$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.mft File: kbKJkWte97NoabO6gQwkWzZOQ8A.mft (raw, json) Hash identifier: QVE2ujIcYAwhvLqf7MXkSEXkGHVazGas8gWJVsG9r8A= Subject key identifier: 2F:0B:5E:6B:90:64:98:05:47:23:F4:81:C8:B6:4F:82:78:DA:94:B4 Authority key identifier: 91:B2:89:91:6B:5E:F7:B3:68:69:B3:BA:81:0C:24:5B:36:4E:43:C0 Certificate issuer: /CN=A91B2D56/serialNumber=91B289916B5EF7B36869B3BA810C245B364E43C0 Certificate serial: 6A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kbKJkWte97NoabO6gQwkWzZOQ8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.mft Manifest number: 67 Signing time: Mon 01 Jun 2026 08:43:54 +0000 Manifest this update: Mon 01 Jun 2026 08:43:54 +0000 Manifest next update: Mon 08 Jun 2026 08:43:54 +0000 Files and hashes: 1: kbKJkWte97NoabO6gQwkWzZOQ8A.crl (hash: OUx0TldvpTQdEWUvLapgVv9hD8nGId/TgYT8Lb4Ay8k=) 2: 436251B0C52311F0A1118818C4F9AE02.roa (hash: HfEZG4t3DF1Mxy+ybb6Jvu5Sd5lj1h6Aq1UoSU2rExQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.crl rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kbKJkWte97NoabO6gQwkWzZOQ8A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 08:43:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 106 (0x6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2D56, serialNumber=91B289916B5EF7B36869B3BA810C245B364E43C0 Validity Not Before: Jun 1 08:43:54 2026 GMT Not After : Jun 8 08:43:54 2026 GMT Subject: CN=6a1d464a-5a64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d4:7a:08:bc:ec:a1:49:e9:0d:c5:f1:ec:ec: fc:cc:14:39:a2:ea:c4:3c:bd:f6:1c:44:6c:3d:4c: 1d:cf:d0:37:f9:b1:62:7a:ac:fd:ba:1e:fe:e1:28: 45:d6:08:77:c4:20:8a:5b:e2:df:bd:1f:e3:61:56: 3d:e7:71:26:c9:25:17:6a:d6:02:76:72:a6:f0:02: c7:57:cb:f7:e9:2f:b8:88:b6:94:f5:a8:81:c6:2b: 4f:96:4c:8a:e8:6b:2b:66:0a:9c:c7:3a:4a:01:14: 8d:bc:af:9c:07:fd:3d:1c:18:52:7f:1d:79:bf:4c: 9e:42:78:57:35:5b:0d:62:53:03:bd:4e:f0:f3:19: d1:53:69:fb:50:b3:50:fc:b4:6a:6c:d3:64:4e:33: 17:b1:b0:bb:ba:64:e7:a0:6d:f9:90:9c:ca:0d:2a: 0a:8d:34:8e:a6:6d:ba:7f:04:96:c5:56:ab:45:83: 9e:1f:d2:8a:77:86:95:91:89:c3:3a:4a:23:b6:e4: 67:ae:5f:be:2a:db:05:86:64:78:7a:74:9f:59:cb: 45:31:a8:36:39:37:84:b1:32:8c:17:29:37:31:23: aa:14:0d:87:e5:ee:e9:75:c4:26:75:81:1a:9d:48: ca:4b:00:b6:43:7f:63:5f:8e:a0:0f:c9:4e:fc:2a: 57:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:0B:5E:6B:90:64:98:05:47:23:F4:81:C8:B6:4F:82:78:DA:94:B4 X509v3 Authority Key Identifier: