$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft File: UMP9EvajMVgZtSurzBmPsNv9QTo.mft (raw, json) Hash identifier: C4M22ChiA8XkbFyEWyHnzA6UuhjbFYd82M2rkFv65X4= Subject key identifier: 1A:1B:94:06:24:BD:5C:0D:6E:75:1F:B3:50:85:5E:8D:34:F5:C2:85 Authority key identifier: 50:C3:FD:12:F6:A3:31:58:19:B5:2B:AB:CC:19:8F:B0:DB:FD:41:3A Certificate issuer: /CN=A91CE616/serialNumber=50C3FD12F6A3315819B52BABCC198FB0DBFD413A Certificate serial: 04E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UMP9EvajMVgZtSurzBmPsNv9QTo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft Manifest number: 04D3 Signing time: Thu 24 Sep 2026 23:38:37 +0000 Manifest this update: Thu 24 Sep 2026 23:38:37 +0000 Manifest next update: Thu 01 Oct 2026 23:38:37 +0000 Files and hashes: 1: UMP9EvajMVgZtSurzBmPsNv9QTo.crl (hash: NB8QIdu1yPFReLNq1S3DueGaZnT4c1DVhwrCy2lOqFk=) 2: 296C190484AD11EC9C3F837CC4F9AE02.roa (hash: lbtzXOv7fCZ9ldssOYWEkCJAJ4leYPGz3mQ8urYvDU8=) 3: Z_YG6dhQKTsWfLWtRCzo9lMOd0Y.asa (hash: Pj1CoMftu5JyT/x7Oa6gFZSdV0R5bE6ahqyEKoH3VDw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.crl rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UMP9EvajMVgZtSurzBmPsNv9QTo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 23:38:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1248 (0x4e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE616, serialNumber=50C3FD12F6A3315819B52BABCC198FB0DBFD413A Validity Not Before: Sep 24 23:38:37 2026 GMT Not After : Oct 1 23:38:37 2026 GMT Subject: CN=6ab5b47d-1fbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f4:91:ce:5a:5d:36:fc:85:36:71:8f:e6:c5: 5c:1e:fa:52:9a:15:4d:c9:5c:b6:43:b2:aa:05:1e: e0:b4:bb:a6:f8:96:83:e4:c4:a5:02:8a:b5:10:d0: 1c:54:09:c0:c7:81:16:77:6a:11:27:e5:1c:3f:ed: 4d:09:cc:bb:b8:3e:4b:d8:35:61:36:42:f4:f0:28: 83:b0:f1:17:3d:77:49:37:9c:41:0d:95:a5:da:72: 12:6e:1b:1a:0f:6b:37:34:71:ee:7c:65:63:ce:2a: 7f:70:71:ac:12:df:1b:9c:6d:ed:0b:69:07:c3:39: 33:21:c3:95:b9:88:20:b2:64:06:80:51:18:db:f1: c8:63:65:e8:15:b8:43:d5:95:e1:02:40:af:e6:02: 31:1b:24:78:12:a6:4d:46:46:22:0d:69:28:21:a5: 66:32:ff:bd:9f:09:43:08:17:11:48:8f:87:ef:c1: be:df:75:f6:4c:ff:8d:27:f6:06:32:9c:1a:9f:62: 14:f9:4d:a3:2d:bc:53:a0:03:c4:a8:b3:86:14:c0: 77:73:3d:1f:4f:12:df:ad:33:8e:ec:b0:98:3c:e0: fa:0c:52:91:db:19:10:10:2b:88:de:59:54:0c:7c: ca:ae:be:59:b5:13:e0:de:31:88:a5:32:8d:3f:00: 1a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:1B:94:06:24:BD:5C:0D:6E:75:1F:B3:50:85:5E:8D:34:F5:C2:85 X509v3 Authority Key Identifier: