$ rpki-client -vvf rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft File: _5APJL-aiYLZX4RHqnubtPesRjk.mft (raw, json) Hash identifier: 1TBGwh/Avx+NAwCc+L3S69OBK/i9FeGQKlHPm5GooA8= Subject key identifier: F8:3B:E3:10:7B:6E:6E:00:AE:FD:A5:3D:11:E0:D3:77:7E:F5:CA:97 Authority key identifier: FF:90:0F:24:BF:9A:89:82:D9:5F:84:47:AA:7B:9B:B4:F7:AC:46:39 Certificate issuer: /CN=A91221EF/serialNumber=FF900F24BF9A8982D95F8447AA7B9BB4F7AC4639 Certificate serial: 0A7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5APJL-aiYLZX4RHqnubtPesRjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft Manifest number: 0A66 Signing time: Tue 02 Jun 2026 19:40:18 +0000 Manifest this update: Tue 02 Jun 2026 19:40:17 +0000 Manifest next update: Tue 09 Jun 2026 19:40:17 +0000 Files and hashes: 1: _5APJL-aiYLZX4RHqnubtPesRjk.crl (hash: qpMFieiQ/MMAt1xfOlkqAFpNusAsj6IUgvbvxIuAyc8=) 2: D3037D06738E11ED8283FF53C4F9AE02.roa (hash: ayMh+xPpKV4MDa+xi4w8R4KTWxdFNv6TJ0EMYBEcXjk=) 3: D1A6B6D0738E11ED8283FF53C4F9AE02.roa (hash: 5L+qG7S9tkiI9oResfgYtFZwd1jvISkOSfCq4CpLueQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.crl rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5APJL-aiYLZX4RHqnubtPesRjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Jun 2026 15:18:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2682 (0xa7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91221EF, serialNumber=FF900F24BF9A8982D95F8447AA7B9BB4F7AC4639 Validity Not Before: Jun 2 19:40:17 2026 GMT Not After : Jun 9 19:40:17 2026 GMT Subject: CN=6a1f31a1-eda8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:bd:c4:68:b1:58:97:52:38:4f:98:9a:a6:7d: 07:cd:24:ab:c5:72:07:40:a6:da:d8:e5:88:10:ad: 3e:03:88:52:3b:6a:2f:d8:0d:bd:c2:b5:7f:d6:0e: 96:7f:20:4b:b3:a8:2a:51:86:6a:ac:a0:e1:0f:47: bb:f0:0d:f0:68:ff:61:b8:02:ec:eb:39:81:3c:2c: f2:7e:3c:85:8f:2b:b6:25:95:e8:8a:fd:d5:72:39: c3:e9:55:3e:59:c9:fb:3f:79:d8:cc:d0:a1:50:18: d6:b9:3e:58:e8:ca:26:d4:aa:f5:3d:ab:4e:5d:ed: 9c:87:d4:60:28:22:52:29:66:d8:5a:de:b7:90:70: 08:58:dd:0e:2c:f6:bb:b3:7c:0e:d6:96:c2:f4:9d: a3:83:2b:6c:d2:6a:54:89:74:37:65:ec:24:45:6f: 22:27:10:c7:fa:d9:a5:35:95:5a:e2:89:15:3f:11: 9f:0b:b7:c1:55:ae:ee:c6:39:db:44:f0:93:4d:95: 1f:30:d4:b0:53:72:a1:c5:ce:ce:e8:46:5e:59:02: 71:24:b9:74:78:1d:83:fd:6b:47:ff:32:81:07:56: bf:59:da:03:3c:c1:dd:7f:76:12:f2:7f:17:59:70: 96:b3:ab:1e:62:2a:33:9c:bc:26:ea:4d:08:27:39: 40:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:3B:E3:10:7B:6E:6E:00:AE:FD:A5:3D:11:E0:D3:77:7E:F5:CA:97 X509v3 Authority Key Identifier: keyid:FF:90:0F:24:BF:9A:89:82:D9:5F:84:47:AA:7B:9B:B4:F7:AC:46:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5APJL-aiYLZX4RHqnubtPesRjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:4c:16:ac:cd:7f:9c:c2:83:d1:8c:60:50:4d:1f:a4:61:33: 81:2d:84:ae:14:a5:ba:60:b5:0d:80:41:39:1b:7e:6c:76:b3: 9c:2c:59:34:f1:e6:7d:03:07:bc:1f:ca:14:89:46:08:29:44: 79:97:c8:27:1f:7e:4a:9b:fb:3d:e5:2b:d9:c7:3b:a9:af:d8: 9f:9e:89:b7:14:16:f7:a8:6d:81:c4:fb:ab:67:1b:ee:9c:73: 34:c4:59:28:c3:06:4c:fe:5d:f0:e6:67:c6:b2:a8:54:78:44: ca:bc:c5:98:18:63:19:6d:82:6b:57:f7:90:dd:9c:46:35:74: bc:12:79:4f:cc:aa:cd:d9:41:e6:94:da:a8:6a:d0:c5:c5:d2: 57:c8:09:76:d6:8c:5f:54:1f:cd:6c:4d:9d:21:f5:c8:06:07: ca:aa:e5:3c:c0:42:4e:ae:e7:76:33:af:72:5a:20:6e:cf:a1: 1d:b6:e5:0c:e6:ad:43:74:31:83:e2:4c:8d:0f:b1:75:de:29: 85:6c:d9:5a:75:70:57:b7:22:e7:ce:f4:be:bf:70:b5:77:b7: cc:03:d6:4f:5f:9b:fa:72:b2:34:4d:82:7b:a7:34:b3:e9:e6: fc:18:82:f8:2d:82:f6:15:9c:d6:0c:71:a6:fd:9e:11:4e:09: 2f:ae:1d:a8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIxRUYxMTAvBgNVBAUTKEZGOTAwRjI0QkY5QTg5ODJEOTVGODQ0N0FBN0I5QkI0 RjdBQzQ2MzkwHhcNMjYwNjAyMTk0MDE3WhcNMjYwNjA5MTk0MDE3WjAYMRYwFAYD VQQDEw02YTFmMzFhMS1lZGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA373EaLFYl1I4T5iapn0HzSSrxXIHQKba2OWIEK0+A4hSO2ov2A29wrV/1g6W fyBLs6gqUYZqrKDhD0e78A3waP9huALs6zmBPCzyfjyFjyu2JZXoiv3VcjnD6VU+ Wcn7P3nYzNChUBjWuT5Y6Mom1Kr1PatOXe2ch9RgKCJSKWbYWt63kHAIWN0OLPa7 s3wO1pbC9J2jgyts0mpUiXQ3ZewkRW8iJxDH+tmlNZVa4okVPxGfC7fBVa7uxjnb RPCTTZUfMNSwU3Khxc7O6EZeWQJxJLl0eB2D/WtH/zKBB1a/WdoDPMHdf3YS8n8X WXCWs6seYioznLwm6k0IJzlATwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPg74xB7 bm4Arv2lPRHg03d+9cqXMB8GA1UdIwQYMBaAFP+QDyS/momC2V+ER6p7m7T3rEY5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjFFRi82RjJGRUJENjg5 MUYxMUVBODlCNjI3N0NDNEY5QUUwMi9fNUFQSkwtYWlZTFpYNFJIcW51YnRQZXNS amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL181QVBKTC1haVlMWlg0UkhxbnVidFBlc1Jqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjFFRi82RjJGRUJENjg5MUYxMUVBODlCNjI3N0NDNEY5QUUwMi9fNUFQSkwtYWlZ TFpYNFJIcW51YnRQZXNSamsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARUwWrM1/nMKD0YxgUE0fpGEzgS2ErhSlumC1DYBBORt+bHaznCxZNPHmfQMH vB/KFIlGCClEeZfIJx9+Spv7PeUr2cc7qa/Yn56JtxQW96htgcT7q2cb7pxzNMRZ KMMGTP5d8OZnxrKoVHhEyrzFmBhjGW2Ca1f3kN2cRjV0vBJ5T8yqzdlB5pTaqGrQ xcXSV8gJdtaMX1QfzWxNnSH1yAYHyqrlPMBCTq7ndjOvclogbs+hHbblDOatQ3Qx g+JMjQ+xdd4phWzZWnVwV7ci5870vr9wtXe3zAPWT1+b+nKyNE2Ce6c0s+nm/BiC +C2C9hWc1gxxpv2eEU4JL64dqA== -----END CERTIFICATE-----Generated at Tue Jun 2 22:16:48 2026 by rpki-client