$ rpki-client -vvf rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.mft File: uko-NN2arQAtSR0TxciM5c3Jk6o.mft (raw, json) Hash identifier: B2KgKdMiD6GFuFdR0LDz/f//A06j5UGzkvNmJKUGYkA= Subject key identifier: 37:3C:37:5B:6E:3D:4E:17:45:BC:6D:15:A7:9E:DF:C8:9A:47:2C:7C Authority key identifier: BA:4A:3E:34:DD:9A:AD:00:2D:49:1D:13:C5:C8:8C:E5:CD:C9:93:AA Certificate issuer: /CN=A9142127/serialNumber=BA4A3E34DD9AAD002D491D13C5C88CE5CDC993AA Certificate serial: 0B9B Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uko-NN2arQAtSR0TxciM5c3Jk6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.mft Manifest number: 0B8D Signing time: Sun 26 Jul 2026 19:33:42 +0000 Manifest this update: Sun 26 Jul 2026 19:33:42 +0000 Manifest next update: Sun 02 Aug 2026 19:33:42 +0000 Files and hashes: 1: uko-NN2arQAtSR0TxciM5c3Jk6o.crl (hash: uHr8pvixJiQPTERssKdHfM1qwNAMF3/VN6P1UXe4mIk=) 2: 2FCB8FBA56DC11EA8D75187CC4F9AE02.roa (hash: xuUvIJ8eAw9K5qU0uP7UNuu0jZ+MgcXKquXu8ktwO3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.crl rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uko-NN2arQAtSR0TxciM5c3Jk6o.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 19:33:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2971 (0xb9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142127, serialNumber=BA4A3E34DD9AAD002D491D13C5C88CE5CDC993AA Validity Not Before: Jul 26 19:33:42 2026 GMT Not After : Aug 2 19:33:42 2026 GMT Subject: CN=6a666116-833d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c9:af:e5:c8:08:d5:52:aa:5a:c9:eb:65:9a: 77:7d:98:73:8d:37:82:d6:38:3a:01:79:ce:3b:30: ca:55:d0:c9:09:64:bd:b2:85:a7:e6:4b:84:42:2f: 20:31:bf:f7:35:e9:41:71:75:44:9c:58:13:31:5d: 02:1d:a1:2d:d8:30:6a:e9:ae:0d:bd:04:66:e1:d3: c7:84:6d:43:26:b4:75:cb:15:fb:bc:ea:77:e5:7e: d9:0d:e2:e7:c9:69:bc:bc:0b:d4:c8:d9:06:e2:61: e0:b7:53:90:d6:f3:51:4d:53:83:bb:86:cd:9a:29: fa:08:5c:7c:b6:d7:14:8c:93:75:60:e5:04:a3:d2: 77:91:46:a6:d6:0e:50:f8:31:6b:ab:e0:b5:c7:5c: 15:72:a7:62:50:78:72:98:45:11:ca:9d:58:6f:08: b5:e6:1d:b0:b8:3c:4e:cc:2c:b3:45:e6:bd:36:e8: 42:05:b9:a2:b6:00:b6:a7:8f:83:e4:e1:e8:55:82: fb:84:a8:ec:e4:b9:d2:a1:b0:f3:b8:28:a2:bd:f7: d6:26:f5:48:dd:57:c1:63:0f:81:4f:2d:48:f1:98: fe:fc:3d:f2:d9:7f:fc:02:96:fb:8b:85:23:02:65: 78:b8:0e:d5:21:25:fd:9a:7a:42:0a:2c:00:f8:d2: aa:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:3C:37:5B:6E:3D:4E:17:45:BC:6D:15:A7:9E:DF:C8:9A:47:2C:7C X509v3 Authority Key Identifier: