$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft File: SU13HlEeEgBTuwmx8nS9j1nXOqg.mft (raw, json) Hash identifier: NKHuoHZTUC49wfZXR6sxy9e+OuUochYaxq3fMhSETV8= Subject key identifier: 1A:58:AA:4C:EE:E9:92:BC:8D:D6:43:2E:BE:AC:FD:E4:7A:41:18:C1 Authority key identifier: 49:4D:77:1E:51:1E:12:00:53:BB:09:B1:F2:74:BD:8F:59:D7:3A:A8 Certificate issuer: /CN=A91C4614/serialNumber=494D771E511E120053BB09B1F274BD8F59D73AA8 Certificate serial: 0D89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft Manifest number: 0D71 Signing time: Mon 22 Jun 2026 18:21:25 +0000 Manifest this update: Mon 22 Jun 2026 18:21:25 +0000 Manifest next update: Mon 29 Jun 2026 18:21:25 +0000 Files and hashes: 1: SU13HlEeEgBTuwmx8nS9j1nXOqg.crl (hash: Awi+cVjeqa11USWyP3snc+Tgjr6ZTUm6lLCqWR9Q0lI=) 2: 86B2C22287EF11F0BB972D77C4F9AE02.roa (hash: OutccXiBEL/sQ024xr5UNL0COLFnkxGkB0q/nROLFaw=) 3: 2BFBE7E687EF11F0BA5DF073C4F9AE02.roa (hash: NXbiSnXZUjh8e0dCBVaR6mjHDOPkzJYQhnCA/dP5jgQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.crl rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Jun 2026 18:21:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3465 (0xd89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4614, serialNumber=494D771E511E120053BB09B1F274BD8F59D73AA8 Validity Not Before: Jun 22 18:21:25 2026 GMT Not After : Jun 29 18:21:25 2026 GMT Subject: CN=6a397d25-0ab7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8b:9f:0d:12:75:f1:53:92:0d:a0:f6:5c:a8: c0:2d:95:b6:72:1d:96:b5:58:57:36:aa:b7:ed:06: 0e:7b:9f:c6:bd:b2:17:7d:66:86:55:97:a8:e1:7a: 75:c7:e3:99:6f:3d:46:3d:a1:23:9d:51:95:d8:fe: 67:72:32:84:1a:10:72:f9:78:95:e5:30:5f:01:96: 2c:4f:cd:ed:0f:ea:da:35:dc:af:61:fa:65:fb:50: 04:7e:10:d9:4f:e6:ee:d7:45:75:6f:ce:24:a2:a4: a5:01:48:f3:0d:bd:b4:f9:fb:0c:a1:46:7e:ce:26: 97:70:f9:fb:87:d3:f1:01:bf:63:c1:8e:17:3e:ff: a6:02:3d:c9:9b:45:b1:e4:f3:83:9d:fc:97:5d:4d: 64:d2:92:12:c9:56:a6:91:4c:c1:5b:37:73:9e:eb: 76:f7:25:8e:76:28:e0:95:0c:78:78:e2:ba:ee:20: 1d:a8:82:12:e4:c8:3c:d5:9d:d2:2a:b8:e6:01:9f: 86:ed:e7:99:c6:dd:db:1d:9e:bb:5b:c3:c7:51:36: 69:be:6d:50:5e:06:aa:10:89:7d:0e:82:ea:9b:5e: 49:05:04:ad:bf:a0:39:d8:51:79:93:be:07:87:b5: f9:ec:70:bd:13:37:26:03:96:1f:03:75:f8:87:9e: e6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:58:AA:4C:EE:E9:92:BC:8D:D6:43:2E:BE:AC:FD:E4:7A:41:18:C1 X509v3 Authority Key Identifier: