$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9F00/0BB1E4B02C2511F18F7125819B833773/pNgA2xjHwseXEbNfyLfSF9x9TG4.mft File: pNgA2xjHwseXEbNfyLfSF9x9TG4.mft (raw, json) Hash identifier: eePvyuHFpzKzZudLEITlMr+rrf0rOFTFN3ekOpLVrtA= Subject key identifier: 72:99:C4:DC:F0:37:B4:4F:B6:67:4B:6F:03:95:34:D4:F7:16:D4:1A Authority key identifier: A4:D8:00:DB:18:C7:C2:C7:97:11:B3:5F:C8:B7:D2:17:DC:7D:4C:6E Certificate issuer: /CN=A91C9F00/serialNumber=A4D800DB18C7C2C79711B35FC8B7D217DC7D4C6E Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pNgA2xjHwseXEbNfyLfSF9x9TG4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9F00/0BB1E4B02C2511F18F7125819B833773/pNgA2xjHwseXEbNfyLfSF9x9TG4.mft Manifest number: 2F Signing time: Tue 23 Jun 2026 08:59:12 +0000 Manifest this update: Tue 23 Jun 2026 08:59:12 +0000 Manifest next update: Tue 30 Jun 2026 08:59:12 +0000 Files and hashes: 1: pNgA2xjHwseXEbNfyLfSF9x9TG4.crl (hash: +N8lM8FpVVqcjSOwo3WhdPQUmzcmlXbZbAS2FlOlZ00=) 2: E1B6596E447211F188990C259B833773.roa (hash: BoVkQomFICNHToymCepXWBK1nByXGDPh9ZzxCYs1+HY=) 3: B7E7EF7C2C2511F1AC709C159C833773.roa (hash: 22lcIVcWJJNQeedflM7ajUp8JwhpkgUi0gHeb905Grk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9F00/0BB1E4B02C2511F18F7125819B833773/pNgA2xjHwseXEbNfyLfSF9x9TG4.crl rsync://rpki.apnic.net/member_repository/A91C9F00/0BB1E4B02C2511F18F7125819B833773/pNgA2xjHwseXEbNfyLfSF9x9TG4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pNgA2xjHwseXEbNfyLfSF9x9TG4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jun 2026 08:59:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9F00, serialNumber=A4D800DB18C7C2C79711B35FC8B7D217DC7D4C6E Validity Not Before: Jun 23 08:59:12 2026 GMT Not After : Jun 30 08:59:12 2026 GMT Subject: CN=6a3a4ae0-d0f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a0:5b:25:4a:09:6a:e2:f5:19:99:bd:17:e2: 14:e7:f0:88:2a:e0:28:32:e2:0e:1a:2c:a8:ef:6b: 06:da:d0:f6:f6:2a:b6:3f:c2:31:a9:19:15:92:79: 6d:96:70:69:0d:66:f0:47:7d:ff:dd:b2:1b:91:b9: b1:7f:d8:df:57:8f:e0:99:66:77:6b:8c:ee:e4:46: 13:8b:3f:4c:11:7b:8e:7e:89:7f:1c:99:db:76:66: 25:3b:71:a6:54:8c:95:8b:62:f1:fa:d6:d9:7c:cf: 3a:e4:8a:47:3d:54:fd:12:18:35:a6:4e:fd:91:8a: 01:0c:00:17:a0:51:ee:a1:3e:d3:c7:b7:5b:0c:47: 39:61:92:5f:f4:e4:da:58:60:78:ba:2f:e5:71:b3: 26:a6:ac:fc:e3:86:21:26:00:2c:1e:6f:5f:32:c2: 88:7d:c0:e4:e9:24:ef:df:db:31:a9:7c:bc:12:a3: bb:8c:e5:75:03:1c:65:c9:1b:b3:1d:1a:59:39:d6: f0:18:c3:91:3f:79:e5:ac:4e:48:68:1e:32:e4:43: a4:07:22:51:13:bc:d4:1e:1d:fc:d9:68:ff:33:16: a3:9a:80:a8:18:4a:57:50:3a:74:13:00:bf:21:92: 4a:58:20:a9:b2:a8:86:2f:32:8a:3f:0a:48:3b:2c: f4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:99:C4:DC:F0:37:B4:4F:B6:67:4B:6F:03:95:34:D4:F7:16:D4:1A X509v3 Authority Key Identifier: keyid:A4:D8:00:DB:18:C7:C2:C7:97:11:B3:5F:C8:B7:D2:17:DC:7D:4C:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9F00/0BB1E4B02C2511F18F7125819B833773/pNgA2xjHwseXEbNfyLfSF9x9TG4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pNgA2xjHwseXEbNfyLfSF9x9TG4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9F00/0BB1E4B02C2511F18F7125819B833773/pNgA2xjHwseXEbNfyLfSF9x9TG4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:ac:8d:b3:e5:e2:81:99:06:17:f9:62:88:96:2e:72:3e:52: 73:b5:00:46:3d:45:e4:1d:13:0a:60:3e:56:8c:06:8b:6e:c2: b8:93:9a:ac:c2:36:d3:ff:b3:9e:c7:87:30:d3:1c:66:e4:de: cb:9d:23:2a:09:f6:74:51:18:d5:7f:51:aa:15:96:31:8c:f4: 27:b8:e9:08:21:24:7e:84:b8:bb:f8:84:13:e0:25:8c:80:75: ef:3a:e6:c0:50:48:6a:2d:4d:22:af:3e:77:cd:08:61:c6:f6: 80:03:7f:3f:e4:12:16:0f:69:be:58:35:20:a0:92:4b:f3:e9: 14:15:6f:b4:9a:5d:f3:48:dd:32:df:1c:49:a1:0a:71:1b:9f: 9a:24:30:89:27:86:bf:ba:0b:f9:19:f8:6d:5f:44:d5:ee:c9: 84:3f:29:a8:c5:da:5d:ee:e1:67:d1:24:3d:1e:61:5d:83:71: bd:cb:95:7d:ae:83:1b:3a:36:34:15:91:54:7b:20:da:c3:b2: 9f:0a:bd:ad:d0:05:94:3a:8b:ba:bb:8c:f2:80:6b:63:5a:db: da:1f:06:a1:b6:75:51:90:a6:e8:85:6a:b1:73:4f:62:bc:9d: 4a:36:9a:66:bd:de:7c:17:a5:63:b0:ce:fa:95:d3:1d:5c:f0: ef:65:a4:ea -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OUYwMDExMC8GA1UEBRMoQTREODAwREIxOEM3QzJDNzk3MTFCMzVGQzhCN0QyMTdE QzdENEM2RTAeFw0yNjA2MjMwODU5MTJaFw0yNjA2MzAwODU5MTJaMBgxFjAUBgNV BAMTDTZhM2E0YWUwLWQwZjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDaoFslSglq4vUZmb0X4hTn8Igq4Cgy4g4aLKjvawba0Pb2KrY/wjGpGRWSeW2W cGkNZvBHff/dshuRubF/2N9Xj+CZZndrjO7kRhOLP0wRe45+iX8cmdt2ZiU7caZU jJWLYvH61tl8zzrkikc9VP0SGDWmTv2RigEMABegUe6hPtPHt1sMRzlhkl/05NpY YHi6L+VxsyamrPzjhiEmACweb18ywoh9wOTpJO/f2zGpfLwSo7uM5XUDHGXJG7Md Glk51vAYw5E/eeWsTkhoHjLkQ6QHIlETvNQeHfzZaP8zFqOagKgYSldQOnQTAL8h kkpYIKmyqIYvMoo/Ckg7LPTHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUcpnE3PA3 tE+2Z0tvA5U01PcW1BowHwYDVR0jBBgwFoAUpNgA2xjHwseXEbNfyLfSF9x9TG4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5RjAwLzBCQjFFNEIwMkMy NTExRjE4RjcxMjU4MTlCODMzNzczL3BOZ0EyeGpId3NlWEViTmZ5TGZTRjl4OVRH NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcE5nQTJ4akh3c2VYRWJOZnlMZlNGOXg5VEc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5 RjAwLzBCQjFFNEIwMkMyNTExRjE4RjcxMjU4MTlCODMzNzczL3BOZ0EyeGpId3Nl WEViTmZ5TGZTRjl4OVRHNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBnrI2z5eKBmQYX+WKIli5yPlJztQBGPUXkHRMKYD5WjAaLbsK4k5qswjbT/7Oe x4cw0xxm5N7LnSMqCfZ0URjVf1GqFZYxjPQnuOkIISR+hLi7+IQT4CWMgHXvOubA UEhqLU0irz53zQhhxvaAA38/5BIWD2m+WDUgoJJL8+kUFW+0ml3zSN0y3xxJoQpx G5+aJDCJJ4a/ugv5GfhtX0TV7smEPymoxdpd7uFn0SQ9HmFdg3G9y5V9roMbOjY0 FZFUeyDaw7KfCr2t0AWUOou6u4zygGtjWtvaHwahtnVRkKbohWqxc09ivJ1KNppm vd58F6VjsM76ldMdXPDvZaTq -----END CERTIFICATE-----Generated at Wed Jun 24 11:29:58 2026 by rpki-client