$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.mft File: UlhBQeXpBP16_D4Noo2QCKGvkhI.mft (raw, json) Hash identifier: S40lurLkOFwo1l9O8fGzEo+S+yXEtXwAOOWVJZeZLYI= Subject key identifier: C0:31:D5:23:C4:D5:9E:99:DC:C3:95:54:AE:73:E1:59:84:9F:D2:B4 Authority key identifier: 52:58:41:41:E5:E9:04:FD:7A:FC:3E:0D:A2:8D:90:08:A1:AF:92:12 Certificate issuer: /CN=A91C2CCD/serialNumber=52584141E5E904FD7AFC3E0DA28D9008A1AF9212 Certificate serial: 0257 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UlhBQeXpBP16_D4Noo2QCKGvkhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.mft Manifest number: 0251 Signing time: Sat 19 Sep 2026 02:24:33 +0000 Manifest this update: Sat 19 Sep 2026 02:24:33 +0000 Manifest next update: Sat 26 Sep 2026 02:24:33 +0000 Files and hashes: 1: UlhBQeXpBP16_D4Noo2QCKGvkhI.crl (hash: N/WiIN91bq26N3awMhqkbAjai/I2W5O2eHWvEsgX6Jk=) 2: 41D133CC2B5911EE85AD762BC4F9AE02.roa (hash: js8xICC+uo4E5pknpNk0KkzoVevnkz6o6MdDYMenHmc=) 3: YQD1sMPSEOIvp6ejZTR_ZqI5gi0.asa (hash: FgNS4rG/VrXvutFh5DEQ0VgrBP013/BwvJ/5sm0ioH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.crl rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UlhBQeXpBP16_D4Noo2QCKGvkhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 599 (0x257) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2CCD, serialNumber=52584141E5E904FD7AFC3E0DA28D9008A1AF9212 Validity Not Before: Sep 19 02:24:33 2026 GMT Not After : Sep 26 02:24:33 2026 GMT Subject: CN=6aadf261-8034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:49:05:b9:e0:5f:14:2b:f0:8e:bb:71:77:46: 51:b9:1e:30:4f:6a:20:c8:b1:7f:8d:bc:68:82:b1: aa:e1:aa:ce:c4:4d:55:ef:6f:4e:55:1f:e8:f2:c1: 5d:64:06:0f:ad:fc:e7:9c:51:67:3c:1f:8d:f8:f0: d2:86:bd:b5:47:ee:32:c2:2c:e7:d3:5b:8b:b7:51: 0b:ad:05:02:9e:14:1f:97:9f:e7:2f:92:ba:ea:de: 88:33:f1:9c:a7:0c:97:a5:1b:22:01:07:28:87:87: f3:34:6b:25:cd:08:48:92:95:73:3b:bc:bd:1f:19: d5:ac:d3:4a:d1:26:24:de:e8:c6:48:5c:e1:95:81: 30:f4:64:41:a1:38:91:9b:6c:bc:01:89:9e:b4:65: 63:4c:5c:ae:41:1a:c8:c9:6d:3a:81:8f:8d:8a:65: 05:57:ed:e2:aa:0f:a1:9b:ce:83:26:03:1d:19:42: 44:4e:ef:01:6c:e3:28:85:93:72:9b:d2:69:4f:9f: 7c:b8:db:55:77:3c:4f:b6:8e:c3:db:b7:f9:09:3a: e7:5b:46:94:1d:02:1a:23:ac:6d:84:28:3a:ad:b8: 80:b3:be:b3:d1:91:9e:ce:03:68:50:cf:28:82:5f: bf:ae:60:79:e2:05:84:bc:bf:63:cb:60:b6:b2:78: 66:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:31:D5:23:C4:D5:9E:99:DC:C3:95:54:AE:73:E1:59:84:9F:D2:B4 X509v3 Authority Key Identifier: