$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft File: zuNPo5_yhfcuIp2ihivBDkiPukE.mft (raw, json) Hash identifier: C37EvQjUctluY3fQyGZhxIlr5le7Vbjc77OsJWVXE7k= Subject key identifier: 6A:61:4B:98:DD:0B:A4:06:2C:38:6E:63:F0:8F:1B:F8:04:C6:53:E6 Authority key identifier: CE:E3:4F:A3:9F:F2:85:F7:2E:22:9D:A2:86:2B:C1:0E:48:8F:BA:41 Certificate issuer: /CN=A91A9B3E/serialNumber=CEE34FA39FF285F72E229DA2862BC10E488FBA41 Certificate serial: 0296 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuNPo5_yhfcuIp2ihivBDkiPukE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft Manifest number: 028A Signing time: Tue 23 Jun 2026 01:56:00 +0000 Manifest this update: Tue 23 Jun 2026 01:55:59 +0000 Manifest next update: Tue 30 Jun 2026 01:55:59 +0000 Files and hashes: 1: zuNPo5_yhfcuIp2ihivBDkiPukE.crl (hash: zuGwqxt6Mk0gl01m03fL2MmYABEMV13YFBSFQuIWKOc=) 2: 819F7A60CF8B11EDAE77B351C4F9AE02.roa (hash: bqrc3GnqSlvctr34CSmLH7pQRmgRC/6jwFegK+dWq/4=) 3: 1AB255C68CFF11EDB7BDD865C4F9AE02.roa (hash: HO3OH/8eL6+bCFfILAtxQnck6D05JchPl7X69tG4qW4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.crl rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuNPo5_yhfcuIp2ihivBDkiPukE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jun 2026 01:55:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 662 (0x296) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9B3E, serialNumber=CEE34FA39FF285F72E229DA2862BC10E488FBA41 Validity Not Before: Jun 23 01:55:59 2026 GMT Not After : Jun 30 01:55:59 2026 GMT Subject: CN=6a39e7af-f124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1b:d3:90:74:5c:48:7b:4c:91:ff:29:73:17: df:31:62:c4:6d:30:91:a9:53:e0:dc:d4:8a:f6:96: c2:11:a9:7e:ca:8a:c9:87:c4:9d:42:aa:13:e0:31: 7c:39:53:72:76:1d:1a:98:18:11:90:9b:dd:b7:1e: 82:9e:d4:62:9c:53:2e:ee:18:74:38:52:14:75:b8: f1:ba:21:50:91:ea:4b:27:4e:b4:43:82:eb:16:0a: fb:60:68:b5:f1:ac:25:79:af:15:ed:8f:b4:fb:79: 6d:f7:8b:78:51:e7:ce:e0:7a:5e:c8:1b:8c:16:c7: 04:71:e2:c4:b7:40:51:1b:cd:f6:0b:e8:a6:0e:9d: 54:76:67:b2:0d:49:18:82:fb:3a:9c:11:53:0e:47: 1e:ef:15:74:4c:56:8d:42:34:3d:e9:3f:0d:e6:57: d2:0a:c7:c0:c2:25:27:3e:74:f7:14:73:39:36:32: e6:21:f0:2f:5d:5c:33:c5:fb:54:52:c8:9c:44:3e: 9b:89:ec:3d:a6:53:c0:0c:cc:b3:1c:ac:07:22:bd: e0:2a:5f:ed:52:0d:d1:0f:83:89:3c:94:f7:01:74: d2:cc:1f:b7:28:95:f3:0f:f6:5d:97:d4:42:04:52: 5a:a0:01:be:43:57:14:9b:e7:38:0c:9e:37:11:ac: da:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:61:4B:98:DD:0B:A4:06:2C:38:6E:63:F0:8F:1B:F8:04:C6:53:E6 X509v3 Authority Key Identifier: keyid:CE:E3:4F:A3:9F:F2:85:F7:2E:22:9D:A2:86:2B:C1:0E:48:8F:BA:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuNPo5_yhfcuIp2ihivBDkiPukE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:5d:b2:ed:c0:b5:01:d4:eb:8a:d7:7c:0b:89:87:8d:84:32: cc:9b:a0:f2:ca:12:80:bb:67:4e:4f:d4:b2:64:75:4b:4e:6f: 2e:03:eb:63:bc:c4:89:95:66:46:0e:83:b9:88:84:f9:71:70: de:be:28:a0:ed:d2:5a:47:cb:eb:18:20:4c:09:a0:28:72:f8: 27:c9:c0:29:86:84:bb:b1:06:4a:70:bc:da:1b:2f:bc:a3:18: 6a:ba:ed:32:79:91:c3:bb:fe:dd:aa:4c:64:7a:88:e4:54:42: 67:4c:58:a1:49:fd:15:6f:8e:d5:04:b5:22:8f:c5:90:15:11: b1:99:61:c9:17:62:46:0c:1f:45:9f:3e:af:5b:b6:19:b3:0f: 24:d8:55:5b:9e:38:20:21:5d:b9:7a:36:3f:2c:52:7c:1b:5e: bd:2a:0a:56:80:eb:2b:6a:28:cf:20:66:1f:80:c7:32:7d:0d: 9a:3d:2e:01:a7:0b:4c:af:d8:df:89:96:4a:85:4a:65:f8:0c: 6c:43:ad:b7:c0:61:f0:9d:91:db:de:ff:bd:37:1a:2f:14:bd: f7:d8:51:6a:00:33:0b:8d:db:06:d9:7d:24:ca:63:08:5a:98: e1:63:fb:b3:97:02:d5:bf:65:89:87:0c:b2:f7:e6:ff:6a:3d: 15:fc:fd:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlCM0UxMTAvBgNVBAUTKENFRTM0RkEzOUZGMjg1RjcyRTIyOURBMjg2MkJDMTBF NDg4RkJBNDEwHhcNMjYwNjIzMDE1NTU5WhcNMjYwNjMwMDE1NTU5WjAYMRYwFAYD VQQDEw02YTM5ZTdhZi1mMTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqBvTkHRcSHtMkf8pcxffMWLEbTCRqVPg3NSK9pbCEal+yorJh8SdQqoT4DF8 OVNydh0amBgRkJvdtx6CntRinFMu7hh0OFIUdbjxuiFQkepLJ060Q4LrFgr7YGi1 8awlea8V7Y+0+3lt94t4UefO4HpeyBuMFscEceLEt0BRG832C+imDp1UdmeyDUkY gvs6nBFTDkce7xV0TFaNQjQ96T8N5lfSCsfAwiUnPnT3FHM5NjLmIfAvXVwzxftU UsicRD6biew9plPADMyzHKwHIr3gKl/tUg3RD4OJPJT3AXTSzB+3KJXzD/Zdl9RC BFJaoAG+Q1cUm+c4DJ43Eaza8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGphS5jd C6QGLDhuY/CPG/gExlPmMB8GA1UdIwQYMBaAFM7jT6Of8oX3LiKdooYrwQ5Ij7pB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUIzRS9EQUIxQzNBNjhD RkIxMUVEOTJFMjVCNjFDNEY5QUUwMi96dU5QbzVfeWhmY3VJcDJpaGl2QkRraVB1 a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1TlBvNV95aGZjdUlwMmloaXZCRGtpUHVrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUIzRS9EQUIxQzNBNjhDRkIxMUVEOTJFMjVCNjFDNEY5QUUwMi96dU5QbzVfeWhm Y3VJcDJpaGl2QkRraVB1a0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQV2y7cC1AdTritd8C4mHjYQyzJug8soSgLtnTk/UsmR1S05vLgPrY7zEiZVm Rg6DuYiE+XFw3r4ooO3SWkfL6xggTAmgKHL4J8nAKYaEu7EGSnC82hsvvKMYarrt MnmRw7v+3apMZHqI5FRCZ0xYoUn9FW+O1QS1Io/FkBURsZlhyRdiRgwfRZ8+r1u2 GbMPJNhVW544ICFduXo2PyxSfBtevSoKVoDrK2oozyBmH4DHMn0Nmj0uAacLTK/Y 34mWSoVKZfgMbEOtt8Bh8J2R297/vTcaLxS999hRagAzC43bBtl9JMpjCFqY4WP7 s5cC1b9liYcMsvfm/2o9Ffz9MQ== -----END CERTIFICATE-----Generated at Wed Jun 24 11:24:44 2026 by rpki-client