$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft File: 72Z43AzrNBQcZKGKskv4bKsvvTU.mft (raw, json) Hash identifier: duc/lsyAuPeFOAcZEogXvzSBgFZYD7VicIpM4ThROrQ= Subject key identifier: C1:61:08:1D:5E:1F:64:23:EA:96:34:BF:C9:5E:0A:16:25:2E:12:90 Authority key identifier: EF:66:78:DC:0C:EB:34:14:1C:64:A1:8A:B2:4B:F8:6C:AB:2F:BD:35 Certificate issuer: /CN=A91BAE34/serialNumber=EF6678DC0CEB34141C64A18AB24BF86CAB2FBD35 Certificate serial: 0581 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Z43AzrNBQcZKGKskv4bKsvvTU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft Manifest number: 056D Signing time: Mon 01 Jun 2026 00:01:27 +0000 Manifest this update: Mon 01 Jun 2026 00:01:26 +0000 Manifest next update: Mon 08 Jun 2026 00:01:26 +0000 Files and hashes: 1: 72Z43AzrNBQcZKGKskv4bKsvvTU.crl (hash: f+YJnFS1qNTUCup6xTm6pj2NaoUpO4kYbfDyTpbQRdY=) 2: 7AAFF88446BA11ECB8463B6AC4F9AE02.roa (hash: n4tuVdk3omfSB8XzyCrNJHNaBap0wt8tJ/fhHnIddvI=) 3: EEBE377430C411ECBC8D1E20C4F9AE02.roa (hash: nNfdgdLoLhr6Vy9d41UW1l+EsR1U5EgpKmeHjbrVZXE=) 4: DCEF2F3CFFD611EFA348445FC4F9AE02.roa (hash: p1NQ7IGWXi2y1DBETkDK+FOB7oMxD5FL9+3PQ1j1/As=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.crl rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Z43AzrNBQcZKGKskv4bKsvvTU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 00:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1409 (0x581) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAE34, serialNumber=EF6678DC0CEB34141C64A18AB24BF86CAB2FBD35 Validity Not Before: Jun 1 00:01:26 2026 GMT Not After : Jun 8 00:01:26 2026 GMT Subject: CN=6a1ccbd7-2d30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:06:ca:3d:4e:df:c4:20:ac:25:28:41:bd:c4: 3f:22:1f:67:cc:df:9f:45:41:be:76:d3:67:8b:33: de:02:78:d6:73:3b:50:ec:03:86:d0:e2:75:3f:a2: f9:14:e8:0a:b3:91:05:ff:6d:d8:b8:2f:d3:62:17: e4:bf:05:3c:15:3f:5d:09:64:cc:a4:8f:ef:90:99: d7:bb:9f:8a:08:bc:6a:cb:0d:92:36:b6:cf:be:98: 50:47:47:0a:63:92:aa:ef:4d:9b:e6:cf:86:a1:84: 2d:45:40:c4:bf:4c:9b:7c:27:61:1d:3b:1f:ce:f5: 8f:8d:21:69:7e:f9:44:2b:05:27:ce:c5:61:94:4f: 42:8a:12:83:e5:49:5a:e2:c1:7e:dc:10:c9:fb:28: e8:b1:3f:dd:ed:fc:8b:fa:17:f1:68:1f:9d:e5:20: 95:13:d7:9d:37:76:83:51:13:4c:b7:95:48:57:e5: 20:e3:c7:11:73:be:a8:48:62:6f:01:bc:fa:ca:3c: 07:9b:2b:51:13:25:6c:aa:57:9a:4a:3e:aa:56:aa: 00:c1:83:d4:dd:92:ff:ac:71:0c:14:66:d6:ec:54: 9e:f8:49:20:05:9e:6b:52:cf:85:2d:53:17:9e:82: ec:c7:c9:f1:3f:1f:b1:f0:4f:0e:2e:ef:e5:64:3f: d5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:61:08:1D:5E:1F:64:23:EA:96:34:BF:C9:5E:0A:16:25:2E:12:90 X509v3 