$ rpki-client -vvvf rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.mft File: UoaLCQH1W0B4uRpzRRym0iMSyKs.mft (raw, json) Hash identifier: IzrAD79YnLCGAQnqmyUXM20O1sgsjx3JH5551kb7qKc= Subject key identifier: 5B:A9:3F:13:F4:0E:60:A0:3F:99:9E:F8:53:03:33:76:D7:16:94:1B Authority key identifier: 52:86:8B:09:01:F5:5B:40:78:B9:1A:73:45:1C:A6:D2:23:12:C8:AB Certificate issuer: /CN=A913E2B3/serialNumber=52868B0901F55B4078B91A73451CA6D22312C8AB Certificate serial: 0D14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoaLCQH1W0B4uRpzRRym0iMSyKs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.mft Manifest number: 0D02 Signing time: Sat 10 Oct 2026 18:26:58 +0000 Manifest this update: Sat 10 Oct 2026 18:26:58 +0000 Manifest next update: Sat 17 Oct 2026 18:26:58 +0000 Files and hashes: 1: UoaLCQH1W0B4uRpzRRym0iMSyKs.crl (hash: iNQNmIvmLh80jsKTHmJpQrd9jE6Eo1rrBOmPerNlSJk=) 2: 399AB6DA4ED511ED84336740C4F9AE02.roa (hash: 2gHhqtDJfKR0qJzs+P2axW63JoLu4G8a5q6M2TKtmYA=) 3: 3AB1E0D44ED511ED84336740C4F9AE02.roa (hash: 1xwZmu+W4i/TCA6GArfnAsx0Zkop8Nq8b1/wjpzQ/QY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.crl rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoaLCQH1W0B4uRpzRRym0iMSyKs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 18:26:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3348 (0xd14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E2B3, serialNumber=52868B0901F55B4078B91A73451CA6D22312C8AB Validity Not Before: Oct 10 18:26:58 2026 GMT Not After : Oct 17 18:26:58 2026 GMT Subject: CN=6aca8372-efdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5b:69:d0:1f:20:b9:d8:7b:30:8c:8b:3c:a4: 25:33:13:a4:5f:78:a8:04:c3:0d:e9:ab:15:67:b0: 0f:fe:ed:ed:2e:5a:0b:21:a8:f2:aa:e1:15:d5:98: 4f:a2:89:67:0b:14:f6:40:7e:13:a8:f2:7a:cc:7e: 45:de:03:a1:d0:b6:3b:98:65:9a:b3:a0:da:9d:4c: 82:66:b1:3f:08:83:92:de:10:2a:fb:de:f2:7b:18: db:d5:7d:4b:1d:bc:a3:18:85:54:80:f9:45:6f:02: 1b:0c:73:7d:fb:d5:2e:02:57:e2:5a:e5:e9:c9:08: e0:cd:b9:75:3f:b9:7c:8f:8d:a9:f7:05:c1:e6:34: 32:33:fb:a5:81:44:06:ca:4f:a5:98:c5:d6:fd:ae: 50:57:5a:36:78:61:52:d4:fc:5a:74:d6:6e:ba:25: 0f:06:1c:fb:e7:39:b7:ae:c3:99:6b:15:4d:4d:f4: aa:fd:0e:6b:9a:75:7a:dc:9b:67:5d:7c:eb:f0:51: 47:fb:26:aa:ed:44:e8:50:d8:41:78:b7:9b:97:3d: 6f:d6:35:a5:ab:08:ae:3b:63:6b:94:6f:1f:4a:2e: b2:df:63:3f:df:57:40:66:47:7e:b2:a4:be:82:10: d2:a1:fa:8b:5c:37:49:9d:63:cc:5b:17:57:38:54: 9f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:A9:3F:13:F4:0E:60:A0:3F:99:9E:F8:53:03:33:76:D7:16:94:1B X509v3 Authority Key Identifier: keyid:52:86:8B:09:01:F5:5B:40:78:B9:1A:73:45:1C:A6:D2:23:12:C8:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoaLCQH1W0B4uRpzRRym0iMSyKs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:0f:95:ed:93:88:ee:7d:4b:29:3d:c1:dd:3f:cd:e8:52:2c: f8:b8:07:39:e4:99:90:06:1b:46:00:d8:39:9f:62:38:10:a4: 3a:dd:3d:0e:05:a9:8f:c3:b6:ba:be:58:cb:08:0e:a1:2e:e4: 50:94:17:26:c2:4d:25:a0:f1:57:f0:ab:4c:12:55:6a:7a:67: 7f:e4:fb:de:29:f4:9f:a3:f6:be:3f:60:9a:7c:22:a8:f8:fc: 46:4e:21:6a:12:05:3f:76:15:ef:97:21:72:b8:6a:5f:53:76: 33:f7:03:f4:c4:d3:58:03:30:e4:ec:29:69:2f:13:cb:b2:40: 70:8e:26:64:20:e6:80:db:bc:cc:b0:44:c2:42:2f:4c:aa:9d: 67:0b:4e:72:6e:6d:15:80:b1:bf:c1:93:12:b0:bc:b1:3a:c7: 2d:fc:0f:50:26:be:1e:79:18:ac:29:98:2b:8d:10:a4:01:8f: 2f:14:01:8c:5b:8f:3e:4a:0a:e4:3c:11:3b:1d:28:f9:57:70: 2f:76:14:33:66:2b:9f:0d:0a:81:7f:73:75:63:b3:fc:4c:85: 50:9c:35:6f:53:ec:76:51:98:3d:33:78:34:f9:4a:26:41:c8: b3:9c:a0:d2:3b:91:02:c1:11:8d:97:78:60:81:ee:92:0f:99: 8d:1e:70:fd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDRQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UyQjMxMTAvBgNVBAUTKDUyODY4QjA5MDFGNTVCNDA3OEI5MUE3MzQ1MUNBNkQy MjMxMkM4QUIwHhcNMjYxMDEwMTgyNjU4WhcNMjYxMDE3MTgyNjU4WjAYMRYwFAYD VQQDEw02YWNhODM3Mi1lZmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFtp0B8gudh7MIyLPKQlMxOkX3ioBMMN6asVZ7AP/u3tLloLIajyquEV1ZhP oolnCxT2QH4TqPJ6zH5F3gOh0LY7mGWas6DanUyCZrE/CIOS3hAq+97yexjb1X1L HbyjGIVUgPlFbwIbDHN9+9UuAlfiWuXpyQjgzbl1P7l8j42p9wXB5jQyM/ulgUQG yk+lmMXW/a5QV1o2eGFS1PxadNZuuiUPBhz75zm3rsOZaxVNTfSq/Q5rmnV63Jtn XXzr8FFH+yaq7UToUNhBeLeblz1v1jWlqwiuO2NrlG8fSi6y32M/31dAZkd+sqS+ ghDSofqLXDdJnWPMWxdXOFSfFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFupPxP0 DmCgP5me+FMDM3bXFpQbMB8GA1UdIwQYMBaAFFKGiwkB9VtAeLkac0UcptIjEsir MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTJCMy8yMEU2N0REODEy RjQxMUVBODk0MjA0MzBDNEY5QUUwMi9Vb2FMQ1FIMVcwQjR1UnB6UlJ5bTBpTVN5 S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VvYUxDUUgxVzBCNHVScHpSUnltMGlNU3lLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTJCMy8yMEU2N0REODEyRjQxMUVBODk0MjA0MzBDNEY5QUUwMi9Vb2FMQ1FIMVcw QjR1UnB6UlJ5bTBpTVN5S3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqg+V7ZOI7n1LKT3B3T/N6FIs+LgHOeSZkAYbRgDYOZ9iOBCkOt09DgWpj8O2 ur5YywgOoS7kUJQXJsJNJaDxV/CrTBJVanpnf+T73in0n6P2vj9gmnwiqPj8Rk4h ahIFP3YV75chcrhqX1N2M/cD9MTTWAMw5OwpaS8Ty7JAcI4mZCDmgNu8zLBEwkIv TKqdZwtOcm5tFYCxv8GTErC8sTrHLfwPUCa+HnkYrCmYK40QpAGPLxQBjFuPPkoK 5DwROx0o+VdwL3YUM2Yrnw0KgX9zdWOz/EyFUJw1b1PsdlGYPTN4NPlKJkHIs5yg 0juRAsERjZd4YIHukg+ZjR5w/Q== -----END CERTIFICATE-----Generated at Sun Oct 11 23:45:35 2026 by rpki-client