$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.mft File: b8Lt8MURUqO-wRSaG9su2yk8nZU.mft (raw, json) Hash identifier: o830oMI/k04fIwY2TV32R6PvN6yLWrWrcA09SXPp/bM= Subject key identifier: 24:14:39:64:AC:BC:7C:1E:9F:9D:5B:AF:6D:AC:CF:4F:7F:8F:71:02 Authority key identifier: 6F:C2:ED:F0:C5:11:52:A3:BE:C1:14:9A:1B:DB:2E:DB:29:3C:9D:95 Certificate issuer: /CN=A91AA28B/serialNumber=6FC2EDF0C51152A3BEC1149A1BDB2EDB293C9D95 Certificate serial: 0E34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8Lt8MURUqO-wRSaG9su2yk8nZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.mft Manifest number: 0E03 Signing time: Tue 30 Jun 2026 18:15:50 +0000 Manifest this update: Tue 30 Jun 2026 18:15:49 +0000 Manifest next update: Tue 07 Jul 2026 18:15:49 +0000 Files and hashes: 1: b8Lt8MURUqO-wRSaG9su2yk8nZU.crl (hash: ZySxn/yrGNBPQ0ZQk+R6a5Lv3Imcxj9q9gzxdHJpHqw=) 2: 11815E36135311EE94A8A114C4F9AE02.roa (hash: T5GAbC0yTN338KtcDTUO9gQz4ASEYtGI5aC6qczg2W4=) 3: 4DD0C31C0E2011F0A0825648C4F9AE02.roa (hash: meOmGfY3r0GblklalG+4OMMAMZcdYPQdKS2Ett97RO8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.crl rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8Lt8MURUqO-wRSaG9su2yk8nZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 Jul 2026 18:15:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3636 (0xe34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA28B, serialNumber=6FC2EDF0C51152A3BEC1149A1BDB2EDB293C9D95 Validity Not Before: Jun 30 18:15:49 2026 GMT Not After : Jul 7 18:15:49 2026 GMT Subject: CN=6a4407d5-ce18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5b:c9:ab:1a:ab:ce:ad:b4:b1:c3:dc:a4:3f: d9:bb:dc:66:11:18:d1:b0:f8:49:a1:20:c1:93:62: fb:26:35:a4:82:a8:2f:6a:a2:b4:56:2b:dc:39:18: dc:77:d3:c0:67:26:be:4d:c5:59:16:e2:85:f1:e8: e0:14:3b:15:91:cc:a4:1a:8d:f9:aa:72:c8:15:e0: 8c:a0:6c:b1:7a:f8:ca:ee:b0:75:42:69:18:6e:e5: d7:27:f6:07:a5:b9:54:84:56:c0:17:86:0a:c8:31: 9f:c8:9f:59:7e:94:c2:3a:59:ca:23:87:33:18:39: a3:fe:a6:5a:c5:31:ac:7c:54:c3:31:00:81:e1:0d: 78:e3:6c:cb:07:0d:e0:0b:11:6f:8d:07:c5:32:f3: 39:d4:88:09:f1:51:a9:db:b3:8c:0d:07:7f:69:a2: 6f:87:ac:b2:ab:06:78:94:90:49:c4:37:1a:c3:0d: b4:45:cf:c9:3b:d0:64:bd:64:32:6a:78:8f:7e:1d: 1b:f8:68:98:e8:e8:77:2f:b4:c9:20:5d:75:70:14: fd:e1:71:93:2c:18:1e:3b:ec:54:68:33:5b:b2:c5: cc:65:50:a8:04:7a:c2:1d:d3:c6:01:fb:2a:05:f3: 9f:06:10:bf:36:08:d3:cf:c9:39:67:48:87:f6:01: a6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:14:39:64:AC:BC:7C:1E:9F:9D:5B:AF:6D:AC:CF:4F:7F:8F:71:02 X509v3 Authority Key Identifier: keyid:6F:C2:ED:F0:C5:11:52:A3:BE:C1:14:9A:1B:DB:2E:DB:29:3C:9D:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8Lt8MURUqO-wRSaG9su2yk8nZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:48:0a:24:e8:f2:8a:3f:9b:15:17:81:0b:32:f2:29:5c:4d: ba:96:13:f7:09:37:64:27:dc:de:d1:9f:a5:f7:f8:0c:0a:e2: 44:04:7b:72:20:50:6f:1b:f9:6b:88:12:bc:03:09:df:54:f2: 90:77:d8:83:bd:76:ef:01:45:f4:f9:12:56:3f:f5:ab:fc:fe: 15:2b:6e:f4:76:7e:d5:ef:ce:e1:7d:c6:71:5c:9e:c3:d6:0d: 19:cb:1c:b0:d2:9a:7b:4b:23:6c:1b:60:b3:7c:09:31:02:e7: d3:2a:62:ee:e9:e1:cc:7f:f4:4a:7a:57:60:7c:16:e8:3d:70: 2e:73:2b:43:c9:3d:58:41:92:b5:1c:d1:e8:6f:42:65:6c:84: 3f:da:5e:9a:34:65:52:17:c3:63:bc:70:0a:42:a3:6d:c5:f0: d1:70:46:8b:81:94:b7:01:2f:1c:23:dd:5d:4f:50:e8:55:56: a0:4b:43:96:fc:7b:eb:54:d2:50:86:55:57:89:df:5f:7f:1c: a3:b6:9c:3e:65:b7:26:43:d3:7e:16:ad:f4:4f:28:70:4c:35: 2e:d9:d0:87:08:e5:95:60:ac:93:42:74:91:41:1f:04:b6:a0: 70:96:8d:aa:15:92:ad:fe:c0:e9:a5:c1:d3:90:aa:78:4b:ec: b7:da:e2:6f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUEyOEIxMTAvBgNVBAUTKDZGQzJFREYwQzUxMTUyQTNCRUMxMTQ5QTFCREIyRURC MjkzQzlEOTUwHhcNMjYwNjMwMTgxNTQ5WhcNMjYwNzA3MTgxNTQ5WjAYMRYwFAYD VQQDEw02YTQ0MDdkNS1jZTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy1vJqxqrzq20scPcpD/Zu9xmERjRsPhJoSDBk2L7JjWkgqgvaqK0VivcORjc d9PAZya+TcVZFuKF8ejgFDsVkcykGo35qnLIFeCMoGyxevjK7rB1QmkYbuXXJ/YH pblUhFbAF4YKyDGfyJ9ZfpTCOlnKI4czGDmj/qZaxTGsfFTDMQCB4Q1442zLBw3g CxFvjQfFMvM51IgJ8VGp27OMDQd/aaJvh6yyqwZ4lJBJxDcaww20Rc/JO9BkvWQy aniPfh0b+GiY6Oh3L7TJIF11cBT94XGTLBgeO+xUaDNbssXMZVCoBHrCHdPGAfsq BfOfBhC/NgjTz8k5Z0iH9gGm0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCQUOWSs vHwen51br22sz09/j3ECMB8GA1UdIwQYMBaAFG/C7fDFEVKjvsEUmhvbLtspPJ2V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTI4Qi8xRTAyNjRBQURC QzgxMUU5QkVBOTEwNTFDNEY5QUUwMi9iOEx0OE1VUlVxTy13UlNhRzlzdTJ5azhu WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I4THQ4TVVSVXFPLXdSU2FHOXN1MnlrOG5aVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTI4Qi8xRTAyNjRBQURCQzgxMUU5QkVBOTEwNTFDNEY5QUUwMi9iOEx0OE1VUlVx Ty13UlNhRzlzdTJ5azhuWlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjEgKJOjyij+bFReBCzLyKVxNupYT9wk3ZCfc3tGfpff4DAriRAR7ciBQbxv5 a4gSvAMJ31TykHfYg7127wFF9PkSVj/1q/z+FStu9HZ+1e/O4X3GcVyew9YNGcsc sNKae0sjbBtgs3wJMQLn0ypi7unhzH/0SnpXYHwW6D1wLnMrQ8k9WEGStRzR6G9C ZWyEP9pemjRlUhfDY7xwCkKjbcXw0XBGi4GUtwEvHCPdXU9Q6FVWoEtDlvx761TS UIZVV4nfX38co7acPmW3JkPTfhat9E8ocEw1LtnQhwjllWCsk0J0kUEfBLagcJaN qhWSrf7A6aXB05CqeEvst9ribw== -----END CERTIFICATE-----Generated at Wed Jul 1 06:28:39 2026 by rpki-client