$ rpki-client -vvvf rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.mft File: UDJy2j7wq-3pU5x-JDobhoaxYfs.mft (raw, json) Hash identifier: z4wYc+oLWgRZ2uje8On1tZzzAhnHLV/K45zShbfeykQ= Subject key identifier: 4B:69:2C:5F:AA:60:90:46:DF:F2:AB:C6:AA:EC:D3:75:56:DD:0E:EF Authority key identifier: 50:32:72:DA:3E:F0:AB:ED:E9:53:9C:7E:24:3A:1B:86:86:B1:61:FB Certificate issuer: /CN=A9146906/serialNumber=503272DA3EF0ABEDE9539C7E243A1B8686B161FB Certificate serial: 01EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDJy2j7wq-3pU5x-JDobhoaxYfs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.mft Manifest number: 01D7 Signing time: Mon 21 Sep 2026 03:39:00 +0000 Manifest this update: Mon 21 Sep 2026 03:39:00 +0000 Manifest next update: Mon 28 Sep 2026 03:39:00 +0000 Files and hashes: 1: UDJy2j7wq-3pU5x-JDobhoaxYfs.crl (hash: QrqLYx3EUw7AcD7CVvgAn7OgrZWkRAJiRTWVaw/AbcY=) 2: C3A77BE8391F11EFBFAB6D66C4F9AE02.roa (hash: wuFURizk5QLGwFsHMNFlb2bZylsK126zQn7tqbHxnKQ=) 3: C32999EE391F11EFBFAB6D66C4F9AE02.roa (hash: NwgLsmJQFQZ7JnzcAe2b4izRbdQW8izgpQyoJV+sBCM=) 4: DADBB0C033A411EF8E99B625C4F9AE02.roa (hash: CQPM9/Fl6ZbXuauzzpWSYxQSwy70daOMtjNk9KjElnI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.crl rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDJy2j7wq-3pU5x-JDobhoaxYfs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 03:38:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 495 (0x1ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146906, serialNumber=503272DA3EF0ABEDE9539C7E243A1B8686B161FB Validity Not Before: Sep 21 03:39:00 2026 GMT Not After : Sep 28 03:39:00 2026 GMT Subject: CN=6ab0a6d4-81c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ee:8d:7a:e3:b0:f7:ea:50:bf:11:5e:9b:bb: e1:f6:03:20:4d:60:d4:53:52:93:cc:74:3e:96:68: 17:7e:99:98:14:b2:48:80:c2:0f:b2:ef:48:f5:2b: 00:20:be:62:c3:93:e5:ad:f3:34:eb:c1:86:bb:7a: 02:dd:5c:2d:f1:22:62:3b:9b:16:82:91:54:3b:6f: c9:ca:22:d3:0f:84:19:6a:77:9e:f1:f2:af:16:96: a5:18:be:ed:ed:b1:ab:ee:93:ec:e2:87:d7:4b:28: 3c:67:73:fd:1f:3f:b8:3f:00:a5:67:0c:b3:a9:42: b7:ac:6f:63:75:da:22:5e:38:80:c7:fb:92:26:19: ba:f6:ce:3b:3b:5c:cf:44:e0:a5:e9:24:c9:09:d2: 62:db:97:5c:f3:84:63:37:59:3d:96:27:34:52:5d: 7c:7a:18:f0:5f:c0:e4:6c:ae:da:85:52:71:b2:cd: 6f:5a:a5:1d:dc:f2:ac:fb:6c:f8:35:78:ab:21:17: 6b:39:a9:ef:fa:7e:22:e7:4f:dd:e9:35:72:63:d6: b7:7a:86:e5:04:a6:de:53:e3:9d:d9:59:e2:af:ef: e4:3b:bb:90:54:68:b6:43:cc:83:83:62:a3:07:5d: 78:f0:dd:1f:b8:8d:93:27:76:9e:fe:9a:64:39:9c: 3a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:69:2C:5F:AA:60:90:46:DF:F2:AB:C6:AA:EC:D3:75:56:DD:0E:EF