$ rpki-client -vvvf rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft File: UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft (raw, json) Hash identifier: lmEUeaUCvsP31biDv3Bbx/jCIU1ZBXotoLheIPQkeAE= Subject key identifier: 59:9F:29:76:91:29:DF:D1:5F:07:2C:7D:E4:EF:3B:0B:32:E2:F3:CB Authority key identifier: 50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4 Certificate issuer: /CN=A915DE6C/serialNumber=50AAFC6A3EF75B22B7683CAB63D84BE4291954B4 Certificate serial: 011C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft Manifest number: 010A Signing time: Sat 19 Sep 2026 06:25:29 +0000 Manifest this update: Sat 19 Sep 2026 06:25:29 +0000 Manifest next update: Sat 26 Sep 2026 06:25:29 +0000 Files and hashes: 1: UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl (hash: B/cL7Z73igwOSIEfTbjrMAGEkIZFAKJY/s3NT1AgxKc=) 2: 8732879E95BA11F1B9CA092C4311F970.roa (hash: MEGlRUYhB4SHO0VLh+MIz2x8hOoJV3bR04uKQvrICwE=) 3: F3B165FCB01311F1BDA8A9D86E11F970.roa (hash: qDbDA0EuGbPlyZkNNjbMWvStnqLgRx8pNg3aOuB6nr8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 284 (0x11c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915DE6C, serialNumber=50AAFC6A3EF75B22B7683CAB63D84BE4291954B4 Validity Not Before: Sep 19 06:25:29 2026 GMT Not After : Sep 26 06:25:29 2026 GMT Subject: CN=6aae2ad9-05a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:16:fd:fd:3c:c2:f9:f8:3d:54:1d:71:e4:0d: 2d:0c:8b:fd:92:9a:aa:cc:e1:53:86:a8:6b:9a:a5: 54:f2:05:ef:11:ce:f9:d5:0c:4c:c2:ff:61:e4:fd: 84:ae:fa:b8:30:d3:99:7e:85:7e:ca:4b:0a:d7:d8: d6:34:b0:ea:92:2d:05:5e:f5:46:e5:f3:36:5b:ab: cc:27:bb:0c:a8:3c:8c:e8:1c:6a:fb:84:00:8a:fb: 0a:ad:b2:23:87:d0:24:16:c4:8b:25:27:40:6b:1a: 5b:4a:2d:5c:9a:5f:3b:c9:6a:c7:05:40:fa:04:5e: 61:c1:f0:2e:2b:c8:a3:52:77:f0:c2:3f:b5:ed:91: 3e:cc:3d:48:eb:d2:c4:91:cd:c6:5b:4b:ff:b1:1c: 90:c5:65:48:ad:98:f0:20:76:d6:f1:4e:33:2d:10: 68:4b:ca:8c:b3:cc:82:c6:1e:44:64:54:a1:7b:e5: e3:1f:88:52:16:11:36:e1:dd:8e:c6:15:eb:ef:22: 37:ea:5a:0d:39:85:a3:82:1c:8e:9c:4b:8a:14:15: 36:5e:01:73:f8:c1:3b:f5:b6:27:1e:3d:9e:82:87: 4f:1c:06:49:39:11:93:f0:6b:d3:93:68:b6:69:8b: cb:d1:5b:c1:7b:41:3f:3a:cd:e9:0c:11:45:41:2c: b2:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:9F:29:76:91:29:DF:D1:5F:07:2C:7D:E4:EF:3B:0B:32:E2:F3:CB X509v3 Authority Key Identifier: keyid:50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:e1:83:0e:81:b0:c0:b6:94:34:a1:4a:6a:2d:b6:d7:ed:0e: ab:fc:7c:1b:29:cd:29:24:fe:f8:14:3d:f9:bf:1e:3d:67:55: 00:93:89:6b:b3:b6:c0:47:76:ff:a9:a9:31:e4:04:86:32:17: 4a:b7:5b:3c:53:a8:6e:71:e4:d0:80:16:9a:03:45:e6:df:da: dc:97:ed:db:7d:83:e7:57:c8:72:d1:c4:14:06:70:1a:b1:80: 08:cb:a7:79:e3:00:34:4a:7b:f0:85:3d:ee:99:e0:0b:e9:51: d9:91:c3:78:23:d5:b7:1f:93:5f:cd:ff:35:4e:3b:c7:2d:a3: 13:c3:b3:e1:3e:67:6b:8a:52:67:8f:7d:9a:32:de:88:a2:f2: 0c:df:4f:69:3b:c7:9b:ac:fe:04:3a:4f:10:38:1f:a1:b9:43: e5:6d:df:82:ba:fc:f5:7d:ff:5b:bf:fc:4d:c2:e8:95:7d:31: bf:b6:e7:70:b4:c1:cb:9c:f9:24:18:15:0a:1e:31:e1:28:66: 59:2e:ba:8f:35:50:df:78:f7:4c:c7:eb:3d:d4:fc:55:af:f6: 6f:e9:0d:93:bb:31:c4:1d:ca:3e:c3:fa:79:83:9d:03:1c:b6: bd:b4:64:76:db:dd:9c:7e:50:db:95:6d:24:d7:ad:94:b0:77: 6c:af:d1:42 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NURFNkMxMTAvBgNVBAUTKDUwQUFGQzZBM0VGNzVCMjJCNzY4M0NBQjYzRDg0QkU0 MjkxOTU0QjQwHhcNMjYwOTE5MDYyNTI5WhcNMjYwOTI2MDYyNTI5WjAYMRYwFAYD VQQDEw02YWFlMmFkOS0wNWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwRb9/TzC+fg9VB1x5A0tDIv9kpqqzOFThqhrmqVU8gXvEc751QxMwv9h5P2E rvq4MNOZfoV+yksK19jWNLDqki0FXvVG5fM2W6vMJ7sMqDyM6Bxq+4QAivsKrbIj h9AkFsSLJSdAaxpbSi1cml87yWrHBUD6BF5hwfAuK8ijUnfwwj+17ZE+zD1I69LE kc3GW0v/sRyQxWVIrZjwIHbW8U4zLRBoS8qMs8yCxh5EZFShe+XjH4hSFhE24d2O xhXr7yI36loNOYWjghyOnEuKFBU2XgFz+ME79bYnHj2egodPHAZJORGT8GvTk2i2 aYvL0VvBe0E/Os3pDBFFQSyy3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFmfKXaR Kd/RXwcsfeTvOwsy4vPLMB8GA1UdIwQYMBaAFFCq/Go+91sit2g8q2PYS+QpGVS0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REU2Qy82QkMzNzVCMDQz RDQxMUYwOTBCNDc2NjhDNEY5QUUwMi9VS3I4YWo3M1d5SzNhRHlyWTloTDVDa1pW TFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1VLcjhhajczV3lLM2FEeXJZOWhMNUNrWlZMUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 REU2Qy82QkMzNzVCMDQzRDQxMUYwOTBCNDc2NjhDNEY5QUUwMi9VS3I4YWo3M1d5 SzNhRHlyWTloTDVDa1pWTFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGeGDDoGwwLaUNKFKai221+0Oq/x8GynNKST++BQ9+b8ePWdVAJOJa7O2wEd2 /6mpMeQEhjIXSrdbPFOobnHk0IAWmgNF5t/a3Jft232D51fIctHEFAZwGrGACMun eeMANEp78IU97pngC+lR2ZHDeCPVtx+TX83/NU47xy2jE8Oz4T5na4pSZ499mjLe iKLyDN9PaTvHm6z+BDpPEDgfoblD5W3fgrr89X3/W7/8TcLolX0xv7bncLTBy5z5 JBgVCh4x4ShmWS66jzVQ33j3TMfrPdT8Va/2b+kNk7sxxB3KPsP6eYOdAxy2vbRk dtvdnH5Q25VtJNetlLB3bK/RQg== -----END CERTIFICATE-----Generated at Sun Sep 20 13:11:21 2026 by rpki-client