$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/pKVwtST2YpG2kJvyMTPV24NQQe0.mft File: pKVwtST2YpG2kJvyMTPV24NQQe0.mft (raw, json) Hash identifier: HEZvNYKNMdXHQK+7BsYwV75R2fZQE4CrtmJIxaDdpe0= Subject key identifier: 53:C8:4F:18:AE:EB:09:B9:7D:1E:1E:4F:48:2F:D0:4A:C0:03:13:E1 Authority key identifier: A4:A5:70:B5:24:F6:62:91:B6:90:9B:F2:31:33:D5:DB:83:50:41:ED Certificate issuer: /CN=A91A6C1A/serialNumber=A4A570B524F66291B6909BF23133D5DB835041ED Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pKVwtST2YpG2kJvyMTPV24NQQe0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/pKVwtST2YpG2kJvyMTPV24NQQe0.mft Manifest number: 0C Signing time: Tue 23 Jun 2026 09:26:25 +0000 Manifest this update: Tue 23 Jun 2026 09:26:25 +0000 Manifest next update: Tue 30 Jun 2026 09:26:25 +0000 Files and hashes: 1: pKVwtST2YpG2kJvyMTPV24NQQe0.crl (hash: B7CplpvF5/Xf+VJ4c6fTjsTbAA+C5KdMZQuE/hKQRNk=) 2: 8B417B6064AA11F19AE9C6D58F47A888.roa (hash: p4PsoFtVmoyNxlXYNhF8Qpg25SbCbP43gXrqt/3vkfE=) 3: 694EC58664AE11F189DF701D9347A888.roa (hash: uf1w2K+QavHMr69P1XIOXrrKK1vFbrU3GZGJb7MtqTI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/pKVwtST2YpG2kJvyMTPV24NQQe0.crl rsync://rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/pKVwtST2YpG2kJvyMTPV24NQQe0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pKVwtST2YpG2kJvyMTPV24NQQe0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jun 2026 09:26:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6C1A, serialNumber=A4A570B524F66291B6909BF23133D5DB835041ED Validity Not Before: Jun 23 09:26:25 2026 GMT Not After : Jun 30 09:26:25 2026 GMT Subject: CN=6a3a5141-db75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9d:23:7f:54:ee:ed:a1:ea:08:04:63:e3:5f: 80:ef:dc:74:9d:b1:03:1b:e8:14:cf:2e:f9:f7:1e: fe:4f:dc:48:c2:ff:7c:06:7a:15:b6:32:df:cb:02: 1e:69:47:06:be:8a:f3:f7:d6:fd:11:ba:51:53:c8: f3:5a:76:c0:d2:33:aa:78:d0:4e:94:6d:53:e1:85: 82:a0:68:1d:34:80:a3:85:be:62:09:6b:42:09:15: f4:f2:b7:78:47:ae:b1:69:df:89:09:e9:d3:20:a5: cc:93:e0:bb:f7:6a:93:81:77:4c:f2:1d:fc:04:21: 71:62:d0:93:44:85:1e:7c:ce:a7:1d:00:bc:2d:c0: 6c:34:c2:52:2e:cf:6b:2b:e3:a8:50:c7:f0:60:4f: cb:62:16:fa:6c:84:3e:2b:14:b8:1b:96:0a:97:33: 83:be:cf:c6:5c:b2:1d:c2:d1:18:3f:dd:29:a3:a5: 79:89:7e:db:ad:db:60:36:eb:28:7e:4c:ac:36:72: e5:93:3a:0b:2a:ff:f5:5a:4a:b0:99:2c:82:a2:27: ac:cf:15:34:a2:6f:74:85:7b:86:3d:32:d0:df:01: 71:f4:1e:86:fa:6e:da:24:7f:13:91:8f:3f:5e:98: 94:0c:ee:0e:1b:9b:00:d1:99:61:3a:17:85:71:4a: da:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:C8:4F:18:AE:EB:09:B9:7D:1E:1E:4F:48:2F:D0:4A:C0:03:13:E1 X509v3 Authority Key Identifier: keyid:A4:A5:70:B5:24:F6:62:91:B6:90:9B:F2:31:33:D5:DB:83:50:41:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/pKVwtST2YpG2kJvyMTPV24NQQe0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pKVwtST2YpG2kJvyMTPV24NQQe0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/pKVwtST2YpG2kJvyMTPV24NQQe0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:2b:eb:ad:d8:41:c3:80:7c:e2:f7:41:c9:c3:15:89:d3:30: 96:de:cd:22:46:09:9c:a1:33:ce:a6:c3:6a:d5:7b:7b:98:98: ae:a4:59:0d:e0:8e:49:4f:06:0c:b5:3b:03:8e:4d:18:8e:79: d4:46:62:53:d8:eb:d8:c1:2a:4f:82:c1:ae:36:c2:23:95:ae: 62:74:06:e1:e1:2e:7a:2f:15:c6:33:71:ff:c8:12:ab:08:ec: 4e:ae:85:95:0d:10:ce:bb:cb:53:63:44:7a:c0:3c:bc:3f:27: f9:36:39:00:1b:86:e1:69:63:d5:e7:96:87:1b:28:ab:64:94: ee:14:a0:95:df:14:72:e4:1b:77:ce:22:20:fb:58:92:15:ee: 1e:fe:42:d8:cc:bb:20:17:06:67:23:ed:a8:14:01:d3:1a:31: 45:3b:73:88:36:46:fe:d7:a5:a4:a4:b5:03:25:4a:8a:75:2e: 00:c3:64:ec:ec:8d:9b:ef:2a:9a:82:cb:0c:2c:fe:42:23:ac: 67:58:9b:bc:3c:44:a2:71:60:49:7e:2b:2c:e4:86:9c:9b:2d: 72:79:7d:4a:14:30:e2:ae:4d:c2:ae:9b:02:1d:b0:8e:a9:42: 3f:0b:c5:1d:12:d2:41:94:83:d7:dc:90:c8:48:e8:42:22:27: 31:2d:c4:42 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NkMxQTExMC8GA1UEBRMoQTRBNTcwQjUyNEY2NjI5MUI2OTA5QkYyMzEzM0Q1REI4 MzUwNDFFRDAeFw0yNjA2MjMwOTI2MjVaFw0yNjA2MzAwOTI2MjVaMBgxFjAUBgNV BAMTDTZhM2E1MTQxLWRiNzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvnSN/VO7toeoIBGPjX4Dv3HSdsQMb6BTPLvn3Hv5P3EjC/3wGehW2Mt/LAh5p Rwa+ivP31v0RulFTyPNadsDSM6p40E6UbVPhhYKgaB00gKOFvmIJa0IJFfTyt3hH rrFp34kJ6dMgpcyT4Lv3apOBd0zyHfwEIXFi0JNEhR58zqcdALwtwGw0wlIuz2sr 46hQx/BgT8tiFvpshD4rFLgblgqXM4O+z8Zcsh3C0Rg/3SmjpXmJftut22A26yh+ TKw2cuWTOgsq//VaSrCZLIKiJ6zPFTSib3SFe4Y9MtDfAXH0Hob6btokfxORjz9e mJQM7g4bmwDRmWE6F4VxStrvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUU8hPGK7r Cbl9Hh5PSC/QSsADE+EwHwYDVR0jBBgwFoAUpKVwtST2YpG2kJvyMTPV24NQQe0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2QzFBL0UxMkM0Q0E0NjRB OTExRjFCNjVGNTZCMjhGNDdBODg4L3BLVnd0U1QyWXBHMmtKdnlNVFBWMjROUVFl MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcEtWd3RTVDJZcEcya0p2eU1UUFYyNE5RUWUwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2 QzFBL0UxMkM0Q0E0NjRBOTExRjFCNjVGNTZCMjhGNDdBODg4L3BLVnd0U1QyWXBH MmtKdnlNVFBWMjROUVFlMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCUK+ut2EHDgHzi90HJwxWJ0zCW3s0iRgmcoTPOpsNq1Xt7mJiupFkN4I5JTwYM tTsDjk0YjnnURmJT2OvYwSpPgsGuNsIjla5idAbh4S56LxXGM3H/yBKrCOxOroWV DRDOu8tTY0R6wDy8Pyf5NjkAG4bhaWPV55aHGyirZJTuFKCV3xRy5Bt3ziIg+1iS Fe4e/kLYzLsgFwZnI+2oFAHTGjFFO3OINkb+16WkpLUDJUqKdS4Aw2Ts7I2b7yqa gssMLP5CI6xnWJu8PESicWBJfiss5Iacmy1yeX1KFDDirk3CrpsCHbCOqUI/C8Ud EtJBlIPX3JDISOhCIicxLcRC -----END CERTIFICATE-----Generated at Wed Jun 24 11:10:44 2026 by rpki-client