$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft File: uokBTrxJS2f9iz-C6LOO9vbFck0.mft (raw, json) Hash identifier: pVwoHEP7VaqjN2JL6tEtVIOmprMZOzvJJjNpZGkonlk= Subject key identifier: 9F:B4:E1:EA:90:36:C3:31:47:3E:30:2B:10:BA:A8:DF:D9:4F:38:4E Authority key identifier: BA:89:01:4E:BC:49:4B:67:FD:8B:3F:82:E8:B3:8E:F6:F6:C5:72:4D Certificate issuer: /CN=A91C4EC7/serialNumber=BA89014EBC494B67FD8B3F82E8B38EF6F6C5724D Certificate serial: 0203 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft Manifest number: 01F7 Signing time: Mon 21 Sep 2026 03:22:28 +0000 Manifest this update: Mon 21 Sep 2026 03:22:27 +0000 Manifest next update: Mon 28 Sep 2026 03:22:27 +0000 Files and hashes: 1: uokBTrxJS2f9iz-C6LOO9vbFck0.crl (hash: y6ajSrwHB7uGc2PPpCDleVrZc6kiGb8nyU9RuAgE2ic=) 2: 7FC61EDC2E1D11EF933E9981C4F9AE02.roa (hash: 8to8ysOqqFD6evQaOy6tyviqmwLWEUIY429pE2R6UEM=) 3: ED352AAEBFE511EEBB3B4D25C4F9AE02.roa (hash: 92db4sEQBXgKR1xndwR6hGmE1/F52FkQLZCxaqtLE4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.crl rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 03:22:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 515 (0x203) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4EC7, serialNumber=BA89014EBC494B67FD8B3F82E8B38EF6F6C5724D Validity Not Before: Sep 21 03:22:27 2026 GMT Not After : Sep 28 03:22:27 2026 GMT Subject: CN=6ab0a2f3-8136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:56:ba:ed:4e:fb:55:e6:f8:38:02:50:fa:90: a7:e3:5a:72:0c:04:a0:fd:45:3c:e7:29:3d:65:3d: e2:50:74:4a:4f:de:29:6a:64:57:93:a2:ad:8d:f2: 8f:8c:b2:25:a1:af:6c:5f:b8:e2:d9:07:c1:6e:53: 2b:24:6d:2c:fd:ad:9f:07:c8:ef:56:35:41:27:d2: 7a:d2:00:69:f2:5b:95:91:b6:cc:b2:ce:11:7c:66: cd:1d:10:07:06:87:d9:43:04:29:1d:ed:c5:9e:bd: 14:f9:d3:ff:7c:3e:12:0d:5b:8f:05:cb:67:41:ce: ba:df:03:a5:22:00:a6:2f:02:77:c9:11:2d:4d:6e: 30:7a:6b:81:09:6f:8a:99:ef:af:b8:a0:a5:4e:c2: 21:71:91:09:81:dd:1f:5d:1e:42:ae:a0:a3:98:c4: 2e:3b:59:18:9e:8c:86:75:cb:5d:56:c1:62:a9:96: 2e:fd:9e:37:bd:4e:44:6f:d1:97:db:69:6c:47:f9: d1:04:f6:07:35:26:f8:5c:c7:d6:04:9b:c5:0b:19: 85:4c:b9:2c:65:c8:96:cd:e6:60:67:e6:70:59:1d: d4:dc:6d:60:d0:db:0b:63:ab:dd:81:7a:87:1d:c6: 06:02:ba:af:68:e3:15:61:ea:5c:79:39:83:8f:7d: f9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:B4:E1:EA:90:36:C3:31:47:3E:30:2B:10:BA:A8:DF:D9:4F:38:4E X509v3 Authority Key Identifier: