$ rpki-client -vvf rpki.apnic.net/member_repository/A91509C4/4B8961381D8B11E28A33C7E508B02CD2/hQaYWfujzd6OwbgaHgTdYFCzgRM.mft File: hQaYWfujzd6OwbgaHgTdYFCzgRM.mft (raw, json) Hash identifier: +f7pVXrx8sFXkiFVPw3SFCOrp4ePZh0qTPQHBkN7+xQ= Subject key identifier: 29:D5:EE:BC:CE:C4:F2:BF:02:E9:E9:7B:F4:3A:FC:DE:F0:0B:CD:27 Authority key identifier: 85:06:98:59:FB:A3:CD:DE:8E:C1:B8:1A:1E:04:DD:60:50:B3:81:13 Certificate issuer: /CN=A91509C4/serialNumber=85069859FBA3CDDE8EC1B81A1E04DD6050B38113 Certificate serial: 3551 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQaYWfujzd6OwbgaHgTdYFCzgRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91509C4/4B8961381D8B11E28A33C7E508B02CD2/hQaYWfujzd6OwbgaHgTdYFCzgRM.mft Manifest number: 3551 Signing time: Mon 22 Jun 2026 14:34:47 +0000 Manifest this update: Mon 22 Jun 2026 14:34:47 +0000 Manifest next update: Mon 29 Jun 2026 14:34:47 +0000 Files and hashes: 1: hQaYWfujzd6OwbgaHgTdYFCzgRM.crl (hash: uVhkEHUCocM1dr2v2ekaMER2iHuL794Taq4qr5fV5ak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91509C4/4B8961381D8B11E28A33C7E508B02CD2/hQaYWfujzd6OwbgaHgTdYFCzgRM.crl rsync://rpki.apnic.net/member_repository/A91509C4/4B8961381D8B11E28A33C7E508B02CD2/hQaYWfujzd6OwbgaHgTdYFCzgRM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQaYWfujzd6OwbgaHgTdYFCzgRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Jun 2026 14:34:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13649 (0x3551) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509C4, serialNumber=85069859FBA3CDDE8EC1B81A1E04DD6050B38113 Validity Not Before: Jun 22 14:34:47 2026 GMT Not After : Jun 29 14:34:47 2026 GMT Subject: CN=6a394807-0ec8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:12:52:5e:5f:71:16:2c:83:44:e8:6c:a8:e6: 22:71:40:36:3a:98:e4:7a:59:7c:61:3e:fe:53:ba: db:3c:28:88:7f:2d:ba:f7:17:25:91:00:b8:fd:a3: e9:27:e5:d0:85:42:3d:ce:2c:bf:d1:fb:6a:2a:74: ba:e6:b5:8c:52:65:ab:e5:6c:c1:4d:ce:b2:96:d4: bf:08:9a:9b:29:27:d1:fc:a1:eb:92:f9:c4:0b:cd: 90:22:d9:e0:c4:ac:c9:1b:8b:1d:39:b3:86:f5:75: 96:f5:98:d3:9f:c7:bc:d6:62:b6:f4:6d:43:d5:fb: 6e:2e:b7:74:ed:bb:f6:60:d3:3c:90:f0:d6:32:2d: 8e:0b:9b:35:fb:13:93:15:0a:cb:c9:5a:9b:d7:31: b0:ee:b0:ba:53:49:2c:d3:89:4d:5d:f0:41:f4:1a: a0:24:3d:7f:01:d2:67:bc:b9:4d:47:f5:8f:40:4d: f3:c2:81:60:50:87:d8:40:11:a7:48:3a:2e:90:45: fb:03:e0:2d:d9:c2:19:63:62:42:52:e0:9f:88:9b: 59:c2:88:5c:16:1b:1f:a2:27:b4:c0:fc:bf:1b:45: de:06:97:d3:5f:f1:22:9e:b5:ce:f9:ba:8a:da:67: f5:29:18:d5:e4:6e:74:59:a1:15:4c:c3:e1:f0:33: 9a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:D5:EE:BC:CE:C4:F2:BF:02:E9:E9:7B:F4:3A:FC:DE:F0:0B:CD:27 X509v3 Authority Key Identifier: keyid:85:06:98:59:FB:A3:CD:DE:8E:C1:B8:1A:1E:04:DD:60:50:B3:81:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91509C4/4B8961381D8B11E28A33C7E508B02CD2/hQaYWfujzd6OwbgaHgTdYFCzgRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQaYWfujzd6OwbgaHgTdYFCzgRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91509C4/4B8961381D8B11E28A33C7E508B02CD2/hQaYWfujzd6OwbgaHgTdYFCzgRM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:37:6a:44:26:66:73:97:2d:1b:66:5b:45:6d:77:5a:64:7d: ed:e6:a0:0d:de:ef:dc:a4:d5:b3:32:25:a4:50:7f:3f:0c:75: 84:05:91:8e:5e:50:d0:cb:dd:c1:6b:1a:b0:d1:25:b9:0e:8d: 98:ec:88:2c:78:fb:20:5b:63:66:c6:8b:aa:39:98:61:eb:cd: 69:80:53:08:fb:dc:47:08:dd:37:76:bb:fd:e5:e2:73:bd:20: 90:44:7e:95:b9:30:73:6f:72:15:78:79:22:93:4a:df:cd:c3: 47:f9:e0:34:aa:f8:3a:95:79:64:45:ff:b3:96:ba:5e:ec:08: 08:4a:74:5a:39:d2:2f:5c:48:ae:14:e7:fd:34:df:3e:b7:83: 5d:4a:5d:f9:c3:8c:01:ec:07:50:32:6e:7f:ce:d5:c5:5e:83: 7a:4b:9b:5e:1d:42:25:9e:a0:9f:17:4b:18:46:ac:35:de:c3: d8:45:e7:06:96:90:7b:d5:c6:ac:44:82:57:90:8f:62:7c:ee: 92:53:19:cc:d0:b7:31:60:a1:e4:5e:cb:b3:6f:f1:c6:c5:55: ba:97:21:c7:e4:15:40:5a:a8:34:6e:e1:3b:27:a2:9b:3b:d4: 2e:68:72:d3:3a:db:3e:7d:b2:1f:23:64:57:b5:cd:76:a4:85: 94:4a:a2:38 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA5QzQxMTAvBgNVBAUTKDg1MDY5ODU5RkJBM0NEREU4RUMxQjgxQTFFMDRERDYw NTBCMzgxMTMwHhcNMjYwNjIyMTQzNDQ3WhcNMjYwNjI5MTQzNDQ3WjAYMRYwFAYD VQQDEw02YTM5NDgwNy0wZWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArxJSXl9xFiyDROhsqOYicUA2Opjkell8YT7+U7rbPCiIfy269xclkQC4/aPp J+XQhUI9ziy/0ftqKnS65rWMUmWr5WzBTc6yltS/CJqbKSfR/KHrkvnEC82QItng xKzJG4sdObOG9XWW9ZjTn8e81mK29G1D1ftuLrd07bv2YNM8kPDWMi2OC5s1+xOT FQrLyVqb1zGw7rC6U0ks04lNXfBB9BqgJD1/AdJnvLlNR/WPQE3zwoFgUIfYQBGn SDoukEX7A+At2cIZY2JCUuCfiJtZwohcFhsfoie0wPy/G0XeBpfTX/EinrXO+bqK 2mf1KRjV5G50WaEVTMPh8DOa0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCnV7rzO xPK/Aunpe/Q6/N7wC80nMB8GA1UdIwQYMBaAFIUGmFn7o83ejsG4Gh4E3WBQs4ET MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDlDNC80Qjg5NjEzODFE OEIxMUUyOEEzM0M3RTUwOEIwMkNEMi9oUWFZV2Z1anpkNk93YmdhSGdUZFlGQ3pn Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hRYVlXZnVqemQ2T3diZ2FIZ1RkWUZDemdSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDlDNC80Qjg5NjEzODFEOEIxMUUyOEEzM0M3RTUwOEIwMkNEMi9oUWFZV2Z1anpk Nk93YmdhSGdUZFlGQ3pnUk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVDdqRCZmc5ctG2ZbRW13WmR97eagDd7v3KTVszIlpFB/Pwx1hAWRjl5Q0Mvd wWsasNEluQ6NmOyILHj7IFtjZsaLqjmYYevNaYBTCPvcRwjdN3a7/eXic70gkER+ lbkwc29yFXh5IpNK383DR/ngNKr4OpV5ZEX/s5a6XuwICEp0WjnSL1xIrhTn/TTf PreDXUpd+cOMAewHUDJuf87VxV6DekubXh1CJZ6gnxdLGEasNd7D2EXnBpaQe9XG rESCV5CPYnzuklMZzNC3MWCh5F7Ls2/xxsVVupchx+QVQFqoNG7hOyeimzvULmhy 0zrbPn2yHyNkV7XNdqSFlEqiOA== -----END CERTIFICATE-----Generated at Wed Jun 24 11:29:03 2026 by rpki-client