$ rpki-client -vvvf rpki.apnic.net/member_repository/A91393AF/3293CD3E995B11F1BE0CE0905811F970/UW3hJq_UWnmZtCRiMNfxCVkuRQQ.mft File: UW3hJq_UWnmZtCRiMNfxCVkuRQQ.mft (raw, json) Hash identifier: Zp0+PPfFLFIS0Yt2x4q7c29xuduBkXBSOx5dvOPrRdg= Subject key identifier: 20:9E:C7:7E:C6:D9:92:9C:82:34:14:0F:8C:1E:5F:E3:FF:C8:67:02 Authority key identifier: 51:6D:E1:26:AF:D4:5A:79:99:B4:24:62:30:D7:F1:09:59:2E:45:04 Certificate issuer: /CN=A91393AF/serialNumber=516DE126AFD45A7999B4246230D7F109592E4504 Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UW3hJq_UWnmZtCRiMNfxCVkuRQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91393AF/3293CD3E995B11F1BE0CE0905811F970/UW3hJq_UWnmZtCRiMNfxCVkuRQQ.mft Manifest number: 17 Signing time: Wed 23 Sep 2026 08:46:03 +0000 Manifest this update: Wed 23 Sep 2026 08:46:03 +0000 Manifest next update: Wed 30 Sep 2026 08:46:03 +0000 Files and hashes: 1: UW3hJq_UWnmZtCRiMNfxCVkuRQQ.crl (hash: PfhjAcYdpvPBuUmxu1gomZbcfhM2hcIYazrUPS7kwqk=) 2: 93C6498C995C11F1995AA0EC5911F970.roa (hash: wmsoCB/db2wKRlA20ZjkWyIKPzPNHwP+rsCvc2YOh9I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91393AF/3293CD3E995B11F1BE0CE0905811F970/UW3hJq_UWnmZtCRiMNfxCVkuRQQ.crl rsync://rpki.apnic.net/member_repository/A91393AF/3293CD3E995B11F1BE0CE0905811F970/UW3hJq_UWnmZtCRiMNfxCVkuRQQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UW3hJq_UWnmZtCRiMNfxCVkuRQQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 08:46:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91393AF, serialNumber=516DE126AFD45A7999B4246230D7F109592E4504 Validity Not Before: Sep 23 08:46:03 2026 GMT Not After : Sep 30 08:46:03 2026 GMT Subject: CN=6ab391cb-e7a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:a4:51:50:44:23:b8:ce:54:87:db:60:fe:f2: ff:41:c1:f3:07:01:23:2b:af:25:14:13:5b:2d:c9: d7:97:24:d7:4f:e3:9d:b2:4d:7e:83:79:17:75:cf: 49:23:a3:27:64:f6:8c:1b:15:e9:7c:91:aa:da:90: 11:2b:d4:ff:5c:b9:ef:95:10:53:3f:38:59:d1:b0: 96:1e:a3:51:36:08:05:12:2f:40:f6:a3:8a:4f:55: e0:33:9c:cc:a6:20:5d:95:e4:26:db:86:cd:ac:03: c3:9b:2e:f7:42:22:4d:18:4c:18:de:92:27:3e:76: b6:bb:4a:d9:07:80:b5:c2:28:87:64:42:1f:f2:3b: aa:95:d0:7d:82:36:28:a7:b4:8e:a4:df:7f:e5:2e: 29:cd:e6:1b:7b:d4:a8:c1:56:4f:db:34:0b:e0:21: cf:cc:d6:c2:d1:3d:56:05:e0:1c:59:cf:d8:85:f4: 1c:77:21:c6:7f:9d:9b:e8:c2:5c:51:af:88:85:29: 46:bf:e8:32:df:25:39:d4:52:9b:8a:7e:2f:d6:8a: 1c:80:3d:fc:47:63:13:40:ac:bc:b3:59:f0:0a:e9: ba:9b:ae:04:18:c8:f5:9f:b6:50:71:55:74:35:21: de:08:85:84:05:76:cd:f8:9e:47:14:0c:71:30:42: f5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:9E:C7:7E:C6:D9:92:9C:82:34:14:0F:8C:1E:5F:E3:FF:C8:67:02 X509v3 Authority Key Identifier: