$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.mft File: C33smHxhdR0-2h2_PnwipzoV3u0.mft (raw, json) Hash identifier: PmRtZnONAkBZYT21AZe5mioqF1idlj6JrXqtsLYO4gA= Subject key identifier: A9:F4:24:7B:C6:2B:AF:64:7E:90:63:F4:01:FB:51:D8:AC:6B:6E:21 Authority key identifier: 0B:7D:EC:98:7C:61:75:1D:3E:DA:1D:BF:3E:7C:22:A7:3A:15:DE:ED Certificate issuer: /CN=A91C0E57/serialNumber=0B7DEC987C61751D3EDA1DBF3E7C22A73A15DEED Certificate serial: 059E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C33smHxhdR0-2h2_PnwipzoV3u0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.mft Manifest number: 0595 Signing time: Thu 04 Jun 2026 23:16:57 +0000 Manifest this update: Thu 04 Jun 2026 23:16:56 +0000 Manifest next update: Thu 11 Jun 2026 23:16:56 +0000 Files and hashes: 1: C33smHxhdR0-2h2_PnwipzoV3u0.crl (hash: bbzXGxF/eUJj5qPdOOIn3F4IADwvWNv0X24bdhrH4ew=) 2: 60A8F48A25D211ECB2CCF633C4F9AE02.roa (hash: 1OTKEgqlZnaKGpmz6oNBNrSZubeFhZS/c5pM2HU9abQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.crl rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C33smHxhdR0-2h2_PnwipzoV3u0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 23:16:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1438 (0x59e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0E57, serialNumber=0B7DEC987C61751D3EDA1DBF3E7C22A73A15DEED Validity Not Before: Jun 4 23:16:56 2026 GMT Not After : Jun 11 23:16:56 2026 GMT Subject: CN=6a220769-50e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0f:e3:7f:e0:62:87:bf:54:a3:1e:4e:3e:00: 7a:69:69:45:5e:9e:5a:08:a0:27:4c:64:52:3a:fc: b4:fc:97:9e:2b:fd:f8:bd:17:dd:80:b6:4f:a1:18: 34:53:16:7d:bf:35:68:c9:ab:22:b1:37:47:f0:5a: b2:b1:d0:5b:00:35:fe:3c:a9:fd:7a:d6:56:c0:e6: fa:8c:bf:dd:cd:16:02:4d:84:78:d9:12:f2:65:bf: 3b:26:11:26:b8:ad:09:b2:16:e2:90:ec:83:75:33: 52:e4:c6:db:e8:13:b0:b4:0e:c6:88:64:6b:d4:aa: 2b:44:3e:d7:90:22:ef:45:70:f0:3d:b5:87:cc:96: bb:50:39:ad:fe:6d:1e:e5:8a:f1:16:64:8b:ee:78: 2d:f5:39:94:7e:3a:31:6e:73:a3:b5:34:a0:5e:34: a1:46:bd:b8:4f:d4:01:10:23:f5:13:93:2a:ec:62: 26:6b:34:2d:ee:5b:4d:e1:0a:4b:42:0b:15:70:e9: 17:b1:5d:94:61:19:2b:3f:25:90:70:44:9e:d4:e3: dc:7b:55:2b:75:30:f2:65:ec:41:70:c8:1a:73:6e: 6f:c8:e3:5f:e9:ca:a2:53:c6:1f:b8:e1:0e:28:43: b8:83:bd:d7:cd:cb:4a:83:87:29:46:30:3b:16:c6: a0:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F4:24:7B:C6:2B:AF:64:7E:90:63:F4:01:FB:51:D8:AC:6B:6E:21 X509v3 Authority Key Identifier: keyid:0B:7D:EC:98:7C:61:75:1D:3E:DA:1D:BF:3E:7C:22:A7:3A:15:DE:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C33smHxhdR0-2h2_PnwipzoV3u0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:ce:f4:04:28:0a:e0:93:99:ec:8f:e3:34:94:3d:05:d2:72: a7:8c:55:ab:4d:b5:f6:bb:61:31:9b:d9:77:a9:3e:e5:ff:bd: 92:1f:33:08:80:75:f8:48:17:0b:ee:56:b8:3a:89:fb:c7:c9: a7:af:c6:e9:5c:64:81:02:42:b0:3e:63:1e:b5:4b:cc:dd:79: dd:a5:d7:cd:1a:a0:db:0f:bd:e3:e7:78:3a:f2:72:89:ca:22: b8:c7:16:96:17:91:1a:b1:cf:9b:3f:c4:fd:c1:a9:bc:cb:f7: 3c:26:c8:4e:c5:62:de:a2:7a:94:89:a1:1c:6f:80:24:ce:f8: 44:8e:f6:8f:c1:81:c0:36:c3:50:6f:65:1d:e6:19:b6:76:26: 88:25:12:0a:78:65:f5:05:18:c7:8c:83:ee:14:51:0d:20:1d: b5:33:1d:c7:20:b8:ce:7e:c1:16:0c:0b:13:fc:fa:de:da:b8: f4:09:3d:95:73:a0:6d:97:a0:87:4d:8d:74:c0:cf:f5:99:f6: 5a:c5:4d:44:50:fc:49:1d:fd:65:66:b3:ea:29:1d:6d:09:f8: 8a:93:79:33:0f:e6:d7:07:62:82:b6:0a:d9:f8:87:a1:8d:e5: 55:65:f0:f9:9e:c6:5a:25:33:1d:12:73:6b:8f:d2:bf:97:fb: 56:e5:68:f5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBFNTcxMTAvBgNVBAUTKDBCN0RFQzk4N0M2MTc1MUQzRURBMURCRjNFN0MyMkE3 M0ExNURFRUQwHhcNMjYwNjA0MjMxNjU2WhcNMjYwNjExMjMxNjU2WjAYMRYwFAYD VQQDEw02YTIyMDc2OS01MGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArQ/jf+Bih79Uox5OPgB6aWlFXp5aCKAnTGRSOvy0/JeeK/34vRfdgLZPoRg0 UxZ9vzVoyasisTdH8FqysdBbADX+PKn9etZWwOb6jL/dzRYCTYR42RLyZb87JhEm uK0JshbikOyDdTNS5Mbb6BOwtA7GiGRr1KorRD7XkCLvRXDwPbWHzJa7UDmt/m0e 5YrxFmSL7ngt9TmUfjoxbnOjtTSgXjShRr24T9QBECP1E5Mq7GImazQt7ltN4QpL QgsVcOkXsV2UYRkrPyWQcESe1OPce1UrdTDyZexBcMgac25vyONf6cqiU8YfuOEO KEO4g73XzctKg4cpRjA7FsagPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKn0JHvG K69kfpBj9AH7Udisa24hMB8GA1UdIwQYMBaAFAt97Jh8YXUdPtodvz58Iqc6Fd7t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEU1Ny9GQ0MxOEExNDIw NEUxMUVDQjEzRUUxN0FDNEY5QUUwMi9DMzNzbUh4aGRSMC0yaDJfUG53aXB6b1Yz dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MzM3NtSHhoZFIwLTJoMl9QbndpcHpvVjN1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEU1Ny9GQ0MxOEExNDIwNEUxMUVDQjEzRUUxN0FDNEY5QUUwMi9DMzNzbUh4aGRS MC0yaDJfUG53aXB6b1YzdTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfc70BCgK4JOZ7I/jNJQ9BdJyp4xVq0219rthMZvZd6k+5f+9kh8zCIB1+EgX C+5WuDqJ+8fJp6/G6VxkgQJCsD5jHrVLzN153aXXzRqg2w+94+d4OvJyicoiuMcW lheRGrHPmz/E/cGpvMv3PCbITsVi3qJ6lImhHG+AJM74RI72j8GBwDbDUG9lHeYZ tnYmiCUSCnhl9QUYx4yD7hRRDSAdtTMdxyC4zn7BFgwLE/z63tq49Ak9lXOgbZeg h02NdMDP9Zn2WsVNRFD8SR39ZWaz6ikdbQn4ipN5Mw/m1wdigrYK2fiHoY3lVWXw +Z7GWiUzHRJza4/Sv5f7VuVo9Q== -----END CERTIFICATE-----Generated at Sat Jun 6 20:14:35 2026 by rpki-client