keyid:BA:89:01:4E:BC:49:4B:67:FD:8B:3F:82:E8:B3:8E:F6:F6:C5:72:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:4c:c8:b3:b5:15:56:5c:46:42:c6:21:ae:f5:8c:0a:ad:9e: 3d:3e:3f:8a:a3:4b:2b:82:a8:58:6e:cc:8a:24:5a:ad:ab:86: 49:b9:7b:59:fe:6e:93:98:5f:15:30:d0:00:6e:45:2c:2a:bb: 8e:3f:8f:b6:68:b8:df:f2:69:16:32:1b:86:fb:83:c0:8a:03: 4e:68:c9:ba:45:88:d3:b9:cb:f3:12:05:e3:17:1b:99:52:86: 84:43:58:2c:3d:99:a4:d5:8a:c4:2e:d9:b9:f7:06:a2:a5:54: 2b:2e:9b:d4:07:fe:c8:6c:57:3a:8f:1a:8a:ca:c3:d8:87:4d: 60:52:a7:05:a1:f1:2d:6e:17:11:9b:90:d1:0a:03:02:c5:8d: 77:00:3c:87:16:e9:a4:5c:81:cf:8b:91:66:da:31:6a:c3:90: 8d:77:48:41:44:e0:2c:40:fa:9c:4b:bc:ba:d5:08:72:ef:ca: 1e:0f:32:98:68:51:e5:32:45:10:31:14:43:41:5b:14:e1:e3: d1:2f:cd:fd:d3:5e:50:51:06:66:44:1d:d7:aa:b2:3a:5f:bd: a5:29:da:76:51:44:a1:92:56:5a:00:50:64:e2:40:de:0d:b0: 2a:9e:3f:d7:24:32:d8:24:73:bc:1f:5e:58:e9:2a:46:6e:de: cb:4e:35:40 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRFQzcxMTAvBgNVBAUTKEJBODkwMTRFQkM0OTRCNjdGRDhCM0Y4MkU4QjM4RUY2 RjZDNTcyNEQwHhcNMjYwOTIxMDMyMjI3WhcNMjYwOTI4MDMyMjI3WjAYMRYwFAYD VQQDEw02YWIwYTJmMy04MTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuFa67U77Veb4OAJQ+pCn41pyDASg/UU85yk9ZT3iUHRKT94pamRXk6KtjfKP jLIloa9sX7ji2QfBblMrJG0s/a2fB8jvVjVBJ9J60gBp8luVkbbMss4RfGbNHRAH BofZQwQpHe3Fnr0U+dP/fD4SDVuPBctnQc663wOlIgCmLwJ3yREtTW4wemuBCW+K me+vuKClTsIhcZEJgd0fXR5CrqCjmMQuO1kYnoyGdctdVsFiqZYu/Z43vU5Eb9GX 22lsR/nRBPYHNSb4XMfWBJvFCxmFTLksZciWzeZgZ+ZwWR3U3G1g0NsLY6vdgXqH HcYGArqvaOMVYepceTmDj335mwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ+04eqQ NsMxRz4wKxC6qN/ZTzhOMB8GA1UdIwQYMBaAFLqJAU68SUtn/Ys/guizjvb2xXJN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEVDNy83NTc1Nzg3MEJG RTUxMUVFQUFDRTQzMTJDNEY5QUUwMi91b2tCVHJ4SlMyZjlpei1DNkxPTzl2YkZj azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Vva0JUcnhKUzJmOWl6LUM2TE9POXZiRmNrMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEVDNy83NTc1Nzg3MEJGRTUxMUVFQUFDRTQzMTJDNEY5QUUwMi91b2tCVHJ4SlMy Zjlpei1DNkxPTzl2YkZjazAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG0zIs7UVVlxGQsYhrvWMCq2ePT4/iqNLK4KoWG7MiiRarauGSbl7Wf5uk5hf FTDQAG5FLCq7jj+Ptmi43/JpFjIbhvuDwIoDTmjJukWI07nL8xIF4xcbmVKGhENY LD2ZpNWKxC7ZufcGoqVUKy6b1Af+yGxXOo8aisrD2IdNYFKnBaHxLW4XEZuQ0QoD AsWNdwA8hxbppFyBz4uRZtoxasOQjXdIQUTgLED6nEu8utUIcu/KHg8ymGhR5TJF EDEUQ0FbFOHj0S/N/dNeUFEGZkQd16qyOl+9pSnadlFEoZJWWgBQZOJA3g2wKp4/ 1yQy2CRzvB9eWOkqRm7ey041QA== -----END CERTIFICATE-----Generated at Mon Sep 21 09:47:13 2026 by rpki-client