$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft File: lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft (raw, json) Hash identifier: w/dd+T7JycvMC0iC2NaLEPbe3F89sO+o7hpIrPVG6v8= Subject key identifier: 45:B5:F9:C1:7C:F5:58:5F:E1:E1:05:0A:BD:9E:DF:09:23:AC:1F:3A Authority key identifier: 94:3D:3E:10:B8:BB:E1:38:B4:77:34:55:4B:69:05:31:10:D4:5B:E3 Certificate issuer: /CN=A91A3E3F/serialNumber=943D3E10B8BBE138B47734554B69053110D45BE3 Certificate serial: 02AF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lD0-ELi74Ti0dzRVS2kFMRDUW-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft Manifest number: 0295 Signing time: Mon 01 Jun 2026 02:28:22 +0000 Manifest this update: Mon 01 Jun 2026 02:28:22 +0000 Manifest next update: Mon 08 Jun 2026 02:28:22 +0000 Files and hashes: 1: lD0-ELi74Ti0dzRVS2kFMRDUW-M.crl (hash: CUxoGoHDEul/SirUF0XE+byiUF6ww+VeOrLKOOCP+WY=) 2: 0DCBAC3863C111EE9A8AA77AC4F9AE02.roa (hash: GciIQFKZEDGE9hgGALOITWN6X2hcQgqUIJI2iebUPt0=) 3: 912586FA7F4F11ED96FDE369C4F9AE02.roa (hash: oDxhk7yyyS7XjpV32D/aM5gsCVmFn8goDNp/4neIOwI=) 4: 5420A28C7F5211ED8A16EF81C4F9AE02.roa (hash: r3++Lv3YwYTeBuQ9YwxUmnM2K/MpPtlRtHpvGBG3Tew=) 5: 9ADB02A27F4E11EDB22F3582C4F9AE02.roa (hash: FgUnddlUujv2vo5PO2Kmcoqb9bIXnPrlSeL5f4C9RPk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.crl rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lD0-ELi74Ti0dzRVS2kFMRDUW-M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 02:28:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 687 (0x2af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3E3F, serialNumber=943D3E10B8BBE138B47734554B69053110D45BE3 Validity Not Before: Jun 1 02:28:22 2026 GMT Not After : Jun 8 02:28:22 2026 GMT Subject: CN=6a1cee46-2598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d4:74:79:40:89:f1:b4:53:b7:8d:6b:f4:8b: dd:cd:05:71:d9:a9:87:24:e5:4c:b5:86:6a:e9:3f: a9:37:94:52:d2:c9:04:a0:a1:60:ce:29:9f:a3:59: ea:da:9c:04:73:3d:92:8c:28:00:e5:8b:22:ed:1b: f0:c0:ce:b1:2c:b4:c5:62:63:e7:ae:e0:f8:23:fb: 1b:eb:82:c1:8b:f1:d8:ed:4e:5d:1d:60:7f:16:94: 2a:90:9a:de:14:5c:41:22:e3:1d:7e:92:8c:00:7e: 0c:23:ce:c7:19:27:99:60:55:71:9d:12:00:43:53: d9:a0:18:cd:44:48:4e:15:96:f1:54:fd:4d:d6:e4: 64:1d:65:34:85:54:d6:59:bf:ba:11:b0:f5:da:b7: 2e:72:65:0d:65:c5:5e:35:e9:ac:a6:12:a4:67:68: 2d:db:17:22:8c:5f:65:07:bf:6b:08:fd:4c:8e:a7: d5:23:2f:33:9f:1d:d2:21:0a:63:8d:4f:e0:4b:21: a0:6c:d4:2c:c6:8f:dc:77:f4:37:20:1d:8f:bf:49: 09:ab:e2:f3:f2:c1:fb:d5:10:b8:0d:b3:d4:20:2c: 06:39:a3:ff:9a:38:fb:ac:4b:e3:a8:30:a9:94:8a: 91:c3:d5:8b:1e:9b:68:6d:5a:6a:4f:b8:b3:6a:21: 49:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:B5:F9:C1:7C:F5:58:5F:E1:E1:05:0A:BD:9E:DF:09:23:AC:1F:3A