$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft File: s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft (raw, json) Hash identifier: wuztd+/hrspnBQfiWes6IJ9oPXg6U3HAX8SRhPnuPNE= Subject key identifier: 54:93:31:A7:B7:48:81:58:FE:6A:AC:E6:F3:D9:C2:51:D2:E4:29:5A Authority key identifier: B3:62:43:7A:B6:7D:29:0C:5C:DF:EF:2F:62:B7:7E:DD:8A:9F:FA:44 Certificate issuer: /CN=A91CAE04/serialNumber=B362437AB67D290C5CDFEF2F62B77EDD8A9FFA44 Certificate serial: 021A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft Manifest number: 020B Signing time: Tue 23 Jun 2026 03:17:51 +0000 Manifest this update: Tue 23 Jun 2026 03:17:51 +0000 Manifest next update: Tue 30 Jun 2026 03:17:51 +0000 Files and hashes: 1: s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl (hash: taoVzWX8uE386+HE1/0WaM+M+csKJZBj6ok2jdYvilA=) 2: ABA6DCF0030F11EFB12D8A18C4F9AE02.roa (hash: /BkRK1pd7XeoJPnuYhfXRxi+ZjaehytBLdeWASZ6S3g=) 3: 7E40FBBA09EF11EFAA24237EC4F9AE02.roa (hash: gNrtkZkKrQjv9VGO4d7icZehe6OSfQ3CzkQRSTsWYpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jun 2026 03:17:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 538 (0x21a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAE04, serialNumber=B362437AB67D290C5CDFEF2F62B77EDD8A9FFA44 Validity Not Before: Jun 23 03:17:51 2026 GMT Not After : Jun 30 03:17:51 2026 GMT Subject: CN=6a39fadf-1f8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:96:0c:45:91:fb:45:04:57:ff:40:95:11:0a: 71:bf:9e:59:dc:2d:13:3a:cc:27:39:df:54:a4:17: b7:b0:4e:05:3a:1c:a8:53:ae:2a:86:61:9e:10:3e: 42:aa:56:3d:0c:4c:75:ab:ff:43:a7:fb:61:cc:36: 18:b6:06:a6:fb:48:d6:52:41:fa:14:50:3a:2a:74: b2:89:96:2f:6e:9c:97:d6:bc:7c:e2:bf:92:b8:ab: ab:e7:b4:6f:1f:40:e4:c0:35:9e:50:7a:c3:7b:b1: 66:b7:18:35:44:dd:20:5a:2c:31:ae:3f:cb:6f:4b: b6:86:26:d9:74:2a:06:ef:df:0a:53:d4:1e:2e:e0: 94:4d:39:4d:d2:a4:40:7e:35:60:a0:70:38:af:26: 71:7f:84:5f:36:d6:a3:42:48:83:93:57:b6:37:f1: b8:aa:4b:5c:51:d6:b7:89:69:6c:73:41:22:f0:a5: bf:a0:4f:f8:ff:d8:d8:ff:1e:6c:a6:96:39:ee:a9: da:6f:b6:ba:a4:a6:79:87:2f:8e:2a:cb:4d:b3:73: f3:8d:04:60:3c:e5:ec:52:aa:cf:4f:3f:ac:9b:e2: c5:ae:42:ff:e6:74:fa:07:ed:23:f1:12:b5:9d:46: ce:a1:74:4a:2b:ac:e4:73:e9:55:a0:59:ec:3a:ea: 41:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:93:31:A7:B7:48:81:58:FE:6A:AC:E6:F3:D9:C2:51:D2:E4:29:5A X509v3 Authority Key Identifier: