$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft File: uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft (raw, json) Hash identifier: dNH/E4r2vI5T7aE/WHIuRW8rmpq+ID1U7m9Hc3Xs2hc= Subject key identifier: 6F:3D:E5:24:73:C2:BE:78:70:AC:9F:A0:B0:5C:4A:08:30:F8:B0:F4 Authority key identifier: B8:34:01:CF:BC:40:5C:FB:52:FD:A0:FE:BD:4A:02:B7:B1:CE:27:62 Certificate issuer: /CN=A91D1149/serialNumber=B83401CFBC405CFB52FDA0FEBD4A02B7B1CE2762 Certificate serial: 0F38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft Manifest number: 0F2C Signing time: Tue 28 Jul 2026 17:42:09 +0000 Manifest this update: Tue 28 Jul 2026 17:42:09 +0000 Manifest next update: Tue 04 Aug 2026 17:42:09 +0000 Files and hashes: 1: uDQBz7xAXPtS_aD-vUoCt7HOJ2I.crl (hash: eFISzUmZadpzBajUMoUAQVwuFqN6NbvaQ0+4Vy1QsMY=) 2: BD22841E9E4911E9A136D25AC4F9AE02.roa (hash: /lp2Z8VQhDI00l+o4slVgOYMfv7oLB/2J79jG65CBNY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.crl rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 17:42:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3896 (0xf38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1149, serialNumber=B83401CFBC405CFB52FDA0FEBD4A02B7B1CE2762 Validity Not Before: Jul 28 17:42:09 2026 GMT Not After : Aug 4 17:42:09 2026 GMT Subject: CN=6a68e9f1-54f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:1f:f3:a9:af:aa:34:51:02:80:c0:8a:18:39: 47:e5:e0:99:a7:ac:7c:fc:5e:cc:6f:09:8d:29:99: 16:00:24:50:80:d7:06:d0:fe:ec:27:1c:91:73:51: 09:2e:0b:40:97:ea:d4:e7:9c:03:2f:f6:8e:ac:e6: 45:32:fa:0b:c5:cb:a9:0d:f5:3c:32:50:27:35:f8: 2c:4f:83:04:b2:67:dc:91:30:56:b0:35:18:22:b4: 5e:c3:c8:45:b0:35:a4:0a:39:1a:48:2c:0d:aa:0c: f1:a3:55:b4:a4:41:35:2c:38:17:7a:05:43:4b:ff: 4f:ad:78:63:e2:23:6e:8f:f9:f5:dd:61:ce:06:9b: 76:04:6d:56:67:93:ad:58:fc:5d:d5:3c:db:ae:6d: 6c:8e:99:3c:76:f5:35:63:dc:2d:9a:54:eb:9d:1a: ed:d5:d3:74:02:a9:51:3c:48:9c:8b:63:48:61:b5: c1:74:83:a5:80:4c:20:ff:57:44:24:62:c3:d7:ca: 2e:8b:01:e6:6d:f1:78:01:cc:5e:52:50:1b:b6:f8: 58:06:b9:9f:f3:6b:8f:d0:34:5b:af:c2:71:82:df: d9:94:26:c7:23:56:0d:1b:cb:ea:46:4a:4f:7d:64: 02:36:84:65:dc:25:d3:e3:a3:f5:71:4a:08:42:42: bb:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:3D:E5:24:73:C2:BE:78:70:AC:9F:A0:B0:5C:4A:08:30:F8:B0:F4 X509v3 Authority Key Identifier: keyid:B8:34:01:CF:BC:40:5C:FB:52:FD:A0:FE:BD:4A:02:B7:B1:CE:27:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:d1:b0:ff:22:e2:c2:09:e5:04:72:b0:26:dc:f5:a7:2d:4d: 