$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFB8E/8D9CBB16565B11F1AF6FA27195833773/UhKLBG453W6FQ1iOUUO1rSX07TM.mft File: UhKLBG453W6FQ1iOUUO1rSX07TM.mft (raw, json) Hash identifier: Zp0VXzQocxDQDowSNmpIQ1UMd62ZmYWpI/HUGQfLKJA= Subject key identifier: 58:26:98:DB:66:5E:DF:4A:FD:86:FF:19:C8:F3:81:8B:17:26:2E:3E Authority key identifier: 52:12:8B:04:6E:39:DD:6E:85:43:58:8E:51:43:B5:AD:25:F4:ED:33 Certificate issuer: /CN=A91CFB8E/serialNumber=52128B046E39DD6E8543588E5143B5AD25F4ED33 Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhKLBG453W6FQ1iOUUO1rSX07TM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFB8E/8D9CBB16565B11F1AF6FA27195833773/UhKLBG453W6FQ1iOUUO1rSX07TM.mft Manifest number: 22 Signing time: Mon 27 Jul 2026 11:15:02 +0000 Manifest this update: Mon 27 Jul 2026 11:15:01 +0000 Manifest next update: Mon 03 Aug 2026 11:15:01 +0000 Files and hashes: 1: UhKLBG453W6FQ1iOUUO1rSX07TM.crl (hash: a6li3v2kO8ZCRt2qTM4KLLy2vYcQkNCnLMYDLc7Srb0=) 2: 977C1752565C11F1BEA0792596833773.roa (hash: ox5NKAgpprpPgfswxRMKWjrpU/zZh8UrhKGZzb/wm5I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFB8E/8D9CBB16565B11F1AF6FA27195833773/UhKLBG453W6FQ1iOUUO1rSX07TM.crl rsync://rpki.apnic.net/member_repository/A91CFB8E/8D9CBB16565B11F1AF6FA27195833773/UhKLBG453W6FQ1iOUUO1rSX07TM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhKLBG453W6FQ1iOUUO1rSX07TM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 11:15:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFB8E, serialNumber=52128B046E39DD6E8543588E5143B5AD25F4ED33 Validity Not Before: Jul 27 11:15:01 2026 GMT Not After : Aug 3 11:15:01 2026 GMT Subject: CN=6a673db6-baed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:eb:43:05:99:af:4e:1b:6e:25:a3:70:69:eb: 7a:50:90:08:9c:c5:b0:34:be:40:e1:d8:e1:50:6b: 76:f7:c3:15:d5:b8:6b:ba:25:be:a2:5f:94:d7:06: e9:e2:99:94:a8:46:f5:f4:b8:e6:74:22:47:8d:d5: 45:54:26:2c:c4:bd:c3:e0:84:de:31:5c:59:7e:5f: 52:47:ad:20:1b:04:5a:2a:12:d6:de:81:67:d2:38: 9b:44:f0:18:d3:11:88:cc:31:e8:d4:16:16:b5:95: 82:b3:53:d6:2a:42:8b:a8:17:2e:30:e5:95:ba:6e: 48:d7:c3:e1:de:2b:d2:55:e9:6a:e6:f9:4c:94:cc: c7:4b:4b:76:2a:54:05:66:27:5c:00:45:73:0e:ed: 15:de:b9:51:19:1a:a6:1d:d5:e3:15:ef:c8:f4:97: de:f3:5b:80:c2:db:ae:c7:42:c9:b7:7e:17:16:a7: e5:7a:02:c2:0d:fb:df:a4:ba:0a:6a:5e:d9:83:b2: 2b:49:17:6a:41:3e:be:85:1a:4f:9b:e1:db:73:b8: b2:be:90:cd:ff:3d:17:1e:d6:a0:a2:61:6b:5f:4e: 31:e1:62:43:f9:de:e0:32:6f:c8:c2:7a:eb:4e:ee: 3b:9c:5f:1c:1c:e7:e3:15:81:43:4c:b2:68:1a:e3: bc:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:26:98:DB:66:5E:DF:4A:FD:86:FF:19:C8:F3:81:8B:17:26:2E:3E X509v3 Authority Key Identifier: keyid:52:12:8B:04:6E:39:DD:6E:85:43:58:8E:51:43:B5:AD:25:F4:ED:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFB8E/8D9CBB16565B11F1AF6FA27195833773/UhKLBG453W6FQ1iOUUO1rSX07TM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhKLBG453W6FQ1iOUUO1rSX07TM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFB8E/8D9CBB16565B11F1AF6FA27195833773/UhKLBG453W6FQ1iOUUO1rSX07TM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:39:27:cb:e5:8d:0c:d3:18:e6:a8:84:5f:40:2b:41:52:9f: c9:9a:84:4d:45:c5:ce:d9:a4:29:00:a0:c1:6d:9b:ac:e9:de: af:4b:fe:ea:7f:ea:24:ab:72:5b:0d:93:bf:86:9a:86:7b:01: 77:e0:11:f5:1b:c9:6d:31:a5:74:bd:ee:11:8f:e2:04:79:14: 23:b5:93:c7:ca:cf:80:2f:8d:b3:aa:ae:42:8d:89:0e:63:be: 3a:7c:08:85:52:63:37:91:eb:34:a4:3e:da:a3:cc:e8:b6:a4: ef:78:18:e3:ca:0e:25:3c:40:1e:87:2e:cb:7a:32:6c:da:85: 87:07:12:64:97:f6:c8:98:04:3a:7a:b7:35:ec:4d:41:71:fd: ed:c1:b7:5b:4e:55:44:45:21:6a:73:26:fc:51:88:45:85:5b: ce:74:62:67:75:86:b2:7a:22:5d:5a:fe:a5:8c:49:6c:77:4b: b9:4c:93:af:3f:de:de:aa:75:3d:79:62:df:d4:7d:ba:b1:f7: 1a:6c:3b:8e:5a:9b:c4:e7:86:ae:5c:03:41:52:98:94:c5:dc: a4:14:c5:f5:2c:ca:4d:a8:ca:b8:39:ad:20:34:9c:04:ed:6a: f7:df:4b:d8:a5:21:75:bd:01:a0:0c:04:09:c2:1e:b8:4c:9f: 73:1c:52:d5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RkI4RTExMC8GA1UEBRMoNTIxMjhCMDQ2RTM5REQ2RTg1NDM1ODhFNTE0M0I1QUQy NUY0RUQzMzAeFw0yNjA3MjcxMTE1MDFaFw0yNjA4MDMxMTE1MDFaMBgxFjAUBgNV BAMTDTZhNjczZGI2LWJhZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCc60MFma9OG24lo3Bp63pQkAicxbA0vkDh2OFQa3b3wxXVuGu6Jb6iX5TXBuni mZSoRvX0uOZ0IkeN1UVUJizEvcPghN4xXFl+X1JHrSAbBFoqEtbegWfSOJtE8BjT EYjMMejUFha1lYKzU9YqQouoFy4w5ZW6bkjXw+HeK9JV6Wrm+UyUzMdLS3YqVAVm J1wARXMO7RXeuVEZGqYd1eMV78j0l97zW4DC267HQsm3fhcWp+V6AsIN+9+kugpq XtmDsitJF2pBPr6FGk+b4dtzuLK+kM3/PRce1qCiYWtfTjHhYkP53uAyb8jCeutO 7jucXxwc5+MVgUNMsmga47zrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUWCaY22Ze 30r9hv8ZyPOBixcmLj4wHwYDVR0jBBgwFoAUUhKLBG453W6FQ1iOUUO1rSX07TMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNGQjhFLzhEOUNCQjE2NTY1 QjExRjFBRjZGQTI3MTk1ODMzNzczL1VoS0xCRzQ1M1c2RlExaU9VVU8xclNYMDdU TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVWhLTEJHNDUzVzZGUTFpT1VVTzFyU1gwN1RNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNG QjhFLzhEOUNCQjE2NTY1QjExRjFBRjZGQTI3MTk1ODMzNzczL1VoS0xCRzQ1M1c2 RlExaU9VVU8xclNYMDdUTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAAOSfL5Y0M0xjmqIRfQCtBUp/JmoRNRcXO2aQpAKDBbZus6d6vS/7qf+okq3Jb DZO/hpqGewF34BH1G8ltMaV0ve4Rj+IEeRQjtZPHys+AL42zqq5CjYkOY746fAiF UmM3kes0pD7ao8zotqTveBjjyg4lPEAehy7LejJs2oWHBxJkl/bImAQ6erc17E1B cf3twbdbTlVERSFqcyb8UYhFhVvOdGJndYayeiJdWv6ljElsd0u5TJOvP97eqnU9 eWLf1H26sfcabDuOWpvE54auXANBUpiUxdykFMX1LMpNqMq4Oa0gNJwE7Wr330vY pSF1vQGgDAQJwh64TJ9zHFLV -----END CERTIFICATE-----Generated at Tue Jul 28 20:06:49 2026 by rpki-client