$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE216/AF57B6FCFE2811EAA7350158C4F9AE02/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.mft File: aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.mft (raw, json) Hash identifier: U/dqju4zFLx12PXnpi3X8Mvd8i8nn4KbbAMWvNyIYAg= Subject key identifier: D4:42:D2:05:62:A7:0E:26:7A:78:88:EC:13:E3:10:B9:33:D2:04:48 Authority key identifier: 68:A4:FC:81:2D:01:91:36:3E:1C:4A:13:09:9F:53:B0:27:37:65:79 Certificate issuer: /CN=A91CE216/serialNumber=68A4FC812D0191363E1C4A13099F53B027376579 Certificate serial: 0889 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE216/AF57B6FCFE2811EAA7350158C4F9AE02/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.mft Manifest number: 087D Signing time: Mon 22 Jun 2026 20:43:47 +0000 Manifest this update: Mon 22 Jun 2026 20:43:47 +0000 Manifest next update: Mon 29 Jun 2026 20:43:47 +0000 Files and hashes: 1: aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.crl (hash: XETWc3gTttaRs8SLeQ1UM35x05txsWcUf25m6gmBMkw=) 2: 7F2355F2FE2A11EA8A51B85AC4F9AE02.roa (hash: pEoVeSKvZWCj0YeLOAFbn4+nyrnm4dpfDhs+6j8mLhc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE216/AF57B6FCFE2811EAA7350158C4F9AE02/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.crl rsync://rpki.apnic.net/member_repository/A91CE216/AF57B6FCFE2811EAA7350158C4F9AE02/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Jun 2026 20:43:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2185 (0x889) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE216, serialNumber=68A4FC812D0191363E1C4A13099F53B027376579 Validity Not Before: Jun 22 20:43:47 2026 GMT Not After : Jun 29 20:43:47 2026 GMT Subject: CN=6a399e83-83e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:fb:c8:0b:cd:08:c8:ba:c5:80:7c:17:d2:cc: 26:a9:e5:62:88:05:01:c5:73:3b:6b:3e:81:72:a3: 0b:e1:bc:1b:9b:58:1d:fd:b0:97:c3:98:a5:67:ba: 70:a5:df:e7:7e:21:fb:e9:c5:cf:34:07:84:c0:de: 9b:1a:6a:3c:05:d4:0a:23:82:52:2f:9c:3a:19:e5: ed:b9:f8:c5:9d:ec:bd:fc:93:60:0f:aa:10:bd:18: 13:cb:56:62:00:b7:ca:d0:e2:72:3b:67:ba:38:c6: 5a:e9:29:b4:9f:70:42:8d:27:d6:db:04:81:64:f2: ce:07:b0:ee:f1:fd:e2:b4:d9:0b:48:7c:e3:70:61: 47:f3:14:0c:41:b1:67:4d:ce:6a:ce:4d:dc:9e:77: 8a:f3:00:0b:50:a0:ef:54:02:ff:63:1d:3d:1f:cd: ab:a8:ef:1c:7e:38:16:80:9c:71:33:7c:78:e7:77: 86:a0:55:16:a8:15:4f:7a:e9:30:6d:92:79:87:3a: a7:6b:c9:c2:a1:17:c9:90:00:0d:c1:a1:b2:cb:dd: c6:b8:9f:ac:ec:93:45:12:97:38:47:a8:8e:b3:53: 3b:4e:a5:6e:5a:1b:6e:ea:01:91:7f:f0:67:41:0c: de:ea:ec:80:df:14:da:6b:6c:54:28:f4:a9:12:dc: b5:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:42:D2:05:62:A7:0E:26:7A:78:88:EC:13:E3:10:B9:33:D2:04:48 X509v3 Authority Key