keyid:BA:4A:3E:34:DD:9A:AD:00:2D:49:1D:13:C5:C8:8C:E5:CD:C9:93:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uko-NN2arQAtSR0TxciM5c3Jk6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142127/337FBA44546D11EABDD3C117C4F9AE02/uko-NN2arQAtSR0TxciM5c3Jk6o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:65:b8:c3:d5:1f:fe:aa:9c:39:ba:a3:f4:08:3d:9c:b5:17: 61:b4:79:9a:3e:89:1b:4e:7c:3e:ed:1f:34:03:95:7c:75:c4: 6c:38:32:7a:b0:e3:22:ff:ce:cd:cf:15:f5:a5:ad:82:6c:7f: 75:00:62:3b:7d:d0:85:2b:50:6e:13:1d:7e:6b:41:29:71:54: cb:64:8b:1c:5f:f2:01:1d:fd:6f:20:b4:f4:b9:8d:e9:1f:87: 07:7a:13:9a:27:54:37:16:73:50:c7:d7:0c:8b:79:b1:fb:4e: 08:bf:31:e5:25:98:9d:71:e9:97:dc:e1:24:8b:cb:b3:e0:c1: 41:ae:de:08:3d:54:94:4c:76:84:1d:02:61:a9:51:65:8f:7c: e4:5c:86:a2:10:05:6d:ee:79:04:e7:f9:2f:c1:0d:7a:d5:11: f8:54:20:cc:18:75:1b:c2:40:70:ee:5d:2a:d4:a1:fe:67:af: 78:3f:84:02:43:05:08:33:aa:1a:18:df:d1:a9:6d:eb:bc:bc: c6:4b:a3:93:79:96:98:e1:42:4d:ce:78:e8:67:36:d7:5a:6a: c3:89:1f:95:3b:d1:82:46:4d:05:f0:75:cd:c7:a3:c0:51:cb: fd:32:2f:02:bb:a9:48:45:01:38:a9:98:d3:ac:34:64:0e:c5: 52:28:c6:5d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC5swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIxMjcxMTAvBgNVBAUTKEJBNEEzRTM0REQ5QUFEMDAyRDQ5MUQxM0M1Qzg4Q0U1 Q0RDOTkzQUEwHhcNMjYwNzI2MTkzMzQyWhcNMjYwODAyMTkzMzQyWjAYMRYwFAYD VQQDEw02YTY2NjExNi04MzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmMmv5cgI1VKqWsnrZZp3fZhzjTeC1jg6AXnOOzDKVdDJCWS9soWn5kuEQi8g Mb/3NelBcXVEnFgTMV0CHaEt2DBq6a4NvQRm4dPHhG1DJrR1yxX7vOp35X7ZDeLn yWm8vAvUyNkG4mHgt1OQ1vNRTVODu4bNmin6CFx8ttcUjJN1YOUEo9J3kUam1g5Q +DFrq+C1x1wVcqdiUHhymEURyp1Ybwi15h2wuDxOzCyzRea9NuhCBbmitgC2p4+D 5OHoVYL7hKjs5LnSobDzuCiivffWJvVI3VfBYw+BTy1I8Zj+/D3y2X/8Apb7i4Uj AmV4uA7VISX9mnpCCiwA+NKqsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDc8N1tu PU4XRbxtFaee38iaRyx8MB8GA1UdIwQYMBaAFLpKPjTdmq0ALUkdE8XIjOXNyZOq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjEyNy8zMzdGQkE0NDU0 NkQxMUVBQkREM0MxMTdDNEY5QUUwMi91a28tTk4yYXJRQXRTUjBUeGNpTTVjM0pr Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3Vrby1OTjJhclFBdFNSMFR4Y2lNNWMzSms2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjEyNy8zMzdGQkE0NDU0NkQxMUVBQkREM0MxMTdDNEY5QUUwMi91a28tTk4yYXJR QXRTUjBUeGNpTTVjM0prNm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAN2W4w9Uf/qqcObqj9Ag9nLUXYbR5mj6JG058Pu0fNAOVfHXEbDgyerDjIv/O zc8V9aWtgmx/dQBiO33QhStQbhMdfmtBKXFUy2SLHF/yAR39byC09LmN6R+HB3oT midUNxZzUMfXDIt5sftOCL8x5SWYnXHpl9zhJIvLs+DBQa7eCD1UlEx2hB0CYalR ZY985FyGohAFbe55BOf5L8ENetUR+FQgzBh1G8JAcO5dKtSh/meveD+EAkMFCDOq Ghjf0alt67y8xkujk3mWmOFCTc546Gc211pqw4kflTvRgkZNBfB1zcejwFHL/TIv ArupSEUBOKmY06w0ZA7FUijGXQ== -----END CERTIFICATE-----Generated at Tue Jul 28 18:25:38 2026 by rpki-client