$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.mft File: uko-NN2arQAtSR0TxciM5c3Jk6o.mft (raw, json) Hash identifier: 2uW5mXATTepDXF/cWPuLznU93U8tmA1wtJ70n5/G8iI= Subject key identifier: A1:35:10:36:4D:D5:3B:6B:34:6B:24:FA:EC:EC:36:AF:3E:F5:DB:31 Authority key identifier: BA:4A:3E:34:DD:9A:AD:00:2D:49:1D:13:C5:C8:8C:E5:CD:C9:93:AA Certificate issuer: /CN=A9142127/serialNumber=BA4A3E34DD9AAD002D491D13C5C88CE5CDC993AA Certificate serial: 0BB8 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uko-NN2arQAtSR0TxciM5c3Jk6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.mft Manifest number: 0BAA Signing time: Sun 20 Sep 2026 19:02:20 +0000 Manifest this update: Sun 20 Sep 2026 19:02:19 +0000 Manifest next update: Sun 27 Sep 2026 19:02:19 +0000 Files and hashes: 1: uko-NN2arQAtSR0TxciM5c3Jk6o.crl (hash: j4gQkAzUAhCLKSxfLuR2BPV655XoLGQvbQJGbf083N0=) 2: 2FCB8FBA56DC11EA8D75187CC4F9AE02.roa (hash: xuUvIJ8eAw9K5qU0uP7UNuu0jZ+MgcXKquXu8ktwO3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.crl rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uko-NN2arQAtSR0TxciM5c3Jk6o.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 19:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3000 (0xbb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142127, serialNumber=BA4A3E34DD9AAD002D491D13C5C88CE5CDC993AA Validity Not Before: Sep 20 19:02:19 2026 GMT Not After : Sep 27 19:02:19 2026 GMT Subject: CN=6ab02dbc-fa95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:06:61:85:d3:6b:50:19:03:39:35:1c:66:a6: 7a:58:95:bc:03:21:c1:50:bb:1f:87:ea:eb:5a:ea: 9f:ee:90:e2:df:90:b5:5a:2b:26:cd:25:a3:1a:ba: 95:dc:02:57:08:90:37:31:63:12:06:ab:72:d9:f6: 90:33:ba:77:43:3f:88:80:22:41:fb:21:47:da:5b: 77:8f:ef:6f:32:d0:70:12:cb:55:a9:b4:7d:31:e2: 86:88:bc:00:8a:31:f4:30:22:48:b6:60:58:33:21: 92:cb:d9:5c:46:a5:a5:3c:ac:07:5b:e1:c7:5d:fc: 64:7e:09:b3:73:63:3b:44:11:1b:5e:b5:89:df:72: c6:77:59:cc:bc:88:90:18:7a:08:a2:20:0f:1a:a7: 03:ae:5f:26:1f:c2:67:1c:ac:5d:59:cb:ff:fe:cf: 62:50:f4:c0:9b:48:ec:4e:0a:e7:24:33:b8:32:75: 28:12:e6:db:1c:2e:cf:32:d0:72:22:3e:c4:d2:8c: 92:73:71:74:1f:2a:a1:f9:0d:c5:99:93:94:e2:ac: f8:5a:5e:42:b7:6e:de:80:fd:3d:82:13:59:f1:f1: cd:9f:b7:f7:59:4d:aa:95:2d:d7:33:9d:d2:73:71: d6:58:82:1d:5c:ee:cd:dd:98:44:6a:0e:48:3f:92: c6:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:35:10:36:4D:D5:3B:6B:34:6B:24:FA:EC:EC:36:AF:3E:F5:DB:31 X509v3 Authority Key Identifier: keyid:BA:4A:3E:34:DD:9A:AD:00:2D:49:1D:13:C5:C8:8C:E5:CD:C9:93:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uko-NN2arQAtSR0TxciM5c3Jk6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:08:dc:be:2a:8e:14:b8:95:ac:ef:04:8c:e1:33:b8:63:06: 9c:1e:25:50:11:ad:9c:b7:78:8f:9c:2b:cd:f0:d6:b1:dd:0c: 01:fb:65:41:d3:a1:f9:84:a7:b2:fa:92:0a:33:56:33:f9:dc: b9:df:2a:e3:f7:34:f7:0a:4b:70:d7:cb:f3:05:0a:ff:c0:80: 1d:40:06:20:82:05:f6:9a:56:da:0e:96:58:03:f7:b9:2c:84: 98:4d:6c:d8:e3:95:25:89:08:71:99:cb:6f:9a:7f:04:14:bd: 03:7c:85:03:d2:38:08:21:3e:eb:64:a1:61:5a:83:93:bf:9f: 75:ce:6d:82:02:9b:80:1b:86:8d:4c:23:ad:0c:bf:56:69:5f: 74:36:28:33:2b:74:70:6c:1d:54:ab:7a:3e:e1:ed:16:9b:06: 92:9a:cf:c4:21:a5:21:d1:8a:87:94:9e:3f:8c:57:cf:b4:df: fc:56:53:b7:c7:80:ff:77:e3:aa:20:0f:d5:b0:44:e8:6a:8b: 84:ce:ff:38:47:18:87:bf:c6:02:12:db:70:bc:64:c2:fb:b4: 40:e8:51:c5:ad:06:b7:27:ec:d9:9e:06:e4:e4:87:25:db:75: ff:5e:21:a5:28:44:e4:fd:00:73:a2:40:d3:37:8f:32:02:25: 81:76:c2:2a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC7gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIxMjcxMTAvBgNVBAUTKEJBNEEzRTM0REQ5QUFEMDAyRDQ5MUQxM0M1Qzg4Q0U1 Q0RDOTkzQUEwHhcNMjYwOTIwMTkwMjE5WhcNMjYwOTI3MTkwMjE5WjAYMRYwFAYD VQQDEw02YWIwMmRiYy1mYTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuAZhhdNrUBkDOTUcZqZ6WJW8AyHBULsfh+rrWuqf7pDi35C1WismzSWjGrqV 3AJXCJA3MWMSBqty2faQM7p3Qz+IgCJB+yFH2lt3j+9vMtBwEstVqbR9MeKGiLwA ijH0MCJItmBYMyGSy9lcRqWlPKwHW+HHXfxkfgmzc2M7RBEbXrWJ33LGd1nMvIiQ GHoIoiAPGqcDrl8mH8JnHKxdWcv//s9iUPTAm0jsTgrnJDO4MnUoEubbHC7PMtBy Ij7E0oySc3F0Hyqh+Q3FmZOU4qz4Wl5Ct27egP09ghNZ8fHNn7f3WU2qlS3XM53S c3HWWIIdXO7N3ZhEag5IP5LGNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKE1EDZN 1TtrNGsk+uzsNq8+9dsxMB8GA1UdIwQYMBaAFLpKPjTdmq0ALUkdE8XIjOXNyZOq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjEyNy8zMzdGQkE0NDU0 NkQxMUVBQkREM0MxMTdDNEY5QUUwMi91a28tTk4yYXJRQXRTUjBUeGNpTTVjM0pr Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3Vrby1OTjJhclFBdFNSMFR4Y2lNNWMzSms2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjEyNy8zMzdGQkE0NDU0NkQxMUVBQkREM0MxMTdDNEY5QUUwMi91a28tTk4yYXJR QXRTUjBUeGNpTTVjM0prNm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtQjcviqOFLiVrO8EjOEzuGMGnB4lUBGtnLd4j5wrzfDWsd0MAftlQdOh+YSn svqSCjNWM/ncud8q4/c09wpLcNfL8wUK/8CAHUAGIIIF9ppW2g6WWAP3uSyEmE1s 2OOVJYkIcZnLb5p/BBS9A3yFA9I4CCE+62ShYVqDk7+fdc5tggKbgBuGjUwjrQy/ VmlfdDYoMyt0cGwdVKt6PuHtFpsGkprPxCGlIdGKh5SeP4xXz7Tf/FZTt8eA/3fj qiAP1bBE6GqLhM7/OEcYh7/GAhLbcLxkwvu0QOhRxa0Gtyfs2Z4G5OSHJdt1/14h pShE5P0Ac6JA0zePMgIlgXbCKg== -----END CERTIFICATE-----Generated at Tue Sep 22 08:33:45 2026 by rpki-client