$ rpki-client -vvvf rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.mft File: uH-tZU7EIXxlANDwaxm-MZ09rfc.mft (raw, json) Hash identifier: nKqGQl4K/NPfmKVjmAJvznyFMDd13qEca1zZFkUONPE= Subject key identifier: 8F:35:14:06:95:20:4E:EB:56:A6:73:E1:5B:5F:59:E6:76:08:57:87 Authority key identifier: B8:7F:AD:65:4E:C4:21:7C:65:00:D0:F0:6B:19:BE:31:9D:3D:AD:F7 Certificate issuer: /CN=A9155725/serialNumber=B87FAD654EC4217C6500D0F06B19BE319D3DADF7 Certificate serial: 0129 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uH-tZU7EIXxlANDwaxm-MZ09rfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.mft Manifest number: 011A Signing time: Sat 19 Sep 2026 06:00:08 +0000 Manifest this update: Sat 19 Sep 2026 06:00:08 +0000 Manifest next update: Sat 26 Sep 2026 06:00:08 +0000 Files and hashes: 1: uH-tZU7EIXxlANDwaxm-MZ09rfc.crl (hash: +MvdBJR9Se+vLDyGg/PXavVDHzKVLKs++0YWe1yKsAM=) 2: 7621BEA0084611F08BEB2E2DC4F9AE02.roa (hash: ekv9lLMJowy0tTt5Vgk8NN5c2QvrR8UHcRzo+mWEFnI=) 3: 753F0588084611F08BEB2E2DC4F9AE02.roa (hash: GvdeGH0sSCGiMmyFpeTDGYKnqtnBqjejK6ik65LVhK4=) 4: 75A4B2D4084611F08BEB2E2DC4F9AE02.roa (hash: YxGLaTIXF5/4zegk0ebGTbG3KkMe3GF8/cFOY/M/JZM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.crl rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uH-tZU7EIXxlANDwaxm-MZ09rfc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 297 (0x129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155725, serialNumber=B87FAD654EC4217C6500D0F06B19BE319D3DADF7 Validity Not Before: Sep 19 06:00:08 2026 GMT Not After : Sep 26 06:00:08 2026 GMT Subject: CN=6aae24e8-9f93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:23:7c:3f:12:31:3b:94:b0:5b:62:ea:0f:08: 15:37:f0:82:10:16:2f:56:54:57:9a:99:e2:e1:be: 9a:95:3e:c9:88:df:4f:80:54:d6:31:08:6f:a4:f9: 51:1d:05:01:f4:d0:52:6c:4d:f7:db:e9:a7:9a:81: 07:c3:54:5f:18:14:e4:48:e8:d4:78:17:d2:d0:ec: 73:b1:a2:33:f1:73:af:f6:52:b7:5c:ea:b6:f3:c7: 89:af:1e:63:d5:dc:e9:de:f1:31:4f:48:75:87:d6: 2b:27:37:8e:fe:dd:bf:72:dc:71:e1:8e:33:c5:8f: 0c:d7:60:12:e2:d3:18:fb:d9:e8:19:3b:f8:e5:74: c2:90:d8:8e:5e:6d:53:ac:5e:93:5c:bf:d3:11:90: f5:75:03:77:de:2d:20:ab:31:d4:2a:b9:f7:ed:ea: 1c:17:47:ae:07:33:95:b2:40:28:a7:7e:47:e0:7e: 07:ce:2b:83:90:4a:64:98:fd:4f:9c:54:a2:5b:b4: 77:29:4f:82:67:a2:9d:62:ca:4d:ff:c8:ed:26:ce: 87:40:02:d2:27:b5:07:7b:b0:9e:99:4a:a6:cb:a7: e2:a8:16:63:5a:f4:86:21:4b:73:49:d8:f5:86:1b: 50:40:85:1d:0f:fc:dd:26:23:34:2a:d4:31:6b:fd: 4b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:35:14:06:95:20:4E:EB:56:A6:73:E1:5B:5F:59:E6:76:08:57:87 X509v3 Authority Key