$ rpki-client -vvf rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft File: 6N-NXkyE2ofXKac8HE6GETgassE.mft (raw, json) Hash identifier: Yf9uJ8eXLNs/jqROhg5Ad3pBzTIUStOzt29xKfzKw/w= Subject key identifier: 31:4E:11:AA:05:77:DA:AF:E9:6F:F2:85:11:65:3C:36:A0:95:90:A7 Authority key identifier: E8:DF:8D:5E:4C:84:DA:87:D7:29:A7:3C:1C:4E:86:11:38:1A:B2:C1 Certificate issuer: /CN=A91B01C7/serialNumber=E8DF8D5E4C84DA87D729A73C1C4E8611381AB2C1 Certificate serial: 2B0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft Manifest number: 2ADD Signing time: Mon 22 Jun 2026 15:33:15 +0000 Manifest this update: Mon 22 Jun 2026 15:33:15 +0000 Manifest next update: Mon 29 Jun 2026 15:33:15 +0000 Files and hashes: 1: 6N-NXkyE2ofXKac8HE6GETgassE.crl (hash: E/b57VVkTzfo6D2coHeH71GlAg2c8vqqNA2cR5tdw5M=) 2: 3785190EF0FE11EEA034D07EC4F9AE02.roa (hash: 0j5aE5hiEdJstFRcjjMbmu5rVLRxiGYSHh/mpTlglk4=) 3: 445DB498796011EFA7E9391DC4F9AE02.roa (hash: dSCz7IvNO2r+X8zYzOrzx4jBPpWQHgUEzjmsQAJr19U=) 4: E86E188A795F11EFBF3B491CC4F9AE02.roa (hash: EzjCQSqiPhSaFvXF1H6L31ZEuTh+F8SaBy2h9H/JZOI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.crl rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Jun 2026 15:33:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11020 (0x2b0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B01C7, serialNumber=E8DF8D5E4C84DA87D729A73C1C4E8611381AB2C1 Validity Not Before: Jun 22 15:33:15 2026 GMT Not After : Jun 29 15:33:15 2026 GMT Subject: CN=6a3955bb-8400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ed:8a:6d:53:f1:57:c3:e1:f5:9b:38:19:63: 5d:86:96:00:17:13:7b:4d:1a:3a:ca:7e:e3:e8:9c: a5:5e:71:36:0f:ca:19:f3:68:13:4f:2e:de:ac:33: 52:73:28:80:93:49:54:7b:f7:36:53:d9:8d:31:dc: c5:7f:33:94:12:d1:92:59:26:d5:d6:f7:86:13:1d: 0c:e3:7e:5c:09:c3:e9:eb:a3:44:95:84:32:0e:b4: 7a:ca:c9:03:a8:38:03:f0:29:95:45:95:4a:f1:b9: 39:4e:fe:22:f5:dc:12:3d:24:00:d6:74:30:08:49: 26:8b:2c:08:19:a9:e5:ec:12:60:c5:4e:8e:c1:b7: 82:ee:db:58:c5:27:47:fc:48:cb:f9:11:e5:0e:42: 7c:de:c0:e3:6e:4d:38:60:b2:f9:27:8a:a1:a7:5d: 4e:0c:1d:7a:69:95:51:74:86:6f:2e:86:78:00:87: 32:c7:fa:ea:f9:3e:7d:ad:b0:43:d4:d7:62:6e:16: 3a:db:de:c5:0f:ae:df:e3:72:0b:b7:5e:9d:9f:82: c4:9c:6d:ac:bb:42:ab:0b:5d:f4:99:c9:ee:29:9c: c5:06:f4:a6:23:5f:7f:3a:b5:f8:df:c4:82:0c:5f: 10:95:a0:ca:ae:65:2d:87:f9:90:55:47:75:3f:4e: bc:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:4E:11:AA:05:77:DA:AF:E9:6F:F2:85:11:65:3C:36:A0:95:90:A7 X509v3 Authority Key Identifier: keyid:E8:DF:8D:5E:4C:84:DA:87:D7:29:A7:3C:1C:4E:86:11:38:1A:B2:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:d4:a1:06:09:4a:c1:47:82:61:ad:a5:9f:32:f0:c8:2b:a4: 13:2b:27:a8:ce:5d:da:2e:55:d9:26:07:1f:0d:be:da:05:d0: 46:54:8b:97:1a:3d:ee:f5:0a:92:b6:a5:7a:53:e9:d8:7d:c3: d6:4c:ea:8b:df:f5:14:60:25:31:73:94:b3:5a:21:c8:f5:72: 0a:4b:9b:42:7f:25:91:fd:83:48:4a:4c:6d:ee:b3:09:55:d6: ee:57:44:7a:da:1d:19:93:3a:fd:ac:04:70:7a:dc:87:fe:69: f7:b1:a2:39:a5:3a:b0:a8:1c:f1:c8:17:ad:2d:a8:e1:6f:2f: 1f:ff:22:2a:c7:b9:27:c2:4b:40:9d:5a:88:ab:08:74:f1:9c: bb:3e:9c:55:38:e7:7a:d0:99:92:48:60:7d:eb:dd:50:08:c0: f1:88:90:92:1a:c4:3c:c6:20:63:15:9e:81:21:d3:72:6f:31: b6:95:be:19:28:70:55:d8:4b:e5:27:b0:79:c9:df:e2:80:bb: 83:bc:ff:30:05:74:4d:82:2d:60:b3:22:08:25:19:76:68:a0: 00:e8:a4:43:8e:a8:02:be:4b:1d:bb:57:ae:0d:b4:c5:64:09: de:34:2e:81:5e:71:e2:97:96:0d:0e:ec:56:3f:ad:5b:f2:f5: ac:be:6b:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICKwwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAxQzcxMTAvBgNVBAUTKEU4REY4RDVFNEM4NERBODdENzI5QTczQzFDNEU4NjEx MzgxQUIyQzEwHhcNMjYwNjIyMTUzMzE1WhcNMjYwNjI5MTUzMzE1WjAYMRYwFAYD VQQDEw02YTM5NTViYi04NDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxO2KbVPxV8Ph9Zs4GWNdhpYAFxN7TRo6yn7j6JylXnE2D8oZ82gTTy7erDNS cyiAk0lUe/c2U9mNMdzFfzOUEtGSWSbV1veGEx0M435cCcPp66NElYQyDrR6yskD qDgD8CmVRZVK8bk5Tv4i9dwSPSQA1nQwCEkmiywIGanl7BJgxU6OwbeC7ttYxSdH /EjL+RHlDkJ83sDjbk04YLL5J4qhp11ODB16aZVRdIZvLoZ4AIcyx/rq+T59rbBD 1NdibhY6297FD67f43ILt16dn4LEnG2su0KrC130mcnuKZzFBvSmI19/OrX438SC DF8QlaDKrmUth/mQVUd1P068xQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDFOEaoF d9qv6W/yhRFlPDaglZCnMB8GA1UdIwQYMBaAFOjfjV5MhNqH1ymnPBxOhhE4GrLB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDFDNy85N0NGMjBGQTMz MjMxMUU0QTZFNzQ5MTFDNEY5QUUwMi82Ti1OWGt5RTJvZlhLYWM4SEU2R0VUZ2Fz c0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZOLU5Ya3lFMm9mWEthYzhIRTZHRVRnYXNzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDFDNy85N0NGMjBGQTMzMjMxMUU0QTZFNzQ5MTFDNEY5QUUwMi82Ti1OWGt5RTJv ZlhLYWM4SEU2R0VUZ2Fzc0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArtShBglKwUeCYa2lnzLwyCukEysnqM5d2i5V2SYHHw2+2gXQRlSLlxo97vUK kralelPp2H3D1kzqi9/1FGAlMXOUs1ohyPVyCkubQn8lkf2DSEpMbe6zCVXW7ldE etodGZM6/awEcHrch/5p97GiOaU6sKgc8cgXrS2o4W8vH/8iKse5J8JLQJ1aiKsI dPGcuz6cVTjnetCZkkhgfevdUAjA8YiQkhrEPMYgYxWegSHTcm8xtpW+GShwVdhL 5Sewecnf4oC7g7z/MAV0TYItYLMiCCUZdmigAOikQ46oAr5LHbtXrg20xWQJ3jQu gV5x4peWDQ7sVj+tW/L1rL5rZg== -----END CERTIFICATE-----Generated at Wed Jun 24 11:20:28 2026 by rpki-client