$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft File: CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft (raw, json) Hash identifier: HxSfEAlGgrWH+meDCW9Kswsafqi6qu91OhiD23OVjW0= Subject key identifier: CA:9D:2B:47:A8:CE:EB:97:7F:CA:92:D3:86:49:C8:03:1A:52:39:E3 Authority key identifier: 08:D6:8C:F4:50:07:45:37:5F:F2:CC:58:4B:A5:FB:E5:77:BE:E3:3F Certificate issuer: /CN=A91B8D33/serialNumber=08D68CF4500745375FF2CC584BA5FBE577BEE33F Certificate serial: 022B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft Manifest number: 0218 Signing time: Tue 23 Jun 2026 03:06:43 +0000 Manifest this update: Tue 23 Jun 2026 03:06:43 +0000 Manifest next update: Tue 30 Jun 2026 03:06:43 +0000 Files and hashes: 1: CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl (hash: sGD1erjkR4cH+w2UdhRh8FLRL3NJKd35a+UmfkrhzV4=) 2: C698E13ED1BD11EF9C00D867C4F9AE02.roa (hash: gcd1uORIwB588IprBp+ptXbcFbF7rS1AehPmjHP27TY=) 3: E62F8796D1BD11EFBCCC0B68C4F9AE02.roa (hash: C+zKPU7xS4ZOCm7vmpXaLXUhKiAqHKCATTbpyOC3iPI=) 4: 86D7DAE6D1C211EF9AA9410EC4F9AE02.roa (hash: w4ebJqxqcYTakZgYgczYh31d+UQ4emy9J0fYQLqlsn0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jun 2026 03:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 555 (0x22b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8D33, serialNumber=08D68CF4500745375FF2CC584BA5FBE577BEE33F Validity Not Before: Jun 23 03:06:43 2026 GMT Not After : Jun 30 03:06:43 2026 GMT Subject: CN=6a39f843-e004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ec:1b:3e:5d:53:51:3b:20:14:74:4d:62:99: 2c:01:99:4e:1f:20:bd:fa:e7:52:db:e4:be:2d:36: e6:ae:fd:4c:53:99:6f:89:f8:6e:10:6e:e0:95:83: fc:e9:36:8b:d7:4d:7f:1f:23:b2:29:6a:11:04:15: 87:92:89:6d:a0:bd:45:de:d1:45:7a:9b:21:8e:53: 8c:67:0c:9b:26:ca:21:ee:df:66:eb:5f:ab:bb:72: 97:4e:1d:8b:58:0c:6f:40:8e:26:2e:2f:65:25:fa: 5f:f0:f5:ee:ea:43:20:44:91:f8:58:6c:0c:17:94: da:f8:15:7d:a2:6f:ef:a7:59:49:e4:10:2e:c9:bd: 7e:0f:2f:3c:bb:87:0e:f1:60:7c:fa:3b:8b:7d:f8: 1d:86:a9:3d:0c:de:c4:3e:92:33:4e:eb:8c:ae:9d: 4d:66:0a:ae:e6:de:ba:50:fa:5c:ce:6e:92:71:d2: e5:5e:15:51:61:0b:c6:1b:f6:e9:7d:1d:61:a9:1d: 5a:fa:10:cd:87:f7:73:bd:52:5d:1d:45:b1:97:84: 0f:55:f8:1e:d7:d9:39:30:08:bb:4b:10:37:da:a3: 6a:82:f2:9f:6e:46:c4:36:5a:0e:b6:be:14:1f:6b: ed:ca:79:f3:11:96:b8:e8:c3:ca:4d:df:6f:3e:be: 42:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:9D:2B:47:A8:CE:EB:97:7F:CA:92:D3:86:49:C8:03:1A:52:39:E3 X509v3 Authority Key Identifier: keyid:08:D6:8C:F4:50:07:45:37:5F:F2:CC:58:4B:A5:FB:E5:77:BE:E3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:ff:b9:73:4b:d5:14:bb:88:9e:18:00:ae:d2:b4:d4:8e:28: 26:9e:bb:81:b4:df:22:63:76:50:a5:f3:da:6a:61:08:c0:3e: f9:1f:46:ef:85:fb:7f:d2:f2:15:19:5a:3b:99:61:fa:15:c1: 8b:2c:ed:cb:1a:da:fd:bd:f6:55:8d:d8:29:d6:30:b2:dd:b9: bf:d6:71:c2:ed:ac:03:af:cd:b0:22:21:04:79:d0:29:5f:f7: e4:d9:40:9f:35:35:00:56:57:07:e8:41:5a:f3:26:a6:bc:d1: bd:89:4d:f1:1e:35:9e:1e:0f:74:24:d7:ba:35:2a:6e:8c:65: 43:2f:ec:4c:f0:66:65:34:a0:af:d7:46:ea:dd:79:92:37:05: 6c:38:fd:ab:47:49:f9:3b:7c:e3:c7:1b:eb:c4:0b:1a:fe:24: 26:dd:76:ac:ed:1d:2f:3b:03:d2:e3:15:2c:58:8f:2c:0d:2f: 70:19:c1:3e:6b:9f:fb:bb:b4:c3:e6:ad:50:b6:a4:4a:cd:34: af:33:a7:5f:74:61:ab:5e:79:be:8c:68:6c:9a:4d:cf:d3:04: 50:ff:0b:3d:b1:fd:47:42:e0:62:9b:92:27:b7:b5:ed:77:70: 11:f6:69:cf:bf:f2:fc:b1:0c:be:8c:61:0f:1e:08:38:4f:c1: 95:eb:dc:9b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhEMzMxMTAvBgNVBAUTKDA4RDY4Q0Y0NTAwNzQ1Mzc1RkYyQ0M1ODRCQTVGQkU1 NzdCRUUzM0YwHhcNMjYwNjIzMDMwNjQzWhcNMjYwNjMwMDMwNjQzWjAYMRYwFAYD VQQDEw02YTM5Zjg0My1lMDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuuwbPl1TUTsgFHRNYpksAZlOHyC9+udS2+S+LTbmrv1MU5lvifhuEG7glYP8 6TaL101/HyOyKWoRBBWHkoltoL1F3tFFepshjlOMZwybJsoh7t9m61+ru3KXTh2L WAxvQI4mLi9lJfpf8PXu6kMgRJH4WGwMF5Ta+BV9om/vp1lJ5BAuyb1+Dy88u4cO 8WB8+juLffgdhqk9DN7EPpIzTuuMrp1NZgqu5t66UPpczm6ScdLlXhVRYQvGG/bp fR1hqR1a+hDNh/dzvVJdHUWxl4QPVfge19k5MAi7SxA32qNqgvKfbkbENloOtr4U H2vtynnzEZa46MPKTd9vPr5CAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMqdK0eo zuuXf8qS04ZJyAMaUjnjMB8GA1UdIwQYMBaAFAjWjPRQB0U3X/LMWEul++V3vuM/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEQzMy81OTYyNjcxMDQ3 NzcxMUVFQTZCRDUzN0VDNEY5QUUwMi9DTmFNOUZBSFJUZGY4c3hZUzZYNzVYZS00 ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NOYU05RkFIUlRkZjhzeFlTNlg3NVhlLTR6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEQzMy81OTYyNjcxMDQ3NzcxMUVFQTZCRDUzN0VDNEY5QUUwMi9DTmFNOUZBSFJU ZGY4c3hZUzZYNzVYZS00ejgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAa/+5c0vVFLuInhgArtK01I4oJp67gbTfImN2UKXz2mphCMA++R9G74X7f9Ly FRlaO5lh+hXBiyztyxra/b32VY3YKdYwst25v9Zxwu2sA6/NsCIhBHnQKV/35NlA nzU1AFZXB+hBWvMmprzRvYlN8R41nh4PdCTXujUqboxlQy/sTPBmZTSgr9dG6t15 kjcFbDj9q0dJ+Tt848cb68QLGv4kJt12rO0dLzsD0uMVLFiPLA0vcBnBPmuf+7u0 w+atULakSs00rzOnX3Rhq155voxobJpNz9MEUP8LPbH9R0LgYpuSJ7e17XdwEfZp z7/y/LEMvoxhDx4IOE/Blevcmw== -----END CERTIFICATE-----Generated at Wed Jun 24 22:21:54 2026 by rpki-client