Identifier: keyid:B8:7F:AD:65:4E:C4:21:7C:65:00:D0:F0:6B:19:BE:31:9D:3D:AD:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uH-tZU7EIXxlANDwaxm-MZ09rfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:25:05:47:bc:4b:4b:f9:ce:f7:69:d2:bd:1b:cf:90:07:e2: e0:08:c0:b0:92:76:86:2f:e1:ad:eb:a8:74:0d:05:04:fd:72: d0:75:7c:d2:7e:d1:28:86:db:d9:33:aa:af:11:e9:95:63:6d: 8c:21:02:bf:02:3b:b5:15:cb:f1:e5:c6:5f:64:6a:9e:7d:b8: 44:f6:48:f2:fe:50:96:d3:27:2f:35:45:bb:64:d1:5c:0a:bd: c6:e8:b8:33:e2:f5:b0:17:13:d8:83:30:78:60:35:df:43:b0: 44:a1:f5:68:65:90:f3:85:30:c0:45:10:8e:2a:83:65:99:cd: 35:94:cb:5c:79:ec:85:cb:ca:e8:fd:62:15:8d:e4:eb:a3:79: b0:6e:82:00:21:7c:78:b8:e0:27:aa:51:94:c7:86:5d:9a:c5: 7f:0b:e4:cb:92:98:a4:4c:ae:14:8e:d5:e3:21:8e:39:c0:5e: 88:03:8e:c4:53:6a:27:67:0c:cf:3f:3d:4f:92:ce:88:14:09: 5a:c3:c5:d2:28:07:70:3d:81:f9:51:e2:33:f2:e0:3c:57:cf: c6:74:cd:e2:e3:11:8c:90:e4:c5:e9:ba:6e:bc:c5:08:d9:36: fc:fb:4d:d1:cd:5d:66:00:6c:7e:41:be:75:82:1c:8f:8a:00: a6:88:3f:6a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU3MjUxMTAvBgNVBAUTKEI4N0ZBRDY1NEVDNDIxN0M2NTAwRDBGMDZCMTlCRTMx OUQzREFERjcwHhcNMjYwOTE5MDYwMDA4WhcNMjYwOTI2MDYwMDA4WjAYMRYwFAYD VQQDEw02YWFlMjRlOC05ZjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7iN8PxIxO5SwW2LqDwgVN/CCEBYvVlRXmpni4b6alT7JiN9PgFTWMQhvpPlR HQUB9NBSbE332+mnmoEHw1RfGBTkSOjUeBfS0OxzsaIz8XOv9lK3XOq288eJrx5j 1dzp3vExT0h1h9YrJzeO/t2/ctxx4Y4zxY8M12AS4tMY+9noGTv45XTCkNiOXm1T rF6TXL/TEZD1dQN33i0gqzHUKrn37eocF0euBzOVskAop35H4H4HziuDkEpkmP1P nFSiW7R3KU+CZ6KdYspN/8jtJs6HQALSJ7UHe7CemUqmy6fiqBZjWvSGIUtzSdj1 hhtQQIUdD/zdJiM0KtQxa/1LIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI81FAaV IE7rVqZz4VtfWeZ2CFeHMB8GA1UdIwQYMBaAFLh/rWVOxCF8ZQDQ8GsZvjGdPa33 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTcyNS84MDFCQ0FBNjA4 M0ExMUYwOUZGMUQwNzRDNEY5QUUwMi91SC10WlU3RUlYeGxBTkR3YXhtLU1aMDly ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3VILXRaVTdFSVh4bEFORHdheG0tTVowOXJmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTcyNS84MDFCQ0FBNjA4M0ExMUYwOUZGMUQwNzRDNEY5QUUwMi91SC10WlU3RUlY eGxBTkR3YXhtLU1aMDlyZmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACyUFR7xLS/nO92nSvRvPkAfi4AjAsJJ2hi/hreuodA0FBP1y0HV80n7RKIbb 2TOqrxHplWNtjCECvwI7tRXL8eXGX2Rqnn24RPZI8v5QltMnLzVFu2TRXAq9xui4 M+L1sBcT2IMweGA130OwRKH1aGWQ84UwwEUQjiqDZZnNNZTLXHnshcvK6P1iFY3k 66N5sG6CACF8eLjgJ6pRlMeGXZrFfwvky5KYpEyuFI7V4yGOOcBeiAOOxFNqJ2cM zz89T5LOiBQJWsPF0igHcD2B+VHiM/LgPFfPxnTN4uMRjJDkxem6brzFCNk2/PtN 0c1dZgBsfkG+dYIcj4oApog/ag== -----END CERTIFICATE-----Generated at Sun Sep 20 20:16:35 2026 by rpki-client