keyid:50:C3:FD:12:F6:A3:31:58:19:B5:2B:AB:CC:19:8F:B0:DB:FD:41:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UMP9EvajMVgZtSurzBmPsNv9QTo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:62:a9:31:8a:98:b3:b6:de:dd:4b:33:ff:6c:75:d1:89:2c: c6:0b:86:9d:b9:7e:1e:65:7b:4a:a8:b6:21:35:8e:b9:4d:48: dd:74:93:c0:47:6f:26:f1:c0:25:ae:02:f3:76:cb:0a:15:53: eb:a2:25:90:04:11:4c:20:bf:0f:0e:66:1d:8d:63:70:ab:8e: 0e:02:a9:db:97:f9:dc:35:68:c1:94:4d:65:00:24:47:4d:97: cc:9c:c2:84:bb:e8:90:ac:c9:c7:0f:40:c7:2e:2d:3a:b6:63: 8b:8e:f5:ea:31:7e:d6:3f:f2:41:71:a2:9d:58:a4:22:e2:da: 54:c0:1b:ed:e6:9f:8f:14:a9:77:6c:00:01:69:e9:87:a8:0e: 3f:57:2f:11:01:02:4d:40:e3:93:1d:79:6f:88:d5:1c:cc:4f: d5:0f:14:b2:66:1b:09:67:93:b9:1d:b2:d7:73:9f:df:49:fa: 31:0b:98:69:3b:cc:9d:fa:94:a0:f2:9b:ff:bb:a4:26:dd:21: 86:d8:f3:16:33:b8:72:75:d1:6c:0b:8f:88:98:25:aa:52:a2: 63:dd:35:b4:2f:4b:68:f3:a0:0e:22:b0:24:11:c0:36:26:45: 78:38:79:f4:15:c3:af:46:3e:0f:30:8f:a6:75:b2:91:ef:f7: 7b:4b:5b:e5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U2MTYxMTAvBgNVBAUTKDUwQzNGRDEyRjZBMzMxNTgxOUI1MkJBQkNDMTk4RkIw REJGRDQxM0EwHhcNMjYwOTI0MjMzODM3WhcNMjYxMDAxMjMzODM3WjAYMRYwFAYD VQQDEw02YWI1YjQ3ZC0xZmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlvSRzlpdNvyFNnGP5sVcHvpSmhVNyVy2Q7KqBR7gtLum+JaD5MSlAoq1ENAc VAnAx4EWd2oRJ+UcP+1NCcy7uD5L2DVhNkL08CiDsPEXPXdJN5xBDZWl2nISbhsa D2s3NHHufGVjzip/cHGsEt8bnG3tC2kHwzkzIcOVuYggsmQGgFEY2/HIY2XoFbhD 1ZXhAkCv5gIxGyR4EqZNRkYiDWkoIaVmMv+9nwlDCBcRSI+H78G+33X2TP+NJ/YG Mpwan2IU+U2jLbxToAPEqLOGFMB3cz0fTxLfrTOO7LCYPOD6DFKR2xkQECuI3llU DHzKrr5ZtRPg3jGIpTKNPwAaAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBoblAYk vVwNbnUfs1CFXo009cKFMB8GA1UdIwQYMBaAFFDD/RL2ozFYGbUrq8wZj7Db/UE6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTYxNi9BN0U0MjkxNjg0 QTgxMUVDQjI1MDA4NzFDNEY5QUUwMi9VTVA5RXZhak1WZ1p0U3VyekJtUHNOdjlR VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VNUDlFdmFqTVZnWnRTdXJ6Qm1Qc052OVFUby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTYxNi9BN0U0MjkxNjg0QTgxMUVDQjI1MDA4NzFDNEY5QUUwMi9VTVA5RXZhak1W Z1p0U3VyekJtUHNOdjlRVG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtGKpMYqYs7be3Usz/2x10YksxguGnbl+HmV7Sqi2ITWOuU1I3XSTwEdvJvHA Ja4C83bLChVT66IlkAQRTCC/Dw5mHY1jcKuODgKp25f53DVowZRNZQAkR02XzJzC hLvokKzJxw9Axy4tOrZji4716jF+1j/yQXGinVikIuLaVMAb7eafjxSpd2wAAWnp h6gOP1cvEQECTUDjkx15b4jVHMxP1Q8UsmYbCWeTuR2y13Of30n6MQuYaTvMnfqU oPKb/7ukJt0hhtjzFjO4cnXRbAuPiJglqlKiY901tC9LaPOgDiKwJBHANiZFeDh5 9BXDr0Y+DzCPpnWyke/3e0tb5Q== -----END CERTIFICATE-----Generated at Sat Sep 26 10:40:35 2026 by rpki-client