keyid:49:4D:77:1E:51:1E:12:00:53:BB:09:B1:F2:74:BD:8F:59:D7:3A:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:c8:f0:7a:5c:14:6d:20:78:3a:c4:9a:0f:e0:1d:4c:55:1f: bc:46:d9:db:e6:9e:85:ba:35:b0:fe:2d:43:61:ee:84:e6:43: 32:35:20:c6:30:42:de:e8:42:b5:e3:2f:b5:94:ee:67:c5:20: 15:66:6f:89:6b:b5:ae:27:9d:ac:e8:ca:4c:9b:92:40:dd:8b: 81:68:1e:0e:a3:04:fd:1d:a9:dc:5f:9d:14:9b:7c:f7:91:9d: 9c:9f:d9:4c:8b:9e:bf:b5:fd:81:06:46:8e:7c:4e:a6:38:6f: 21:8f:7c:20:57:3e:c5:89:ff:80:cc:96:41:07:a4:ff:da:49: 0e:08:a1:b2:6b:42:16:95:e9:4a:99:7b:6f:2d:5c:40:b0:97: 17:94:75:5c:58:bd:6c:5c:1c:10:c3:58:35:77:41:10:10:8b: db:b1:b8:4d:93:17:e9:7e:02:6d:80:97:b0:e9:ca:b5:8c:6c: 85:19:30:c4:4d:49:8a:97:08:e0:90:f6:13:9d:12:dd:64:f2: cf:e2:e5:d8:96:27:fc:34:19:c6:d7:07:cf:6d:8e:84:31:e2: 8c:c0:09:a1:45:05:82:f5:57:c9:56:a6:81:47:58:4c:6f:24: f7:a9:28:ad:25:85:7f:d2:70:5a:dc:20:ba:2c:45:93:34:4f: 96:8d:f6:18 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ2MTQxMTAvBgNVBAUTKDQ5NEQ3NzFFNTExRTEyMDA1M0JCMDlCMUYyNzRCRDhG NTlENzNBQTgwHhcNMjYwNjIyMTgyMTI1WhcNMjYwNjI5MTgyMTI1WjAYMRYwFAYD VQQDEw02YTM5N2QyNS0wYWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuoufDRJ18VOSDaD2XKjALZW2ch2WtVhXNqq37QYOe5/GvbIXfWaGVZeo4Xp1 x+OZbz1GPaEjnVGV2P5ncjKEGhBy+XiV5TBfAZYsT83tD+raNdyvYfpl+1AEfhDZ T+bu10V1b84koqSlAUjzDb20+fsMoUZ+ziaXcPn7h9PxAb9jwY4XPv+mAj3Jm0Wx 5PODnfyXXU1k0pISyVamkUzBWzdznut29yWOdijglQx4eOK67iAdqIIS5Mg81Z3S KrjmAZ+G7eeZxt3bHZ67W8PHUTZpvm1QXgaqEIl9DoLqm15JBQStv6A52FF5k74H h7X57HC9EzcmA5YfA3X4h57mSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBpYqkzu 6ZK8jdZDLr6s/eR6QRjBMB8GA1UdIwQYMBaAFElNdx5RHhIAU7sJsfJ0vY9Z1zqo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDYxNC8xQzk0ODk5QUY0 RjAxMUU5QUMyMDJCMURDNEY5QUUwMi9TVTEzSGxFZUVnQlR1d214OG5TOWoxblhP cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NVMTNIbEVlRWdCVHV3bXg4blM5ajFuWE9xZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDYxNC8xQzk0ODk5QUY0RjAxMUU5QUMyMDJCMURDNEY5QUUwMi9TVTEzSGxFZUVn QlR1d214OG5TOWoxblhPcWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACsjwelwUbSB4OsSaD+AdTFUfvEbZ2+aehbo1sP4tQ2HuhOZDMjUgxjBC3uhC teMvtZTuZ8UgFWZviWu1riedrOjKTJuSQN2LgWgeDqME/R2p3F+dFJt895GdnJ/Z TIuev7X9gQZGjnxOpjhvIY98IFc+xYn/gMyWQQek/9pJDgihsmtCFpXpSpl7by1c QLCXF5R1XFi9bFwcEMNYNXdBEBCL27G4TZMX6X4CbYCXsOnKtYxshRkwxE1JipcI 4JD2E50S3WTyz+Ll2JYn/DQZxtcHz22OhDHijMAJoUUFgvVXyVamgUdYTG8k96ko rSWFf9JwWtwguixFkzRPlo32GA== -----END CERTIFICATE-----Generated at Wed Jun 24 11:29:33 2026 by rpki-client