$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9706/DDDC3916114711F18BB454AF223D8C67/hfItkhU_IB1ZI6nyf5Yfx21xGbg.mft File: hfItkhU_IB1ZI6nyf5Yfx21xGbg.mft (raw, json) Hash identifier: JNu9TqRw1jme5uJ7LZqCaC+VDSbiVz/EsXUSivddL9k= Subject key identifier: 9F:7F:10:96:B7:73:9A:85:30:02:D4:4B:7C:A5:C5:EB:76:1C:72:71 Authority key identifier: 85:F2:2D:92:15:3F:20:1D:59:23:A9:F2:7F:96:1F:C7:6D:71:19:B8 Certificate issuer: /CN=A91C9706/serialNumber=85F22D92153F201D5923A9F27F961FC76D7119B8 Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hfItkhU_IB1ZI6nyf5Yfx21xGbg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9706/DDDC3916114711F18BB454AF223D8C67/hfItkhU_IB1ZI6nyf5Yfx21xGbg.mft Manifest number: 39 Signing time: Fri 05 Jun 2026 09:01:27 +0000 Manifest this update: Fri 05 Jun 2026 09:01:26 +0000 Manifest next update: Fri 12 Jun 2026 09:01:26 +0000 Files and hashes: 1: hfItkhU_IB1ZI6nyf5Yfx21xGbg.crl (hash: hfL1KbH2W1qLh/HKDvNq3rj0GixORDj8aXBvS9g5LdY=) 2: B735FEEA118411F1951E019C333D8C67.roa (hash: qdQyipYaThgccgmXAXR/iB4/lWGcn5evCaadYGd7lUg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9706/DDDC3916114711F18BB454AF223D8C67/hfItkhU_IB1ZI6nyf5Yfx21xGbg.crl rsync://rpki.apnic.net/member_repository/A91C9706/DDDC3916114711F18BB454AF223D8C67/hfItkhU_IB1ZI6nyf5Yfx21xGbg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hfItkhU_IB1ZI6nyf5Yfx21xGbg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9706, serialNumber=85F22D92153F201D5923A9F27F961FC76D7119B8 Validity Not Before: Jun 5 09:01:26 2026 GMT Not After : Jun 12 09:01:26 2026 GMT Subject: CN=6a229067-ec4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:27:dc:68:b6:02:1a:97:1e:e8:5a:0c:69:59: 5b:61:a2:3f:53:92:df:fd:24:d5:d7:76:90:d7:04: dd:64:00:86:43:a6:77:87:79:33:b5:ea:d3:65:7a: f6:89:dd:c1:b5:4b:5a:eb:ac:dc:6a:e9:8e:56:74: c2:10:0d:f7:74:d3:43:8a:bb:1a:01:33:4a:b1:73: cd:f7:b1:ea:b8:16:07:50:4c:58:9a:4e:5b:d5:3a: 09:14:1a:00:c8:f1:1a:ae:5f:53:11:70:45:7b:a9: 2d:cd:95:8a:b7:6a:58:06:2e:cc:80:1c:aa:24:2c: 32:2b:ac:35:a0:e6:eb:27:37:34:4c:f2:ac:bd:01: 32:13:d6:73:49:53:b0:81:9f:d3:6d:ef:8a:a3:f6: 5c:45:fc:12:48:0f:2b:bc:83:41:f8:ff:1d:cc:b6: ac:7f:2d:2a:23:cd:c3:05:ea:c6:fa:e1:a7:a4:f5: f4:0b:1b:14:52:ec:a2:38:2e:59:7e:00:fd:21:a9: 68:d5:b9:0d:df:56:db:66:00:a9:35:cc:f0:e1:b2: c4:ef:84:3d:11:f4:95:93:6f:bd:c2:fd:04:80:b7: bc:fd:93:89:c1:f6:e2:09:ca:31:fc:55:86:1a:d1: 4b:84:78:20:18:53:44:9e:7c:69:7d:0d:ec:8b:88: 1b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:7F:10:96:B7:73:9A:85:30:02:D4:4B:7C:A5:C5:EB:76:1C:72:71 X509v3 Authority Key Identifier: