$ rpki-client -vvf rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft File: C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft (raw, json) Hash identifier: p/ooIifwFPFbpML6aGAvARMSu1t87pnvyRxYVTnXj2o= Subject key identifier: 54:FE:22:6F:72:84:38:47:DF:18:31:35:D1:3B:8F:A0:FA:AD:3B:83 Authority key identifier: 0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54 Certificate issuer: /CN=A91892EB/serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654 Certificate serial: 06B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft Manifest number: 0690 Signing time: Wed 10 Jun 2026 22:38:49 +0000 Manifest this update: Wed 10 Jun 2026 22:38:49 +0000 Manifest next update: Wed 17 Jun 2026 22:38:49 +0000 Files and hashes: 1: C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl (hash: Qp62J095wvkwRjxZSpdy5NPnM8x/Ddr/Hqj46XgN1Ps=) 2: 4FF7919CA3AE11F08498344CC4F9AE02.roa (hash: vr8P+P39aT/1jKl6iJb1sUFbpi5nliJVWaBLeOW46aY=) 3: 1DE394187C2F11F0902A5A0CC4F9AE02.roa (hash: pdws3t0lZJ1KRtlaVi7T3cqSeY6vMdRKeuikmdwYWhg=) 4: F4DC3C2AC59211EBAA9C5B7BC4F9AE02.roa (hash: AcX/Q7kCXs6/lVr70u8Z/hkgVWbgvWKfVvGr/7kslLM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 22:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1717 (0x6b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91892EB, serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654 Validity Not Before: Jun 10 22:38:49 2026 GMT Not After : Jun 17 22:38:49 2026 GMT Subject: CN=6a29e779-2bc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:69:c4:e9:e8:a4:29:8f:35:86:09:d1:ab:e3: d8:59:3a:dd:84:73:67:26:8d:e4:d8:d8:62:9d:fb: bf:83:52:d2:78:9b:12:b9:0b:61:34:62:7e:2b:ed: b6:09:9d:a6:bb:de:87:23:d3:5b:4d:65:0f:40:af: c6:a1:14:e7:bf:ba:30:c0:17:c5:32:ed:26:83:af: 26:96:77:03:db:c0:d6:69:f8:b4:35:97:d5:ab:a4: 5b:f2:b6:d7:ae:ed:03:a6:03:00:ff:ad:74:6f:ba: a5:1e:c0:0f:cf:d7:41:f9:8a:0a:d6:a0:76:91:cb: 82:18:19:79:df:a3:20:21:11:19:7c:d8:f7:d2:14: 07:40:67:2b:0a:ba:24:af:82:28:5b:54:8f:9f:9e: 27:a4:80:3a:9d:94:95:e0:fe:f2:39:e0:7b:41:df: ce:bc:53:f6:94:4e:18:3d:13:86:89:5b:ad:f0:99: d9:46:63:a7:89:6f:31:70:86:d2:d5:89:15:1e:b8: 25:f8:79:d5:f6:65:4b:91:bc:66:29:3e:1d:48:8c: 9f:42:ff:d1:6b:3f:cd:55:0b:61:5f:97:46:ad:3c: 68:12:4a:25:74:27:ef:09:48:57:94:34:77:4f:62: f9:cf:fa:6a:5c:e6:04:33:9a:89:09:16:8c:3e:d1: 71:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:FE:22:6F:72:84:38:47:DF:18:31:35:D1:3B:8F:A0:FA:AD:3B:83 X509v3 Authority Key Identifier: keyid:0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:3b:6b:19:80:c2:d7:82:9a:1e:bd:bb:a4:cb:07:cb:22:32: 26:f5:36:2f:0c:7b:77:95:09:ed:7e:ed:e4:99:f0:5f:98:28: c3:96:2c:94:72:1e:4e:2e:74:40:6e:7d:33:d7:34:b1:26:53: ea:a2:54:a5:6b:7b:c1:a9:3c:f2:9b:2d:b5:72:73:db:33:91: 72:41:67:36:a8:57:f0:62:75:9e:bc:b6:33:2f:bd:11:e1:5c: e1:eb:33:14:fa:cf:e1:26:e3:83:20:fa:a7:c9:05:2c:ba:79: 89:ee:42:09:6d:4d:c3:33:04:79:ce:21:6d:39:a9:07:62:a8: 83:2e:4a:ad:ff:9a:4a:0b:fd:78:da:6a:dc:32:64:99:6a:04: 77:f2:e1:62:44:7a:e1:4c:5e:1f:a7:35:bc:b9:0b:b4:71:13: 22:96:99:93:52:4d:ee:e1:a1:3e:8f:bc:5a:4d:b5:ff:e7:32: 37:97:67:d1:29:7b:75:d5:99:1c:54:84:02:31:58:22:3d:cb: 6a:62:b5:2b:8f:1d:b9:8b:9b:0e:d5:6b:be:55:7a:ef:3e:f8: 2f:b5:52:9f:55:f0:13:16:3b:33:c9:fb:7d:23:e4:5b:ed:44: 13:9d:66:b9:8b:93:aa:dc:3b:47:d5:17:61:fa:4d:c8:da:f5: a0:e3:73:32 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBrUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkyRUIxMTAvBgNVBAUTKDBCNkNERjNGQUNDNjgwQjc4NjkyNkRFMTM5RjFFMEY2 NzQ0NDA2NTQwHhcNMjYwNjEwMjIzODQ5WhcNMjYwNjE3MjIzODQ5WjAYMRYwFAYD VQQDEw02YTI5ZTc3OS0yYmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1mnE6eikKY81hgnRq+PYWTrdhHNnJo3k2Nhinfu/g1LSeJsSuQthNGJ+K+22 CZ2mu96HI9NbTWUPQK/GoRTnv7owwBfFMu0mg68mlncD28DWafi0NZfVq6Rb8rbX ru0DpgMA/610b7qlHsAPz9dB+YoK1qB2kcuCGBl536MgIREZfNj30hQHQGcrCrok r4IoW1SPn54npIA6nZSV4P7yOeB7Qd/OvFP2lE4YPROGiVut8JnZRmOniW8xcIbS 1YkVHrgl+HnV9mVLkbxmKT4dSIyfQv/Raz/NVQthX5dGrTxoEkoldCfvCUhXlDR3 T2L5z/pqXOYEM5qJCRaMPtFxYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFT+Im9y hDhH3xgxNdE7j6D6rTuDMB8GA1UdIwQYMBaAFAts3z+sxoC3hpJt4Tnx4PZ0RAZU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTJFQi9GRDAwODFERUM1 NjcxMUVCQUZFQTYwMkJDNEY5QUUwMi9DMnpmUDZ6R2dMZUdrbTNoT2ZIZzluUkVC bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MyemZQNnpHZ0xlR2ttM2hPZkhnOW5SRUJsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTJFQi9GRDAwODFERUM1NjcxMUVCQUZFQTYwMkJDNEY5QUUwMi9DMnpmUDZ6R2dM ZUdrbTNoT2ZIZzluUkVCbFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbztrGYDC14KaHr27pMsHyyIyJvU2Lwx7d5UJ7X7t5JnwX5gow5YslHIeTi50 QG59M9c0sSZT6qJUpWt7wak88psttXJz2zORckFnNqhX8GJ1nry2My+9EeFc4esz FPrP4SbjgyD6p8kFLLp5ie5CCW1NwzMEec4hbTmpB2Kogy5Krf+aSgv9eNpq3DJk mWoEd/LhYkR64UxeH6c1vLkLtHETIpaZk1JN7uGhPo+8Wk21/+cyN5dn0Sl7ddWZ HFSEAjFYIj3LamK1K48duYubDtVrvlV67z74L7VSn1XwExY7M8n7fSPkW+1EE51m uYuTqtw7R9UXYfpNyNr1oONzMg== -----END CERTIFICATE-----Generated at Fri Jun 12 17:38:46 2026 by rpki-client