$ rpki-client -vvf rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft File: PuJvukvjWd6uUAeS6_940ArLdgw.mft (raw, json) Hash identifier: c4j52Td2NzZReS47ZuiGf1Z3BToH1WEW70+R1DR8F2o= Subject key identifier: B4:90:F6:21:17:AA:DB:F9:F1:86:1D:0D:44:2D:0D:D2:64:9C:47:C4 Authority key identifier: 3E:E2:6F:BA:4B:E3:59:DE:AE:50:07:92:EB:FF:78:D0:0A:CB:76:0C Certificate issuer: /CN=A91596C4/serialNumber=3EE26FBA4BE359DEAE500792EBFF78D00ACB760C Certificate serial: 04C9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft Manifest number: 04A5 Signing time: Sat 20 Jun 2026 23:57:00 +0000 Manifest this update: Sat 20 Jun 2026 23:57:00 +0000 Manifest next update: Sat 27 Jun 2026 23:57:00 +0000 Files and hashes: 1: PuJvukvjWd6uUAeS6_940ArLdgw.crl (hash: GEonDAIUj/2xwGDQpzLqMRmioTKdY6GKFJ11hHrpO4U=) 2: 0AE155E6833411ECBB74C786C4F9AE02.roa (hash: DF2zCDZzOfwV2Fb/7F4G0pHecJjvgJOAWTH8TiFGmoc=) 3: 0A4D6250833411ECBB74C786C4F9AE02.roa (hash: LGn5w+iTJlicKdWA6qyGgWwj55jd6LVvyCEcKfnAtIs=) 4: 09B62A48833411ECBB74C786C4F9AE02.roa (hash: 5CjAVhZ4H7jUaLeVyY5rhBjjQSwZO+qN9rQG5F9axLY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.crl rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Jun 2026 23:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1225 (0x4c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91596C4, serialNumber=3EE26FBA4BE359DEAE500792EBFF78D00ACB760C Validity Not Before: Jun 20 23:57:00 2026 GMT Not After : Jun 27 23:57:00 2026 GMT Subject: CN=6a3728cc-90cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1d:5e:a1:31:05:5c:8e:62:39:b2:95:2e:7e: 9f:80:a6:bf:20:25:a1:73:f7:1d:40:7d:54:54:4d: ac:10:e4:1f:d2:cb:0e:28:d4:fe:8e:0d:d9:ef:8a: dc:3a:f5:1c:60:33:c7:81:60:ed:7a:b5:e1:0f:e4: 9b:59:0e:29:24:03:bf:b4:aa:33:8e:cf:ae:b5:fc: 9f:d3:ff:e7:8b:94:45:78:54:78:38:f7:67:4d:5e: 73:d0:68:d5:66:9a:07:cd:10:17:35:96:75:d8:9b: 64:ad:ce:d0:65:cf:ad:d1:ae:e3:86:0b:65:d7:de: 0a:72:42:68:de:49:46:15:cc:a2:7e:56:b7:fc:1f: e2:5c:a7:24:92:68:13:27:de:dc:08:71:0e:39:fb: 25:ac:2b:04:ab:41:19:87:a1:22:cb:29:ed:10:61: 2e:46:20:8d:87:4b:80:75:a4:3f:ec:17:d4:03:c6: 8f:31:09:61:4c:8b:05:0c:d2:48:33:25:2b:51:e0: f0:c5:08:58:d4:dc:d0:4c:b7:b9:24:ac:fd:e7:e7: b9:fa:54:55:a7:cb:9b:46:5d:b9:d4:4c:a0:62:45: ec:5e:48:48:6a:e7:a9:33:ea:98:df:37:5e:78:6f: 65:5d:78:2b:84:6b:6d:9e:44:3b:c7:f0:e8:a6:e8: 40:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:90:F6:21:17:AA:DB:F9:F1:86:1D:0D:44:2D:0D:D2:64:9C:47:C4 X509v3 Authority Key Identifier: keyid:3E:E2:6F:BA:4B:E3:59:DE:AE:50:07:92:EB:FF:78:D0:0A:CB:76:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:51:c4:06:8b:c8:1a:26:bb:73:e5:01:65:44:c1:0c:84:fc: c8:2d:51:ca:8b:9e:e4:43:33:36:d5:16:26:d4:13:ff:5f:b3: 57:dd:5d:90:7e:ca:f8:03:60:47:b5:87:fc:87:8f:a8:2f:f4: 86:cd:ac:fa:57:fe:3a:30:1d:3c:39:b6:0a:43:7f:eb:2f:af: 52:db:7e:d8:f8:ed:d7:9a:ca:9c:e7:a7:11:70:bc:7e:29:38: 7d:f8:b5:27:d1:73:c6:1c:2d:2c:56:f9:29:cf:a8:08:65:37: 08:d3:13:b4:c4:91:52:d1:e6:dc:a0:cc:6e:eb:5d:17:e2:1d: 41:cf:34:b8:64:df:73:50:55:bd:ec:bd:5f:6f:06:40:56:30: 09:22:2a:27:ce:cb:a6:ae:db:9c:b2:83:49:bd:07:94:50:21: 0b:a3:9d:25:cc:d3:07:f8:4a:51:2e:12:8a:54:7a:c5:cb:bd: ca:24:98:d2:53:03:72:ce:8b:43:a1:23:fa:ee:6f:a3:30:14: 88:55:bb:09:3f:64:51:b0:82:d0:20:d3:00:69:28:00:29:25: 6e:c1:be:1f:b7:c9:f9:11:a2:dd:91:8d:0b:2d:34:a3:82:72: f4:fd:d2:f2:23:21:e1:98:8e:e8:0d:8a:4f:4c:7f:8d:13:ac: bc:bd:fa:fe -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTk2QzQxMTAvBgNVBAUTKDNFRTI2RkJBNEJFMzU5REVBRTUwMDc5MkVCRkY3OEQw MEFDQjc2MEMwHhcNMjYwNjIwMjM1NzAwWhcNMjYwNjI3MjM1NzAwWjAYMRYwFAYD VQQDEw02YTM3MjhjYy05MGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtB1eoTEFXI5iObKVLn6fgKa/ICWhc/cdQH1UVE2sEOQf0ssOKNT+jg3Z74rc OvUcYDPHgWDterXhD+SbWQ4pJAO/tKozjs+utfyf0//ni5RFeFR4OPdnTV5z0GjV ZpoHzRAXNZZ12Jtkrc7QZc+t0a7jhgtl194KckJo3klGFcyifla3/B/iXKckkmgT J97cCHEOOfslrCsEq0EZh6EiyyntEGEuRiCNh0uAdaQ/7BfUA8aPMQlhTIsFDNJI MyUrUeDwxQhY1NzQTLe5JKz95+e5+lRVp8ubRl251EygYkXsXkhIauepM+qY3zde eG9lXXgrhGttnkQ7x/DopuhAvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLSQ9iEX qtv58YYdDUQtDdJknEfEMB8GA1UdIwQYMBaAFD7ib7pL41nerlAHkuv/eNAKy3YM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTZDNC9GM0RERUVERTgz MzAxMUVDOEZGMzkzODNDNEY5QUUwMi9QdUp2dWt2aldkNnVVQWVTNl85NDBBckxk Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1B1SnZ1a3ZqV2Q2dVVBZVM2Xzk0MEFyTGRndy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTZDNC9GM0RERUVERTgzMzAxMUVDOEZGMzkzODNDNEY5QUUwMi9QdUp2dWt2aldk NnVVQWVTNl85NDBBckxkZ3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdlHEBovIGia7c+UBZUTBDIT8yC1Ryoue5EMzNtUWJtQT/1+zV91dkH7K+ANg R7WH/IePqC/0hs2s+lf+OjAdPDm2CkN/6y+vUtt+2Pjt15rKnOenEXC8fik4ffi1 J9FzxhwtLFb5Kc+oCGU3CNMTtMSRUtHm3KDMbutdF+IdQc80uGTfc1BVvey9X28G QFYwCSIqJ87Lpq7bnLKDSb0HlFAhC6OdJczTB/hKUS4SilR6xcu9yiSY0lMDcs6L Q6Ej+u5vozAUiFW7CT9kUbCC0CDTAGkoACklbsG+H7fJ+RGi3ZGNCy00o4Jy9P3S 8iMh4ZiO6A2KT0x/jROsvL36/g== -----END CERTIFICATE-----Generated at Sun Jun 21 13:57:54 2026 by rpki-client