$ rpki-client -vvf rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.mft File: NaA6oUeNBoHAZxl2yftD9pMTgr4.mft (raw, json) Hash identifier: WR36vJog7imUx1ozTIBg/24iiWvhuiZJaM2vAMJutUU= Subject key identifier: E8:44:DF:FB:38:9D:64:35:04:08:B2:BD:83:D1:0F:7C:43:5F:98:0C Authority key identifier: 35:A0:3A:A1:47:8D:06:81:C0:67:19:76:C9:FB:43:F6:93:13:82:BE Certificate issuer: /CN=A91161EB/serialNumber=35A03AA1478D0681C0671976C9FB43F6931382BE Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NaA6oUeNBoHAZxl2yftD9pMTgr4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.mft Manifest number: 1C Signing time: Mon 01 Jun 2026 09:42:49 +0000 Manifest this update: Mon 01 Jun 2026 09:42:49 +0000 Manifest next update: Mon 08 Jun 2026 09:42:49 +0000 Files and hashes: 1: NaA6oUeNBoHAZxl2yftD9pMTgr4.crl (hash: G4Qm929QjKSmhscw5bYnJmoanIE7nywNdQXDZZhW7WQ=) 2: 9C495BB2350211F18A0989F29B833773.roa (hash: Lmv32oZY3NRP9K5M+STvV+c8q6SioI1nyA5nw3Qh/DE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.crl rsync://rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NaA6oUeNBoHAZxl2yftD9pMTgr4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 09:42:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91161EB, serialNumber=35A03AA1478D0681C0671976C9FB43F6931382BE Validity Not Before: Jun 1 09:42:49 2026 GMT Not After : Jun 8 09:42:49 2026 GMT Subject: CN=6a1d5419-7eb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:8c:17:a2:d3:75:1a:e9:ae:4f:0b:0b:52:fa: 5d:7e:4b:22:fd:af:c8:71:4e:35:08:3f:bd:6f:58: 04:80:81:99:35:ee:7e:f5:d4:f9:a9:ca:0e:23:5a: 03:d4:38:5b:a2:60:48:56:14:85:e0:7a:1e:b6:dc: 03:79:6e:e1:10:96:d0:a4:17:29:b6:ed:bc:a9:e0: e2:56:4d:55:22:6a:7d:cb:d2:d1:bc:05:36:da:19: 7d:25:06:50:94:a9:a7:74:09:ea:26:38:be:cd:ba: 01:61:aa:04:bb:0b:e6:af:0f:fd:ec:4b:91:bb:ed: 13:4b:3b:ec:86:4c:e3:89:ce:f3:76:67:74:c6:8a: 9b:fb:ab:e0:77:19:ba:09:a0:b0:3e:4c:f0:51:e4: 13:50:4e:24:b5:73:ce:8b:01:83:9e:fc:35:53:95: 5a:9b:8d:39:61:e0:76:58:97:c7:66:4b:87:9a:c3: e6:ce:3b:06:9c:1b:5f:9a:6e:ff:fb:31:ae:57:52: 1c:25:53:74:ef:5d:40:28:cc:e3:d7:be:e8:9b:c7: 58:9c:d5:5e:c5:8c:0c:b0:ce:4a:dc:ce:1a:9e:9f: d6:52:dc:7c:41:90:36:cd:cd:3e:6a:a5:ef:64:8f: 1e:6c:dc:96:cc:74:fc:04:84:7b:a3:52:24:06:df: e1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:44:DF:FB:38:9D:64:35:04:08:B2:BD:83:D1:0F:7C:43:5F:98:0C X509v3 Authority Key Identifier: keyid:35:A0:3A:A1:47:8D:06:81:C0:67:19:76:C9:FB:43:F6:93:13:82:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NaA6oUeNBoHAZxl2yftD9pMTgr4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91161EB/0A9385D0350211F1B1FD6D749B833773/NaA6oUeNBoHAZxl2yftD9pMTgr4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:be:39:49:5e:d0:17:8e:91:4c:b4:ee:23:b6:1f:74:50:6b: 7a:78:58:72:a7:25:36:26:aa:32:49:66:ee:eb:17:99:1d:99: 60:fb:7d:5d:60:9d:b0:8b:94:7d:ea:4a:07:16:56:66:4d:33: d1:14:95:9c:44:3a:e0:14:d9:bc:2d:79:04:4e:83:1a:e5:d1: 09:13:4c:b0:05:94:de:3c:e6:40:25:b8:25:58:f8:1e:2b:c9: 09:4c:c9:d3:ba:58:23:17:64:43:1c:a4:5a:e8:2e:5e:81:7e: df:ec:a5:b6:e4:0e:40:c8:56:60:6b:dc:f4:da:03:9f:60:3a: 9b:03:e5:17:91:98:4b:16:99:62:e5:22:e0:e5:01:50:d7:ea: 81:d0:09:f6:3f:aa:71:ce:7b:2e:0a:bb:b1:41:d5:94:cf:61: 28:5e:d3:db:1b:05:08:e7:e8:8b:21:24:03:38:e7:1e:3d:28: f7:00:77:6b:3d:0b:1f:a8:58:8c:ce:18:44:9e:2a:bb:c1:b2: 8c:5b:9b:77:94:68:12:d8:0c:23:83:d8:30:48:6f:1b:f6:a1: 06:e3:4a:50:77:a1:7d:0f:e0:f9:cb:e9:34:5d:de:ae:df:e0: d5:76:86:05:e8:df:e5:b5:3e:ef:f9:bd:62:e1:e8:bc:aa:4e: ff:a1:05:cb -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NjFFQjExMC8GA1UEBRMoMzVBMDNBQTE0NzhEMDY4MUMwNjcxOTc2QzlGQjQzRjY5 MzEzODJCRTAeFw0yNjA2MDEwOTQyNDlaFw0yNjA2MDgwOTQyNDlaMBgxFjAUBgNV BAMTDTZhMWQ1NDE5LTdlYjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZjBei03Ua6a5PCwtS+l1+SyL9r8hxTjUIP71vWASAgZk17n711Pmpyg4jWgPU OFuiYEhWFIXgeh623AN5buEQltCkFym27byp4OJWTVUian3L0tG8BTbaGX0lBlCU qad0CeomOL7NugFhqgS7C+avD/3sS5G77RNLO+yGTOOJzvN2Z3TGipv7q+B3GboJ oLA+TPBR5BNQTiS1c86LAYOe/DVTlVqbjTlh4HZYl8dmS4eaw+bOOwacG1+abv/7 Ma5XUhwlU3TvXUAozOPXvuibx1ic1V7FjAywzkrczhqen9ZS3HxBkDbNzT5qpe9k jx5s3JbMdPwEhHujUiQG3+HVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU6ETf+zid ZDUECLK9g9EPfENfmAwwHwYDVR0jBBgwFoAUNaA6oUeNBoHAZxl2yftD9pMTgr4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2MUVCLzBBOTM4NUQwMzUw MjExRjFCMUZENkQ3NDlCODMzNzczL05hQTZvVWVOQm9IQVp4bDJ5ZnREOXBNVGdy NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTmFBNm9VZU5Cb0hBWnhsMnlmdEQ5cE1UZ3I0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2 MUVCLzBBOTM4NUQwMzUwMjExRjFCMUZENkQ3NDlCODMzNzczL05hQTZvVWVOQm9I QVp4bDJ5ZnREOXBNVGdyNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAivjlJXtAXjpFMtO4jth90UGt6eFhypyU2JqoySWbu6xeZHZlg+31dYJ2wi5R9 6koHFlZmTTPRFJWcRDrgFNm8LXkEToMa5dEJE0ywBZTePOZAJbglWPgeK8kJTMnT ulgjF2RDHKRa6C5egX7f7KW25A5AyFZga9z02gOfYDqbA+UXkZhLFpli5SLg5QFQ 1+qB0An2P6pxznsuCruxQdWUz2EoXtPbGwUI5+iLISQDOOcePSj3AHdrPQsfqFiM zhhEniq7wbKMW5t3lGgS2Awjg9gwSG8b9qEG40pQd6F9D+D5y+k0Xd6u3+DVdoYF 6N/ltT7v+b1i4ei8qk7/oQXL -----END CERTIFICATE-----Generated at Tue Jun 2 21:26:08 2026 by rpki-client