$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft File: u-KUkERtaHB2W05h1-ubIsYARjg.mft (raw, json) Hash identifier: Chh+j+07+udSAYaslHDH+HSj0HhcmCw71rBQSEoKpzI= Subject key identifier: 49:12:22:E8:D5:BF:37:C1:B5:F7:46:FE:54:86:4B:60:33:7B:70:D4 Authority key identifier: BB:E2:94:90:44:6D:68:70:76:5B:4E:61:D7:EB:9B:22:C6:00:46:38 Certificate issuer: /CN=A9186D83/serialNumber=BBE29490446D6870765B4E61D7EB9B22C6004638 Certificate serial: 0D7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-KUkERtaHB2W05h1-ubIsYARjg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft Manifest number: 0D5D Signing time: Tue 06 Oct 2026 18:17:03 +0000 Manifest this update: Tue 06 Oct 2026 18:17:03 +0000 Manifest next update: Tue 13 Oct 2026 18:17:03 +0000 Files and hashes: 1: u-KUkERtaHB2W05h1-ubIsYARjg.crl (hash: SvC9sFNxOn16bPX1gZiILnzJicMW2+9UPbcJesAicNI=) 2: r01DfdDgXhMZvRnPp5KqdShuBZg.asa (hash: s5W51FotquIXppsGfUwD9sTtH8cxsKMJLHEJJJs0h08=) 3: 8BA504FCB27911EB978CE10AC4F9AE02.roa (hash: H6dj7xFFUstXgEpSczjVXVqVRfoxR53Jp0gN3RANW6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.crl rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-KUkERtaHB2W05h1-ubIsYARjg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 18:17:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3450 (0xd7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186D83, serialNumber=BBE29490446D6870765B4E61D7EB9B22C6004638 Validity Not Before: Oct 6 18:17:03 2026 GMT Not After : Oct 13 18:17:03 2026 GMT Subject: CN=6ac53b1f-bad5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:63:8d:36:bf:40:39:b2:8b:31:ac:14:20:d5: fa:9d:7a:33:a0:19:d4:ea:84:aa:c2:e1:ca:25:13: ea:3a:84:79:01:15:b6:85:5a:31:6a:17:c7:6a:5e: cb:10:c7:bd:94:9e:4c:33:cb:e7:32:41:9f:77:32: 1b:a3:f4:af:83:5a:b8:c7:a4:99:77:ee:5d:f2:0a: bf:0c:9c:b5:f6:ba:8e:29:ef:74:71:3b:59:b7:09: 32:37:c5:7f:c7:03:ef:dd:f8:c0:70:73:d3:e3:9d: ef:2f:f1:92:3d:2f:55:84:3f:68:60:e8:81:ca:8f: 9e:0a:0c:f4:92:55:40:d6:a7:78:fb:a6:32:f4:cc: 02:e4:b8:f1:29:4f:1e:f2:e6:ef:21:78:47:29:89: e5:f8:90:2a:5f:57:e0:d6:b8:36:ca:9e:16:85:63: 12:f3:65:e1:28:36:01:0f:e1:94:b0:39:bf:48:0d: 20:3d:5b:66:2f:85:f8:45:04:ea:b5:8f:13:8a:45: e9:5a:39:28:74:5a:78:ee:54:13:46:a5:0d:ba:62: f6:d1:e6:4e:7d:be:9e:c0:9b:be:68:42:5c:a1:40: 09:21:fd:ca:a1:1c:2d:d9:a8:cd:bf:64:ec:d9:91: fd:c0:1d:6a:8b:3d:ab:62:93:13:fd:8a:4a:50:b1: 81:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:12:22:E8:D5:BF:37:C1:B5:F7:46:FE:54:86:4B:60:33:7B:70:D4 X509v3 Authority Key Identifier: keyid:BB:E2:94:90:44:6D:68:70:76:5B:4E:61:D7:EB:9B:22:C6:00:46:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-KUkERtaHB2W05h1-ubIsYARjg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:22:b4:fb:f3:7a:c6:d2:c7:4e:9e:66:a7:a1:e6:69:65:1e: 4d:43:1e:b1:9d:9b:1b:a1:78:86:7e:57:b2:c5:06:8a:d8:78: 25:84:d7:a9:da:4f:62:20:dc:fb:9b:b8:bb:40:26:5e:18:1d: 0c:3f:78:9d:7c:9e:1f:34:bb:29:e3:9f:6e:0c:96:52:cc:c2: dd:bd:b8:ab:6b:8a:6a:81:9c:bc:e6:89:75:ff:96:80:ef:2c: a7:2f:21:12:d6:32:33:a9:e5:f5:5c:80:b2:fe:0c:0f:ec:05: a5:dc:94:2b:52:8c:ef:eb:3d:11:b1:bf:84:09:7d:f7:05:9b: 53:bb:ff:37:56:98:9a:50:c9:02:75:52:8d:a2:e5:1b:f2:3f: 5f:81:3b:aa:fe:fb:ba:6d:50:fa:03:55:59:05:12:e9:f1:3b: 38:e0:15:37:07:56:81:31:e9:1a:2d:81:7b:9b:b4:99:cf:5d: fd:27:0c:40:5d:f2:c8:f5:de:ef:0a:64:5b:4a:a6:d4:86:fc: 79:b3:d7:de:1a:45:73:2d:a6:d1:ab:7c:73:20:60:5e:7e:13: b8:6f:5b:64:09:0c:5f:2e:fc:ed:51:3d:4f:18:2c:44:e2:a2: da:83:4c:98:11:8d:19:1a:98:5d:0e:17:15:60:bc:f8:74:6a: fd:60:7d:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZEODMxMTAvBgNVBAUTKEJCRTI5NDkwNDQ2RDY4NzA3NjVCNEU2MUQ3RUI5QjIy QzYwMDQ2MzgwHhcNMjYxMDA2MTgxNzAzWhcNMjYxMDEzMTgxNzAzWjAYMRYwFAYD VQQDEw02YWM1M2IxZi1iYWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvmONNr9AObKLMawUINX6nXozoBnU6oSqwuHKJRPqOoR5ARW2hVoxahfHal7L EMe9lJ5MM8vnMkGfdzIbo/Svg1q4x6SZd+5d8gq/DJy19rqOKe90cTtZtwkyN8V/ xwPv3fjAcHPT453vL/GSPS9VhD9oYOiByo+eCgz0klVA1qd4+6Yy9MwC5LjxKU8e 8ubvIXhHKYnl+JAqX1fg1rg2yp4WhWMS82XhKDYBD+GUsDm/SA0gPVtmL4X4RQTq tY8TikXpWjkodFp47lQTRqUNumL20eZOfb6ewJu+aEJcoUAJIf3KoRwt2ajNv2Ts 2ZH9wB1qiz2rYpMT/YpKULGBgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEkSIujV vzfBtfdG/lSGS2Aze3DUMB8GA1UdIwQYMBaAFLvilJBEbWhwdltOYdfrmyLGAEY4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkQ4My8xNDk3NDdCRTA2 MkExMUVBOEM5QTc0NDRDNEY5QUUwMi91LUtVa0VSdGFIQjJXMDVoMS11YklzWUFS amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UtS1VrRVJ0YUhCMlcwNWgxLXViSXNZQVJqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkQ4My8xNDk3NDdCRTA2MkExMUVBOEM5QTc0NDRDNEY5QUUwMi91LUtVa0VSdGFI QjJXMDVoMS11YklzWUFSamcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuiK0+/N6xtLHTp5mp6HmaWUeTUMesZ2bG6F4hn5XssUGith4JYTXqdpPYiDc +5u4u0AmXhgdDD94nXyeHzS7KeOfbgyWUszC3b24q2uKaoGcvOaJdf+WgO8spy8h EtYyM6nl9VyAsv4MD+wFpdyUK1KM7+s9EbG/hAl99wWbU7v/N1aYmlDJAnVSjaLl G/I/X4E7qv77um1Q+gNVWQUS6fE7OOAVNwdWgTHpGi2Be5u0mc9d/ScMQF3yyPXe 7wpkW0qm1Ib8ebPX3hpFcy2m0at8cyBgXn4TuG9bZAkMXy787VE9TxgsROKi2oNM mBGNGRqYXQ4XFWC8+HRq/WB9Lg== -----END CERTIFICATE-----Generated at Thu Oct 8 10:51:09 2026 by rpki-client