keyid:91:B2:89:91:6B:5E:F7:B3:68:69:B3:BA:81:0C:24:5B:36:4E:43:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kbKJkWte97NoabO6gQwkWzZOQ8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:ed:03:11:4a:b8:4b:32:1a:8b:8f:40:d7:23:e2:7f:79:b4: b8:c1:15:c2:21:83:d1:9f:8a:2a:3a:6b:bc:30:c0:d5:30:af: a4:87:ce:6f:cc:17:2e:9d:30:4e:82:6c:cc:47:1c:f2:a1:25: 59:87:6d:d6:95:2a:39:b8:05:11:36:12:e5:1b:53:1b:c3:c5: c5:44:96:10:09:9c:fa:c0:70:56:9f:ba:b7:4b:9f:23:d7:94: 19:3d:e5:35:c0:d1:d0:5e:57:ce:8a:51:cb:6c:c8:2d:2d:f0: 17:cc:22:ea:b6:53:3d:fc:14:6a:8f:77:8c:85:28:ca:d8:31: ca:f3:5a:bc:7d:79:0a:2e:c4:38:c9:4d:5c:48:d5:73:69:02: 51:d4:c1:80:20:9c:1c:b6:81:60:e3:90:8f:fc:3b:2f:3f:3a: 06:c5:8b:9c:32:fd:88:4d:fb:9e:95:03:82:d4:af:65:07:ab: ed:4b:8a:fa:dc:50:4e:d3:ec:50:de:2a:bf:61:2d:29:97:ca: 97:12:15:6a:f2:ed:f7:8a:a9:10:a2:a0:ab:f7:09:2f:c4:f3: a5:f8:2d:c5:6c:35:75:76:ac:95:03:6e:1a:33:48:b1:33:67: 38:80:53:32:db:db:ca:32:19:61:c9:70:6c:e9:b2:36:d5:6e: 36:ab:51:a3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MkQ1NjExMC8GA1UEBRMoOTFCMjg5OTE2QjVFRjdCMzY4NjlCM0JBODEwQzI0NUIz NjRFNDNDMDAeFw0yNjA2MDEwODQzNTRaFw0yNjA2MDgwODQzNTRaMBgxFjAUBgNV BAMTDTZhMWQ0NjRhLTVhNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCL1HoIvOyhSekNxfHs7PzMFDmi6sQ8vfYcRGw9TB3P0Df5sWJ6rP26Hv7hKEXW CHfEIIpb4t+9H+NhVj3ncSbJJRdq1gJ2cqbwAsdXy/fpL7iItpT1qIHGK0+WTIro aytmCpzHOkoBFI28r5wH/T0cGFJ/HXm/TJ5CeFc1Ww1iUwO9TvDzGdFTaftQs1D8 tGps02ROMxexsLu6ZOegbfmQnMoNKgqNNI6mbbp/BJbFVqtFg54f0op3hpWRicM6 SiO25GeuX74q2wWGZHh6dJ9Zy0UxqDY5N4SxMowXKTcxI6oUDYfl7ul1xCZ1gRqd SMpLALZDf2NfjqAPyU78KlcRAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQULwtea5Bk mAVHI/SByLZPgnjalLQwHwYDVR0jBBgwFoAUkbKJkWte97NoabO6gQwkWzZOQ8Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIyRDU2L0VEQkJERkQ4QzUy MjExRjA4N0M3QjIxN0M0RjlBRTAyL2tiS0prV3RlOTdOb2FiTzZnUXdrV3paT1E4 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIva2JLSmtXdGU5N05vYWJPNmdRd2tXelpPUThBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIy RDU2L0VEQkJERkQ4QzUyMjExRjA4N0M3QjIxN0M0RjlBRTAyL2tiS0prV3RlOTdO b2FiTzZnUXdrV3paT1E4QS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBS7QMRSrhLMhqLj0DXI+J/ebS4wRXCIYPRn4oqOmu8MMDVMK+kh85vzBcunTBO gmzMRxzyoSVZh23WlSo5uAURNhLlG1Mbw8XFRJYQCZz6wHBWn7q3S58j15QZPeU1 wNHQXlfOilHLbMgtLfAXzCLqtlM9/BRqj3eMhSjK2DHK81q8fXkKLsQ4yU1cSNVz aQJR1MGAIJwctoFg45CP/DsvPzoGxYucMv2ITfuelQOC1K9lB6vtS4r63FBO0+xQ 3iq/YS0pl8qXEhVq8u33iqkQoqCr9wkvxPOl+C3FbDV1dqyVA24aM0ixM2c4gFMy 29vKMhlhyXBs6bI21W42q1Gj -----END CERTIFICATE-----Generated at Tue Jun 2 21:23:58 2026 by rpki-client