$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft File: uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft (raw, json) Hash identifier: T9qzOyt91uPzIgPfwRIQLPekfTwq0peoXOv0JPna27U= Subject key identifier: 11:C6:3D:49:AF:D6:90:F7:10:58:15:6B:E2:B6:3F:31:26:6A:61:0D Authority key identifier: B8:34:01:CF:BC:40:5C:FB:52:FD:A0:FE:BD:4A:02:B7:B1:CE:27:62 Certificate issuer: /CN=A91D1149/serialNumber=B83401CFBC405CFB52FDA0FEBD4A02B7B1CE2762 Certificate serial: 0F54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft Manifest number: 0F48 Signing time: Sun 20 Sep 2026 17:32:02 +0000 Manifest this update: Sun 20 Sep 2026 17:32:02 +0000 Manifest next update: Sun 27 Sep 2026 17:32:02 +0000 Files and hashes: 1: uDQBz7xAXPtS_aD-vUoCt7HOJ2I.crl (hash: tbuL1VivZjwiSbP9CF3NYsAkMnF9ErCgDGZf6WW2IlY=) 2: BD22841E9E4911E9A136D25AC4F9AE02.roa (hash: /lp2Z8VQhDI00l+o4slVgOYMfv7oLB/2J79jG65CBNY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.crl rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 17:32:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3924 (0xf54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1149, serialNumber=B83401CFBC405CFB52FDA0FEBD4A02B7B1CE2762 Validity Not Before: Sep 20 17:32:02 2026 GMT Not After : Sep 27 17:32:02 2026 GMT Subject: CN=6ab01892-1c5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2a:59:08:f9:22:9d:ec:11:c0:d3:2a:4d:cf: bc:9a:71:fb:51:02:58:a1:e0:b5:85:d8:03:21:35: 94:90:08:6e:2f:00:c3:0c:ee:2b:1f:18:b0:7c:73: 98:44:78:34:c1:59:20:a3:4f:c8:27:83:5e:65:dc: 3e:c6:3b:8c:7f:5c:9b:c7:ee:22:4d:45:c3:a4:87: 73:ae:59:72:cb:31:60:27:3b:47:12:09:f5:b7:e6: 91:79:0a:6a:9f:02:32:ee:19:e0:e9:1b:72:10:c3: 8e:ea:ea:f0:9a:5a:9c:7d:1f:f2:6a:c7:3e:98:fb: a8:d5:2e:a1:9f:54:21:26:e4:78:85:84:04:54:f8: 58:a3:c5:fe:8f:07:48:b3:89:88:d8:fc:e6:95:5c: 66:f5:00:65:52:e1:ef:85:eb:c4:73:48:e4:b9:52: 17:bc:4e:81:e4:4f:bc:8f:f7:dd:20:3c:8b:27:31: 63:e9:d2:ba:9f:4d:88:4f:a7:f2:59:3c:ed:51:c1: 4f:86:6f:28:0a:72:21:14:3a:b5:d5:b7:7d:0d:11: 5c:d8:68:c8:74:f7:20:95:af:a5:45:42:58:41:3b: dd:3d:e6:51:b3:c9:4f:d7:12:90:eb:f3:78:9e:f6: db:6d:f2:16:ce:34:ba:bf:fa:01:59:13:7b:0c:6a: da:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:C6:3D:49:AF:D6:90:F7:10:58:15:6B:E2:B6:3F:31:26:6A:61:0D X509v3 Authority Key Identifier: keyid:B8:34:01:CF:BC:40:5C:FB:52:FD:A0:FE:BD:4A:02:B7:B1:CE:27:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1149/24BB24CE9E4911E99F8BCC59C4F9AE02/uDQBz7xAXPtS_aD-vUoCt7HOJ2I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:f5:31:f4:12:23:a6:14:07:b2:54:cc:06:16:3b:b5:4f:e5: 