keyid:51:6D:E1:26:AF:D4:5A:79:99:B4:24:62:30:D7:F1:09:59:2E:45:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91393AF/3293CD3E995B11F1BE0CE0905811F970/UW3hJq_UWnmZtCRiMNfxCVkuRQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UW3hJq_UWnmZtCRiMNfxCVkuRQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91393AF/3293CD3E995B11F1BE0CE0905811F970/UW3hJq_UWnmZtCRiMNfxCVkuRQQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:92:bf:7d:eb:d5:8f:ae:a6:2d:d0:8d:58:fe:ca:81:cc:1f: 09:b3:e5:21:2a:c5:ae:d3:dd:fb:11:9e:af:55:58:c2:28:0a: 9d:4f:10:47:c8:d1:3c:99:b2:e9:63:1e:64:cc:26:df:4e:a7: 74:5c:b5:df:10:3b:cb:e0:8e:33:25:77:45:b2:52:5e:73:57: 67:84:e6:9b:6d:94:0b:7d:f2:0b:16:89:78:df:5a:63:89:21: 0a:58:63:e9:e8:c2:63:d0:ba:a8:2a:99:84:4d:59:65:da:61: e2:fe:62:83:a2:61:fe:97:3f:0f:32:36:b3:f2:c1:d1:dd:81: 52:ce:86:68:6d:30:8f:b9:27:2b:28:74:4d:17:9b:7f:f9:57: fa:e3:6a:11:f1:51:90:32:1b:94:78:41:2d:a1:3f:9b:b9:45: 99:f7:dd:ad:bc:59:88:ad:ed:d5:ca:5e:57:9b:81:a5:67:d4: 0e:20:fe:58:0b:2e:db:9d:dc:45:0a:cb:0d:21:8e:de:01:2c: 1c:c9:e2:ea:05:81:30:1a:63:38:a7:8e:83:66:f5:8c:31:ba: 05:5c:66:78:bb:44:8d:47:43:8a:d1:80:3f:66:f0:c1:4e:e7: 66:94:1e:08:cc:6d:35:40:2b:f2:c3:65:bc:50:94:af:1d:ad: 7b:f4:82:68 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz OTNBRjExMC8GA1UEBRMoNTE2REUxMjZBRkQ0NUE3OTk5QjQyNDYyMzBEN0YxMDk1 OTJFNDUwNDAeFw0yNjA5MjMwODQ2MDNaFw0yNjA5MzAwODQ2MDNaMBgxFjAUBgNV BAMTDTZhYjM5MWNiLWU3YTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD1pFFQRCO4zlSH22D+8v9BwfMHASMrryUUE1stydeXJNdP452yTX6DeRd1z0kj oydk9owbFel8karakBEr1P9cue+VEFM/OFnRsJYeo1E2CAUSL0D2o4pPVeAznMym IF2V5Cbbhs2sA8ObLvdCIk0YTBjekic+dra7StkHgLXCKIdkQh/yO6qV0H2CNiin tI6k33/lLinN5ht71KjBVk/bNAvgIc/M1sLRPVYF4BxZz9iF9Bx3IcZ/nZvowlxR r4iFKUa/6DLfJTnUUpuKfi/WihyAPfxHYxNArLyzWfAK6bqbrgQYyPWftlBxVXQ1 Id4IhYQFds34nkcUDHEwQvVNAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUIJ7HfsbZ kpyCNBQPjB5f4//IZwIwHwYDVR0jBBgwFoAUUW3hJq/UWnmZtCRiMNfxCVkuRQQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5M0FGLzMyOTNDRDNFOTk1 QjExRjFCRTBDRTA5MDU4MTFGOTcwL1VXM2hKcV9VV25tWnRDUmlNTmZ4Q1ZrdVJR US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVVczaEpxX1VXbm1adENSaU1OZnhDVmt1UlFRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5 M0FGLzMyOTNDRDNFOTk1QjExRjFCRTBDRTA5MDU4MTFGOTcwL1VXM2hKcV9VV25t WnRDUmlNTmZ4Q1ZrdVJRUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAvkr9969WPrqYt0I1Y/sqBzB8Js+UhKsWu0937EZ6vVVjCKAqdTxBHyNE8mbLp Yx5kzCbfTqd0XLXfEDvL4I4zJXdFslJec1dnhOabbZQLffILFol431pjiSEKWGPp 6MJj0LqoKpmETVll2mHi/mKDomH+lz8PMjaz8sHR3YFSzoZobTCPuScrKHRNF5t/ +Vf642oR8VGQMhuUeEEtoT+buUWZ992tvFmIre3Vyl5Xm4GlZ9QOIP5YCy7bndxF CssNIY7eASwcyeLqBYEwGmM4p46DZvWMMboFXGZ4u0SNR0OK0YA/ZvDBTudmlB4I zG01QCvyw2W8UJSvHa179IJo -----END CERTIFICATE-----Generated at Wed Sep 23 18:29:06 2026 by rpki-client