$ rpki-client -vvf rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.mft File: uMGYUq7H2lGkUL59p9lYc77eNzQ.mft (raw, json) Hash identifier: Uccf+nU1SB4d34SV1wdpuTN7KwKZHH5HrIU2rzv1bt4= Subject key identifier: C5:9E:0D:2E:97:79:88:F2:C6:D4:1E:21:87:4D:A3:3E:4B:A6:E6:9B Authority key identifier: B8:C1:98:52:AE:C7:DA:51:A4:50:BE:7D:A7:D9:58:73:BE:DE:37:34 Certificate issuer: /CN=A917C78E/serialNumber=B8C19852AEC7DA51A450BE7DA7D95873BEDE3734 Certificate serial: 0156 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMGYUq7H2lGkUL59p9lYc77eNzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.mft Manifest number: 0152 Signing time: Mon 27 Jul 2026 07:03:53 +0000 Manifest this update: Mon 27 Jul 2026 07:03:52 +0000 Manifest next update: Mon 03 Aug 2026 07:03:52 +0000 Files and hashes: 1: uMGYUq7H2lGkUL59p9lYc77eNzQ.crl (hash: fv6MuGuaI/K1pu2ZiyysKFqeBycOoQeyPwfNP1e99AA=) 2: 91F29F5E86DD11EFB3D7A929C4F9AE02.roa (hash: NaEScBIeGfqeqtY23FBVtMrm6wm6IYSTw8AJnU7Al0E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.crl rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMGYUq7H2lGkUL59p9lYc77eNzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 07:03:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 342 (0x156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C78E, serialNumber=B8C19852AEC7DA51A450BE7DA7D95873BEDE3734 Validity Not Before: Jul 27 07:03:52 2026 GMT Not After : Aug 3 07:03:52 2026 GMT Subject: CN=6a6702d9-c729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:cb:aa:09:9d:ad:e5:e2:f2:2c:33:69:9b:b0: d0:b1:e8:9b:ef:f0:de:38:7d:04:a3:1b:46:a6:dd: 78:9d:c8:72:e0:73:a6:47:9d:58:19:f0:48:c5:6d: 07:6b:66:0a:23:c0:13:93:8e:77:d5:15:c7:7d:b8: 6b:6e:2e:d0:19:99:dd:cc:2d:46:e5:95:d4:2d:35: 44:d9:ef:ec:42:8c:46:0a:14:36:15:db:bf:10:b0: 64:b4:f9:e4:32:06:d7:ae:6b:16:d3:0d:e0:52:4e: 61:5b:c3:8b:e4:cb:eb:51:ee:98:36:5e:af:8c:ed: af:96:32:5b:7c:fa:af:c3:29:3d:e1:3a:52:23:f2: 95:84:aa:4d:00:42:00:4c:80:fc:5a:e6:1b:06:a2: 15:d2:10:d3:ab:05:7c:0d:9d:80:7c:5d:d9:a4:ab: 27:fa:f7:b6:fa:1d:02:55:6c:a1:b9:c3:f3:8c:79: 52:1a:46:1d:42:3f:93:e3:8f:75:b5:8d:c1:72:7e: 62:6f:cf:05:95:6d:13:e6:15:56:35:6a:61:d2:c2: dd:93:6b:7e:3c:5b:2f:e7:43:10:c1:01:79:fb:c3: 88:0f:f5:4a:a8:85:d6:dc:e2:68:6a:42:f6:22:df: 46:18:99:48:c8:e2:85:56:0a:f3:1c:4e:ed:b9:57: 5e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:9E:0D:2E:97:79:88:F2:C6:D4:1E:21:87:4D:A3:3E:4B:A6:E6:9B X509v3 Authority Key Identifier: