$ rpki-client -vvf rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.mft File: bz4CYgDVU58n4POqUNMgokUo1X0.mft (raw, json) Hash identifier: PSaTLIuPxIp/NynCi0mHTC3XhwPpza9qVED43cFhwR8= Subject key identifier: 78:BF:12:66:3B:83:11:C5:65:A3:4D:5A:54:35:60:35:C5:ED:BA:F7 Authority key identifier: 6F:3E:02:62:00:D5:53:9F:27:E0:F3:AA:50:D3:20:A2:45:28:D5:7D Certificate issuer: /CN=A91B732A/serialNumber=6F3E026200D5539F27E0F3AA50D320A24528D57D Certificate serial: 0122 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bz4CYgDVU58n4POqUNMgokUo1X0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.mft Manifest number: 011D Signing time: Mon 01 Jun 2026 06:40:48 +0000 Manifest this update: Mon 01 Jun 2026 06:40:48 +0000 Manifest next update: Mon 08 Jun 2026 06:40:48 +0000 Files and hashes: 1: bz4CYgDVU58n4POqUNMgokUo1X0.crl (hash: IYKPF0g0nO1F0AAmA+Q/h2HB/yx/w1kEJ8Q6Lo0/zCM=) 2: 31EC2E5CBAAB11EFA97B2C66C4F9AE02.roa (hash: nV38DqB6S2s+obaWtL39HR2W0RXsAZejFz8xEU6bYCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.crl rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bz4CYgDVU58n4POqUNMgokUo1X0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 06:40:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 290 (0x122) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B732A, serialNumber=6F3E026200D5539F27E0F3AA50D320A24528D57D Validity Not Before: Jun 1 06:40:48 2026 GMT Not After : Jun 8 06:40:48 2026 GMT Subject: CN=6a1d2970-b103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:cf:a3:aa:0c:fa:6c:e9:fe:8f:2b:98:80:d4: e7:ac:c2:b3:41:05:eb:16:d1:95:f4:ae:0e:d7:2b: cd:6f:fa:e9:42:ef:4a:e1:08:bb:9c:98:13:7a:fe: 11:06:c5:0c:83:7b:42:95:9d:87:9d:01:54:b7:12: db:93:f6:87:07:2b:29:37:ca:a4:1d:1d:18:de:56: 19:10:6b:12:b1:1b:c5:aa:55:43:ee:22:96:da:a2: 5a:b8:51:ca:97:8a:79:29:f8:63:f5:b0:8d:f0:87: c9:06:57:8c:92:bb:02:fa:c3:92:06:ec:1a:82:94: 47:70:03:01:dc:4a:a3:3d:6f:1c:c4:e4:1a:96:2b: 0a:02:43:fe:c8:d8:2c:6d:c5:3f:9a:05:f7:b9:19: 2c:ff:cb:7d:a2:ac:1a:69:e8:34:7a:d6:0f:22:48: b1:4f:cd:08:85:3f:5c:21:7f:b3:d8:be:d9:b5:07: 2b:96:5f:eb:ef:1f:93:90:cd:8b:87:86:83:83:aa: c3:9c:75:02:f3:c7:00:27:ee:7d:d6:72:58:6e:b9: e9:05:6a:97:97:4b:49:7a:ca:22:b1:c2:b1:f1:84: ee:8c:d4:07:e8:7b:d2:b8:35:ef:1f:32:61:ab:47: 35:8e:9d:bb:b5:4c:d3:f9:65:41:31:87:23:35:94: cd:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:BF:12:66:3B:83:11:C5:65:A3:4D:5A:54:35:60:35:C5:ED:BA:F7 X509v3 Authority Key Identifier: