$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft File: s2uXFySjur2JC3VFmJM3IPly_q8.mft (raw, json) Hash identifier: DKw03rS3JVk5HkcPK+5fOBai3tHrXpPIIVMBY7yvibg= Subject key identifier: BD:D4:C0:CF:DC:31:A4:E3:45:7F:F7:5A:5A:93:FC:07:1E:3D:D8:6D Authority key identifier: B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF Certificate issuer: /CN=A91CE558/serialNumber=B36B971724A3BABD890B754598933720F972FEAF Certificate serial: 0C3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft Manifest number: 0BD0 Signing time: Sat 20 Jun 2026 19:04:52 +0000 Manifest this update: Sat 20 Jun 2026 19:04:51 +0000 Manifest next update: Sat 27 Jun 2026 19:04:51 +0000 Files and hashes: 1: s2uXFySjur2JC3VFmJM3IPly_q8.crl (hash: PL6zf6MMpN0PAbgtTQfVcHQr3dPwyp5LafK+V2hm5EM=) 2: F1EB46D2717F11EEB3FA0A5EC4F9AE02.roa (hash: a5ETmaqpNy6qeOL+PmbuFg5Hvj7coJZt0e2vYVREM4A=) 3: 466891560ADA11ECBFAECB29C4F9AE02.roa (hash: uv7rdnmyI+gc1dDgRNGKvt12no6t8v6+Sh+LAKmYBS0=) 4: C1ACB1E819EF11EC84DBF462C4F9AE02.roa (hash: /IKxncGwcVAUWd16lVeAqQuGXRqTtvt9Ll/KgYku0+M=) 5: B66F0C58817111EFB121970CC4F9AE02.roa (hash: vY3JgYrHf50LIMon2cQ4xi3ayVXFANYUAF1HUUmukAc=) 6: A7470BFC33A711EBA4313B36C4F9AE02.roa (hash: ZCVyWhNkXCNm36AW8HvL8obBGE1kXtO5k/l1MbGslew=) 7: D992FDD49B4811EFA17EB17FC4F9AE02.roa (hash: FIe/ZxZ/czs73Iv9mGeR+sUl8NFbSaTBZOQUejuclqo=) 8: 966FD4648D2411EF9914EF63C4F9AE02.roa (hash: w7eYnxJy/ErX8uBHC7lb97b71ahe13DgTz190X2OvQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Jun 2026 19:04:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3133 (0xc3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE558, serialNumber=B36B971724A3BABD890B754598933720F972FEAF Validity Not Before: Jun 20 19:04:51 2026 GMT Not After : Jun 27 19:04:51 2026 GMT Subject: CN=6a36e454-c9e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:7f:0a:3c:de:8a:6b:f2:eb:45:e5:3e:dd:2a: 57:1f:b6:51:92:b3:43:3b:b8:40:1f:35:e1:b9:3f: 20:f0:d0:67:c1:39:53:36:5e:cf:89:75:30:a2:eb: ae:dc:1a:ba:9d:5b:90:a3:cc:45:51:fa:7e:e4:0e: 40:aa:ea:f8:e7:37:d2:e8:de:83:10:73:7a:87:9b: 0b:3b:dc:13:c0:95:ba:b7:16:45:ab:11:b3:1d:9d: f5:cb:1c:7c:66:02:0a:f4:85:9f:86:f0:51:4a:7d: d9:ef:2f:5e:97:a3:09:ee:a0:ac:7b:29:f1:31:f4: e4:cb:9c:22:00:1e:05:e8:f4:5e:4d:af:76:75:01: b2:21:7c:11:f6:75:f4:91:70:b8:28:5e:4e:0e:a5: 8e:6d:cb:9d:d8:28:ff:d5:c5:5a:80:8e:64:be:4b: 75:7e:2d:14:6d:36:56:f6:00:1f:20:30:08:58:37: 9a:12:24:90:b7:95:ca:85:ac:48:13:56:34:26:f6: c8:dc:21:46:fc:b9:92:d2:8b:d3:4b:25:86:31:2a: e9:28:38:d5:9e:0b:22:50:15:53:13:41:25:19:46: f4:7a:76:1b:9b:93:06:35:80:65:4a:ae:98:48:86: 