keyid:85:F2:2D:92:15:3F:20:1D:59:23:A9:F2:7F:96:1F:C7:6D:71:19:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9706/DDDC3916114711F18BB454AF223D8C67/hfItkhU_IB1ZI6nyf5Yfx21xGbg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hfItkhU_IB1ZI6nyf5Yfx21xGbg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9706/DDDC3916114711F18BB454AF223D8C67/hfItkhU_IB1ZI6nyf5Yfx21xGbg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:51:5b:18:da:8d:3b:cc:8c:13:0a:97:03:9c:11:54:90:9d: a2:9d:1c:21:5c:34:f9:65:9d:d7:dc:3f:9c:b2:e1:1f:e9:94: 44:6e:36:77:27:4b:be:6f:3a:37:46:fb:41:eb:d9:ed:a9:63: 95:ee:b0:b8:64:6d:69:aa:d5:05:64:22:36:85:f7:f7:1a:d7: 45:6d:9a:50:a1:dd:ec:ad:53:e5:88:e7:6d:60:20:ea:0b:ce: 67:d1:1b:40:9e:58:c0:1b:3b:12:62:67:ec:db:5e:d7:94:6c: e2:50:20:9c:d7:64:5e:a4:54:24:7e:07:00:14:8c:07:d2:61: d7:eb:55:78:3b:05:93:a2:f4:fb:a9:a6:77:7c:ee:5e:46:e1: d1:b4:b4:2e:8d:bc:22:a1:42:b0:46:06:84:8a:a1:5f:85:5d: aa:d0:fc:ac:f3:e7:1a:2a:62:7d:a5:2e:6b:85:f7:31:32:d0: ab:dc:27:97:21:18:75:d5:5b:97:b6:5d:89:00:1f:47:f4:6f: 3d:dd:86:81:90:a3:c2:46:60:7f:c4:8c:26:08:b2:9f:9c:7b: 6b:0b:81:f8:0c:5f:33:bc:0e:67:f0:ca:49:fd:94:64:a1:ba: ca:f2:e8:4b:71:88:4c:50:29:31:9d:a9:16:47:43:75:28:3f: 98:ba:ec:c9 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OTcwNjExMC8GA1UEBRMoODVGMjJEOTIxNTNGMjAxRDU5MjNBOUYyN0Y5NjFGQzc2 RDcxMTlCODAeFw0yNjA2MDUwOTAxMjZaFw0yNjA2MTIwOTAxMjZaMBgxFjAUBgNV BAMTDTZhMjI5MDY3LWVjNGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjJ9xotgIalx7oWgxpWVthoj9Tkt/9JNXXdpDXBN1kAIZDpneHeTO16tNlevaJ 3cG1S1rrrNxq6Y5WdMIQDfd000OKuxoBM0qxc833seq4FgdQTFiaTlvVOgkUGgDI 8RquX1MRcEV7qS3NlYq3algGLsyAHKokLDIrrDWg5usnNzRM8qy9ATIT1nNJU7CB n9Nt74qj9lxF/BJIDyu8g0H4/x3Mtqx/LSojzcMF6sb64aek9fQLGxRS7KI4Lll+ AP0hqWjVuQ3fVttmAKk1zPDhssTvhD0R9JWTb73C/QSAt7z9k4nB9uIJyjH8VYYa 0UuEeCAYU0SefGl9DeyLiBvFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUn38Qlrdz moUwAtRLfKXF63YccnEwHwYDVR0jBBgwFoAUhfItkhU/IB1ZI6nyf5Yfx21xGbgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5NzA2L0REREMzOTE2MTE0 NzExRjE4QkI0NTRBRjIyM0Q4QzY3L2hmSXRraFVfSUIxWkk2bnlmNVlmeDIxeEdi Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaGZJdGtoVV9JQjFaSTZueWY1WWZ4MjF4R2JnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5 NzA2L0REREMzOTE2MTE0NzExRjE4QkI0NTRBRjIyM0Q4QzY3L2hmSXRraFVfSUIx Wkk2bnlmNVlmeDIxeEdiZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCHUVsY2o07zIwTCpcDnBFUkJ2inRwhXDT5ZZ3X3D+csuEf6ZREbjZ3J0u+bzo3 RvtB69ntqWOV7rC4ZG1pqtUFZCI2hff3GtdFbZpQod3srVPliOdtYCDqC85n0RtA nljAGzsSYmfs217XlGziUCCc12RepFQkfgcAFIwH0mHX61V4OwWTovT7qaZ3fO5e RuHRtLQujbwioUKwRgaEiqFfhV2q0Pys8+caKmJ9pS5rhfcxMtCr3CeXIRh11VuX tl2JAB9H9G893YaBkKPCRmB/xIwmCLKfnHtrC4H4DF8zvA5n8MpJ/ZRkobrK8uhL cYhMUCkxnakWR0N1KD+YuuzJ -----END CERTIFICATE-----Generated at Sat Jun 6 16:11:23 2026 by rpki-client