keyid:B3:62:43:7A:B6:7D:29:0C:5C:DF:EF:2F:62:B7:7E:DD:8A:9F:FA:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:50:03:c3:05:b8:4c:53:27:22:0a:2d:5e:4f:8c:41:ed:ae: cc:22:f5:d6:a2:6f:5a:e0:87:d1:55:0a:c1:0c:68:67:65:c5: f2:05:b2:14:8c:1c:0b:75:82:c4:b3:54:3f:7f:59:4c:01:53: 41:b3:4c:03:f8:64:99:b7:62:cb:1d:44:6a:df:d9:14:36:90: ca:f3:b2:39:b9:bf:30:ee:44:a5:c8:fc:af:83:c8:97:df:a6: 55:76:7a:a8:f8:0d:f0:78:3f:87:ba:7c:be:fa:c9:71:03:1e: 48:da:e4:d6:89:cf:e5:55:69:f9:5b:81:92:26:ca:2b:89:a4: 5a:68:12:45:01:37:73:ad:5a:28:69:c0:30:47:8b:c2:ca:39: 4e:b2:98:4d:49:9b:0a:d3:e2:09:4f:92:09:04:f6:c6:02:aa: e2:24:6f:ce:c2:69:fe:e5:fa:67:f2:b7:13:27:50:8d:dc:02: 5e:c7:83:33:5a:e6:a0:10:a7:d1:de:ef:e7:01:0e:ef:de:69: 22:76:56:9b:07:5c:dd:10:d6:d6:c7:a3:26:df:22:a7:25:af: 84:e0:ad:8c:1c:0e:8f:be:ea:64:fd:26:ad:44:69:0a:43:a4: 72:23:f6:c6:e4:0d:f2:e4:1a:a2:3a:01:ef:2d:d3:e6:e4:0c: c0:d1:3a:15 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FFMDQxMTAvBgNVBAUTKEIzNjI0MzdBQjY3RDI5MEM1Q0RGRUYyRjYyQjc3RURE OEE5RkZBNDQwHhcNMjYwNjIzMDMxNzUxWhcNMjYwNjMwMDMxNzUxWjAYMRYwFAYD VQQDEw02YTM5ZmFkZi0xZjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjZYMRZH7RQRX/0CVEQpxv55Z3C0TOswnOd9UpBe3sE4FOhyoU64qhmGeED5C qlY9DEx1q/9Dp/thzDYYtgam+0jWUkH6FFA6KnSyiZYvbpyX1rx84r+SuKur57Rv H0DkwDWeUHrDe7Fmtxg1RN0gWiwxrj/Lb0u2hibZdCoG798KU9QeLuCUTTlN0qRA fjVgoHA4ryZxf4RfNtajQkiDk1e2N/G4qktcUda3iWlsc0Ei8KW/oE/4/9jY/x5s ppY57qnab7a6pKZ5hy+OKstNs3PzjQRgPOXsUqrPTz+sm+LFrkL/5nT6B+0j8RK1 nUbOoXRKK6zkc+lVoFnsOupBKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFSTMae3 SIFY/mqs5vPZwlHS5ClaMB8GA1UdIwQYMBaAFLNiQ3q2fSkMXN/vL2K3ft2Kn/pE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUUwNC85RDhGNzcyQTVG OTYxMUVFODM2MzhGM0VDNEY5QUUwMi9zMkpEZXJaOUtReGMzLTh2WXJkLTNZcWYt a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MySkRlclo5S1F4YzMtOHZZcmQtM1lxZi1rUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUUwNC85RDhGNzcyQTVGOTYxMUVFODM2MzhGM0VDNEY5QUUwMi9zMkpEZXJaOUtR eGMzLTh2WXJkLTNZcWYta1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuFADwwW4TFMnIgotXk+MQe2uzCL11qJvWuCH0VUKwQxoZ2XF8gWyFIwcC3WC xLNUP39ZTAFTQbNMA/hkmbdiyx1Eat/ZFDaQyvOyObm/MO5Epcj8r4PIl9+mVXZ6 qPgN8Hg/h7p8vvrJcQMeSNrk1onP5VVp+VuBkibKK4mkWmgSRQE3c61aKGnAMEeL wso5TrKYTUmbCtPiCU+SCQT2xgKq4iRvzsJp/uX6Z/K3EydQjdwCXseDM1rmoBCn 0d7v5wEO795pInZWmwdc3RDW1sejJt8ipyWvhOCtjBwOj77qZP0mrURpCkOkciP2 xuQN8uQaojoB7y3T5uQMwNE6FQ== -----END CERTIFICATE-----Generated at Wed Jun 24 11:24:58 2026 by rpki-client