17:ac:f2:61:96:e1:ef:8e:7f:2a:85:e2:7c:6a:0d: 5c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:D4:C0:CF:DC:31:A4:E3:45:7F:F7:5A:5A:93:FC:07:1E:3D:D8:6D X509v3 Authority Key Identifier: keyid:B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:19:ec:22:d8:25:df:fb:63:f1:3b:66:44:5f:bb:c1:2d:87: df:e9:07:7d:c2:0a:2f:0d:aa:e7:5c:f6:9a:f0:64:78:9f:69: 05:e0:a8:e6:40:c4:70:8b:56:31:86:2b:fe:98:63:a4:94:4e: 1e:99:b1:31:bd:f9:38:71:c7:d9:17:da:ab:ab:fa:0e:ba:53: a6:0b:ad:52:1d:f0:c6:c0:a8:76:07:4f:4a:ce:cb:6d:77:9f: af:9e:c3:c1:2f:a3:65:6b:3f:11:ca:d4:63:ef:60:23:75:88: b9:a2:00:58:e7:94:d1:7f:b9:97:5b:b8:fb:24:ce:cb:8d:6a: 0e:dc:3d:dc:54:04:de:c3:0a:70:e0:94:69:ae:67:19:25:99: d1:ac:07:68:0a:5c:f5:35:9f:e1:33:10:9a:c7:08:28:00:e5: 63:53:95:30:f8:a1:e9:7c:6b:ad:50:14:cd:f9:03:26:39:af: 96:7c:a5:9d:0c:9b:0d:58:37:33:a6:ef:a3:9e:c0:01:03:f4: c4:3f:cd:93:fb:fc:d5:71:07:25:c1:5e:7f:fd:02:4f:e6:f5: d9:23:9a:7d:01:09:71:05:39:8f:d6:84:ef:10:20:70:ce:66: 7c:cb:30:ce:f6:d7:ca:af:ba:6e:ab:2a:35:9d:e5:20:fe:60: 0c:1a:ef:6d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1NTgxMTAvBgNVBAUTKEIzNkI5NzE3MjRBM0JBQkQ4OTBCNzU0NTk4OTMzNzIw Rjk3MkZFQUYwHhcNMjYwNjIwMTkwNDUxWhcNMjYwNjI3MTkwNDUxWjAYMRYwFAYD VQQDEw02YTM2ZTQ1NC1jOWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiH8KPN6Ka/LrReU+3SpXH7ZRkrNDO7hAHzXhuT8g8NBnwTlTNl7PiXUwouuu 3Bq6nVuQo8xFUfp+5A5Aqur45zfS6N6DEHN6h5sLO9wTwJW6txZFqxGzHZ31yxx8 ZgIK9IWfhvBRSn3Z7y9el6MJ7qCseynxMfTky5wiAB4F6PReTa92dQGyIXwR9nX0 kXC4KF5ODqWObcud2Cj/1cVagI5kvkt1fi0UbTZW9gAfIDAIWDeaEiSQt5XKhaxI E1Y0JvbI3CFG/LmS0ovTSyWGMSrpKDjVngsiUBVTE0ElGUb0enYbm5MGNYBlSq6Y SIYXrPJhluHvjn8qheJ8ag1ciQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL3UwM/c MaTjRX/3WlqT/AcePdhtMB8GA1UdIwQYMBaAFLNrlxcko7q9iQt1RZiTNyD5cv6v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTU1OC8zREYxNEYwODUz OTQxMUVBQkY2QjRGNUZDNEY5QUUwMi9zMnVYRnlTanVyMkpDM1ZGbUpNM0lQbHlf cTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MydVhGeVNqdXIySkMzVkZtSk0zSVBseV9xOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTU1OC8zREYxNEYwODUzOTQxMUVBQkY2QjRGNUZDNEY5QUUwMi9zMnVYRnlTanVy MkpDM1ZGbUpNM0lQbHlfcTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANhnsItgl3/tj8TtmRF+7wS2H3+kHfcIKLw2q51z2mvBkeJ9pBeCo5kDEcItW MYYr/phjpJROHpmxMb35OHHH2Rfaq6v6DrpTpgutUh3wxsCodgdPSs7LbXefr57D wS+jZWs/EcrUY+9gI3WIuaIAWOeU0X+5l1u4+yTOy41qDtw93FQE3sMKcOCUaa5n GSWZ0awHaApc9TWf4TMQmscIKADlY1OVMPih6XxrrVAUzfkDJjmvlnylnQybDVg3 M6bvo57AAQP0xD/Nk/v81XEHJcFef/0CT+b12SOafQEJcQU5j9aE7xAgcM5mfMsw zvbXyq+6bqsqNZ3lIP5gDBrvbQ== -----END CERTIFICATE-----Generated at Mon Jun 22 08:25:59 2026 by rpki-client