$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.mft File: t0bN0xcqIBHwIYn_La14fSnAEek.mft (raw, json) Hash identifier: wYpv2gW7YjPQlzrcDfyT0efDWT96SiFISl1S7qGgptM= Subject key identifier: 63:39:9C:AA:AA:55:F6:65:AA:BD:4F:6E:1B:4B:88:B2:1F:6B:93:9E Authority key identifier: B7:46:CD:D3:17:2A:20:11:F0:21:89:FF:2D:AD:78:7D:29:C0:11:E9 Certificate issuer: /CN=A91C1B92/serialNumber=B746CDD3172A2011F02189FF2DAD787D29C011E9 Certificate serial: 0E86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0bN0xcqIBHwIYn_La14fSnAEek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.mft Manifest number: 0E7B Signing time: Mon 22 Jun 2026 17:43:48 +0000 Manifest this update: Mon 22 Jun 2026 17:43:47 +0000 Manifest next update: Mon 29 Jun 2026 17:43:47 +0000 Files and hashes: 1: t0bN0xcqIBHwIYn_La14fSnAEek.crl (hash: 2q5GNVmleaId0Nc5fDQBy6K4Zn2ZZ3NRaVXiGaGgLYE=) 2: F8AC3DD8DB9111E9B70EDD2EC4F9AE02.roa (hash: o6Xw5xLS8YVW62CrGPTjvjmk2nm6Ne1ncHaH7pEqVM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.crl rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0bN0xcqIBHwIYn_La14fSnAEek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Jun 2026 17:43:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3718 (0xe86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1B92, serialNumber=B746CDD3172A2011F02189FF2DAD787D29C011E9 Validity Not Before: Jun 22 17:43:47 2026 GMT Not After : Jun 29 17:43:47 2026 GMT Subject: CN=6a397453-c413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:af:65:ba:04:58:52:60:b2:8f:5b:9f:06:3b: b0:07:b3:f4:4a:66:5d:82:be:8a:13:d9:e9:45:8e: e8:f6:f2:15:6b:f3:07:11:08:67:88:d7:63:1b:57: c7:12:cb:c9:f8:e9:94:cb:98:4d:0a:d3:6e:e8:ac: e5:2e:31:be:c6:27:b9:eb:3f:bf:c2:81:aa:76:dd: 44:f5:57:d1:8d:29:c5:0e:e1:94:2d:a5:81:a6:03: 18:69:35:9c:20:fd:f0:35:dc:8b:16:38:af:b9:bc: f9:6f:f5:ec:3c:6a:7e:94:17:de:c7:27:a5:7b:b5: 7f:27:46:03:d9:c7:1e:27:7e:9d:a5:82:35:33:32: 76:27:fd:bc:29:9f:bd:18:b9:ba:f7:cc:e0:12:64: ed:0c:41:02:00:98:04:c2:54:8c:a9:79:93:aa:70: 1c:dd:39:9c:55:bc:78:56:07:03:c6:ac:21:15:db: 2f:37:39:e0:74:12:29:80:55:31:d4:9c:8a:46:17: 69:fa:5c:1f:d6:45:a0:62:fa:8d:3f:6f:67:c5:b7: 58:18:9e:f2:d1:ca:89:53:7f:01:9a:45:dd:95:30: b1:b5:0f:46:e2:b7:49:e0:f1:53:3f:a0:af:81:c4: 75:f6:71:a2:aa:0a:5d:a1:9d:14:2a:3c:b2:9a:3a: d3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:39:9C:AA:AA:55:F6:65:AA:BD:4F:6E:1B:4B:88:B2:1F:6B:93:9E X509v3 Authority Key Identifier: keyid:B7:46:CD:D3:17:2A:20:11:F0:21:89:FF:2D:AD:78:7D:29:C0:11:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0bN0xcqIBHwIYn_La14fSnAEek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:f8:e3:8e:55:a7:e7:d4:2d:ef:e3:c3:f9:95:f4:66:95:4f: be:2e:9f:83:a5:ab:12:2d:58:8c:61:8e:de:19:75:01:86:f6: 16:81:e9:bb:74:ef:b5:ef:ce:56:67:56:eb:1c:a3:27:b3:f8: 4b:91:84:7e:58:51:5e:fe:48:ed:69:28:ff:38:3f:c5:dc:83: 33:14:df:c4:1d:e8:2f:2a:f0:e1:68:cf:da:a7:db:6e:8e:9d: 46:dd:3f:7f:c0:35:0d:af:f8:de:52:25:20:ba:ee:96:ea:f6: 22:e9:d7:76:33:cb:2e:76:69:0c:cf:db:d0:01:37:d6:c1:a1: ef:47:21:8a:68:6d:cc:eb:7d:f1:c3:c6:17:25:55:60:b0:24: 2c:8d:68:8f:ae:5b:77:ff:fb:51:64:68:58:f2:3d:3d:9c:0e: 2b:77:83:81:54:9b:a7:6b:ec:35:ef:3b:cd:af:c7:4d:35:2d: 4e:a8:cf:4f:2c:ee:9e:69:4f:10:e1:fb:8e:f9:93:ab:38:c6: 8d:45:22:05:e6:33:64:91:de:6e:30:51:20:cf:fc:0c:2f:20: 73:ca:fb:0f:53:4f:ba:0e:b4:36:84:33:b1:e4:4d:6d:da:4b: 7b:85:f3:01:6c:23:e4:d6:8e:91:fd:79:03:8f:c3:3b:01:fb: 6e:a4:7b:38 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFCOTIxMTAvBgNVBAUTKEI3NDZDREQzMTcyQTIwMTFGMDIxODlGRjJEQUQ3ODdE MjlDMDExRTkwHhcNMjYwNjIyMTc0MzQ3WhcNMjYwNjI5MTc0MzQ3WjAYMRYwFAYD VQQDEw02YTM5NzQ1My1jNDEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAna9lugRYUmCyj1ufBjuwB7P0SmZdgr6KE9npRY7o9vIVa/MHEQhniNdjG1fH EsvJ+OmUy5hNCtNu6KzlLjG+xie56z+/woGqdt1E9VfRjSnFDuGULaWBpgMYaTWc IP3wNdyLFjivubz5b/XsPGp+lBfexyele7V/J0YD2cceJ36dpYI1MzJ2J/28KZ+9 GLm698zgEmTtDEECAJgEwlSMqXmTqnAc3TmcVbx4VgcDxqwhFdsvNzngdBIpgFUx 1JyKRhdp+lwf1kWgYvqNP29nxbdYGJ7y0cqJU38BmkXdlTCxtQ9G4rdJ4PFTP6Cv gcR19nGiqgpdoZ0UKjyymjrTmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGM5nKqq VfZlqr1PbhtLiLIfa5OeMB8GA1UdIwQYMBaAFLdGzdMXKiAR8CGJ/y2teH0pwBHp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUI5Mi9BQUJGQzQ5QUJE NjAxMUU5OTU2QTBGMTlDNEY5QUUwMi90MGJOMHhjcUlCSHdJWW5fTGExNGZTbkFF ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3QwYk4weGNxSUJId0lZbl9MYTE0ZlNuQUVlay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUI5Mi9BQUJGQzQ5QUJENjAxMUU5OTU2QTBGMTlDNEY5QUUwMi90MGJOMHhjcUlC SHdJWW5fTGExNGZTbkFFZWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK/jjjlWn59Qt7+PD+ZX0ZpVPvi6fg6WrEi1YjGGO3hl1AYb2FoHpu3Tvte/O VmdW6xyjJ7P4S5GEflhRXv5I7Wko/zg/xdyDMxTfxB3oLyrw4WjP2qfbbo6dRt0/ f8A1Da/43lIlILrulur2IunXdjPLLnZpDM/b0AE31sGh70chimhtzOt98cPGFyVV YLAkLI1oj65bd//7UWRoWPI9PZwOK3eDgVSbp2vsNe87za/HTTUtTqjPTyzunmlP EOH7jvmTqzjGjUUiBeYzZJHebjBRIM/8DC8gc8r7D1NPug60NoQzseRNbdpLe4Xz AWwj5NaOkf15A4/DOwH7bqR7OA== -----END CERTIFICATE-----Generated at Wed Jun 24 11:27:09 2026 by rpki-client