keyid:B8:C1:98:52:AE:C7:DA:51:A4:50:BE:7D:A7:D9:58:73:BE:DE:37:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uMGYUq7H2lGkUL59p9lYc77eNzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C78E/A0201B2086DC11EFB9EAD027C4F9AE02/uMGYUq7H2lGkUL59p9lYc77eNzQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:a3:f0:bd:b4:6a:ef:71:dd:6d:a5:8c:7f:1b:2a:a1:3c:dd: 3f:bd:bd:04:dc:06:ba:76:29:16:4e:7b:a9:4d:34:2d:e9:b7: 76:73:a8:a2:cf:36:b8:ac:1a:62:f2:a9:f3:0c:f2:0b:e4:7a: 2c:f3:cc:0b:88:48:1c:60:22:ef:4b:4b:6b:a7:f2:96:85:7a: 4b:65:b4:3d:fc:e5:6a:32:dd:bb:f9:c5:e3:a1:06:50:5f:74: 14:de:ee:89:e2:6e:98:7f:ce:82:4b:d3:4c:45:ff:83:cd:a6: aa:e2:08:c1:ad:1f:89:ab:2f:ac:4a:7b:a0:f4:27:8f:f5:ea: bf:eb:cf:84:fb:a2:75:72:ed:ba:ec:ab:81:49:56:12:6d:83: a1:94:ce:21:55:65:31:14:d3:3c:b8:74:c4:b8:d8:00:49:9b: dd:93:e4:d4:9d:8e:32:b1:9a:65:8a:62:5c:b9:55:cb:72:71: af:e5:d5:3c:d9:f0:db:16:81:8f:84:0d:b3:14:f5:f5:e0:8d: 01:f4:3c:d2:fa:d3:18:15:7a:a6:e4:1c:7e:d4:84:80:7d:1c: ab:c0:64:91:ec:c0:9c:7c:ce:f7:2f:16:2d:ca:21:0e:da:f2: 1b:d0:45:d3:17:1f:8a:ce:e2:6f:4b:63:c4:51:63:39:18:de: 81:98:4f:bb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M3OEUxMTAvBgNVBAUTKEI4QzE5ODUyQUVDN0RBNTFBNDUwQkU3REE3RDk1ODcz QkVERTM3MzQwHhcNMjYwNzI3MDcwMzUyWhcNMjYwODAzMDcwMzUyWjAYMRYwFAYD VQQDEw02YTY3MDJkOS1jNzI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkMuqCZ2t5eLyLDNpm7DQseib7/DeOH0EoxtGpt14nchy4HOmR51YGfBIxW0H a2YKI8ATk4531RXHfbhrbi7QGZndzC1G5ZXULTVE2e/sQoxGChQ2Fdu/ELBktPnk MgbXrmsW0w3gUk5hW8OL5MvrUe6YNl6vjO2vljJbfPqvwyk94TpSI/KVhKpNAEIA TID8WuYbBqIV0hDTqwV8DZ2AfF3ZpKsn+ve2+h0CVWyhucPzjHlSGkYdQj+T4491 tY3Bcn5ib88FlW0T5hVWNWph0sLdk2t+PFsv50MQwQF5+8OID/VKqIXW3OJoakL2 It9GGJlIyOKFVgrzHE7tuVdeWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMWeDS6X eYjyxtQeIYdNoz5LpuabMB8GA1UdIwQYMBaAFLjBmFKux9pRpFC+fafZWHO+3jc0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Qzc4RS9BMDIwMUIyMDg2 REMxMUVGQjlFQUQwMjdDNEY5QUUwMi91TUdZVXE3SDJsR2tVTDU5cDlsWWM3N2VO elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VNR1lVcTdIMmxHa1VMNTlwOWxZYzc3ZU56US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Qzc4RS9BMDIwMUIyMDg2REMxMUVGQjlFQUQwMjdDNEY5QUUwMi91TUdZVXE3SDJs R2tVTDU5cDlsWWM3N2VOelEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHaPwvbRq73HdbaWMfxsqoTzdP729BNwGunYpFk57qU00Lem3dnOoos82uKwa YvKp8wzyC+R6LPPMC4hIHGAi70tLa6fyloV6S2W0PfzlajLdu/nF46EGUF90FN7u ieJumH/OgkvTTEX/g82mquIIwa0fiasvrEp7oPQnj/Xqv+vPhPuidXLtuuyrgUlW Em2DoZTOIVVlMRTTPLh0xLjYAEmb3ZPk1J2OMrGaZYpiXLlVy3Jxr+XVPNnw2xaB j4QNsxT19eCNAfQ80vrTGBV6puQcftSEgH0cq8BkkezAnHzO9y8WLcohDtryG9BF 0xcfis7ib0tjxFFjORjegZhPuw== -----END CERTIFICATE-----Generated at Tue Jul 28 22:29:15 2026 by rpki-client