$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft File: uokBTrxJS2f9iz-C6LOO9vbFck0.mft (raw, json) Hash identifier: ew0ugWRDNpKAen5lbQkmxGFXikYoaGQHdKncPc39AZw= Subject key identifier: D0:DB:01:67:D0:CA:1B:AC:A3:13:69:42:76:2D:67:5D:45:6F:FB:32 Authority key identifier: BA:89:01:4E:BC:49:4B:67:FD:8B:3F:82:E8:B3:8E:F6:F6:C5:72:4D Certificate issuer: /CN=A91C4EC7/serialNumber=BA89014EBC494B67FD8B3F82E8B38EF6F6C5724D Certificate serial: 021A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft Manifest number: 020E Signing time: Thu 05 Nov 2026 03:54:36 +0000 Manifest this update: Thu 05 Nov 2026 03:54:36 +0000 Manifest next update: Thu 12 Nov 2026 03:54:36 +0000 Files and hashes: 1: uokBTrxJS2f9iz-C6LOO9vbFck0.crl (hash: sHZSIxGZbCJMO9ATZecHXOVBXlTrKI9j+RSsnD/vDyc=) 2: 7FC61EDC2E1D11EF933E9981C4F9AE02.roa (hash: 8to8ysOqqFD6evQaOy6tyviqmwLWEUIY429pE2R6UEM=) 3: ED352AAEBFE511EEBB3B4D25C4F9AE02.roa (hash: 92db4sEQBXgKR1xndwR6hGmE1/F52FkQLZCxaqtLE4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.crl rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Nov 2026 03:54:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 538 (0x21a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4EC7, serialNumber=BA89014EBC494B67FD8B3F82E8B38EF6F6C5724D Validity Not Before: Nov 5 03:54:36 2026 GMT Not After : Nov 12 03:54:36 2026 GMT Subject: CN=6aebfdfc-ec36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b1:88:17:ed:76:d5:21:49:d6:c2:95:57:fb: f9:49:63:97:d1:5a:7c:8a:26:2b:c9:ea:ff:e8:96: 0f:a4:ee:c9:56:67:b4:dd:56:ca:e9:93:15:d4:81: b5:f1:8a:e8:4e:c3:fc:d6:29:6a:d8:8d:53:c5:06: b9:f0:94:35:83:99:27:20:92:ae:7f:91:a7:ea:b9: 4a:15:7e:a7:a7:e8:3d:d0:80:9e:b4:98:2c:d3:90: 96:16:98:45:4b:8f:69:8b:82:21:19:01:88:8a:d9: 55:eb:1c:63:62:84:5c:ad:1b:1d:a0:84:0d:7f:69: 8a:b0:be:89:6d:46:1b:41:8d:cc:93:2b:e2:24:92: 1b:da:4f:6c:20:5d:66:5f:69:a4:1e:e0:2a:93:86: a7:9b:c5:52:ee:a6:de:af:9d:d0:2c:d4:97:3e:e1: be:60:7a:86:5e:e6:95:de:0e:46:bd:98:98:b7:de: 74:f7:47:fe:4f:74:0f:cb:c3:0d:9f:e9:50:83:92: b8:d7:bb:17:15:b9:3f:5d:21:8e:01:38:16:5e:93: 8c:40:55:d3:01:e2:69:f0:89:15:50:e9:da:e7:fd: 61:cf:cd:1d:0d:bc:14:d7:f2:f4:af:18:d6:dd:1c: a5:a6:56:57:c1:b0:07:5d:b1:49:ae:5d:ee:4e:01: 3b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:DB:01:67:D0:CA:1B:AC:A3:13:69:42:76:2D:67:5D:45:6F:FB:32 X509v3 Authority Key Identifier: