$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft File: a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft (raw, json) Hash identifier: DUOBJSJXQSx2LcK8VJ21G8lTgkYMtJVrwTSNfW0d+Oc= Subject key identifier: 0B:3D:9D:EA:62:67:33:80:CA:A3:32:89:2A:53:6F:24:78:F1:A5:E3 Authority key identifier: 6B:63:A6:0E:7D:7F:51:D0:38:72:8C:64:25:90:60:47:01:6C:99:04 Certificate issuer: /CN=A91BDEEB/serialNumber=6B63A60E7D7F51D038728C6425906047016C9904 Certificate serial: 011E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft Manifest number: 010A Signing time: Mon 01 Jun 2026 07:02:29 +0000 Manifest this update: Mon 01 Jun 2026 07:02:29 +0000 Manifest next update: Mon 08 Jun 2026 07:02:29 +0000 Files and hashes: 1: a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl (hash: JXZ8oB3QaEx+Qg0zoJMoeMb2RU5yi8sBPYXnmPcFy+w=) 2: C4A33CA4275711F0BA7C7752C4F9AE02.roa (hash: xVG7r2x7LJlYNff/OSjUdtTyddvWAkjEB2pAXqeQxpA=) 3: 04241E3222F011F0B021396DC4F9AE02.roa (hash: pZ8heGX8vu4h/FA/NC03PV3GwdLiz3to6+22+csdrJE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 07:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 286 (0x11e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDEEB, serialNumber=6B63A60E7D7F51D038728C6425906047016C9904 Validity Not Before: Jun 1 07:02:29 2026 GMT Not After : Jun 8 07:02:29 2026 GMT Subject: CN=6a1d2e85-fe7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f4:2e:88:23:8e:72:d3:a2:0b:c3:3a:d7:5f: c5:40:86:77:c0:4d:a8:4c:97:e5:ae:c9:48:ab:96: 93:07:8f:39:ff:35:9e:75:bc:8c:d5:30:ec:89:aa: c0:ed:91:7f:12:f4:c4:0c:e0:85:20:12:68:32:aa: e2:f6:46:89:77:a4:2e:70:22:a1:6c:af:80:9c:65: ee:a9:b8:6f:d0:95:df:22:e6:2c:f5:3d:62:fe:65: c8:0a:58:95:84:65:80:a3:96:79:a1:3d:3c:7c:5c: dd:cd:37:90:c8:4d:e5:f8:e2:60:eb:98:0c:14:51: 1c:d9:47:0d:b1:88:ce:9d:56:c6:f5:af:68:52:25: de:3d:d0:ac:87:be:32:93:89:f9:3b:28:4d:0f:69: 76:b1:51:aa:bf:f0:66:7b:1a:28:36:1e:3e:40:cc: 49:5d:9c:f4:52:4a:3f:e0:3b:f4:dd:f0:dc:f4:3e: 94:be:cb:5b:3d:ca:56:c8:7d:37:8b:b3:54:07:39: 3f:80:98:37:e3:4b:95:c9:ce:8f:f6:c4:5a:6c:a5: ea:e1:00:3c:82:75:12:01:c2:05:39:45:b4:ab:11: 19:98:2a:af:25:b6:f1:8f:9f:ec:54:3c:d7:84:01: 3c:29:5e:5e:ea:d5:3b:76:84:7e:87:29:86:5b:86: 98:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:3D:9D:EA:62:67:33:80:CA:A3:32:89:2A:53:6F:24:78:F1:A5:E3 X509v3 Authority Key Identifier: keyid:6B:63:A6:0E:7D:7F:51:D0:38:72:8C:64:25:90:60:47:01:6C:99:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:cc:3d:6d:6e:25:c3:1b:83:c0:01:b4:9a:ae:11:6c:80:5c: e5:cc:4a:9d:55:b0:3b:32:9a:01:cc:42:ee:02:58:d5:af:97: 23:9e:6f:5d:68:c3:79:a0:9c:8b:0c:ef:ef:de:d7:9e:0b:c1: 82:46:88:ad:0b:b2:5a:a4:c0:ee:53:ff:5a:d5:d1:d4:29:91: 26:e7:17:96:08:aa:4d:f5:cb:d6:13:e4:ea:15:c9:31:73:57: 99:10:4a:35:d1:9f:9c:34:21:34:0e:bb:23:34:ea:45:f7:c6: 18:5a:69:71:0f:ba:54:a9:bb:84:64:78:0b:69:9c:31:ab:34: cd:d3:e0:89:41:31:17:bd:97:53:e6:9b:54:40:43:e9:b3:d7: a3:f8:64:9a:f1:5a:4f:b0:fe:1b:81:51:ca:33:d1:92:da:cf: a8:fb:eb:e6:66:ba:d3:17:32:13:99:3f:99:43:01:65:56:8e: c0:6b:1b:be:75:1c:a8:8e:d2:61:74:68:44:e8:5b:49:8d:61: 98:5f:86:a3:b5:b3:a8:24:6d:95:aa:d4:26:d8:88:12:3e:95: 81:6d:e6:05:87:67:47:4f:49:7b:42:f3:13:c0:17:98:05:b3: 7d:01:f7:1a:c7:87:7a:ab:37:52:85:85:ba:2e:db:ca:ac:fb: 66:dc:f0:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRFRUIxMTAvBgNVBAUTKDZCNjNBNjBFN0Q3RjUxRDAzODcyOEM2NDI1OTA2MDQ3 MDE2Qzk5MDQwHhcNMjYwNjAxMDcwMjI5WhcNMjYwNjA4MDcwMjI5WjAYMRYwFAYD VQQDEw02YTFkMmU4NS1mZTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwfQuiCOOctOiC8M611/FQIZ3wE2oTJflrslIq5aTB485/zWedbyM1TDsiarA 7ZF/EvTEDOCFIBJoMqri9kaJd6QucCKhbK+AnGXuqbhv0JXfIuYs9T1i/mXICliV hGWAo5Z5oT08fFzdzTeQyE3l+OJg65gMFFEc2UcNsYjOnVbG9a9oUiXePdCsh74y k4n5OyhND2l2sVGqv/BmexooNh4+QMxJXZz0Uko/4Dv03fDc9D6UvstbPcpWyH03 i7NUBzk/gJg340uVyc6P9sRabKXq4QA8gnUSAcIFOUW0qxEZmCqvJbbxj5/sVDzX hAE8KV5e6tU7doR+hymGW4aYzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAs9nepi ZzOAyqMyiSpTbyR48aXjMB8GA1UdIwQYMBaAFGtjpg59f1HQOHKMZCWQYEcBbJkE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREVFQi8xRUU3RkE2MEU1 RjQxMUVGQUJEMzlEN0VDNEY5QUUwMi9hMk9tRG4xX1VkQTRjb3hrSlpCZ1J3RnNt UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2EyT21EbjFfVWRBNGNveGtKWkJnUndGc21RUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REVFQi8xRUU3RkE2MEU1RjQxMUVGQUJEMzlEN0VDNEY5QUUwMi9hMk9tRG4xX1Vk QTRjb3hrSlpCZ1J3RnNtUVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIsw9bW4lwxuDwAG0mq4RbIBc5cxKnVWwOzKaAcxC7gJY1a+XI55vXWjDeaCc iwzv797XngvBgkaIrQuyWqTA7lP/WtXR1CmRJucXlgiqTfXL1hPk6hXJMXNXmRBK NdGfnDQhNA67IzTqRffGGFppcQ+6VKm7hGR4C2mcMas0zdPgiUExF72XU+abVEBD 6bPXo/hkmvFaT7D+G4FRyjPRktrPqPvr5ma60xcyE5k/mUMBZVaOwGsbvnUcqI7S YXRoROhbSY1hmF+Go7WzqCRtlarUJtiIEj6VgW3mBYdnR09Je0LzE8AXmAWzfQH3 GseHeqs3UoWFui7byqz7Ztzw8g== -----END CERTIFICATE-----Generated at Thu Jun 4 12:24:36 2026 by rpki-client