$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.mft File: iOe1QfQimNbptRZdllJGzBzB9aI.mft (raw, json) Hash identifier: 9reY2x/O7xO2cqMR1uBI1C95uJYBoEdcYr0qJxIO0xY= Subject key identifier: 6B:33:D4:97:3F:39:03:17:10:E0:59:EC:31:C5:03:B2:5A:10:01:DF Authority key identifier: 88:E7:B5:41:F4:22:98:D6:E9:B5:16:5D:96:52:46:CC:1C:C1:F5:A2 Certificate issuer: /CN=A91A9D0F/serialNumber=88E7B541F42298D6E9B5165D965246CC1CC1F5A2 Certificate serial: 1025 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iOe1QfQimNbptRZdllJGzBzB9aI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.mft Manifest number: 0FE8 Signing time: Tue 02 Jun 2026 17:31:21 +0000 Manifest this update: Tue 02 Jun 2026 17:31:21 +0000 Manifest next update: Tue 09 Jun 2026 17:31:21 +0000 Files and hashes: 1: iOe1QfQimNbptRZdllJGzBzB9aI.crl (hash: REd/kp4wLWa8LUtlAV3yeWCMCZFzLqWxsAUyshqnOGA=) 2: 13C1EDA8767911EE9A957930C4F9AE02.roa (hash: thWs/wjgTce2OH8uRbqin2U/9yRfT0t37bg0yz1umNk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.crl rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iOe1QfQimNbptRZdllJGzBzB9aI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Jun 2026 15:18:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4133 (0x1025) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9D0F, serialNumber=88E7B541F42298D6E9B5165D965246CC1CC1F5A2 Validity Not Before: Jun 2 17:31:21 2026 GMT Not After : Jun 9 17:31:21 2026 GMT Subject: CN=6a1f1369-b012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4c:b0:7c:de:83:79:6c:25:f2:ef:dd:3d:5a: 82:70:29:f2:5c:4e:12:60:cd:09:8f:fb:d1:1e:78: 40:e0:b5:42:05:cd:36:64:65:47:f8:c0:91:8b:93: 14:bd:19:50:43:61:9e:95:dc:2c:61:fe:71:60:b0: fe:20:13:15:9c:93:6b:72:54:c0:50:fb:eb:37:08: 23:0b:86:8a:b6:16:5e:5a:51:37:a0:9f:6a:b2:73: 3d:b6:47:bf:e5:aa:a3:26:b4:e8:f1:6b:33:70:9f: 7e:dd:b4:61:9a:85:2a:63:75:7b:53:dd:58:fe:67: 9f:5d:f5:e7:bd:de:3b:1f:10:8b:92:0d:26:4e:fa: 46:a1:7f:db:d0:75:f8:37:65:3f:65:32:83:9e:7d: c6:e3:86:53:a8:d3:d6:5d:b1:27:a0:11:6e:35:ea: 78:9b:61:87:6c:72:91:f5:86:ac:a3:40:77:16:28: c5:59:bf:14:50:24:c7:51:e4:ae:0f:b1:b3:ef:93: a2:87:76:5d:f7:69:ff:71:b6:4e:0e:4c:30:ce:9c: 26:dc:69:b8:ff:d7:b2:90:d2:02:d4:02:9d:17:ab: b8:18:a7:56:f7:86:5f:c2:f8:4b:55:9c:d0:9c:43: 07:34:73:47:86:6f:04:ef:0d:12:d4:ca:69:1a:00: 2c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:33:D4:97:3F:39:03:17:10:E0:59:EC:31:C5:03:B2:5A:10:01:DF X509v3 Authority Key Identifier: keyid:88:E7:B5:41:F4:22:98:D6:E9:B5:16:5D:96:52:46:CC:1C:C1:F5:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iOe1QfQimNbptRZdllJGzBzB9aI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:a3:6f:ed:df:f1:3f:c7:cc:af:e5:b9:e7:a0:b4:be:23:fe: 2a:a6:15:dd:33:ff:0e:0c:83:e5:9d:c6:e1:47:20:f9:45:fb: a9:aa:ff:30:83:13:31:39:ea:83:36:f1:6d:2f:7d:04:29:c3: 74:dc:f7:ee:77:34:8a:eb:e8:5d:07:78:d8:f6:d2:4f:55:98: d4:f7:96:83:18:fc:b0:ef:3b:a6:98:c3:c7:1b:c4:06:85:4d: 39:2f:e6:6a:63:23:84:48:85:e8:c5:67:32:69:4f:f7:1f:b2: 36:f6:1e:3f:9b:14:ec:1f:5d:06:23:2d:03:c3:4c:cc:08:38: 7b:af:6c:90:c3:aa:c3:74:77:99:66:c3:57:54:7d:49:62:c3: 0c:3f:43:7d:e9:33:65:f7:41:19:fe:a3:09:c7:f9:c3:b5:bb: 63:4a:e2:d0:5b:d1:93:71:cf:2c:1d:be:a1:49:09:92:a9:a7: c7:5e:34:18:db:3f:53:fa:fd:e8:6b:66:3f:43:f9:3d:91:29: 5e:92:b7:42:3e:27:b7:a2:df:49:41:b0:a1:cf:34:f4:5c:94: 7f:4f:47:54:c3:5c:55:94:cb:c1:f7:f6:0c:95:44:f1:59:86: 5f:72:61:89:6c:ff:36:73:95:f2:76:cd:20:b9:f1:ee:79:0c: db:2b:a1:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICECUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlEMEYxMTAvBgNVBAUTKDg4RTdCNTQxRjQyMjk4RDZFOUI1MTY1RDk2NTI0NkND MUNDMUY1QTIwHhcNMjYwNjAyMTczMTIxWhcNMjYwNjA5MTczMTIxWjAYMRYwFAYD VQQDEw02YTFmMTM2OS1iMDEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvkywfN6DeWwl8u/dPVqCcCnyXE4SYM0Jj/vRHnhA4LVCBc02ZGVH+MCRi5MU vRlQQ2GeldwsYf5xYLD+IBMVnJNrclTAUPvrNwgjC4aKthZeWlE3oJ9qsnM9tke/ 5aqjJrTo8WszcJ9+3bRhmoUqY3V7U91Y/mefXfXnvd47HxCLkg0mTvpGoX/b0HX4 N2U/ZTKDnn3G44ZTqNPWXbEnoBFuNep4m2GHbHKR9Yaso0B3FijFWb8UUCTHUeSu D7Gz75Oih3Zd92n/cbZODkwwzpwm3Gm4/9eykNIC1AKdF6u4GKdW94ZfwvhLVZzQ nEMHNHNHhm8E7w0S1MppGgAsdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGsz1Jc/ OQMXEOBZ7DHFA7JaEAHfMB8GA1UdIwQYMBaAFIjntUH0IpjW6bUWXZZSRswcwfWi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUQwRi83NEJFMzhENjgw Q0YxMUU5QUNENzFCNTBDNEY5QUUwMi9pT2UxUWZRaW1OYnB0UlpkbGxKR3pCekI5 YUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lPZTFRZlFpbU5icHRSWmRsbEpHekJ6QjlhSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUQwRi83NEJFMzhENjgwQ0YxMUU5QUNENzFCNTBDNEY5QUUwMi9pT2UxUWZRaW1O YnB0UlpkbGxKR3pCekI5YUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHKNv7d/xP8fMr+W556C0viP+KqYV3TP/DgyD5Z3G4Ucg+UX7qar/MIMTMTnq gzbxbS99BCnDdNz37nc0iuvoXQd42PbST1WY1PeWgxj8sO87ppjDxxvEBoVNOS/m amMjhEiF6MVnMmlP9x+yNvYeP5sU7B9dBiMtA8NMzAg4e69skMOqw3R3mWbDV1R9 SWLDDD9DfekzZfdBGf6jCcf5w7W7Y0ri0FvRk3HPLB2+oUkJkqmnx140GNs/U/r9 6GtmP0P5PZEpXpK3Qj4nt6LfSUGwoc809FyUf09HVMNcVZTLwff2DJVE8VmGX3Jh iWz/NnOV8nbNILnx7nkM2yuhRw== -----END CERTIFICATE-----Generated at Tue Jun 2 21:48:32 2026 by rpki-client