$ rpki-client -vvf rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft File: UZQtJe28pR36Vs4J7TYet6JtvSU.mft (raw, json) Hash identifier: ifaFFvgy9fSNg4vsdzd/tniJ+QvZLZlE1YiVkz2OCZg= Subject key identifier: A4:59:1C:3A:F1:40:2F:31:9C:DB:35:12:65:0D:30:62:51:5C:18:7E Authority key identifier: 51:94:2D:25:ED:BC:A5:1D:FA:56:CE:09:ED:36:1E:B7:A2:6D:BD:25 Certificate issuer: /CN=A912AFA4/serialNumber=51942D25EDBCA51DFA56CE09ED361EB7A26DBD25 Certificate serial: 0A66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft Manifest number: 0A21 Signing time: Sun 26 Jul 2026 20:24:58 +0000 Manifest this update: Sun 26 Jul 2026 20:24:57 +0000 Manifest next update: Sun 02 Aug 2026 20:24:57 +0000 Files and hashes: 1: UZQtJe28pR36Vs4J7TYet6JtvSU.crl (hash: gfg29AtsP50hWNHDRIxQ5TPOEOCLnKWjJ6Y2l7A56Gs=) 2: C37BD92A1EA111F1B2DD47B2123D8C67.roa (hash: ATlrZQLMN1i/u5Bq0wuL1/pAApfhNtO3TRUif4rFqr0=) 3: A837ACBA072311F1857499832B3D8C67.roa (hash: kLIQMU/1+OWEQ00tXB9bahteZuevt4BTHzYh2B2K2I0=) 4: C1D6AD981EA111F1B2DD47B2123D8C67.roa (hash: t7Va3DBJIf7NqIYUpRn9OjFokUb0h7zcGhor8Wmv+E4=) 5: 4729B9CC10B011F19AF5FC353C3D8C67.roa (hash: XieuBOApj93vMX/PSd4DPB5YCJHLqVArIOgws7wb0zA=) 6: A476C8C41EA011F187B67505113D8C67.roa (hash: W8WqvCmfqjbYm/Nsa9FcNN92lO+HROWGL8GeAXxnfuk=) 7: E2891A621EA111F1917EDCD9123D8C67.roa (hash: gEX8Atz/LLQf1n/y8rRUMSuwdmjVhyMahE2Jamzx/nI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.crl rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 20:24:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2662 (0xa66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AFA4, serialNumber=51942D25EDBCA51DFA56CE09ED361EB7A26DBD25 Validity Not Before: Jul 26 20:24:57 2026 GMT Not After : Aug 2 20:24:57 2026 GMT Subject: CN=6a666d1a-d2c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:57:8f:40:de:d8:6f:8e:d8:53:40:f6:27:9a: f7:19:05:a8:b2:f0:28:33:e7:03:17:ad:23:26:71: 92:27:b9:ff:f7:2b:dd:0a:2e:5e:14:64:6d:be:d5: 9e:57:7e:53:0e:8b:31:b3:1e:85:7e:9d:31:2b:9d: a1:60:47:a4:d7:24:d3:47:00:54:05:e0:5f:ab:b0: de:a2:3c:3e:c6:99:9e:2e:61:d3:1f:aa:26:63:56: 7f:00:ec:06:08:8a:78:e3:82:8e:18:68:f7:f1:3d: 3f:be:17:67:ec:b9:9f:3f:be:60:94:f7:fe:96:f8: b9:60:73:85:f0:cf:43:de:f8:a6:a8:80:b2:d7:1a: 8c:a1:73:e3:53:07:a1:45:60:9d:4c:95:00:35:db: 52:8e:08:7b:cd:84:6f:9b:97:69:f7:8a:fb:1c:f8: 7d:7c:e9:ed:fa:d6:d7:e9:11:74:e7:c0:55:8a:8e: 19:25:28:03:16:f6:e1:3e:89:8a:7c:0c:97:e8:f0: 25:82:41:3d:26:38:3d:9f:cd:25:9d:f9:c6:13:aa: 78:87:e7:10:08:ec:e1:c9:3c:ec:66:19:8d:7b:23: 19:40:ac:c2:1e:01:09:b8:b1:66:f0:f6:e6:3f:b6: dc:e2:d4:2a:33:30:0d:c9:41:ce:5e:3b:00:80:f7: 62:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:59:1C:3A:F1:40:2F:31:9C:DB:35:12:65:0D:30:62:51:5C:18:7E X509v3 Authority Key Identifier: keyid:51:94:2D:25:ED:BC:A5:1D:FA:56:CE:09:ED:36:1E:B7:A2:6D:BD:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:b4:58:c7:71:69:e7:15:99:0c:1b:ec:4d:23:8d:bf:48:96: 89:9a:00:91:fe:58:e6:10:3e:82:1f:01:e4:c2:9d:ae:98:05: cd:bc:d9:41:a1:d9:5a:37:65:fc:2b:7d:ff:48:73:c9:08:97: ae:04:1e:89:61:98:75:da:a0:2b:4c:4f:fa:45:ec:6f:ef:48: 6e:df:dd:bb:31:cb:c0:d4:3a:7f:b3:58:33:b9:49:09:81:ee: 31:53:3b:03:93:99:41:80:0d:31:e1:e9:67:82:3a:36:af:d2: d8:2a:a6:4a:d3:0c:67:95:c5:1b:3b:aa:12:44:ae:4b:8b:45: a6:db:e1:4d:bd:52:ad:31:a1:f2:dd:d4:93:e1:7b:8a:6c:10: cd:95:67:17:e8:d6:2c:32:01:d0:3e:cb:e3:61:3c:29:16:a2: e3:d1:03:66:c8:dd:b1:e2:0a:19:bb:52:2f:43:7c:f7:15:88: 4c:25:ac:d6:42:8e:c3:97:b3:b2:15:56:88:a9:da:43:31:4e: b4:14:9e:1d:fa:25:d5:ed:96:d3:c5:31:a5:9a:72:b9:ff:50: 84:75:99:31:ad:05:30:b3:e0:98:aa:ae:5f:e3:87:41:6e:be: fc:d2:fa:49:1c:73:c6:8a:1e:6e:57:eb:ad:10:8a:3b:11:53: c8:d7:2a:df -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCmYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFGQTQxMTAvBgNVBAUTKDUxOTQyRDI1RURCQ0E1MURGQTU2Q0UwOUVEMzYxRUI3 QTI2REJEMjUwHhcNMjYwNzI2MjAyNDU3WhcNMjYwODAyMjAyNDU3WjAYMRYwFAYD VQQDEw02YTY2NmQxYS1kMmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz1ePQN7Yb47YU0D2J5r3GQWosvAoM+cDF60jJnGSJ7n/9yvdCi5eFGRtvtWe V35TDosxsx6Ffp0xK52hYEek1yTTRwBUBeBfq7Deojw+xpmeLmHTH6omY1Z/AOwG CIp444KOGGj38T0/vhdn7LmfP75glPf+lvi5YHOF8M9D3vimqICy1xqMoXPjUweh RWCdTJUANdtSjgh7zYRvm5dp94r7HPh9fOnt+tbX6RF058BVio4ZJSgDFvbhPomK fAyX6PAlgkE9Jjg9n80lnfnGE6p4h+cQCOzhyTzsZhmNeyMZQKzCHgEJuLFm8Pbm P7bc4tQqMzANyUHOXjsAgPdiYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKRZHDrx QC8xnNs1EmUNMGJRXBh+MB8GA1UdIwQYMBaAFFGULSXtvKUd+lbOCe02Hreibb0l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUZBNC9CNjc4NjJGQUFC OTUxMUVBQjI1NTlDNUJDNEY5QUUwMi9VWlF0SmUyOHBSMzZWczRKN1RZZXQ2SnR2 U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VaUXRKZTI4cFIzNlZzNEo3VFlldDZKdHZTVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUZBNC9CNjc4NjJGQUFCOTUxMUVBQjI1NTlDNUJDNEY5QUUwMi9VWlF0SmUyOHBS MzZWczRKN1RZZXQ2SnR2U1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA7RYx3Fp5xWZDBvsTSONv0iWiZoAkf5Y5hA+gh8B5MKdrpgFzbzZQaHZWjdl /Ct9/0hzyQiXrgQeiWGYddqgK0xP+kXsb+9Ibt/duzHLwNQ6f7NYM7lJCYHuMVM7 A5OZQYANMeHpZ4I6Nq/S2CqmStMMZ5XFGzuqEkSuS4tFptvhTb1SrTGh8t3Uk+F7 imwQzZVnF+jWLDIB0D7L42E8KRai49EDZsjdseIKGbtSL0N89xWITCWs1kKOw5ez shVWiKnaQzFOtBSeHfol1e2W08UxpZpyuf9QhHWZMa0FMLPgmKquX+OHQW6+/NL6 SRxzxooeblfrrRCKOxFTyNcq3w== -----END CERTIFICATE-----Generated at Tue Jul 28 20:23:58 2026 by rpki-client