$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft File: cNpFkZHpBoa9sKxHq9owqcPhdPo.mft (raw, json) Hash identifier: 6AIzdzsImUEm0fk/SKSvJoMiAMQKGKYmc5VEYWiR+JI= Subject key identifier: 88:74:6D:79:2C:52:0E:68:CD:A0:41:D2:E9:17:AB:3D:F3:5D:6B:D9 Authority key identifier: 70:DA:45:91:91:E9:06:86:BD:B0:AC:47:AB:DA:30:A9:C3:E1:74:FA Certificate issuer: /CN=A91AF145/serialNumber=70DA459191E90686BDB0AC47ABDA30A9C3E174FA Certificate serial: 022B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft Manifest number: 021F Signing time: Thu 11 Jun 2026 05:04:25 +0000 Manifest this update: Thu 11 Jun 2026 05:04:25 +0000 Manifest next update: Thu 18 Jun 2026 05:04:25 +0000 Files and hashes: 1: cNpFkZHpBoa9sKxHq9owqcPhdPo.crl (hash: HmxBJ1NZ0qyzxi5Zhdd2GJRtT+eOSGIgiBOxt/EEQsE=) 2: 971B23D236EA11EE802E9246C4F9AE02.roa (hash: I+nMBsoAOQUiZCzFaQB/KvumSoVrGOcDZwsmBZeS6yw=) 3: 43E9CB90DFF511EF8E4E3982C4F9AE02.roa (hash: zTVOLFIEBPDpPfLXlenxlDqoCu7oEt/TG+aQAHRnkO8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.crl rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 05:04:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 555 (0x22b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF145, serialNumber=70DA459191E90686BDB0AC47ABDA30A9C3E174FA Validity Not Before: Jun 11 05:04:25 2026 GMT Not After : Jun 18 05:04:25 2026 GMT Subject: CN=6a2a41d9-4255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ee:33:09:62:f3:52:3b:33:6d:a4:9e:f1:fd: 5a:ed:f7:ac:39:4c:e7:b6:dc:92:dc:98:52:99:9e: ac:77:9d:c1:13:2c:b8:61:f4:b5:c5:ad:75:28:a9: d3:4e:87:0c:a2:6e:6d:57:fa:d5:2d:72:5b:c7:e0: 5b:df:d4:98:90:e7:8e:3f:2e:04:f1:db:bd:62:70: 1c:ee:10:ec:05:14:68:5a:93:53:18:7a:ff:e8:db: 9c:98:dc:74:d1:65:68:2c:7a:e4:35:e6:2e:c7:1a: 87:2a:f0:bb:f3:4b:a0:53:33:75:4a:61:c9:3c:a4: fe:f5:e3:2e:3a:c0:a2:97:be:43:a5:f0:ea:b7:8e: 68:a9:83:12:67:2e:92:22:c5:41:2a:ce:1f:c4:8a: 39:3b:0c:58:a7:e2:e8:2a:1d:c0:28:7d:0b:04:cd: f7:8b:87:0a:e4:b6:82:1e:eb:ea:6e:0f:7a:3b:dc: 1d:fd:5c:f5:56:86:2a:fc:e0:18:72:bc:9f:92:94: c7:9b:58:d2:26:4d:aa:8c:09:58:98:1e:78:ad:5b: 61:17:44:3e:b2:cd:2c:69:4f:69:13:fe:2d:76:0c: 03:e7:89:2d:58:19:6b:92:51:47:6e:5c:99:f9:c0: d7:13:a3:97:a5:e9:43:5c:67:6b:7f:6a:7b:25:92: 3b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:74:6D:79:2C:52:0E:68:CD:A0:41:D2:E9:17:AB:3D:F3:5D:6B:D9 X509v3 Authority Key Identifier: