$ rpki-client -vvf rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.mft File: 4vB0KtgKnbsodRhO4N1elN11eEs.mft (raw, json) Hash identifier: k6Sl5e0KduKJFF5rP9y3KThvgkMTVNEhXfYh/zY2xsE= Subject key identifier: 77:F8:41:27:A4:5D:17:55:B1:DF:A9:01:65:76:E3:45:12:60:96:14 Authority key identifier: E2:F0:74:2A:D8:0A:9D:BB:28:75:18:4E:E0:DD:5E:94:DD:75:78:4B Certificate issuer: /CN=A91C23FE/serialNumber=E2F0742AD80A9DBB2875184EE0DD5E94DD75784B Certificate serial: 1CAC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vB0KtgKnbsodRhO4N1elN11eEs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.mft Manifest number: 1C9C Signing time: Tue 02 Jun 2026 16:11:13 +0000 Manifest this update: Tue 02 Jun 2026 16:11:12 +0000 Manifest next update: Tue 09 Jun 2026 16:11:12 +0000 Files and hashes: 1: 4vB0KtgKnbsodRhO4N1elN11eEs.crl (hash: K7Ayv+3Sg7TBjTX0X3PTXHuaVqJ8MpskY05Rr67H+L4=) 2: 65D82706BACE11F0AAEC4611C4F9AE02.roa (hash: sqvmzo0nBMsekrGisDm87YPLKEUsc2Q0u1zWWfR7WgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.crl rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vB0KtgKnbsodRhO4N1elN11eEs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Jun 2026 16:11:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7340 (0x1cac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C23FE, serialNumber=E2F0742AD80A9DBB2875184EE0DD5E94DD75784B Validity Not Before: Jun 2 16:11:12 2026 GMT Not After : Jun 9 16:11:12 2026 GMT Subject: CN=6a1f00a1-d769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cf:b1:46:04:1c:aa:79:bc:c5:23:1a:0d:9f: a6:d4:fc:c5:5c:a8:77:50:c7:a6:21:25:0b:b4:ac: 20:16:d6:c2:a4:1b:30:3e:20:ba:92:57:30:55:07: 24:ce:75:ca:4e:3d:40:cc:5e:6a:2f:ab:6e:75:a9: 6d:fe:18:d6:69:f8:c6:ef:b0:91:1b:81:3e:84:17: 38:78:fe:6b:36:fa:e6:de:38:67:7e:4d:e4:6f:a1: 44:20:05:59:0e:6d:ed:d2:5c:d3:6f:e2:b8:9b:b8: e8:93:d4:f6:12:ff:4e:da:77:6b:89:09:30:a3:94: 8d:71:52:34:7f:96:d7:d0:99:e4:77:08:cd:0f:95: b5:df:8b:74:22:e9:59:35:e9:0b:b9:fd:a5:61:76: 79:e2:22:f5:c3:37:9f:31:b6:8a:3a:f2:f5:22:ef: 16:60:88:62:5b:37:13:d8:f2:56:8f:0d:1a:29:6b: 49:72:42:f7:04:1a:41:7d:2e:b8:68:f7:e2:0d:eb: 1f:c6:c3:12:a3:eb:f9:06:2f:e1:ba:fc:58:e6:85: ab:44:28:a2:3d:15:7c:89:d9:a7:68:6e:24:c0:9a: 9b:df:eb:e0:a0:d6:08:f1:db:f2:ad:43:0e:19:7b: 6e:10:f7:55:d2:9b:cf:53:55:ec:f8:c6:de:b9:3d: d5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F8:41:27:A4:5D:17:55:B1:DF:A9:01:65:76:E3:45:12:60:96:14 X509v3 Authority Key Identifier: keyid:E2:F0:74:2A:D8:0A:9D:BB:28:75:18:4E:E0:DD:5E:94:DD:75:78:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vB0KtgKnbsodRhO4N1elN11eEs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:6b:cb:21:12:f0:6b:c4:88:0d:77:96:66:e1:c2:73:08:4f: 86:fd:eb:bf:3d:66:57:2e:f5:c9:4e:83:c0:75:a1:73:06:01: ae:26:4e:ae:b9:3e:3d:32:c5:ac:4d:d2:f4:9f:0b:c9:8d:82: 73:2c:ca:b4:24:a6:93:41:c6:05:f8:c2:d0:5a:30:58:f7:fd: db:70:51:6a:4e:3f:76:fc:74:d9:a0:8f:9d:26:23:a8:2f:ae: 18:fc:e4:b5:65:b8:26:d2:79:21:a9:cb:21:c6:ff:ec:63:76: d9:fc:5f:85:f9:27:7c:4b:06:0f:c8:60:30:1d:39:e9:7a:37: a3:f0:85:18:49:1e:f3:ea:78:f1:cb:97:1e:71:25:ea:28:6f: 22:d8:34:53:b1:f8:b1:58:65:3e:f1:82:08:8a:a3:4c:ad:f7: 45:82:e3:85:79:c0:8a:0c:30:9f:e7:5d:00:fb:27:61:5c:d2: 7d:26:97:a5:2e:21:a4:22:3e:d8:dd:6e:05:e5:7b:24:44:56: 84:21:f8:e7:67:ff:63:f9:cc:f0:27:f4:73:c9:25:5f:e6:51: cf:09:b5:c0:4f:5a:ae:22:05:4b:3f:f1:1e:ee:93:49:89:97: ca:40:ff:99:f1:69:28:0b:e8:a6:71:35:51:e9:c2:ae:73:54: 92:20:59:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzIzRkUxMTAvBgNVBAUTKEUyRjA3NDJBRDgwQTlEQkIyODc1MTg0RUUwREQ1RTk0 REQ3NTc4NEIwHhcNMjYwNjAyMTYxMTEyWhcNMjYwNjA5MTYxMTEyWjAYMRYwFAYD VQQDEw02YTFmMDBhMS1kNzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyM+xRgQcqnm8xSMaDZ+m1PzFXKh3UMemISULtKwgFtbCpBswPiC6klcwVQck znXKTj1AzF5qL6tudalt/hjWafjG77CRG4E+hBc4eP5rNvrm3jhnfk3kb6FEIAVZ Dm3t0lzTb+K4m7jok9T2Ev9O2ndriQkwo5SNcVI0f5bX0JnkdwjND5W134t0IulZ NekLuf2lYXZ54iL1wzefMbaKOvL1Iu8WYIhiWzcT2PJWjw0aKWtJckL3BBpBfS64 aPfiDesfxsMSo+v5Bi/huvxY5oWrRCiiPRV8idmnaG4kwJqb3+vgoNYI8dvyrUMO GXtuEPdV0pvPU1Xs+MbeuT3VEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHf4QSek XRdVsd+pAWV240USYJYUMB8GA1UdIwQYMBaAFOLwdCrYCp27KHUYTuDdXpTddXhL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjNGRS84MjVDRTlBQUY5 RUIxMUU2QkRFN0E5NjhDNEY5QUUwMi80dkIwS3RnS25ic29kUmhPNE4xZWxOMTFl RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR2QjBLdGdLbmJzb2RSaE80TjFlbE4xMWVFcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjNGRS84MjVDRTlBQUY5RUIxMUU2QkRFN0E5NjhDNEY5QUUwMi80dkIwS3RnS25i c29kUmhPNE4xZWxOMTFlRXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYWvLIRLwa8SIDXeWZuHCcwhPhv3rvz1mVy71yU6DwHWhcwYBriZOrrk+PTLF rE3S9J8LyY2CcyzKtCSmk0HGBfjC0FowWPf923BRak4/dvx02aCPnSYjqC+uGPzk tWW4JtJ5IanLIcb/7GN22fxfhfknfEsGD8hgMB056Xo3o/CFGEke8+p48cuXHnEl 6ihvItg0U7H4sVhlPvGCCIqjTK33RYLjhXnAigwwn+ddAPsnYVzSfSaXpS4hpCI+ 2N1uBeV7JERWhCH452f/Y/nM8Cf0c8klX+ZRzwm1wE9ariIFSz/xHu6TSYmXykD/ mfFpKAvopnE1UenCrnNUkiBZUQ== -----END CERTIFICATE-----Generated at Thu Jun 4 12:25:38 2026 by rpki-client