$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FB95D/8A35B11857EA11F1B6A8C17A93833773/UM34bAX-9Pzk0kjdt1qwDbH7F-g.mft File: UM34bAX-9Pzk0kjdt1qwDbH7F-g.mft (raw, json) Hash identifier: mP5FeC4lKpdMdHRVz1GlxKQczQ6xDV3v/YfV0Y/YWHE= Subject key identifier: 16:25:CC:91:FE:2D:13:23:A5:89:DD:27:22:78:2D:2B:E9:05:DC:94 Authority key identifier: 50:CD:F8:6C:05:FE:F4:FC:E4:D2:48:DD:B7:5A:B0:0D:B1:FB:17:E8 Certificate issuer: /CN=A91FB95D/serialNumber=50CDF86C05FEF4FCE4D248DDB75AB00DB1FB17E8 Certificate serial: 5A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UM34bAX-9Pzk0kjdt1qwDbH7F-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB95D/8A35B11857EA11F1B6A8C17A93833773/UM34bAX-9Pzk0kjdt1qwDbH7F-g.mft Manifest number: 52 Signing time: Sun 11 Oct 2026 09:02:40 +0000 Manifest this update: Sun 11 Oct 2026 09:02:39 +0000 Manifest next update: Sun 18 Oct 2026 09:02:39 +0000 Files and hashes: 1: UM34bAX-9Pzk0kjdt1qwDbH7F-g.crl (hash: SOwM0I61XpWaYC+TI7C8YpnLr+MGuPBsUTGe8kvdAcU=) 2: C4B1F19088EF11F1BEAD5A114511F970.roa (hash: xo/UHdXsxPGdn9koRsNyDMlw86tZjm0AwgRBi0XgpeY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB95D/8A35B11857EA11F1B6A8C17A93833773/UM34bAX-9Pzk0kjdt1qwDbH7F-g.crl rsync://rpki.apnic.net/member_repository/A91FB95D/8A35B11857EA11F1B6A8C17A93833773/UM34bAX-9Pzk0kjdt1qwDbH7F-g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UM34bAX-9Pzk0kjdt1qwDbH7F-g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 09:02:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB95D, serialNumber=50CDF86C05FEF4FCE4D248DDB75AB00DB1FB17E8 Validity Not Before: Oct 11 09:02:39 2026 GMT Not After : Oct 18 09:02:39 2026 GMT Subject: CN=6acb50b0-f1dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:29:5b:dc:bd:18:a1:4e:ba:98:85:36:5b:8f: 5f:b8:5e:f8:58:1a:98:d5:06:a6:9c:26:59:f9:9a: cb:3a:23:a2:15:7e:60:29:be:ad:d5:9e:0f:b7:2b: cc:46:8d:5e:59:e4:21:bd:e4:9d:f8:e0:c1:bb:eb: 5a:30:df:23:61:e9:63:f7:84:e9:b4:cd:d2:c5:1c: 66:20:3e:fa:67:9d:f7:c5:c8:49:8b:bc:4c:36:44: 30:85:e3:da:3b:fe:9b:da:25:69:32:e4:7c:e2:7b: cf:bf:82:e2:ee:85:13:cd:97:7b:b3:a9:9a:14:4b: 05:3b:c5:0a:40:40:b2:57:39:dd:ed:00:32:e3:2d: a1:b7:73:a1:88:72:10:bf:86:a9:1c:e6:de:9e:17: b0:62:8d:ed:b7:d5:86:71:2c:73:f5:4c:25:8f:89: a7:6e:17:3d:0e:66:da:c5:4d:74:aa:ca:1a:7d:9d: e9:59:5d:3c:f1:f2:d7:f4:21:a2:2c:9b:aa:ba:8b: 9f:94:c1:b5:60:7e:46:97:52:e4:5c:7e:8b:bd:cd: 2d:bf:c6:5c:3c:25:c5:d4:60:c8:4e:51:5a:ab:db: 61:40:f8:a9:d1:2b:fe:b9:57:f9:0c:9c:bc:8c:2e: 05:fc:20:6b:12:0d:79:8a:28:76:b3:99:81:6b:70: 83:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:25:CC:91:FE:2D:13:23:A5:89:DD:27:22:78:2D:2B:E9:05:DC:94 X509v3 Authority Key Identifier: keyid:50:CD:F8:6C:05:FE:F4:FC:E4:D2:48:DD:B7:5A:B0:0D:B1:FB:17:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB95D/8A35B11857EA11F1B6A8C17A93833773/UM34bAX-9Pzk0kjdt1qwDbH7F-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UM34bAX-9Pzk0kjdt1qwDbH7F-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB95D/8A35B11857EA11F1B6A8C17A93833773/UM34bAX-9Pzk0kjdt1qwDbH7F-g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:6b:82:91:df:88:22:89:6a:ae:30:ff:47:8f:af:3c:20:91: 58:b7:31:dd:42:e7:62:18:14:46:20:af:82:a7:8b:dd:65:ac: 56:1c:67:2b:c5:da:2b:f6:22:a7:0a:0d:4c:3a:4c:fb:54:ca: 19:02:ac:b4:c7:5e:8c:6b:3a:09:5c:fc:81:06:67:01:46:85: 41:ec:e2:e4:78:e6:5d:51:37:1c:d4:ec:0b:db:ff:8a:40:5b: ad:42:73:57:8c:b8:f2:c0:c9:f3:a2:6d:19:11:9a:2d:a9:b9: bf:09:3a:28:35:3c:b6:15:56:55:20:41:05:a2:89:23:e7:9c: 39:55:40:e5:bc:56:0c:2c:07:25:44:41:ba:af:3c:f5:c5:98: 7f:c5:47:b0:c7:11:58:d7:ed:e2:8a:e9:83:e0:f9:15:1f:96: d1:02:d3:83:22:d8:2b:c2:e6:db:13:8e:62:e4:c7:33:0a:ff: 30:7e:e8:b2:93:ed:67:44:3c:07:8b:bf:36:79:05:79:b5:f0: 55:20:1b:a2:08:3a:9b:8a:ce:96:64:c1:d9:e3:5c:1d:2e:6e: 4a:8d:7e:47:01:50:f8:52:d2:95:bd:91:08:fe:f2:08:37:8c: d0:6c:4b:1c:f5:f8:e4:b5:9f:d3:51:85:fa:89:bb:59:e6:b1: 02:52:f3:b8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG Qjk1RDExMC8GA1UEBRMoNTBDREY4NkMwNUZFRjRGQ0U0RDI0OEREQjc1QUIwMERC MUZCMTdFODAeFw0yNjEwMTEwOTAyMzlaFw0yNjEwMTgwOTAyMzlaMBgxFjAUBgNV BAMTDTZhY2I1MGIwLWYxZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwKVvcvRihTrqYhTZbj1+4XvhYGpjVBqacJln5mss6I6IVfmApvq3Vng+3K8xG jV5Z5CG95J344MG761ow3yNh6WP3hOm0zdLFHGYgPvpnnffFyEmLvEw2RDCF49o7 /pvaJWky5Hzie8+/guLuhRPNl3uzqZoUSwU7xQpAQLJXOd3tADLjLaG3c6GIchC/ hqkc5t6eF7Bije231YZxLHP1TCWPiaduFz0OZtrFTXSqyhp9nelZXTzx8tf0IaIs m6q6i5+UwbVgfkaXUuRcfou9zS2/xlw8JcXUYMhOUVqr22FA+KnRK/65V/kMnLyM LgX8IGsSDXmKKHazmYFrcIO3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUFiXMkf4t EyOlid0nIngtK+kF3JQwHwYDVR0jBBgwFoAUUM34bAX+9Pzk0kjdt1qwDbH7F+gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCOTVELzhBMzVCMTE4NTdF QTExRjFCNkE4QzE3QTkzODMzNzczL1VNMzRiQVgtOVB6azBramR0MXF3RGJIN0Yt Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVU0zNGJBWC05UHprMGtqZHQxcXdEYkg3Ri1nLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC OTVELzhBMzVCMTE4NTdFQTExRjFCNkE4QzE3QTkzODMzNzczL1VNMzRiQVgtOVB6 azBramR0MXF3RGJIN0YtZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCPa4KR34giiWquMP9Hj688IJFYtzHdQudiGBRGIK+Cp4vdZaxWHGcrxdor9iKn Cg1MOkz7VMoZAqy0x16MazoJXPyBBmcBRoVB7OLkeOZdUTcc1OwL2/+KQFutQnNX jLjywMnzom0ZEZotqbm/CTooNTy2FVZVIEEFookj55w5VUDlvFYMLAclREG6rzz1 xZh/xUewxxFY1+3iiumD4PkVH5bRAtODItgrwubbE45i5MczCv8wfuiyk+1nRDwH i782eQV5tfBVIBuiCDqbis6WZMHZ41wdLm5KjX5HAVD4UtKVvZEI/vIIN4zQbEsc 9fjktZ/TUYX6ibtZ5rECUvO4 -----END CERTIFICATE-----Generated at Tue Oct 13 01:33:05 2026 by rpki-client