$ rpki-client -vvf rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.mft File: 4lmIZ0880loTYNf-lTpYTxqvq8c.mft (raw, json) Hash identifier: vtjA+v8ot0g2FQLfwUXPsSNVeiyYsBWEmcPkqfZch9s= Subject key identifier: A0:1B:7D:7A:C3:9D:D4:C0:E4:CF:C1:98:D6:12:AD:0E:61:99:09:87 Authority key identifier: E2:59:88:67:4F:3C:D2:5A:13:60:D7:FE:95:3A:58:4F:1A:AF:AB:C7 Certificate issuer: /CN=A91B296A/serialNumber=E25988674F3CD25A1360D7FE953A584F1AAFABC7 Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lmIZ0880loTYNf-lTpYTxqvq8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.mft Manifest number: 2B Signing time: Tue 23 Jun 2026 09:02:18 +0000 Manifest this update: Tue 23 Jun 2026 09:02:18 +0000 Manifest next update: Tue 30 Jun 2026 09:02:18 +0000 Files and hashes: 1: 4lmIZ0880loTYNf-lTpYTxqvq8c.crl (hash: eGttliROR0Oi0HkExEDO/bTp+DfgZZwHgtxBZi1cOkk=) 2: F8C00164383D11F19F938D80A4833773.roa (hash: JA9a2tMNHCe2mcsEqThoattlGfh1KZXTRBAODQIj2BE=) 3: F685154E343511F194D2A58293833773.roa (hash: gqBjSjVoyBRxofp8a9jrvox3u68qYGspZzJrkr23A5k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.crl rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lmIZ0880loTYNf-lTpYTxqvq8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jun 2026 09:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B296A, serialNumber=E25988674F3CD25A1360D7FE953A584F1AAFABC7 Validity Not Before: Jun 23 09:02:18 2026 GMT Not After : Jun 30 09:02:18 2026 GMT Subject: CN=6a3a4b9a-cfe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:8c:62:fe:78:00:5b:dc:c5:39:f5:77:d0:84: cf:49:dd:60:50:0c:15:34:3a:c5:2e:fb:a4:0a:cf: a6:a9:48:43:03:21:44:24:58:3b:f0:25:da:62:98: 58:79:3d:b3:94:3a:d6:f5:75:e5:fd:d1:1b:71:c2: c6:a0:cf:04:84:d4:86:b0:e7:61:fd:e4:fe:75:33: e5:33:90:2b:5c:4c:61:82:82:28:7e:4e:ed:d2:0e: 88:f9:01:9b:65:72:75:c0:98:db:39:45:a5:95:aa: 45:62:ca:a7:83:19:f3:ee:e3:10:74:c3:cb:c5:b6: 8c:40:e4:99:9e:32:98:ab:80:8b:bf:a5:5e:de:f7: d9:eb:58:1c:27:b6:4a:b5:59:ca:2b:a0:23:f4:c7: a6:40:65:63:87:d4:49:c4:12:85:4a:07:a7:a7:08: 78:2c:ac:e5:98:d0:d4:b9:25:9f:58:d9:5b:8a:78: b4:0c:7e:0a:5b:01:da:41:cf:0d:cf:68:98:a7:be: 3a:23:df:a3:67:7b:64:f0:6e:25:47:fc:f3:9c:68: de:06:6c:6f:7c:67:64:da:a9:66:bf:0c:67:6b:9f: 4e:3a:fa:9c:89:1b:da:a2:96:de:fe:e3:97:c7:e6: 27:fc:2f:f4:68:71:84:85:e7:a8:b1:38:48:c6:7e: dc:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:1B:7D:7A:C3:9D:D4:C0:E4:CF:C1:98:D6:12:AD:0E:61:99:09:87 X509v3 Authority Key Identifier: keyid:E2:59:88:67:4F:3C:D2:5A:13:60:D7:FE:95:3A:58:4F:1A:AF:AB:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lmIZ0880loTYNf-lTpYTxqvq8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:e6:37:f5:6b:f5:eb:91:02:db:70:4c:dd:8d:e5:9f:ae:69: cd:2e:e4:17:f8:85:85:0a:2b:fd:2d:26:69:d4:5f:4f:e5:ad: 9c:bc:ef:25:55:a8:60:7c:a7:07:6b:89:c1:d4:b5:f9:27:dc: 8d:19:d5:bf:d6:4e:cb:b3:76:07:88:8d:6a:99:85:13:0c:7d: 77:bf:de:cd:20:2d:e7:dd:c5:d5:44:51:bf:71:e6:75:5a:9d: 24:d3:56:20:dc:39:44:80:3c:e4:4d:50:e6:83:b8:b2:16:91: 35:f0:82:ac:0f:5c:11:22:05:b3:05:44:3b:f5:5e:ad:8c:65: 6b:fb:28:0c:78:5f:50:dd:28:71:ed:e9:11:70:36:fe:20:35: 9f:58:60:9f:a6:41:99:7c:a5:ff:0a:93:d7:00:a8:a0:94:61: 80:22:ec:73:81:91:d9:97:06:5d:97:57:62:15:cd:e6:f1:28: 88:f8:92:dc:20:bd:31:ef:88:43:bb:20:c8:26:97:59:5f:36: 95:54:83:c0:8a:15:78:ac:8d:8a:d9:40:c9:0c:76:fa:da:56: d5:16:b7:5d:3f:41:2b:da:4e:48:36:af:a0:55:ad:40:a9:b9: 46:ee:e8:06:97:5f:63:e2:02:60:27:d2:37:2c:a2:9f:13:2c: f6:f1:11:25 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC Mjk2QTExMC8GA1UEBRMoRTI1OTg4Njc0RjNDRDI1QTEzNjBEN0ZFOTUzQTU4NEYx QUFGQUJDNzAeFw0yNjA2MjMwOTAyMThaFw0yNjA2MzAwOTAyMThaMBgxFjAUBgNV BAMTDTZhM2E0YjlhLWNmZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXjGL+eABb3MU59XfQhM9J3WBQDBU0OsUu+6QKz6apSEMDIUQkWDvwJdpimFh5 PbOUOtb1deX90RtxwsagzwSE1Iaw52H95P51M+UzkCtcTGGCgih+Tu3SDoj5AZtl cnXAmNs5RaWVqkViyqeDGfPu4xB0w8vFtoxA5JmeMpirgIu/pV7e99nrWBwntkq1 WcoroCP0x6ZAZWOH1EnEEoVKB6enCHgsrOWY0NS5JZ9Y2VuKeLQMfgpbAdpBzw3P aJinvjoj36Nne2TwbiVH/POcaN4GbG98Z2TaqWa/DGdrn046+pyJG9qilt7+45fH 5if8L/RocYSF56ixOEjGftyPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUoBt9esOd 1MDkz8GY1hKtDmGZCYcwHwYDVR0jBBgwFoAU4lmIZ0880loTYNf+lTpYTxqvq8cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIyOTZBL0FBREVCNzMwMzQz NTExRjE4MjkxODIxMjkzODMzNzczLzRsbUlaMDg4MGxvVFlOZi1sVHBZVHhxdnE4 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNGxtSVowODgwbG9UWU5mLWxUcFlUeHF2cThjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIy OTZBL0FBREVCNzMwMzQzNTExRjE4MjkxODIxMjkzODMzNzczLzRsbUlaMDg4MGxv VFlOZi1sVHBZVHhxdnE4Yy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBa5jf1a/XrkQLbcEzdjeWfrmnNLuQX+IWFCiv9LSZp1F9P5a2cvO8lVahgfKcH a4nB1LX5J9yNGdW/1k7Ls3YHiI1qmYUTDH13v97NIC3n3cXVRFG/ceZ1Wp0k01Yg 3DlEgDzkTVDmg7iyFpE18IKsD1wRIgWzBUQ79V6tjGVr+ygMeF9Q3Shx7ekRcDb+ IDWfWGCfpkGZfKX/CpPXAKiglGGAIuxzgZHZlwZdl1diFc3m8SiI+JLcIL0x74hD uyDIJpdZXzaVVIPAihV4rI2K2UDJDHb62lbVFrddP0Er2k5INq+gVa1AqblG7ugG l19j4gJgJ9I3LKKfEyz28REl -----END CERTIFICATE-----Generated at Wed Jun 24 18:49:38 2026 by rpki-client