keyid:BA:89:01:4E:BC:49:4B:67:FD:8B:3F:82:E8:B3:8E:F6:F6:C5:72:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:48:dc:4f:c7:2f:41:02:bf:78:c2:b1:64:41:57:a5:c2:d5: a4:3e:b2:1b:e7:55:df:6b:2c:4a:b6:68:69:27:fc:a0:ee:1c: 79:52:0d:36:f0:c9:a7:ed:9b:0a:43:71:12:8f:6a:93:f1:fc: f0:7c:c3:5e:bb:36:2a:da:69:8e:7a:d4:31:b8:7c:a5:f5:aa: d0:a2:b4:5b:d8:82:db:d7:97:f1:40:0f:00:a5:ab:02:2e:f7: 08:b3:50:cf:bf:95:8f:8c:4d:8a:74:7a:3f:c2:07:f4:a3:fc: f9:da:63:b4:d0:f0:33:27:43:7e:67:95:6f:4e:9e:e2:9f:a0: c6:5a:6a:57:b5:20:49:a0:14:20:13:8c:85:36:4d:fd:e1:8d: 0a:08:51:0b:6a:d3:fd:8d:01:1a:83:65:75:11:6d:c3:a3:78: f6:67:77:27:1b:78:89:e9:70:5f:c6:dc:b1:37:62:40:a3:04: f0:e0:bc:b8:c9:54:08:99:d2:0a:36:bf:b6:3d:c7:5e:82:7b: dc:18:06:d3:dd:2b:ef:bb:ba:bb:af:6a:57:af:5f:50:c7:45: 44:6e:28:2d:9f:ef:65:e9:8a:f2:f7:6a:ca:75:84:19:77:ac: b0:23:88:28:f4:4e:3b:c6:cf:a3:5b:d4:d1:20:22:e6:e8:d7: 91:1d:2d:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRFQzcxMTAvBgNVBAUTKEJBODkwMTRFQkM0OTRCNjdGRDhCM0Y4MkU4QjM4RUY2 RjZDNTcyNEQwHhcNMjYxMTA1MDM1NDM2WhcNMjYxMTEyMDM1NDM2WjAYMRYwFAYD VQQDEw02YWViZmRmYy1lYzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzbGIF+121SFJ1sKVV/v5SWOX0Vp8iiYryer/6JYPpO7JVme03VbK6ZMV1IG1 8YroTsP81ilq2I1TxQa58JQ1g5knIJKuf5Gn6rlKFX6np+g90ICetJgs05CWFphF S49pi4IhGQGIitlV6xxjYoRcrRsdoIQNf2mKsL6JbUYbQY3MkyviJJIb2k9sIF1m X2mkHuAqk4anm8VS7qber53QLNSXPuG+YHqGXuaV3g5GvZiYt95090f+T3QPy8MN n+lQg5K417sXFbk/XSGOATgWXpOMQFXTAeJp8IkVUOna5/1hz80dDbwU1/L0rxjW 3RylplZXwbAHXbFJrl3uTgE7mwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNDbAWfQ yhusoxNpQnYtZ11Fb/syMB8GA1UdIwQYMBaAFLqJAU68SUtn/Ys/guizjvb2xXJN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEVDNy83NTc1Nzg3MEJG RTUxMUVFQUFDRTQzMTJDNEY5QUUwMi91b2tCVHJ4SlMyZjlpei1DNkxPTzl2YkZj azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Vva0JUcnhKUzJmOWl6LUM2TE9POXZiRmNrMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEVDNy83NTc1Nzg3MEJGRTUxMUVFQUFDRTQzMTJDNEY5QUUwMi91b2tCVHJ4SlMy Zjlpei1DNkxPTzl2YkZjazAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACkjcT8cvQQK/eMKxZEFXpcLVpD6yG+dV32ssSrZoaSf8oO4ceVINNvDJp+2b CkNxEo9qk/H88HzDXrs2KtppjnrUMbh8pfWq0KK0W9iC29eX8UAPAKWrAi73CLNQ z7+Vj4xNinR6P8IH9KP8+dpjtNDwMydDfmeVb06e4p+gxlpqV7UgSaAUIBOMhTZN /eGNCghRC2rT/Y0BGoNldRFtw6N49md3Jxt4ielwX8bcsTdiQKME8OC8uMlUCJnS Cja/tj3HXoJ73BgG090r77u6u69qV69fUMdFRG4oLZ/vZemK8vdqynWEGXessCOI KPROO8bPo1vU0SAi5ujXkR0taQ== -----END CERTIFICATE-----Generated at Thu Nov 5 17:56:12 2026 by rpki-client