$ rpki-client -vvvf rpki.apnic.net/member_repository/A911F587/C1BA1A22136E11F1AD791BA3313D8C67/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.mft File: ufxcFLLSdSnVDm5ZPajLCqh9ZRA.mft (raw, json) Hash identifier: ZDArsSA3SpF9dX4qR+IVoC++amzSQQk/q7JUXA+z1+o= Subject key identifier: AD:FA:48:E5:EB:C6:CC:47:A2:04:E3:2D:94:E4:33:12:F2:FD:DA:80 Authority key identifier: B9:FC:5C:14:B2:D2:75:29:D5:0E:6E:59:3D:A8:CB:0A:A8:7D:65:10 Certificate issuer: /CN=A911F587/serialNumber=B9FC5C14B2D27529D50E6E593DA8CB0AA87D6510 Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F587/C1BA1A22136E11F1AD791BA3313D8C67/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.mft Manifest number: 73 Signing time: Mon 21 Sep 2026 07:57:46 +0000 Manifest this update: Mon 21 Sep 2026 07:57:46 +0000 Manifest next update: Mon 28 Sep 2026 07:57:46 +0000 Files and hashes: 1: ufxcFLLSdSnVDm5ZPajLCqh9ZRA.crl (hash: etOwpLdYuioH67i3zoynnvoRoK4Ty8FNA13BEh/ne+o=) 2: CE3E7CF6136F11F1982A4804323D8C67.roa (hash: UQRfzo1c/HYpw7uRcuRbUI8vrLw5R69JNp0rwuqqffU=) 3: 2579DD2AA4E911F18E8000426A11F970.roa (hash: iULh2mhtbyN6/itGQQ04mR1L5lTg6b6a6WlOrWiAyQE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F587/C1BA1A22136E11F1AD791BA3313D8C67/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.crl rsync://rpki.apnic.net/member_repository/A911F587/C1BA1A22136E11F1AD791BA3313D8C67/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F587, serialNumber=B9FC5C14B2D27529D50E6E593DA8CB0AA87D6510 Validity Not Before: Sep 21 07:57:46 2026 GMT Not After : Sep 28 07:57:46 2026 GMT Subject: CN=6ab0e37a-bdc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d4:d4:46:8e:7f:b3:d5:47:b5:13:18:db:88: 25:ab:ba:74:8b:65:e5:d0:6d:34:27:d6:59:9e:12: 07:a8:68:ee:c3:cc:a2:0f:20:8b:84:92:57:cb:ef: 6d:dd:1a:a4:a7:b6:30:28:08:d7:4b:80:39:ba:90: c1:3e:21:0a:99:77:4b:a2:5a:44:d4:cc:55:b5:67: 25:df:a7:74:10:53:72:b3:54:5d:5a:20:f6:19:83: 37:b5:06:20:07:32:cf:1c:6a:8d:50:fc:c8:d3:bc: 12:27:46:b4:f6:c6:0d:c0:a0:3e:b1:7b:1d:d8:de: c7:f8:b5:ac:a9:23:d7:f8:51:b6:67:67:c1:34:46: 1c:93:d1:57:00:ab:c5:86:e8:38:e5:ec:80:38:f6: 5c:01:37:83:bd:e3:46:35:a7:7b:a0:36:3b:80:f4: f2:a3:af:b9:6b:76:a4:a2:90:0c:38:9a:25:bb:d3: df:79:6e:94:13:91:57:a9:de:52:39:f1:be:61:c7: 92:f7:20:c4:42:c0:26:75:14:ea:ff:7f:1e:32:3c: 6a:df:56:80:2d:1e:65:e1:13:9d:3d:de:91:f9:a2: 94:2e:df:d4:1f:ab:6a:da:be:f2:ad:34:4d:81:8e: 06:01:64:6b:33:e6:94:98:a9:f2:af:b5:68:b5:e0: 4e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:FA:48:E5:EB:C6:CC:47:A2:04:E3:2D:94:E4:33:12:F2:FD:DA:80 X509v3 Authority Key Identifier: keyid:B9:FC:5C:14:B2:D2:75:29:D5:0E:6E:59:3D:A8:CB:0A:A8:7D:65:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F587/C1BA1A22136E11F1AD791BA3313D8C67/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F587/C1BA1A22136E11F1AD791BA3313D8C67/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:82:d9:d0:67:68:fc:a3:41:40:41:a8:cb:61:2c:0c:fe:65: be:d6:e5:48:a9:16:7f:e4:c1:18:15:95:cf:01:29:ab:a1:5e: f0:f6:0b:69:93:28:33:29:19:ef:eb:04:94:aa:e7:82:0e:67: f4:50:d0:6e:a9:6d:1a:7c:2d:63:97:e4:6d:2f:71:da:2f:16: 60:9e:fe:78:96:d2:2c:ca:14:21:93:7b:b6:df:e7:26:40:79: f8:99:25:69:a7:a2:93:00:f8:ee:bf:c2:1f:19:1e:02:96:46: e1:e8:d0:46:8b:53:a9:87:79:c1:7a:db:72:27:1c:60:6f:bb: f5:8f:e8:c9:33:7f:af:ab:0f:35:0c:9c:c5:bd:72:a5:50:fb: ad:69:8e:d4:90:28:1b:a9:7c:b0:a7:91:40:30:75:d9:b6:d9: 62:92:7a:ef:b7:71:be:96:6f:e0:7d:63:3c:3d:54:74:88:94: ea:a7:c7:ea:7e:4a:1a:60:13:8c:3c:f0:a6:76:f4:ad:44:a7: 5b:15:23:0d:2c:d4:c8:86:b9:16:30:70:40:52:50:73:73:3f: 02:40:b4:1e:68:5d:34:f9:6c:0b:be:f3:41:5a:24:55:71:e6: ef:c3:b5:d7:a9:1e:c1:40:87:06:3e:94:21:24:a5:a8:8b:c3: 2f:87:32:cd -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RjU4NzExMC8GA1UEBRMoQjlGQzVDMTRCMkQyNzUyOUQ1MEU2RTU5M0RBOENCMEFB ODdENjUxMDAeFw0yNjA5MjEwNzU3NDZaFw0yNjA5MjgwNzU3NDZaMBgxFjAUBgNV BAMTDTZhYjBlMzdhLWJkYzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC91NRGjn+z1Ue1ExjbiCWrunSLZeXQbTQn1lmeEgeoaO7DzKIPIIuEklfL723d GqSntjAoCNdLgDm6kME+IQqZd0uiWkTUzFW1ZyXfp3QQU3KzVF1aIPYZgze1BiAH Ms8cao1Q/MjTvBInRrT2xg3AoD6xex3Y3sf4taypI9f4UbZnZ8E0RhyT0VcAq8WG 6Djl7IA49lwBN4O940Y1p3ugNjuA9PKjr7lrdqSikAw4miW70995bpQTkVep3lI5 8b5hx5L3IMRCwCZ1FOr/fx4yPGrfVoAtHmXhE5093pH5opQu39Qfq2ravvKtNE2B jgYBZGsz5pSYqfKvtWi14E5VAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUrfpI5evG zEeiBOMtlOQzEvL92oAwHwYDVR0jBBgwFoAUufxcFLLSdSnVDm5ZPajLCqh9ZRAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFGNTg3L0MxQkExQTIyMTM2 RTExRjFBRDc5MUJBMzMxM0Q4QzY3L3VmeGNGTExTZFNuVkRtNVpQYWpMQ3FoOVpS QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdWZ4Y0ZMTFNkU25WRG01WlBhakxDcWg5WlJBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFG NTg3L0MxQkExQTIyMTM2RTExRjFBRDc5MUJBMzMxM0Q4QzY3L3VmeGNGTExTZFNu VkRtNVpQYWpMQ3FoOVpSQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCFgtnQZ2j8o0FAQajLYSwM/mW+1uVIqRZ/5MEYFZXPASmroV7w9gtpkygzKRnv 6wSUqueCDmf0UNBuqW0afC1jl+RtL3HaLxZgnv54ltIsyhQhk3u23+cmQHn4mSVp p6KTAPjuv8IfGR4Clkbh6NBGi1Oph3nBettyJxxgb7v1j+jJM3+vqw81DJzFvXKl UPutaY7UkCgbqXywp5FAMHXZttliknrvt3G+lm/gfWM8PVR0iJTqp8fqfkoaYBOM PPCmdvStRKdbFSMNLNTIhrkWMHBAUlBzcz8CQLQeaF00+WwLvvNBWiRVcebvw7XX qR7BQIcGPpQhJKWoi8MvhzLN -----END CERTIFICATE-----Generated at Mon Sep 21 13:44:37 2026 by rpki-client