9b:9f:3c:d7:d2:58:e8:4c:8c:8d:95:1a:c0:48:17:8b:c4:ae: eb:1a:a9:64:4e:d5:2a:e4:34:27:65:40:b9:4a:8b:0e:ff:97: 5f:6f:b6:91:f7:08:2c:bc:b6:a4:32:da:d7:6e:64:1d:e8:c3: 91:fd:fe:02:98:b1:66:12:65:28:47:7e:2a:47:7a:03:e0:48: 44:86:21:3c:c6:fa:a2:5a:1b:75:8a:9f:83:83:84:3f:77:98: 23:3b:c5:3f:ce:53:11:af:87:9c:5d:4b:79:17:93:5b:3a:54: 07:60:4d:c3:99:5e:86:99:da:70:d2:c9:78:06:c4:bb:84:82: 3b:68:25:d9:b5:49:2c:f0:ae:ff:7a:0f:e7:e4:b0:2f:ed:9a: 7e:9a:df:91:61:e3:22:7f:7f:97:39:ee:2f:a8:3b:5b:42:2b: 52:96:4d:14:11:07:e0:b0:66:2a:58:d7:ea:10:5b:2a:a3:8d: ba:78:de:0a:cb:3e:49:f4:be:8f:15:01:ff:cf:ee:d8:60:9f: 8b:65:ad:07:47:26:7b:58:bf:c3:9a:cf:15:f4:13:00:25:33: 58:7b:f9:ef:ea:75:c0:0f:aa:7a:b4:e1:8a:e0:90:f6:64:3f: b9:4f:96:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDExNDkxMTAvBgNVBAUTKEI4MzQwMUNGQkM0MDVDRkI1MkZEQTBGRUJENEEwMkI3 QjFDRTI3NjIwHhcNMjYwNzI4MTc0MjA5WhcNMjYwODA0MTc0MjA5WjAYMRYwFAYD VQQDEw02YTY4ZTlmMS01NGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiB/zqa+qNFECgMCKGDlH5eCZp6x8/F7MbwmNKZkWACRQgNcG0P7sJxyRc1EJ LgtAl+rU55wDL/aOrOZFMvoLxcupDfU8MlAnNfgsT4MEsmfckTBWsDUYIrRew8hF sDWkCjkaSCwNqgzxo1W0pEE1LDgXegVDS/9PrXhj4iNuj/n13WHOBpt2BG1WZ5Ot WPxd1Tzbrm1sjpk8dvU1Y9wtmlTrnRrt1dN0AqlRPEici2NIYbXBdIOlgEwg/1dE JGLD18ouiwHmbfF4AcxeUlAbtvhYBrmf82uP0DRbr8Jxgt/ZlCbHI1YNG8vqRkpP fWQCNoRl3CXT46P1cUoIQkK7KQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG895SRz wr54cKyfoLBcSggw+LD0MB8GA1UdIwQYMBaAFLg0Ac+8QFz7Uv2g/r1KArexzidi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTE0OS8yNEJCMjRDRTlF NDkxMUU5OUY4QkNDNTlDNEY5QUUwMi91RFFCejd4QVhQdFNfYUQtdlVvQ3Q3SE9K MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VEUUJ6N3hBWFB0U19hRC12VW9DdDdIT0oySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTE0OS8yNEJCMjRDRTlFNDkxMUU5OUY4QkNDNTlDNEY5QUUwMi91RFFCejd4QVhQ dFNfYUQtdlVvQ3Q3SE9KMkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUdGw/yLiwgnlBHKwJtz1py1Nm58819JY6EyMjZUawEgXi8Su6xqpZE7VKuQ0 J2VAuUqLDv+XX2+2kfcILLy2pDLa125kHejDkf3+ApixZhJlKEd+Kkd6A+BIRIYh PMb6olobdYqfg4OEP3eYIzvFP85TEa+HnF1LeReTWzpUB2BNw5lehpnacNLJeAbE u4SCO2gl2bVJLPCu/3oP5+SwL+2afprfkWHjIn9/lznuL6g7W0IrUpZNFBEH4LBm KljX6hBbKqONunjeCss+SfS+jxUB/8/u2GCfi2WtB0cme1i/w5rPFfQTACUzWHv5 7+p1wA+qerThiuCQ9mQ/uU+W8w== -----END CERTIFICATE-----Generated at Tue Jul 28 23:11:54 2026 by rpki-client