keyid:6F:3E:02:62:00:D5:53:9F:27:E0:F3:AA:50:D3:20:A2:45:28:D5:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bz4CYgDVU58n4POqUNMgokUo1X0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:a3:b4:be:e2:b6:f4:62:bd:ea:aa:2d:55:70:51:70:ea:5e: 24:67:0b:b9:28:8f:99:ef:ce:58:be:2c:18:2e:6f:b4:c2:a7: ed:8b:2b:ff:b9:0f:d2:ed:b2:f6:5f:2e:26:d9:cf:d2:4b:97: 97:3b:94:53:89:38:c5:ac:f3:66:2f:fb:49:bf:14:fc:3a:2e: 14:49:33:e6:32:69:b1:44:95:06:fd:11:8a:37:26:72:2a:8d: 1c:7a:86:9b:c1:c5:5e:a1:67:0e:51:18:43:27:ee:1f:b2:c6: d7:ef:43:58:37:ae:8e:3f:ac:a3:91:47:2b:0a:50:d8:0b:d8: 33:84:f4:99:2c:86:9e:fb:80:e2:34:5a:81:b1:8f:e6:1e:24: 96:c2:7d:7e:4e:3e:85:d8:23:fc:46:d4:6c:42:12:e6:65:5c: 71:81:60:03:55:42:6c:4d:14:69:da:3d:32:55:ce:35:40:10: 7e:1a:78:da:dc:4d:16:bd:57:2f:8d:b9:e6:cd:1c:62:46:dd: 33:21:88:af:26:b9:f8:cb:2d:4e:94:41:cf:13:4e:99:a8:4e: 09:0b:c9:a8:5e:cc:8f:1b:f1:7f:44:90:55:d5:25:34:5e:69: a9:68:72:1c:24:0e:1a:5d:d2:cd:21:f2:64:5b:04:b4:e6:42: 57:e6:b7:ef -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjczMkExMTAvBgNVBAUTKDZGM0UwMjYyMDBENTUzOUYyN0UwRjNBQTUwRDMyMEEy NDUyOEQ1N0QwHhcNMjYwNjAxMDY0MDQ4WhcNMjYwNjA4MDY0MDQ4WjAYMRYwFAYD VQQDEw02YTFkMjk3MC1iMTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAks+jqgz6bOn+jyuYgNTnrMKzQQXrFtGV9K4O1yvNb/rpQu9K4Qi7nJgTev4R BsUMg3tClZ2HnQFUtxLbk/aHByspN8qkHR0Y3lYZEGsSsRvFqlVD7iKW2qJauFHK l4p5Kfhj9bCN8IfJBleMkrsC+sOSBuwagpRHcAMB3EqjPW8cxOQalisKAkP+yNgs bcU/mgX3uRks/8t9oqwaaeg0etYPIkixT80IhT9cIX+z2L7ZtQcrll/r7x+TkM2L h4aDg6rDnHUC88cAJ+591nJYbrnpBWqXl0tJesoiscKx8YTujNQH6HvSuDXvHzJh q0c1jp27tUzT+WVBMYcjNZTN0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHi/EmY7 gxHFZaNNWlQ1YDXF7br3MB8GA1UdIwQYMBaAFG8+AmIA1VOfJ+DzqlDTIKJFKNV9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzMyQS9GRkYyRTZBOEI2 MzAxMUVGQTJEN0ZCNjNDNEY5QUUwMi9iejRDWWdEVlU1OG40UE9xVU5NZ29rVW8x WDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2J6NENZZ0RWVTU4bjRQT3FVTk1nb2tVbzFYMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzMyQS9GRkYyRTZBOEI2MzAxMUVGQTJEN0ZCNjNDNEY5QUUwMi9iejRDWWdEVlU1 OG40UE9xVU5NZ29rVW8xWDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzaO0vuK29GK96qotVXBRcOpeJGcLuSiPme/OWL4sGC5vtMKn7Ysr/7kP0u2y 9l8uJtnP0kuXlzuUU4k4xazzZi/7Sb8U/DouFEkz5jJpsUSVBv0RijcmciqNHHqG m8HFXqFnDlEYQyfuH7LG1+9DWDeujj+so5FHKwpQ2AvYM4T0mSyGnvuA4jRagbGP 5h4klsJ9fk4+hdgj/EbUbEIS5mVccYFgA1VCbE0Uado9MlXONUAQfhp42txNFr1X L4255s0cYkbdMyGIrya5+MstTpRBzxNOmahOCQvJqF7Mjxvxf0SQVdUlNF5pqWhy HCQOGl3SzSHyZFsEtOZCV+a37w== -----END CERTIFICATE-----Generated at Tue Jun 2 21:23:49 2026 by rpki-client