keyid:52:58:41:41:E5:E9:04:FD:7A:FC:3E:0D:A2:8D:90:08:A1:AF:92:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UlhBQeXpBP16_D4Noo2QCKGvkhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:a3:56:5b:31:06:b2:79:0f:b6:7d:96:07:15:d5:ba:be:2d: 28:f2:a8:f0:01:d4:02:3a:28:3c:83:68:31:fc:16:fc:dc:1b: c3:0e:fd:2d:65:9c:1a:f8:4b:b4:6d:85:37:4c:63:6f:fb:e1: 3d:69:2d:83:e3:d1:e0:89:7a:2a:a9:e4:85:a6:fa:7c:88:b9: 3d:cd:f0:ea:9f:9a:79:b3:3a:e9:eb:e8:ee:a0:b0:7d:e2:fd: d2:12:f5:8c:12:77:b6:6a:45:ca:cb:1a:74:3b:60:43:76:56: fb:cc:bc:06:d2:8d:54:89:84:ef:0c:f3:20:24:d8:7e:1c:d0: 07:08:ac:b1:cb:c9:10:07:49:38:e1:ff:2e:90:9f:f7:88:fb: 8d:a1:9b:5f:35:1d:e0:a9:98:76:b6:23:c5:ee:d2:f5:8e:ec: fd:9e:dd:2b:49:97:10:8e:6f:45:5c:f1:a4:99:6a:b8:32:73: 40:fb:c1:67:c6:d6:75:8e:b1:c5:50:ed:ba:22:18:82:cd:38: d6:2e:cb:c7:d1:12:b0:57:72:57:7c:cd:c4:4d:77:3c:13:9e: 2a:c8:6c:f5:22:79:10:07:9b:08:dd:eb:e1:45:bf:e1:72:ee: e4:6d:a0:3e:1c:15:7c:43:be:18:1f:b3:ec:d6:a8:a3:13:f7: ba:1b:65:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJDQ0QxMTAvBgNVBAUTKDUyNTg0MTQxRTVFOTA0RkQ3QUZDM0UwREEyOEQ5MDA4 QTFBRjkyMTIwHhcNMjYwOTE5MDIyNDMzWhcNMjYwOTI2MDIyNDMzWjAYMRYwFAYD VQQDEw02YWFkZjI2MS04MDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzUkFueBfFCvwjrtxd0ZRuR4wT2ogyLF/jbxogrGq4arOxE1V729OVR/o8sFd ZAYPrfznnFFnPB+N+PDShr21R+4ywizn01uLt1ELrQUCnhQfl5/nL5K66t6IM/Gc pwyXpRsiAQcoh4fzNGslzQhIkpVzO7y9HxnVrNNK0SYk3ujGSFzhlYEw9GRBoTiR m2y8AYmetGVjTFyuQRrIyW06gY+NimUFV+3iqg+hm86DJgMdGUJETu8BbOMohZNy m9JpT598uNtVdzxPto7D27f5CTrnW0aUHQIaI6xthCg6rbiAs76z0ZGezgNoUM8o gl+/rmB54gWEvL9jy2C2snhmxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMAx1SPE 1Z6Z3MOVVK5z4VmEn9K0MB8GA1UdIwQYMBaAFFJYQUHl6QT9evw+DaKNkAihr5IS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkNDRC9EQzM1MkI1RTJC NTgxMUVFQjdDMkRFMkFDNEY5QUUwMi9VbGhCUWVYcEJQMTZfRDROb28yUUNLR3Zr aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VsaEJRZVhwQlAxNl9ENE5vbzJRQ0tHdmtoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkNDRC9EQzM1MkI1RTJCNTgxMUVFQjdDMkRFMkFDNEY5QUUwMi9VbGhCUWVYcEJQ MTZfRDROb28yUUNLR3ZraEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtKNWWzEGsnkPtn2WBxXVur4tKPKo8AHUAjooPINoMfwW/Nwbww79LWWcGvhL tG2FN0xjb/vhPWktg+PR4Il6Kqnkhab6fIi5Pc3w6p+aebM66evo7qCwfeL90hL1 jBJ3tmpFyssadDtgQ3ZW+8y8BtKNVImE7wzzICTYfhzQBwisscvJEAdJOOH/LpCf 94j7jaGbXzUd4KmYdrYjxe7S9Y7s/Z7dK0mXEI5vRVzxpJlquDJzQPvBZ8bWdY6x xVDtuiIYgs041i7Lx9ESsFdyV3zNxE13PBOeKshs9SJ5EAebCN3r4UW/4XLu5G2g PhwVfEO+GB+z7NaooxP3uhtlVQ== -----END CERTIFICATE-----Generated at Sun Sep 20 11:50:41 2026 by rpki-client