7c:29:79:32:cd:8c:0b:23:4b:97:ec:25:70:92:1a:72:17:9d: 45:72:f8:eb:83:de:bc:d8:9a:b1:10:fc:2f:e9:7e:c8:e3:bb: 28:11:c5:45:04:a9:5d:b5:2f:fe:71:4e:0d:81:b4:64:da:f6: 0e:66:26:4c:ef:64:52:48:3b:e5:b8:49:3c:a4:d7:d5:70:d2: 0d:97:b6:fc:4e:64:ee:f2:65:be:88:38:f6:48:64:da:96:26: 45:4b:6a:59:33:41:f1:58:86:98:7c:70:2b:27:07:39:13:93: 15:ec:55:72:50:a1:03:0f:b5:e9:c3:74:c6:4e:ae:b1:8d:96: cb:e4:4d:83:aa:f8:04:17:58:a5:cf:d6:76:be:b2:17:1e:82: 22:fc:08:e0:c0:7f:a8:5c:0d:e0:12:4d:7e:4c:32:22:95:55: 04:0c:5a:5a:02:74:e3:b8:2b:73:a9:3f:35:eb:69:cb:f7:33: ac:b4:9f:6d:e9:20:f9:57:51:6f:45:6d:b5:eb:aa:71:6b:c6: ab:59:49:f1:b8:98:cf:12:70:cc:25:63:42:30:4d:f9:7e:6c: d4:a8:4e:73:c3:d8:08:06:b0:ff:09:d5:fb:24:0c:e8:b5:eb: 52:b5:56:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD1QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDExNDkxMTAvBgNVBAUTKEI4MzQwMUNGQkM0MDVDRkI1MkZEQTBGRUJENEEwMkI3 QjFDRTI3NjIwHhcNMjYwOTIwMTczMjAyWhcNMjYwOTI3MTczMjAyWjAYMRYwFAYD VQQDEw02YWIwMTg5Mi0xYzVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArCpZCPkinewRwNMqTc+8mnH7UQJYoeC1hdgDITWUkAhuLwDDDO4rHxiwfHOY RHg0wVkgo0/IJ4NeZdw+xjuMf1ybx+4iTUXDpIdzrllyyzFgJztHEgn1t+aReQpq nwIy7hng6RtyEMOO6urwmlqcfR/yasc+mPuo1S6hn1QhJuR4hYQEVPhYo8X+jwdI s4mI2PzmlVxm9QBlUuHvhevEc0jkuVIXvE6B5E+8j/fdIDyLJzFj6dK6n02IT6fy WTztUcFPhm8oCnIhFDq11bd9DRFc2GjIdPcgla+lRUJYQTvdPeZRs8lP1xKQ6/N4 nvbbbfIWzjS6v/oBWRN7DGrakwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBHGPUmv 1pD3EFgVa+K2PzEmamENMB8GA1UdIwQYMBaAFLg0Ac+8QFz7Uv2g/r1KArexzidi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTE0OS8yNEJCMjRDRTlF NDkxMUU5OUY4QkNDNTlDNEY5QUUwMi91RFFCejd4QVhQdFNfYUQtdlVvQ3Q3SE9K MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VEUUJ6N3hBWFB0U19hRC12VW9DdDdIT0oySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTE0OS8yNEJCMjRDRTlFNDkxMUU5OUY4QkNDNTlDNEY5QUUwMi91RFFCejd4QVhQ dFNfYUQtdlVvQ3Q3SE9KMkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkfUx9BIjphQHslTMBhY7tU/lfCl5Ms2MCyNLl+wlcJIachedRXL464PevNia sRD8L+l+yOO7KBHFRQSpXbUv/nFODYG0ZNr2DmYmTO9kUkg75bhJPKTX1XDSDZe2 /E5k7vJlvog49khk2pYmRUtqWTNB8ViGmHxwKycHOROTFexVclChAw+16cN0xk6u sY2Wy+RNg6r4BBdYpc/Wdr6yFx6CIvwI4MB/qFwN4BJNfkwyIpVVBAxaWgJ047gr c6k/Netpy/czrLSfbekg+VdRb0VtteuqcWvGq1lJ8biYzxJwzCVjQjBN+X5s1KhO c8PYCAaw/wnV+yQM6LXrUrVW0Q== -----END CERTIFICATE-----Generated at Tue Sep 22 13:01:53 2026 by rpki-client