$ rpki-client -vvf rpki.apnic.net/member_repository/A9195B3B/52D1F40C8A2111F1A0CBBFFD6911F970/umbyZbiRG9ItoRaulw1wnTIGQK0.mft File: umbyZbiRG9ItoRaulw1wnTIGQK0.mft (raw, json) Hash identifier: QQLhr1r+H1WXaXEISiOmkd5oC97YxVKtDKIxjcYZS9k= Subject key identifier: 74:FB:C0:D5:AA:9A:58:DC:DE:CB:84:35:D6:38:56:AF:EA:6A:B9:0B Authority key identifier: BA:66:F2:65:B8:91:1B:D2:2D:A1:16:AE:97:0D:70:9D:32:06:40:AD Certificate issuer: /CN=A9195B3B/serialNumber=BA66F265B8911BD22DA116AE970D709D320640AD Certificate serial: 03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umbyZbiRG9ItoRaulw1wnTIGQK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195B3B/52D1F40C8A2111F1A0CBBFFD6911F970/umbyZbiRG9ItoRaulw1wnTIGQK0.mft Manifest number: 02 Signing time: Tue 28 Jul 2026 01:27:12 +0000 Manifest this update: Tue 28 Jul 2026 01:27:11 +0000 Manifest next update: Tue 04 Aug 2026 01:27:11 +0000 Files and hashes: 1: umbyZbiRG9ItoRaulw1wnTIGQK0.crl (hash: lJ+ugnDt4oi9JV9M+UDXEu3+47Oi8cL+hvLsOZ4iuoI=) 2: 724543648A2311F187384F3F6A11F970.roa (hash: D66quyR1bQNbhI57Y/JKPXB9cl9F0VyVuzBoZx7JEzA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195B3B/52D1F40C8A2111F1A0CBBFFD6911F970/umbyZbiRG9ItoRaulw1wnTIGQK0.crl rsync://rpki.apnic.net/member_repository/A9195B3B/52D1F40C8A2111F1A0CBBFFD6911F970/umbyZbiRG9ItoRaulw1wnTIGQK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umbyZbiRG9ItoRaulw1wnTIGQK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 01:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195B3B, serialNumber=BA66F265B8911BD22DA116AE970D709D320640AD Validity Not Before: Jul 28 01:27:11 2026 GMT Not After : Aug 4 01:27:11 2026 GMT Subject: CN=6a68056f-8424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:39:dc:29:66:b0:41:ef:8f:7b:00:7c:d9:17: 0e:00:53:62:27:15:1e:4a:d8:ec:4a:3c:69:d8:f2: 1c:59:66:5c:d9:95:dc:4c:30:da:8e:9c:f3:4f:79: 7a:30:2f:92:29:ba:45:34:b2:8f:44:b0:69:2e:0f: 33:e9:38:a0:e0:24:6c:2d:8d:36:d4:ac:72:52:36: 9f:28:97:f9:54:ce:d8:ae:0b:a3:63:55:97:20:3e: a6:75:94:51:76:d2:96:35:10:31:60:bd:0f:51:d1: 43:19:e5:e2:6a:39:8e:46:b1:4d:67:96:5a:94:27: ee:6a:86:1f:80:11:24:d4:02:d3:10:c3:47:a2:46: 22:5b:7f:92:20:de:f2:9f:41:81:ff:bf:9b:46:7e: 14:a0:a2:67:a6:26:e3:1e:87:66:9e:bd:ec:37:4c: 14:40:1b:2e:51:89:a9:e2:36:b8:e2:c9:96:e6:30: a3:6a:c5:29:c7:23:6e:e5:6d:60:df:b7:17:0b:b5: d8:33:19:5e:67:ae:ed:f0:f9:d2:cd:e2:cd:7f:1d: 1a:0b:5a:30:23:8c:4b:ac:70:ed:ed:fa:ca:8f:8f: b0:5c:0d:e7:38:10:12:67:7c:d3:ba:33:18:eb:2e: b8:d0:11:4e:47:ae:66:9f:ac:ff:9c:e2:6a:df:63: 5c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:FB:C0:D5:AA:9A:58:DC:DE:CB:84:35:D6:38:56:AF:EA:6A:B9:0B X509v3 Authority Key Identifier: keyid:BA:66:F2:65:B8:91:1B:D2:2D:A1:16:AE:97:0D:70:9D:32:06:40:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195B3B/52D1F40C8A2111F1A0CBBFFD6911F970/umbyZbiRG9ItoRaulw1wnTIGQK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umbyZbiRG9ItoRaulw1wnTIGQK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195B3B/52D1F40C8A2111F1A0CBBFFD6911F970/umbyZbiRG9ItoRaulw1wnTIGQK0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:bc:0a:71:30:1a:53:b6:3c:00:a8:5f:57:ca:8d:4a:de:3a: 0b:e6:68:fa:70:a6:6b:40:69:04:c0:d2:48:7e:de:c6:bc:e2: 0e:f0:89:b5:65:f0:47:61:98:65:41:6e:03:9d:62:b7:6b:2c: 19:78:fd:d4:37:ab:53:f5:3e:1d:a3:9b:f2:5b:e4:9d:2e:af: d0:32:e3:4e:62:e3:40:26:c5:31:9b:1d:03:c9:1a:41:89:78: 14:b1:50:b4:e5:c2:cb:3f:41:e6:6b:99:7b:ab:90:aa:04:00: 38:48:34:ee:86:a7:34:cb:c6:a8:57:f2:63:68:4b:a2:37:3d: d8:60:0f:da:1d:06:38:fc:3c:2e:ff:66:f6:3a:05:40:d7:98: 08:4e:04:7f:7b:f0:07:2d:1e:2c:26:15:05:4d:c1:c8:a8:4c: cf:f5:e5:a2:f6:13:98:f9:b4:cd:ce:4a:eb:e7:1c:f5:43:9c: 58:70:37:59:60:8b:ff:a5:0f:58:39:3c:71:7d:ad:d1:b6:41: 3f:71:5a:f2:24:b2:4a:c4:b0:ad:c7:34:34:45:ce:e4:ce:82: 84:86:97:2f:c9:a7:20:9f:d9:ca:b3:6c:c8:49:be:d4:62:45: c3:96:d1:f5:79:37:4f:75:c0:7b:b9:a9:f2:b2:d8:64:de:e4: 3d:4c:48:a8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NUIzQjExMC8GA1UEBRMoQkE2NkYyNjVCODkxMUJEMjJEQTExNkFFOTcwRDcwOUQz MjA2NDBBRDAeFw0yNjA3MjgwMTI3MTFaFw0yNjA4MDQwMTI3MTFaMBgxFjAUBgNV BAMTDTZhNjgwNTZmLTg0MjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1OdwpZrBB7497AHzZFw4AU2InFR5K2OxKPGnY8hxZZlzZldxMMNqOnPNPeXow L5IpukU0so9EsGkuDzPpOKDgJGwtjTbUrHJSNp8ol/lUztiuC6NjVZcgPqZ1lFF2 0pY1EDFgvQ9R0UMZ5eJqOY5GsU1nllqUJ+5qhh+AESTUAtMQw0eiRiJbf5Ig3vKf QYH/v5tGfhSgomemJuMeh2aevew3TBRAGy5RianiNrjiyZbmMKNqxSnHI27lbWDf txcLtdgzGV5nru3w+dLN4s1/HRoLWjAjjEuscO3t+sqPj7BcDec4EBJnfNO6Mxjr LrjQEU5HrmafrP+c4mrfY1wXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUdPvA1aqa WNzey4Q11jhWr+pquQswHwYDVR0jBBgwFoAUumbyZbiRG9ItoRaulw1wnTIGQK0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1QjNCLzUyRDFGNDBDOEEy MTExRjFBMENCQkZGRDY5MTFGOTcwL3VtYnlaYmlSRzlJdG9SYXVsdzF3blRJR1FL MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdW1ieVpiaVJHOUl0b1JhdWx3MXduVElHUUswLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1 QjNCLzUyRDFGNDBDOEEyMTExRjFBMENCQkZGRDY5MTFGOTcwL3VtYnlaYmlSRzlJ dG9SYXVsdzF3blRJR1FLMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAsvApxMBpTtjwAqF9Xyo1K3joL5mj6cKZrQGkEwNJIft7GvOIO8Im1ZfBHYZhl QW4DnWK3aywZeP3UN6tT9T4do5vyW+SdLq/QMuNOYuNAJsUxmx0DyRpBiXgUsVC0 5cLLP0Hma5l7q5CqBAA4SDTuhqc0y8aoV/JjaEuiNz3YYA/aHQY4/Dwu/2b2OgVA 15gITgR/e/AHLR4sJhUFTcHIqEzP9eWi9hOY+bTNzkrr5xz1Q5xYcDdZYIv/pQ9Y OTxxfa3RtkE/cVryJLJKxLCtxzQ0Rc7kzoKEhpcvyacgn9nKs2zISb7UYkXDltH1 eTdPdcB7uanysthk3uQ9TEio -----END CERTIFICATE-----Generated at Tue Jul 28 20:06:47 2026 by rpki-client