X509v3 Authority Key Identifier: keyid:50:32:72:DA:3E:F0:AB:ED:E9:53:9C:7E:24:3A:1B:86:86:B1:61:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDJy2j7wq-3pU5x-JDobhoaxYfs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:cc:0d:cd:d6:01:ff:06:b8:94:e7:5d:a2:46:0a:1a:32:db: 5c:6c:25:af:0f:33:60:e2:51:9e:8e:46:57:50:73:9e:2c:bf: 44:57:1e:36:e0:df:1c:3d:8e:ec:ab:b4:b6:17:07:6a:2b:fc: 4d:2e:48:9e:f2:47:22:9d:92:e9:6e:9d:b6:52:28:9e:fa:19: 4b:23:5d:71:c9:15:34:89:c3:71:48:b3:d3:34:ad:45:00:e3: 87:63:d6:25:82:c0:ad:b1:38:04:07:51:61:18:fa:36:21:da: f1:19:49:5e:b9:5a:e9:43:6e:cc:77:dd:34:11:59:02:f2:be: 89:6c:b8:96:16:2e:f2:e7:6b:c4:8e:be:1b:45:24:36:f1:6d: 64:f6:4b:83:e7:e3:07:7d:0b:a8:27:f3:bd:f6:41:55:a7:b7: d1:73:ca:4c:10:03:ca:98:5a:12:a7:0b:dc:6b:66:24:39:ef: 1d:fd:35:02:dc:79:c3:27:c1:18:20:7d:d1:1e:cf:51:74:60: d6:93:95:ce:00:5c:13:81:21:06:7c:db:62:92:b0:f8:fd:e5: 27:51:31:66:73:62:e8:00:be:04:17:35:c4:94:c8:d0:5c:a0: 01:a9:91:5a:61:0c:ee:26:bc:56:8b:02:07:c2:47:8e:60:98: f1:79:e9:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDY5MDYxMTAvBgNVBAUTKDUwMzI3MkRBM0VGMEFCRURFOTUzOUM3RTI0M0ExQjg2 ODZCMTYxRkIwHhcNMjYwOTIxMDMzOTAwWhcNMjYwOTI4MDMzOTAwWjAYMRYwFAYD VQQDEw02YWIwYTZkNC04MWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAou6NeuOw9+pQvxFem7vh9gMgTWDUU1KTzHQ+lmgXfpmYFLJIgMIPsu9I9SsA IL5iw5PlrfM068GGu3oC3Vwt8SJiO5sWgpFUO2/JyiLTD4QZanee8fKvFpalGL7t 7bGr7pPs4ofXSyg8Z3P9Hz+4PwClZwyzqUK3rG9jddoiXjiAx/uSJhm69s47O1zP ROCl6STJCdJi25dc84RjN1k9lic0Ul18ehjwX8DkbK7ahVJxss1vWqUd3PKs+2z4 NXirIRdrOanv+n4i50/d6TVyY9a3eoblBKbeU+Od2Vnir+/kO7uQVGi2Q8yDg2Kj B1148N0fuI2TJ3ae/ppkOZw6VwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEtpLF+q YJBG3/Krxqrs03VW3Q7vMB8GA1UdIwQYMBaAFFAycto+8Kvt6VOcfiQ6G4aGsWH7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjkwNi8yODNBNjY4RUU3 NzYxMUVFQUFGRjNFNzRDNEY5QUUwMi9VREp5Mmo3d3EtM3BVNXgtSkRvYmhvYXhZ ZnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VESnkyajd3cS0zcFU1eC1KRG9iaG9heFlmcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjkwNi8yODNBNjY4RUU3NzYxMUVFQUFGRjNFNzRDNEY5QUUwMi9VREp5Mmo3d3Et M3BVNXgtSkRvYmhvYXhZZnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOswNzdYB/wa4lOddokYKGjLbXGwlrw8zYOJRno5GV1Bzniy/RFceNuDfHD2O 7Ku0thcHaiv8TS5InvJHIp2S6W6dtlIonvoZSyNdcckVNInDcUiz0zStRQDjh2PW JYLArbE4BAdRYRj6NiHa8RlJXrla6UNuzHfdNBFZAvK+iWy4lhYu8udrxI6+G0Uk NvFtZPZLg+fjB30LqCfzvfZBVae30XPKTBADyphaEqcL3GtmJDnvHf01Atx5wyfB GCB90R7PUXRg1pOVzgBcE4EhBnzbYpKw+P3lJ1ExZnNi6AC+BBc1xJTI0FygAamR WmEM7ia8VosCB8JHjmCY8XnpHg== -----END CERTIFICATE-----Generated at Tue Sep 22 12:39:41 2026 by rpki-client