$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.mft File: PUfmaHu030DFGwOkVZwQyiL2dy8.mft (raw, json) Hash identifier: Ud66mnp75FbK5ZTRw/MzAYssXdL7z0TSjsRYG91nLlE= Subject key identifier: 98:7D:3B:90:94:B4:7D:20:CF:C1:09:97:91:8A:9D:86:C4:5C:43:90 Authority key identifier: 3D:47:E6:68:7B:B4:DF:40:C5:1B:03:A4:55:9C:10:CA:22:F6:77:2F Certificate issuer: /CN=A91AA5C6/serialNumber=3D47E6687BB4DF40C51B03A4559C10CA22F6772F Certificate serial: 0221 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUfmaHu030DFGwOkVZwQyiL2dy8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.mft Manifest number: 020D Signing time: Mon 01 Jun 2026 03:50:16 +0000 Manifest this update: Mon 01 Jun 2026 03:50:15 +0000 Manifest next update: Mon 08 Jun 2026 03:50:15 +0000 Files and hashes: 1: PUfmaHu030DFGwOkVZwQyiL2dy8.crl (hash: 0FUOK/5KoHsqCM5rx12K/LyGROFUhtAsR2Ehb8nGLE0=) 2: FAA2E3324C3811EEB7116433C4F9AE02.roa (hash: lY4zHcYM+OKzlDFbmIejzsChBG9D4T2+3+SOYmgyPIs=) 3: EA1E8B8A51C711EE9A3CC954C4F9AE02.roa (hash: G97KXaER8oHFpVxJ9Nr+pWkbaSoOX+AJP+0tU8j2jBg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.crl rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUfmaHu030DFGwOkVZwQyiL2dy8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 03:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 545 (0x221) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA5C6, serialNumber=3D47E6687BB4DF40C51B03A4559C10CA22F6772F Validity Not Before: Jun 1 03:50:15 2026 GMT Not After : Jun 8 03:50:15 2026 GMT Subject: CN=6a1d0178-4b0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e8:d9:4b:f1:09:1f:ba:df:53:7b:85:e4:ca: 88:97:97:22:f4:38:a7:7a:ae:35:cb:15:50:11:85: 5e:c4:aa:5a:45:7f:07:9f:b1:e7:f1:e9:8d:27:24: 22:ef:62:26:7b:ca:21:15:64:74:08:7d:7e:4f:eb: 93:25:22:88:6d:78:45:34:3e:c0:7a:15:f1:ad:fc: 13:9f:de:a1:02:e4:0e:cd:9c:d7:f0:51:aa:62:8d: d4:f3:6e:2c:4b:d3:71:a4:85:5c:ab:dd:1d:f3:1c: 7a:17:b3:77:b8:17:1d:c1:a3:72:a1:9a:8c:93:b7: a0:35:ac:25:1a:7d:28:57:b1:e2:b6:5f:25:60:27: 8d:f2:40:74:53:67:9a:32:2d:09:63:d4:5f:03:c4: 82:b8:19:5a:b0:11:a6:0b:b1:b0:ac:6a:23:56:5b: 73:58:c7:77:c5:70:a0:ad:36:37:f2:bc:d4:08:6a: 8a:5e:70:ff:b3:38:93:56:f4:21:a2:6b:30:76:17: 3d:60:2b:9c:10:59:03:62:2e:b1:e9:72:ae:a3:db: 77:d2:e1:e6:20:44:52:98:0f:8c:8c:e0:c6:50:07: a7:3f:cc:b0:e0:02:92:24:14:e1:8f:92:15:1f:e3: 87:73:a7:dd:2d:73:72:e7:32:e8:6e:88:83:b7:22: 44:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:7D:3B:90:94:B4:7D:20:CF:C1:09:97:91:8A:9D:86:C4:5C:43:90 X509v3 Authority Key Identifier: keyid:3D:47:E6:68:7B:B4:DF:40:C5:1B:03:A4:55:9C:10:CA:22:F6:77:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUfmaHu030DFGwOkVZwQyiL2dy8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:e0:b3:38:d9:c7:db:61:2d:81:51:4d:3d:81:83:13:7a:c5: 24:43:d6:7c:ba:9b:45:c7:00:fe:82:81:34:c6:9b:09:f0:fe: e4:1a:d2:96:dc:9b:31:4f:54:c7:4f:86:e1:fe:c9:5d:d4:ff: ce:21:26:4f:62:a9:b5:ad:b7:d2:14:b2:73:f7:c0:2a:04:e2: 71:3a:0e:fa:af:6d:90:8f:d3:b4:4e:4f:ee:d5:f4:59:b1:e4: 44:25:e6:16:e9:de:5c:35:71:04:29:2b:d1:d7:72:63:2f:73: fd:43:b0:d9:6f:f8:d2:47:2f:c6:44:71:d8:17:d3:44:e8:78: 17:c5:ca:79:fa:7b:59:9a:71:55:e9:05:af:ff:08:84:88:c2: 6d:61:d4:86:45:82:1d:21:dc:65:59:1a:ab:64:69:06:61:ed: 40:81:c1:1c:74:90:98:95:37:64:b0:01:25:79:74:db:f2:29: a0:a5:2e:19:6f:23:b9:ce:6d:20:43:10:e9:c0:0b:c8:5b:28: bd:06:d5:b3:5b:4b:e3:c7:14:86:88:bb:2e:29:69:f8:5f:db: 46:1d:f8:ad:b6:34:bd:87:0c:7e:6d:8b:99:65:49:c6:6b:cd: 4a:0c:aa:82:50:52:8a:da:57:e6:d8:ab:ca:59:0c:27:d1:7e: a5:c4:b6:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE1QzYxMTAvBgNVBAUTKDNENDdFNjY4N0JCNERGNDBDNTFCMDNBNDU1OUMxMENB MjJGNjc3MkYwHhcNMjYwNjAxMDM1MDE1WhcNMjYwNjA4MDM1MDE1WjAYMRYwFAYD VQQDEw02YTFkMDE3OC00YjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr+jZS/EJH7rfU3uF5MqIl5ci9Dineq41yxVQEYVexKpaRX8Hn7Hn8emNJyQi 72Ime8ohFWR0CH1+T+uTJSKIbXhFND7AehXxrfwTn96hAuQOzZzX8FGqYo3U824s S9NxpIVcq90d8xx6F7N3uBcdwaNyoZqMk7egNawlGn0oV7Hitl8lYCeN8kB0U2ea Mi0JY9RfA8SCuBlasBGmC7GwrGojVltzWMd3xXCgrTY38rzUCGqKXnD/sziTVvQh omswdhc9YCucEFkDYi6x6XKuo9t30uHmIERSmA+MjODGUAenP8yw4AKSJBThj5IV H+OHc6fdLXNy5zLoboiDtyJETwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJh9O5CU tH0gz8EJl5GKnYbEXEOQMB8GA1UdIwQYMBaAFD1H5mh7tN9AxRsDpFWcEMoi9ncv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTVDNi9ENTU1MTlCNDRD MzQxMUVFQUVFREEyMkNDNEY5QUUwMi9QVWZtYUh1MDMwREZHd09rVlp3UXlpTDJk eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BVZm1hSHUwMzBERkd3T2tWWndReWlMMmR5OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTVDNi9ENTU1MTlCNDRDMzQxMUVFQUVFREEyMkNDNEY5QUUwMi9QVWZtYUh1MDMw REZHd09rVlp3UXlpTDJkeTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAneCzONnH22EtgVFNPYGDE3rFJEPWfLqbRccA/oKBNMabCfD+5BrSltybMU9U x0+G4f7JXdT/ziEmT2Kpta230hSyc/fAKgTicToO+q9tkI/TtE5P7tX0WbHkRCXm FuneXDVxBCkr0ddyYy9z/UOw2W/40kcvxkRx2BfTROh4F8XKefp7WZpxVekFr/8I hIjCbWHUhkWCHSHcZVkaq2RpBmHtQIHBHHSQmJU3ZLABJXl02/IpoKUuGW8juc5t IEMQ6cALyFsovQbVs1tL48cUhoi7Lilp+F/bRh34rbY0vYcMfm2LmWVJxmvNSgyq glBSitpX5tirylkMJ9F+pcS2qw== -----END CERTIFICATE-----Generated at Thu Jun 4 13:20:59 2026 by rpki-client