Authority Key Identifier: keyid:EF:66:78:DC:0C:EB:34:14:1C:64:A1:8A:B2:4B:F8:6C:AB:2F:BD:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Z43AzrNBQcZKGKskv4bKsvvTU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:f4:d5:83:8b:5a:44:81:f9:70:0b:57:9e:8b:d1:99:8b:37: 42:f9:5b:6e:97:01:9e:99:14:5c:38:07:fb:f2:9a:64:e0:63: c1:25:02:83:ad:30:50:f4:fd:35:52:60:7a:34:e0:73:83:9c: d1:20:07:01:6d:0a:2e:8e:f5:c5:b9:b1:9d:fd:8f:48:a4:ce: 82:cb:85:a2:b9:67:3b:62:82:b8:c1:a9:79:87:a4:4d:2b:60: 98:20:b0:4e:93:f6:ae:8b:45:2e:fa:d8:6d:d4:00:9f:5c:9e: 13:32:d7:93:ef:b3:6c:dc:a6:02:26:5c:01:c9:7a:ef:c3:88: 8a:76:01:12:f0:7a:36:54:fa:51:b4:63:29:f9:ef:e4:0a:8c: b0:6f:5e:f9:59:5a:a7:8f:63:62:7b:b0:7d:2b:8b:3d:06:e1: eb:fe:43:a8:c1:b5:7e:32:8e:38:49:3a:20:1b:11:be:d5:26: 5d:91:e8:43:df:d9:7c:93:f8:d0:7f:4a:ab:c4:89:dd:e3:1e: 8c:16:3f:b4:3c:74:9b:5a:1c:20:ba:58:6f:b4:24:a6:38:56: 79:e3:9b:3a:51:d8:63:22:ba:54:02:a0:65:57:9d:8b:a1:d5: ed:32:f9:2e:c7:ed:38:05:02:cf:8f:3a:96:8f:d4:31:d7:c4: 04:98:d5:cd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFFMzQxMTAvBgNVBAUTKEVGNjY3OERDMENFQjM0MTQxQzY0QTE4QUIyNEJGODZD QUIyRkJEMzUwHhcNMjYwNjAxMDAwMTI2WhcNMjYwNjA4MDAwMTI2WjAYMRYwFAYD VQQDEw02YTFjY2JkNy0yZDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/AbKPU7fxCCsJShBvcQ/Ih9nzN+fRUG+dtNnizPeAnjWcztQ7AOG0OJ1P6L5 FOgKs5EF/23YuC/TYhfkvwU8FT9dCWTMpI/vkJnXu5+KCLxqyw2SNrbPvphQR0cK Y5Kq702b5s+GoYQtRUDEv0ybfCdhHTsfzvWPjSFpfvlEKwUnzsVhlE9CihKD5Ula 4sF+3BDJ+yjosT/d7fyL+hfxaB+d5SCVE9edN3aDURNMt5VIV+Ug48cRc76oSGJv Abz6yjwHmytREyVsqleaSj6qVqoAwYPU3ZL/rHEMFGbW7FSe+EkgBZ5rUs+FLVMX noLsx8nxPx+x8E8OLu/lZD/VjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMFhCB1e H2Qj6pY0v8leChYlLhKQMB8GA1UdIwQYMBaAFO9meNwM6zQUHGShirJL+GyrL701 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUUzNC80QkVGQkVDQTMw QzIxMUVDOTFBMTcwMURDNEY5QUUwMi83Mlo0M0F6ck5CUWNaS0dLc2t2NGJLc3Z2 VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcyWjQzQXpyTkJRY1pLR0tza3Y0YktzdnZUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUUzNC80QkVGQkVDQTMwQzIxMUVDOTFBMTcwMURDNEY5QUUwMi83Mlo0M0F6ck5C UWNaS0dLc2t2NGJLc3Z2VFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVfTVg4taRIH5cAtXnovRmYs3QvlbbpcBnpkUXDgH+/KaZOBjwSUCg60wUPT9 NVJgejTgc4Oc0SAHAW0KLo71xbmxnf2PSKTOgsuForlnO2KCuMGpeYekTStgmCCw TpP2rotFLvrYbdQAn1yeEzLXk++zbNymAiZcAcl678OIinYBEvB6NlT6UbRjKfnv 5AqMsG9e+Vlap49jYnuwfSuLPQbh6/5DqMG1fjKOOEk6IBsRvtUmXZHoQ9/ZfJP4 0H9Kq8SJ3eMejBY/tDx0m1ocILpYb7QkpjhWeeObOlHYYyK6VAKgZVedi6HV7TL5 LsftOAUCz486lo/UMdfEBJjVzQ== -----END CERTIFICATE-----Generated at Tue Jun 2 21:48:10 2026 by rpki-client