keyid:70:DA:45:91:91:E9:06:86:BD:B0:AC:47:AB:DA:30:A9:C3:E1:74:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:70:78:ed:f3:8d:e4:8b:58:12:45:5d:73:1d:de:8f:4d:dd: 3c:8b:09:2f:e7:b5:db:bd:70:41:d8:8f:a7:be:a4:9b:37:c2: 89:b0:5d:90:97:02:d0:19:89:f6:50:f3:bf:24:89:ba:98:b7: bb:c4:fe:f6:89:4e:65:8a:6f:9d:f9:57:7f:d1:05:9e:15:4d: 66:64:1e:f8:b8:29:dc:81:8e:1c:01:f9:05:18:40:30:3a:da: 2d:c5:97:03:03:b0:92:44:3b:b5:a5:72:ff:d1:f6:e5:5b:de: 5f:91:86:23:10:f3:bd:a9:6f:bd:dc:d5:45:af:87:02:d5:ad: 17:b9:44:50:fd:f6:46:22:fb:56:01:e1:31:9c:5c:40:32:b0: 18:82:ab:a9:a5:a9:c7:73:f9:5d:69:d1:bd:3a:46:75:e8:a2: 57:5d:0e:ab:39:f2:26:5f:0e:4a:a0:03:1c:20:9b:35:66:05: eb:7d:3e:6c:64:76:64:f4:69:f4:8d:f3:07:bf:e1:16:74:53: ef:35:d6:0a:10:c1:81:14:92:be:d8:56:24:64:15:89:84:8c: a6:62:9c:7b:9c:63:f1:a0:c7:79:2a:f1:93:0c:88:9d:c4:ed: 3d:ed:ee:e5:5e:ad:c2:a0:6c:83:26:a0:41:ff:cd:31:ec:5c: 53:ca:74:1a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYxNDUxMTAvBgNVBAUTKDcwREE0NTkxOTFFOTA2ODZCREIwQUM0N0FCREEzMEE5 QzNFMTc0RkEwHhcNMjYwNjExMDUwNDI1WhcNMjYwNjE4MDUwNDI1WjAYMRYwFAYD VQQDEw02YTJhNDFkOS00MjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyO4zCWLzUjszbaSe8f1a7fesOUznttyS3JhSmZ6sd53BEyy4YfS1xa11KKnT TocMom5tV/rVLXJbx+Bb39SYkOeOPy4E8du9YnAc7hDsBRRoWpNTGHr/6NucmNx0 0WVoLHrkNeYuxxqHKvC780ugUzN1SmHJPKT+9eMuOsCil75DpfDqt45oqYMSZy6S IsVBKs4fxIo5OwxYp+LoKh3AKH0LBM33i4cK5LaCHuvqbg96O9wd/Vz1VoYq/OAY cryfkpTHm1jSJk2qjAlYmB54rVthF0Q+ss0saU9pE/4tdgwD54ktWBlrklFHblyZ +cDXE6OXpelDXGdrf2p7JZI7gwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIh0bXks Ug5ozaBB0ukXqz3zXWvZMB8GA1UdIwQYMBaAFHDaRZGR6QaGvbCsR6vaMKnD4XT6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjE0NS8yNzgwNzNDRTM2 RUExMUVFQUUxMEFBNDVDNEY5QUUwMi9jTnBGa1pIcEJvYTlzS3hIcTlvd3FjUGhk UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NOcEZrWkhwQm9hOXNLeEhxOW93cWNQaGRQby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjE0NS8yNzgwNzNDRTM2RUExMUVFQUUxMEFBNDVDNEY5QUUwMi9jTnBGa1pIcEJv YTlzS3hIcTlvd3FjUGhkUG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAD3B47fON5ItYEkVdcx3ej03dPIsJL+e1271wQdiPp76kmzfCibBdkJcC0BmJ 9lDzvySJupi3u8T+9olOZYpvnflXf9EFnhVNZmQe+Lgp3IGOHAH5BRhAMDraLcWX AwOwkkQ7taVy/9H25VveX5GGIxDzvalvvdzVRa+HAtWtF7lEUP32RiL7VgHhMZxc QDKwGIKrqaWpx3P5XWnRvTpGdeiiV10OqznyJl8OSqADHCCbNWYF630+bGR2ZPRp 9I3zB7/hFnRT7zXWChDBgRSSvthWJGQViYSMpmKce5xj8aDHeSrxkwyIncTtPe3u 5V6twqBsgyagQf/NMexcU8p0Gg== -----END CERTIFICATE-----Generated at Fri Jun 12 17:39:32 2026 by rpki-client