$ rpki-client -vvf rpki.apnic.net/member_repository/A9170C53/DB63C9A2117611EE9C559A3EC4F9AE02/-UBKpSTUNX4MzGnH1A0-ZqLk5t8.mft File: -UBKpSTUNX4MzGnH1A0-ZqLk5t8.mft (raw, json) Hash identifier: mGwYKr7JXoGbbZgGyws6r0d5Gs/oatWawIz05/OA1gc= Subject key identifier: 55:4C:43:92:E3:63:F4:71:5E:C5:4C:B9:3E:18:6D:80:ED:C8:B1:3F Authority key identifier: F9:40:4A:A5:24:D4:35:7E:0C:CC:69:C7:D4:0D:3E:66:A2:E4:E6:DF Certificate issuer: /CN=A9170C53/serialNumber=F9404AA524D4357E0CCC69C7D40D3E66A2E4E6DF Certificate serial: 0249 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-UBKpSTUNX4MzGnH1A0-ZqLk5t8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170C53/DB63C9A2117611EE9C559A3EC4F9AE02/-UBKpSTUNX4MzGnH1A0-ZqLk5t8.mft Manifest number: 0245 Signing time: Wed 29 Jul 2026 03:08:01 +0000 Manifest this update: Wed 29 Jul 2026 03:08:01 +0000 Manifest next update: Wed 05 Aug 2026 03:08:01 +0000 Files and hashes: 1: -UBKpSTUNX4MzGnH1A0-ZqLk5t8.crl (hash: 6MH59vC6M6WvEGYFPJwMLfxUIKDDncOvyPNzoLpakac=) 2: C3BB51160DAC11EFB00E6B16C4F9AE02.roa (hash: +cbg7WTVhCN77TjlGhzVzZ8b4DdK8TdFQRR1HQcoMJ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170C53/DB63C9A2117611EE9C559A3EC4F9AE02/-UBKpSTUNX4MzGnH1A0-ZqLk5t8.crl rsync://rpki.apnic.net/member_repository/A9170C53/DB63C9A2117611EE9C559A3EC4F9AE02/-UBKpSTUNX4MzGnH1A0-ZqLk5t8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-UBKpSTUNX4MzGnH1A0-ZqLk5t8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Aug 2026 03:08:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 585 (0x249) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170C53, serialNumber=F9404AA524D4357E0CCC69C7D40D3E66A2E4E6DF Validity Not Before: Jul 29 03:08:01 2026 GMT Not After : Aug 5 03:08:01 2026 GMT Subject: CN=6a696e91-337c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a5:3b:e4:76:2c:69:41:b7:ff:b0:60:96:69: d3:7e:b3:92:b3:43:09:76:ff:0a:55:4e:e6:39:67: ee:5f:8f:72:f7:cd:7d:09:1e:7c:2f:f0:36:06:96: 87:65:ca:59:46:d3:c7:0a:a6:12:9a:48:6b:43:04: 0e:99:41:a7:b2:b4:cb:51:0a:e3:45:5e:fa:96:f0: cf:c5:77:35:d3:b0:dd:64:64:63:a4:5d:07:c9:11: 56:eb:7f:8f:39:55:41:8b:f6:9d:bd:e7:13:47:e1: ae:3d:bf:b3:c7:b4:c9:af:41:1c:da:2b:8f:92:4a: 0e:be:ed:a8:81:9f:c9:74:ad:64:11:4d:b5:a3:a4: 29:bf:f3:46:b2:38:a2:6a:4c:35:90:41:fb:7b:e2: 42:c9:f3:9a:a5:57:37:ec:1a:53:7d:91:ef:68:32: 8b:4a:9a:43:21:7a:80:70:25:ed:f2:8d:9d:44:7e: 96:4b:08:36:86:72:3b:b7:26:8c:f1:c5:60:fc:e1: d6:4d:db:b9:49:a7:55:5a:d1:8c:d7:dc:1c:c0:f6: c3:23:68:05:03:9e:5e:35:16:93:a6:9d:ca:b0:7c: 36:9c:19:b6:9b:17:c5:9c:eb:80:8a:97:ee:e9:0a: 06:ef:be:c1:4a:49:18:0e:d9:e1:f5:e7:58:ca:45: 0f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:4C:43:92:E3:63:F4:71:5E:C5:4C:B9:3E:18:6D:80:ED:C8:B1:3F X509v3 Authority Key Identifier: keyid:F9:40:4A:A5:24:D4:35:7E:0C:CC:69:C7:D4:0D:3E:66:A2:E4:E6:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170C53/DB63C9A2117611EE9C559A3EC4F9AE02/-UBKpSTUNX4MzGnH1A0-ZqLk5t8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-UBKpSTUNX4MzGnH1A0-ZqLk5t8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170C53/DB63C9A2117611EE9C559A3EC4F9AE02/-UBKpSTUNX4MzGnH1A0-ZqLk5t8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:21:06:33:70:52:dd:8b:0c:c4:85:97:0c:41:bd:1b:72:f1: c3:fb:6e:8a:f2:f1:22:75:03:2c:06:ec:c6:c1:8b:c6:c0:3e: 0f:a2:8a:fc:fc:34:3f:9f:2a:0e:f0:4a:41:09:9a:65:3c:47: 6f:1e:9b:f7:67:d6:24:58:96:33:0c:9c:93:ce:aa:ec:77:e3: e8:81:d1:19:02:db:92:da:8b:14:8e:5c:67:eb:2d:5e:72:56: ed:a3:c6:fe:93:39:32:be:47:29:94:fc:66:53:5f:04:44:3d: 57:29:ac:47:fc:e5:b1:99:72:ee:44:6f:51:9c:4c:b7:ad:07: 8f:77:63:2c:f4:40:28:21:9d:52:06:be:0d:93:82:5b:f9:f8: 07:c0:db:f9:89:cf:08:d1:35:1f:82:a9:af:f0:44:df:ea:76: aa:c0:f2:03:b3:62:ac:37:b7:2c:6d:47:c4:12:86:00:3c:3c: fa:74:08:06:e5:15:d6:78:7a:1d:e1:96:f6:34:fa:22:d7:60: 0b:7f:c9:2c:13:e8:12:ff:db:fd:f6:5b:fd:f1:5a:fb:34:46: 34:39:68:a1:ff:c5:73:b8:8b:f3:9e:2c:60:57:dc:38:46:ed: 5f:7e:58:40:ea:8a:13:4e:cf:12:2e:85:c9:84:3c:8b:6e:0f: b5:59:22:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBDNTMxMTAvBgNVBAUTKEY5NDA0QUE1MjRENDM1N0UwQ0NDNjlDN0Q0MEQzRTY2 QTJFNEU2REYwHhcNMjYwNzI5MDMwODAxWhcNMjYwODA1MDMwODAxWjAYMRYwFAYD VQQDEw02YTY5NmU5MS0zMzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6U75HYsaUG3/7BglmnTfrOSs0MJdv8KVU7mOWfuX49y9819CR58L/A2BpaH ZcpZRtPHCqYSmkhrQwQOmUGnsrTLUQrjRV76lvDPxXc107DdZGRjpF0HyRFW63+P OVVBi/advecTR+GuPb+zx7TJr0Ec2iuPkkoOvu2ogZ/JdK1kEU21o6Qpv/NGsjii akw1kEH7e+JCyfOapVc37BpTfZHvaDKLSppDIXqAcCXt8o2dRH6WSwg2hnI7tyaM 8cVg/OHWTdu5SadVWtGM19wcwPbDI2gFA55eNRaTpp3KsHw2nBm2mxfFnOuAipfu 6QoG777BSkkYDtnh9edYykUPqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFVMQ5Lj Y/RxXsVMuT4YbYDtyLE/MB8GA1UdIwQYMBaAFPlASqUk1DV+DMxpx9QNPmai5Obf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEM1My9EQjYzQzlBMjEx NzYxMUVFOUM1NTlBM0VDNEY5QUUwMi8tVUJLcFNUVU5YNE16R25IMUEwLVpxTGs1 dDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1VQktwU1RVTlg0TXpHbkgxQTAtWnFMazV0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEM1My9EQjYzQzlBMjExNzYxMUVFOUM1NTlBM0VDNEY5QUUwMi8tVUJLcFNUVU5Y NE16R25IMUEwLVpxTGs1dDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXiEGM3BS3YsMxIWXDEG9G3Lxw/tuivLxInUDLAbsxsGLxsA+D6KK/Pw0P58q DvBKQQmaZTxHbx6b92fWJFiWMwyck86q7Hfj6IHRGQLbktqLFI5cZ+stXnJW7aPG /pM5Mr5HKZT8ZlNfBEQ9VymsR/zlsZly7kRvUZxMt60Hj3djLPRAKCGdUga+DZOC W/n4B8Db+YnPCNE1H4Kpr/BE3+p2qsDyA7NirDe3LG1HxBKGADw8+nQIBuUV1nh6 HeGW9jT6ItdgC3/JLBPoEv/b/fZb/fFa+zRGNDloof/Fc7iL854sYFfcOEbtX35Y QOqKE07PEi6FyYQ8i24PtVkiaQ== -----END CERTIFICATE-----Generated at Wed Jul 29 06:46:27 2026 by rpki-client