$ rpki-client -vvf rpki.apnic.net/member_repository/A91406FF/1D71060A11FD11F1A466363C133D8C67/TS0NULyRom4hHzg_UCqz1w0C3HA.mft File: TS0NULyRom4hHzg_UCqz1w0C3HA.mft (raw, json) Hash identifier: NKRO42EnvEuYpTPx+Yj6IRczCCRxMKO1gkLep6kbSPI= Subject key identifier: D4:89:A5:88:A2:D0:2C:36:26:3A:0A:16:69:52:90:1E:30:76:98:10 Authority key identifier: 4D:2D:0D:50:BC:91:A2:6E:21:1F:38:3F:50:2A:B3:D7:0D:02:DC:70 Certificate issuer: /CN=A91406FF/serialNumber=4D2D0D50BC91A26E211F383F502AB3D70D02DC70 Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TS0NULyRom4hHzg_UCqz1w0C3HA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91406FF/1D71060A11FD11F1A466363C133D8C67/TS0NULyRom4hHzg_UCqz1w0C3HA.mft Manifest number: 3E Signing time: Tue 23 Jun 2026 08:45:56 +0000 Manifest this update: Tue 23 Jun 2026 08:45:55 +0000 Manifest next update: Tue 30 Jun 2026 08:45:55 +0000 Files and hashes: 1: TS0NULyRom4hHzg_UCqz1w0C3HA.crl (hash: MKV67ayDFV23lHSZfjn/uictPs/5CPeQ19Wq8LutkRs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91406FF/1D71060A11FD11F1A466363C133D8C67/TS0NULyRom4hHzg_UCqz1w0C3HA.crl rsync://rpki.apnic.net/member_repository/A91406FF/1D71060A11FD11F1A466363C133D8C67/TS0NULyRom4hHzg_UCqz1w0C3HA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TS0NULyRom4hHzg_UCqz1w0C3HA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jun 2026 08:45:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91406FF, serialNumber=4D2D0D50BC91A26E211F383F502AB3D70D02DC70 Validity Not Before: Jun 23 08:45:55 2026 GMT Not After : Jun 30 08:45:55 2026 GMT Subject: CN=6a3a47c3-bd0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:61:2a:f3:79:33:42:0a:1d:86:60:67:92:14: c9:f2:0c:d4:29:13:1e:96:6c:9c:c4:44:ed:7e:00: 9a:0f:48:2c:55:5f:f9:8c:75:f9:d6:b9:7c:10:49: d4:82:e6:86:7f:90:ec:9e:13:1a:9d:11:81:8c:e2: ef:b6:2d:8f:29:e8:fa:6d:17:81:58:f6:a4:d7:f7: 15:16:15:be:a2:34:ec:41:31:ce:44:1d:2e:33:97: 4c:93:12:75:e6:34:f6:72:c1:25:9c:c4:a0:5f:e1: db:34:15:4d:1c:c1:44:82:41:60:f1:4d:54:5c:6f: 43:e3:db:4f:88:ea:61:c5:2f:77:b9:0f:6b:4e:ba: f6:47:84:57:ef:36:d5:2d:11:50:5b:95:fa:cc:e2: 8e:6a:c4:d5:91:90:7f:2f:1d:50:9d:a2:f8:ea:1c: 78:6c:bc:aa:54:57:1d:bb:99:03:37:83:6b:2c:ec: 0b:1e:01:64:14:6d:e4:6a:70:11:1c:cb:bc:75:16: b9:fa:78:23:7e:24:a1:0d:28:44:6d:d7:2a:13:3c: 49:a8:66:3f:f8:74:66:ec:86:f6:11:84:db:0c:da: c7:25:d5:ed:79:a9:a7:07:1c:d0:94:c2:f7:88:fe: d9:f1:8c:57:e5:a9:83:70:db:e2:9f:29:5d:b2:5b: e4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:89:A5:88:A2:D0:2C:36:26:3A:0A:16:69:52:90:1E:30:76:98:10 X509v3 Authority Key Identifier: keyid:4D:2D:0D:50:BC:91:A2:6E:21:1F:38:3F:50:2A:B3:D7:0D:02:DC:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91406FF/1D71060A11FD11F1A466363C133D8C67/TS0NULyRom4hHzg_UCqz1w0C3HA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TS0NULyRom4hHzg_UCqz1w0C3HA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406FF/1D71060A11FD11F1A466363C133D8C67/TS0NULyRom4hHzg_UCqz1w0C3HA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:4c:46:38:37:bc:75:d0:2c:eb:cc:8b:a3:6f:f5:91:09:04: cd:20:f8:90:94:e2:12:70:56:e1:a5:6c:c0:96:d5:3b:6b:ea: 23:7e:8f:b0:3e:bd:7c:dd:12:39:47:28:4d:af:69:4a:33:36: c5:d1:e7:09:0e:3d:20:2b:06:17:0b:cb:45:dd:dc:64:0a:3b: d1:44:56:7a:d9:db:ec:8c:d4:88:18:58:86:19:53:d6:b1:bb: 25:93:49:6d:d0:f4:c1:43:18:2d:94:13:58:75:ab:c5:e6:7e: f8:b2:42:20:76:10:af:0c:0d:24:5f:c2:09:9e:93:ad:67:fe: 85:4f:d7:b7:9b:a9:fe:90:51:b2:5c:92:67:43:89:2c:ad:af: 33:f8:81:a5:63:e4:24:eb:27:46:7c:69:f0:1d:f8:c1:10:41: 25:e0:eb:d8:00:05:7c:10:b9:5a:e7:3a:c8:b5:76:5e:d0:d4: 46:01:b5:81:96:b9:84:09:a3:e0:21:e1:5f:2e:6e:19:25:1d: ed:c5:55:cd:52:ec:c6:b2:70:be:1a:0e:26:6b:27:74:c7:8d: 0d:8a:66:0a:41:cc:bc:97:14:1f:40:e2:0d:24:cd:06:ca:e0: fa:d3:ac:7a:b2:35:f9:81:f1:bd:22:84:26:d3:55:c5:d5:46: c6:d5:6d:c7 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MDZGRjExMC8GA1UEBRMoNEQyRDBENTBCQzkxQTI2RTIxMUYzODNGNTAyQUIzRDcw RDAyREM3MDAeFw0yNjA2MjMwODQ1NTVaFw0yNjA2MzAwODQ1NTVaMBgxFjAUBgNV BAMTDTZhM2E0N2MzLWJkMGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnYSrzeTNCCh2GYGeSFMnyDNQpEx6WbJzERO1+AJoPSCxVX/mMdfnWuXwQSdSC 5oZ/kOyeExqdEYGM4u+2LY8p6PptF4FY9qTX9xUWFb6iNOxBMc5EHS4zl0yTEnXm NPZywSWcxKBf4ds0FU0cwUSCQWDxTVRcb0Pj20+I6mHFL3e5D2tOuvZHhFfvNtUt EVBblfrM4o5qxNWRkH8vHVCdovjqHHhsvKpUVx27mQM3g2ss7AseAWQUbeRqcBEc y7x1Frn6eCN+JKENKERt1yoTPEmoZj/4dGbshvYRhNsM2scl1e15qacHHNCUwveI /tnxjFflqYNw2+KfKV2yW+S3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU1ImliKLQ LDYmOgoWaVKQHjB2mBAwHwYDVR0jBBgwFoAUTS0NULyRom4hHzg/UCqz1w0C3HAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQwNkZGLzFENzEwNjBBMTFG RDExRjFBNDY2MzYzQzEzM0Q4QzY3L1RTME5VTHlSb200aEh6Z19VQ3F6MXcwQzNI QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVFMwTlVMeVJvbTRoSHpnX1VDcXoxdzBDM0hBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQw NkZGLzFENzEwNjBBMTFGRDExRjFBNDY2MzYzQzEzM0Q4QzY3L1RTME5VTHlSb200 aEh6Z19VQ3F6MXcwQzNIQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAwTEY4N7x10CzrzIujb/WRCQTNIPiQlOIScFbhpWzAltU7a+ojfo+wPr183RI5 RyhNr2lKMzbF0ecJDj0gKwYXC8tF3dxkCjvRRFZ62dvsjNSIGFiGGVPWsbslk0lt 0PTBQxgtlBNYdavF5n74skIgdhCvDA0kX8IJnpOtZ/6FT9e3m6n+kFGyXJJnQ4ks ra8z+IGlY+Qk6ydGfGnwHfjBEEEl4OvYAAV8ELla5zrItXZe0NRGAbWBlrmECaPg IeFfLm4ZJR3txVXNUuzGsnC+Gg4mayd0x40NimYKQcy8lxQfQOINJM0GyuD606x6 sjX5gfG9IoQm01XF1UbG1W3H -----END CERTIFICATE-----Generated at Wed Jun 24 11:29:08 2026 by rpki-client