$ rpki-client -vvf rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.mft File: U7ksLaLVSegUcEB8yP8MdbjEty0.mft (raw, json) Hash identifier: Oyleulmh9pKP6jzsqJQJVW/IwW8oeYXMW7ge+YdR7OE= Subject key identifier: 5C:B6:D2:1F:7B:4C:AD:D8:56:DB:5A:F6:1B:81:17:94:73:EE:1B:9E Authority key identifier: 53:B9:2C:2D:A2:D5:49:E8:14:70:40:7C:C8:FF:0C:75:B8:C4:B7:2D Certificate issuer: /CN=A91940AE/serialNumber=53B92C2DA2D549E81470407CC8FF0C75B8C4B72D Certificate serial: 5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U7ksLaLVSegUcEB8yP8MdbjEty0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.mft Manifest number: 5A Signing time: Tue 23 Jun 2026 08:27:15 +0000 Manifest this update: Tue 23 Jun 2026 08:27:15 +0000 Manifest next update: Tue 30 Jun 2026 08:27:15 +0000 Files and hashes: 1: U7ksLaLVSegUcEB8yP8MdbjEty0.crl (hash: QSjO+opMyq8cL9gP/GSwTxlREkAKCLXvk67FlTHvgAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.crl rsync://rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U7ksLaLVSegUcEB8yP8MdbjEty0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jun 2026 08:27:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91940AE, serialNumber=53B92C2DA2D549E81470407CC8FF0C75B8C4B72D Validity Not Before: Jun 23 08:27:15 2026 GMT Not After : Jun 30 08:27:15 2026 GMT Subject: CN=6a3a4363-378d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d4:1f:3e:54:94:a2:74:d8:62:27:e2:4a:57: a6:75:b4:4c:29:d0:7c:14:bf:c2:a1:52:34:b5:d4: 36:64:a8:fd:b2:2f:a3:fa:16:77:dd:79:9b:c5:64: 6f:10:ea:14:cf:31:a4:35:e4:bb:db:06:a1:a8:9e: d5:d9:95:07:41:7c:5e:70:03:d5:0e:56:b8:44:f2: 01:ad:92:e4:37:76:26:5b:20:5b:0d:d4:32:7c:33: f7:69:a3:c8:b6:27:ae:05:4a:bd:67:51:8a:c0:af: 2e:b1:c4:9c:2c:90:20:0b:0b:d9:26:de:a2:c8:d6: 80:73:2c:ad:2b:22:88:89:68:eb:08:2f:9c:fb:00: c7:a9:ed:88:be:79:77:b9:c4:07:44:d4:35:38:16: cf:fe:9a:a2:20:f9:16:9e:5e:72:5a:64:39:63:24: 58:62:2d:a3:bf:22:89:36:4d:77:0d:02:da:fc:6a: 56:2a:9e:b9:90:d1:5b:a0:68:84:a0:9a:b9:b6:f9: 04:3b:8b:9b:8e:a9:6c:96:09:e2:a7:ce:09:24:95: 10:dd:07:a8:b6:f4:e4:0b:51:e3:78:5b:bc:53:e5: 8d:68:36:94:ef:f4:be:05:20:a5:62:38:c7:11:30: 44:cf:f0:7e:c5:4f:53:53:41:67:cc:2e:2c:5b:4e: c6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B6:D2:1F:7B:4C:AD:D8:56:DB:5A:F6:1B:81:17:94:73:EE:1B:9E X509v3 Authority Key Identifier: keyid:53:B9:2C:2D:A2:D5:49:E8:14:70:40:7C:C8:FF:0C:75:B8:C4:B7:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U7ksLaLVSegUcEB8yP8MdbjEty0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91940AE/B38E5FD4EF9D11F0A2D6B779676F56BC/U7ksLaLVSegUcEB8yP8MdbjEty0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:e1:27:7f:2e:f4:ee:81:58:41:c9:70:92:22:a3:2a:fd:05: f9:e2:e9:aa:21:8c:5b:07:dd:df:d3:f3:a0:28:20:6b:13:db: 8b:91:d1:98:f4:a0:7a:5b:24:06:e1:4a:7a:c5:22:31:f6:19: 12:57:a7:c5:fa:4d:74:2e:1f:99:ae:2a:73:d3:ea:88:8c:08: 4c:86:83:4e:e1:df:39:2c:ec:c3:e1:93:90:6b:b2:2e:b7:64: f2:c4:e6:e0:dd:49:de:a4:3e:d6:cb:c8:c0:7f:85:90:81:3d: 69:0d:7c:fb:0c:4e:d3:58:4b:a5:82:76:6a:6d:d0:5e:79:3c: 39:da:c6:3c:0c:5b:b7:a9:27:5e:70:62:e6:f7:05:0b:d0:c1: 13:60:b6:eb:fb:09:74:d8:a6:ec:72:8b:37:c7:fa:0e:d2:c7: 54:84:fc:5c:25:23:20:ef:21:9b:e5:4b:d6:eb:3a:84:08:1c: 28:16:16:7d:1c:d0:6e:4a:c8:15:f3:c0:c1:55:6f:ca:ba:a7: 98:65:ad:c6:db:5e:35:29:e5:6b:81:19:0a:e0:48:93:82:41: 5b:b3:e7:4a:df:0e:7c:d6:72:e4:85:d9:cd:f3:83:5c:16:8f: 0e:9e:f1:77:64:60:e7:aa:37:0e:3d:c7:18:71:a8:39:1d:8a: b9:1e:3f:2d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NDBBRTExMC8GA1UEBRMoNTNCOTJDMkRBMkQ1NDlFODE0NzA0MDdDQzhGRjBDNzVC OEM0QjcyRDAeFw0yNjA2MjMwODI3MTVaFw0yNjA2MzAwODI3MTVaMBgxFjAUBgNV BAMTDTZhM2E0MzYzLTM3OGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC81B8+VJSidNhiJ+JKV6Z1tEwp0HwUv8KhUjS11DZkqP2yL6P6FnfdeZvFZG8Q 6hTPMaQ15LvbBqGontXZlQdBfF5wA9UOVrhE8gGtkuQ3diZbIFsN1DJ8M/dpo8i2 J64FSr1nUYrAry6xxJwskCALC9km3qLI1oBzLK0rIoiJaOsIL5z7AMep7Yi+eXe5 xAdE1DU4Fs/+mqIg+RaeXnJaZDljJFhiLaO/Iok2TXcNAtr8alYqnrmQ0VugaISg mrm2+QQ7i5uOqWyWCeKnzgkklRDdB6i29OQLUeN4W7xT5Y1oNpTv9L4FIKViOMcR METP8H7FT1NTQWfMLixbTsZXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUXLbSH3tM rdhW21r2G4EXlHPuG54wHwYDVR0jBBgwFoAUU7ksLaLVSegUcEB8yP8MdbjEty0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk0MEFFL0IzOEU1RkQ0RUY5 RDExRjBBMkQ2Qjc3OTY3NkY1NkJDL1U3a3NMYUxWU2VnVWNFQjh5UDhNZGJqRXR5 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVTdrc0xhTFZTZWdVY0VCOHlQOE1kYmpFdHkwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk0 MEFFL0IzOEU1RkQ0RUY5RDExRjBBMkQ2Qjc3OTY3NkY1NkJDL1U3a3NMYUxWU2Vn VWNFQjh5UDhNZGJqRXR5MC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAT4Sd/LvTugVhByXCSIqMq/QX54umqIYxbB93f0/OgKCBrE9uLkdGY9KB6WyQG 4Up6xSIx9hkSV6fF+k10Lh+Zripz0+qIjAhMhoNO4d85LOzD4ZOQa7Iut2TyxObg 3UnepD7Wy8jAf4WQgT1pDXz7DE7TWEulgnZqbdBeeTw52sY8DFu3qSdecGLm9wUL 0METYLbr+wl02Kbscos3x/oO0sdUhPxcJSMg7yGb5UvW6zqECBwoFhZ9HNBuSsgV 88DBVW/KuqeYZa3G2141KeVrgRkK4EiTgkFbs+dK3w581nLkhdnN84NcFo8OnvF3 ZGDnqjcOPccYcag5HYq5Hj8t -----END CERTIFICATE-----Generated at Wed Jun 24 11:19:11 2026 by rpki-client