Identifier: keyid:68:A4:FC:81:2D:01:91:36:3E:1C:4A:13:09:9F:53:B0:27:37:65:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE216/AF57B6FCFE2811EAA7350158C4F9AE02/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE216/AF57B6FCFE2811EAA7350158C4F9AE02/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:a9:fa:ce:e3:fb:e1:54:8f:d9:e6:eb:c8:74:c7:ed:9c:7f: 3a:73:a2:7f:fc:48:7b:a6:c4:76:5f:4c:52:e5:1b:68:b7:57: 09:01:f0:a1:e8:62:cf:a2:16:c6:7d:cd:86:be:9e:56:c5:54: d5:01:5c:9f:f3:b6:22:90:a6:03:0d:8c:df:95:3b:bc:46:ea: a8:df:8a:c5:d7:1f:d7:a1:dc:a6:4e:13:08:2a:26:0d:77:17: 27:d0:93:b3:45:a5:ed:03:48:ee:09:dd:b5:08:3c:46:9a:31: 66:75:43:d4:52:88:d8:3c:12:c1:ad:7f:16:9c:15:91:68:2c: 52:fb:20:49:4b:c9:ee:b5:bf:19:5e:d3:fa:a8:17:3e:b8:4b: 9d:3b:b4:86:67:96:68:35:31:3c:3c:ff:a0:1d:ae:5b:e9:51: 8d:2c:ce:79:6b:ac:2c:02:a3:d1:ee:45:b8:03:6a:d7:13:6b: 15:3e:7e:9d:6e:6b:11:95:95:7f:a4:f9:02:dd:41:42:eb:78: 13:6c:16:92:01:47:23:3f:d7:f9:b0:9c:4f:f8:7e:d2:31:59: 9e:25:9a:14:91:ed:40:cd:ff:f8:32:32:ab:48:7e:bd:06:d6: b6:8d:f5:59:63:48:9d:67:b9:cb:a7:70:19:74:0c:8c:bd:e4: 77:77:32:ec -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UyMTYxMTAvBgNVBAUTKDY4QTRGQzgxMkQwMTkxMzYzRTFDNEExMzA5OUY1M0Iw MjczNzY1NzkwHhcNMjYwNjIyMjA0MzQ3WhcNMjYwNjI5MjA0MzQ3WjAYMRYwFAYD VQQDEw02YTM5OWU4My04M2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3/vIC80IyLrFgHwX0swmqeViiAUBxXM7az6BcqML4bwbm1gd/bCXw5ilZ7pw pd/nfiH76cXPNAeEwN6bGmo8BdQKI4JSL5w6GeXtufjFney9/JNgD6oQvRgTy1Zi ALfK0OJyO2e6OMZa6Sm0n3BCjSfW2wSBZPLOB7Du8f3itNkLSHzjcGFH8xQMQbFn Tc5qzk3cnneK8wALUKDvVAL/Yx09H82rqO8cfjgWgJxxM3x453eGoFUWqBVPeukw bZJ5hzqna8nCoRfJkAANwaGyy93GuJ+s7JNFEpc4R6iOs1M7TqVuWhtu6gGRf/Bn QQze6uyA3xTaa2xUKPSpEty1UQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNRC0gVi pw4meniI7BPjELkz0gRIMB8GA1UdIwQYMBaAFGik/IEtAZE2PhxKEwmfU7AnN2V5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTIxNi9BRjU3QjZGQ0ZF MjgxMUVBQTczNTAxNThDNEY5QUUwMi9hS1Q4Z1MwQmtUWS1IRW9UQ1o5VHNDYzNa WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FLVDhnUzBCa1RZLUhFb1RDWjlUc0NjM1pYay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTIxNi9BRjU3QjZGQ0ZFMjgxMUVBQTczNTAxNThDNEY5QUUwMi9hS1Q4Z1MwQmtU WS1IRW9UQ1o5VHNDYzNaWGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAran6zuP74VSP2ebryHTH7Zx/OnOif/xIe6bEdl9MUuUbaLdXCQHwoehiz6IW xn3Nhr6eVsVU1QFcn/O2IpCmAw2M35U7vEbqqN+Kxdcf16Hcpk4TCComDXcXJ9CT s0Wl7QNI7gndtQg8RpoxZnVD1FKI2DwSwa1/FpwVkWgsUvsgSUvJ7rW/GV7T+qgX PrhLnTu0hmeWaDUxPDz/oB2uW+lRjSzOeWusLAKj0e5FuANq1xNrFT5+nW5rEZWV f6T5At1BQut4E2wWkgFHIz/X+bCcT/h+0jFZniWaFJHtQM3/+DIyq0h+vQbWto31 WWNInWe5y6dwGXQMjL3kd3cy7A== -----END CERTIFICATE-----Generated at Wed Jun 24 11:12:59 2026 by rpki-client