$ rpki-client -vvf rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft File: tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft (raw, json) Hash identifier: r0HJf92+i4ZjAFrE7uDonIzJpgk6HsF2shPm5vsSWIc= Subject key identifier: C9:72:F0:33:5A:71:41:7A:BC:A3:58:23:3B:4E:F0:F8:D9:B2:17:CC Authority key identifier: B5:2A:E1:83:6C:61:19:3D:EA:8B:A5:BE:9D:71:B8:CB:B3:43:03:98 Certificate issuer: /CN=A91599B5/serialNumber=B52AE1836C61193DEA8BA5BE9D71B8CBB3430398 Certificate serial: BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft Manifest number: AE Signing time: Thu 11 Jun 2026 09:36:20 +0000 Manifest this update: Thu 11 Jun 2026 09:36:19 +0000 Manifest next update: Thu 18 Jun 2026 09:36:19 +0000 Files and hashes: 1: tSrhg2xhGT3qi6W-nXG4y7NDA5g.crl (hash: 3dDYiXzEm/krns49Wk6FcJ8dQb19uIGUNTtdx4+N518=) 2: 1D5A2DB2CAD711F0A64CBB56C4F9AE02.roa (hash: UYmzmNOhHVux9yZEz47QdQpPwQPcVltUv0OFhaHMSfI=) 3: E13B045ACAD611F0AB7FEE55C4F9AE02.roa (hash: HUQd5AJYGdLE7NKYHx8Lq6oK6+YpU4Q/zvBoPbc+PIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.crl rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 09:36:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91599B5, serialNumber=B52AE1836C61193DEA8BA5BE9D71B8CBB3430398 Validity Not Before: Jun 11 09:36:19 2026 GMT Not After : Jun 18 09:36:19 2026 GMT Subject: CN=6a2a8194-fea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e2:b1:7e:f4:12:45:5e:c7:2e:19:fa:91:8c: cf:dd:32:7d:ed:6f:05:cc:76:a3:ec:3c:72:32:36: 57:05:ba:5b:25:0c:1a:1d:d0:92:7a:c0:1e:f9:dd: 3f:84:04:82:86:03:97:0d:d6:0d:4f:fd:a7:c2:bd: 46:d9:25:21:5c:a7:8d:fe:76:0b:1a:26:78:fd:9c: 59:9a:69:60:87:55:31:5e:68:0f:99:02:df:6b:3d: 7f:d2:17:bb:95:2f:c0:08:7d:cf:ee:bc:1e:a6:0e: c7:46:99:b0:70:75:5b:0a:ec:be:75:a6:fe:f4:08: 2c:5f:5e:23:1f:6b:a0:aa:09:44:d9:c6:3f:78:17: 0f:de:ca:4c:97:5f:0a:78:08:f9:94:86:95:75:e2: b1:24:38:c3:16:b1:f3:7b:87:1e:a9:d3:1b:6b:b3: 21:02:60:30:65:a1:d6:59:94:79:1f:90:a0:2f:1c: 3c:23:ba:33:4d:71:3f:09:7e:e1:7b:73:6d:02:e9: 7b:3a:81:44:bc:7b:d5:09:1b:58:a5:65:fe:14:d1: d0:5e:fd:56:52:bd:de:10:44:2c:45:e8:ab:11:5d: 2f:b1:12:93:5e:54:dc:db:f8:1f:29:42:3c:e7:f7: 6e:b6:44:74:cf:f9:f4:40:e0:e5:5e:f1:ef:c4:5d: 1f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:72:F0:33:5A:71:41:7A:BC:A3:58:23:3B:4E:F0:F8:D9:B2:17:CC X509v3 Authority Key Identifier: keyid:B5:2A:E1:83:6C:61:19:3D:EA:8B:A5:BE:9D:71:B8:CB:B3:43:03:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:7c:aa:c7:8a:83:69:97:39:3a:bf:b5:f6:0f:91:13:60:58: 82:51:bf:30:4f:37:12:31:21:23:f7:24:35:b1:04:23:5c:cc: 6c:98:ef:08:cf:9b:4f:94:fb:d5:65:cf:31:7d:21:67:04:74: 4c:17:83:a5:6c:87:11:95:1f:90:8e:cd:be:fb:c2:56:a7:cb: 7d:ea:59:2a:34:77:66:de:2f:84:dd:fb:73:ee:c9:d3:3f:3a: 83:b3:56:58:8b:06:10:b0:a0:c3:9f:8b:6e:db:d9:28:fc:58: 65:0a:28:e1:c4:78:cc:9d:43:73:75:2d:65:d4:17:f9:a4:0a: e4:77:be:41:e8:4c:60:e4:53:fe:ca:bb:10:4d:cf:3c:28:df: 64:c3:5c:4a:9d:ee:ee:3a:1b:42:b7:16:38:c2:f6:1b:c1:33: 0b:93:2a:39:6e:b3:a1:75:0c:50:22:e1:ce:0c:05:ae:a4:0d: 04:cf:b8:42:c8:76:70:cb:0c:c2:be:a2:5f:37:70:b9:3f:8f: 61:5e:92:5d:36:22:20:f7:23:63:72:b8:10:06:0e:86:14:fb: eb:35:05:1e:80:0b:32:80:53:a7:f4:8e:8e:e2:6a:e9:1b:21: 31:fc:56:9e:c0:48:25:06:67:51:c9:a1:e6:80:84:84:db:19: bd:d2:5b:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTk5QjUxMTAvBgNVBAUTKEI1MkFFMTgzNkM2MTE5M0RFQThCQTVCRTlENzFCOENC QjM0MzAzOTgwHhcNMjYwNjExMDkzNjE5WhcNMjYwNjE4MDkzNjE5WjAYMRYwFAYD VQQDEw02YTJhODE5NC1mZWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxuKxfvQSRV7HLhn6kYzP3TJ97W8FzHaj7DxyMjZXBbpbJQwaHdCSesAe+d0/ hASChgOXDdYNT/2nwr1G2SUhXKeN/nYLGiZ4/ZxZmmlgh1UxXmgPmQLfaz1/0he7 lS/ACH3P7rwepg7HRpmwcHVbCuy+dab+9AgsX14jH2ugqglE2cY/eBcP3spMl18K eAj5lIaVdeKxJDjDFrHze4ceqdMba7MhAmAwZaHWWZR5H5CgLxw8I7ozTXE/CX7h e3NtAul7OoFEvHvVCRtYpWX+FNHQXv1WUr3eEEQsReirEV0vsRKTXlTc2/gfKUI8 5/dutkR0z/n0QODlXvHvxF0fRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMly8DNa cUF6vKNYIztO8PjZshfMMB8GA1UdIwQYMBaAFLUq4YNsYRk96oulvp1xuMuzQwOY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTlCNS9CMjI2NkZEMjZE RTQxMUYwQkUwMkY5NjFDNEY5QUUwMi90U3JoZzJ4aEdUM3FpNlctblhHNHk3TkRB NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RTcmhnMnhoR1QzcWk2Vy1uWEc0eTdOREE1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTlCNS9CMjI2NkZEMjZERTQxMUYwQkUwMkY5NjFDNEY5QUUwMi90U3JoZzJ4aEdU M3FpNlctblhHNHk3TkRBNWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmHyqx4qDaZc5Or+19g+RE2BYglG/ME83EjEhI/ckNbEEI1zMbJjvCM+bT5T7 1WXPMX0hZwR0TBeDpWyHEZUfkI7NvvvCVqfLfepZKjR3Zt4vhN37c+7J0z86g7NW WIsGELCgw5+LbtvZKPxYZQoo4cR4zJ1Dc3UtZdQX+aQK5He+QehMYORT/sq7EE3P PCjfZMNcSp3u7jobQrcWOML2G8EzC5MqOW6zoXUMUCLhzgwFrqQNBM+4Qsh2cMsM wr6iXzdwuT+PYV6SXTYiIPcjY3K4EAYOhhT76zUFHoALMoBTp/SOjuJq6RshMfxW nsBIJQZnUcmh5oCEhNsZvdJbNw== -----END CERTIFICATE-----Generated at Fri Jun 12 18:15:52 2026 by rpki-client