZyrD8xfk6ivGhqgZs3Nv5UA 0u5f1/STy3pIiBOyTmHqiwJpIyeNMlDnjo1Tu917CEdG0qJRc2MtWlNNuvwFBVUB K1ytmc0PvU8nssKFeoSN7KYRsv3Rx5ZSyJIaeO8bgJMZkn+thvKY5o6G9MDEgZBL oCcnaEoTTP3ErOVFcmEx4fKM28MA79PR6nPXk+y+sexzE3juSY9DdwowngX83360 mo2NCSA0JVdV0POMGT64Q0sP -----END CERTIFICATE-----Generated at Tue Jun 2 21:17:49 2026 by rpki-client