X509v3 Authority Key Identifier: keyid:94:3D:3E:10:B8:BB:E1:38:B4:77:34:55:4B:69:05:31:10:D4:5B:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lD0-ELi74Ti0dzRVS2kFMRDUW-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:c5:92:4b:77:80:7d:66:db:fd:b3:7c:59:e1:d4:65:05:4d: 68:c2:15:9c:66:b4:8f:6d:48:87:2d:80:a4:4b:cb:43:71:ce: 93:5b:06:08:d5:19:e3:e3:ac:69:b4:9a:02:8f:91:21:95:96: aa:f3:c9:51:67:86:50:8c:69:61:68:d9:1c:82:16:ec:40:f4: 05:99:2f:6e:1e:f5:f0:18:db:50:0a:d6:69:1f:94:4f:09:cd: 11:ca:c9:26:31:17:90:31:df:10:53:16:c1:a9:73:bf:c0:83: 94:cb:dd:38:e6:63:6a:f0:73:2e:de:c7:0f:35:df:df:4d:1e: ab:72:7e:96:c8:93:99:4d:96:b3:d9:11:7c:01:5d:19:e1:b5: 89:bd:f2:96:00:fe:29:c6:7e:8e:31:11:fb:d1:a8:87:e3:b0: 85:87:0d:cf:c5:35:2c:12:52:fe:e9:1d:dc:a7:75:5a:1e:22: f3:23:7c:6c:ee:3b:60:b6:91:3e:ab:41:cf:8c:89:ba:01:d3: 93:fd:ec:a2:b5:9e:96:f8:67:0e:c6:eb:c7:90:2b:c4:1b:a3: f7:9e:8a:a2:7e:88:69:13:73:91:be:99:9c:04:b5:4d:cd:ae: 6c:97:07:17:24:e0:c8:55:12:30:40:16:7e:c8:9f:56:79:8f: e7:fd:44:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNFM0YxMTAvBgNVBAUTKDk0M0QzRTEwQjhCQkUxMzhCNDc3MzQ1NTRCNjkwNTMx MTBENDVCRTMwHhcNMjYwNjAxMDIyODIyWhcNMjYwNjA4MDIyODIyWjAYMRYwFAYD VQQDEw02YTFjZWU0Ni0yNTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1dR0eUCJ8bRTt41r9IvdzQVx2amHJOVMtYZq6T+pN5RS0skEoKFgzimfo1nq 2pwEcz2SjCgA5Ysi7RvwwM6xLLTFYmPnruD4I/sb64LBi/HY7U5dHWB/FpQqkJre FFxBIuMdfpKMAH4MI87HGSeZYFVxnRIAQ1PZoBjNREhOFZbxVP1N1uRkHWU0hVTW Wb+6EbD12rcucmUNZcVeNemsphKkZ2gt2xcijF9lB79rCP1MjqfVIy8znx3SIQpj jU/gSyGgbNQsxo/cd/Q3IB2Pv0kJq+Lz8sH71RC4DbPUICwGOaP/mjj7rEvjqDCp lIqRw9WLHptobVpqT7izaiFJmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEW1+cF8 9Vhf4eEFCr2e3wkjrB86MB8GA1UdIwQYMBaAFJQ9PhC4u+E4tHc0VUtpBTEQ1Fvj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0UzRi8zMDVFQjg3NjdD REIxMUVEQUI4NDRDMTlDNEY5QUUwMi9sRDAtRUxpNzRUaTBkelJWUzJrRk1SRFVX LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xEMC1FTGk3NFRpMGR6UlZTMmtGTVJEVVctTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0UzRi8zMDVFQjg3NjdDREIxMUVEQUI4NDRDMTlDNEY5QUUwMi9sRDAtRUxpNzRU aTBkelJWUzJrRk1SRFVXLU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACMWSS3eAfWbb/bN8WeHUZQVNaMIVnGa0j21Ihy2ApEvLQ3HOk1sGCNUZ4+Os abSaAo+RIZWWqvPJUWeGUIxpYWjZHIIW7ED0BZkvbh718BjbUArWaR+UTwnNEcrJ JjEXkDHfEFMWwalzv8CDlMvdOOZjavBzLt7HDzXf300eq3J+lsiTmU2Ws9kRfAFd GeG1ib3ylgD+KcZ+jjER+9Goh+OwhYcNz8U1LBJS/ukd3Kd1Wh4i8yN8bO47YLaR PqtBz4yJugHTk/3sorWelvhnDsbrx5ArxBuj956Kon6IaRNzkb6ZnAS1Tc2ubJcH FyTgyFUSMEAWfsifVnmP5/1Ejw== -----END CERTIFICATE-----Generated at Wed Jun 3 20:11:03 2026 by rpki-client