$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft File: ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft (raw, json) Hash identifier: t0N6XJ7GxcxzQvmjmkIbNxDg/d5y++bdwLb7nCra2hQ= Subject key identifier: FA:80:F9:8C:27:D7:A7:E9:42:26:58:FA:7F:B7:E2:A5:54:47:87:BD Authority key identifier: 93:2E:C2:E6:E5:2B:5A:F6:C7:B0:3C:41:50:20:ED:E2:72:AA:A1:45 Certificate issuer: /CN=A91CEF3E/serialNumber=932EC2E6E52B5AF6C7B03C415020EDE272AAA145 Certificate serial: 0F5B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ky7C5uUrWvbHsDxBUCDt4nKqoUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft Manifest number: 0F3B Signing time: Tue 02 Jun 2026 17:35:03 +0000 Manifest this update: Tue 02 Jun 2026 17:35:03 +0000 Manifest next update: Tue 09 Jun 2026 17:35:03 +0000 Files and hashes: 1: ky7C5uUrWvbHsDxBUCDt4nKqoUU.crl (hash: VjAOKRYA77qfJQhRspltE9rrP6cZzE/ItlxezjWsfMU=) 2: 5C154406988911E991B10838C4F9AE02.roa (hash: tQrQ6Cd+gUF5DxrjyCWytmMItl98qXXXMjLohZ6qa3w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.crl rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ky7C5uUrWvbHsDxBUCDt4nKqoUU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Jun 2026 15:18:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3931 (0xf5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEF3E, serialNumber=932EC2E6E52B5AF6C7B03C415020EDE272AAA145 Validity Not Before: Jun 2 17:35:03 2026 GMT Not After : Jun 9 17:35:03 2026 GMT Subject: CN=6a1f1447-8b50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ac:63:ac:fc:b1:1e:61:7a:d5:eb:c3:7c:68: 67:ff:fc:f1:b4:97:33:a4:d8:ff:1a:7f:06:63:74: 16:1c:37:1d:8e:fd:ec:18:01:bc:ec:6f:1d:55:0d: ed:53:3f:cb:cb:11:e6:63:d4:e0:9c:7c:c7:dd:31: 70:1a:dc:90:28:95:50:d8:3a:30:28:0a:0e:6f:8c: b9:25:41:82:45:04:4c:7c:98:5c:99:51:39:8e:e5: 40:76:48:b5:41:79:e8:32:37:d8:cb:f5:a7:24:12: c8:3f:d8:4b:d3:91:cb:43:98:fc:d1:21:f0:8d:b1: 86:d3:be:9c:07:7b:52:27:6e:41:c9:ab:b7:21:19: 64:4d:84:78:f1:e3:f9:6f:1c:62:35:1d:f3:46:c5: 32:48:d2:59:7a:81:a0:3b:f4:08:da:c9:c5:ad:07: 73:6e:c3:b9:eb:1b:31:f0:9f:4e:1e:35:bd:5b:bd: 76:93:93:cd:f6:08:0c:8d:dc:15:4b:58:81:7e:c0: 1b:92:82:ec:17:fc:33:1d:f2:cc:e0:d7:9b:7a:fb: d0:e1:68:b9:a6:7a:e9:ef:5f:a3:29:3b:7e:51:f5: c7:4f:95:a9:fc:29:e3:ca:96:b2:42:cb:01:7e:39: 42:cb:6a:ba:90:d9:d2:1c:6d:41:01:e9:11:22:c6: 29:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:80:F9:8C:27:D7:A7:E9:42:26:58:FA:7F:B7:E2:A5:54:47:87:BD X509v3 Authority Key Identifier: keyid:93:2E:C2:E6:E5:2B:5A:F6:C7:B0:3C:41:50:20:ED:E2:72:AA:A1:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ky7C5uUrWvbHsDxBUCDt4nKqoUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:79:e9:e3:fa:1a:e8:89:83:7c:df:26:d2:c5:25:39:3c:0d: 36:62:28:fd:91:58:eb:f1:ce:12:7f:a5:20:1c:88:d4:45:8e: 3a:6b:57:71:39:6c:d9:53:32:dc:fb:e1:ae:f1:a5:8e:25:ec: a9:4c:31:87:1b:18:f3:cf:20:ef:be:37:5a:b8:b4:01:6d:bc: 31:9e:75:72:40:76:d3:6e:f5:0e:72:29:87:82:ed:8b:ff:12: b8:62:d4:15:53:cd:c7:57:db:3d:aa:86:7b:f3:36:25:4d:1a: 1f:04:f7:b0:0d:33:c4:1c:c3:b2:4b:44:ec:71:0b:ae:7d:40: 72:ef:66:ca:73:1c:e7:e0:1b:d4:d6:9f:b4:d2:6b:1f:06:8b: 5b:9d:b3:d7:87:52:b1:e9:01:74:74:7b:51:02:da:75:90:0b: ed:5b:ea:02:9a:c3:ce:1c:7b:e3:e0:05:86:f6:ed:46:49:4b: ed:1a:0c:0b:4b:6d:26:22:ca:7a:2a:b6:69:ef:be:7a:9a:a1: bf:4c:e2:d1:6f:da:01:6f:74:73:74:2c:8a:83:53:f5:d3:27: 7f:b6:5b:6e:53:9b:ac:aa:51:a6:5c:74:31:60:fc:8e:21:06: 2b:f3:c0:cc:d0:b4:bc:d3:a0:dc:d5:6e:05:7f:fd:5e:b3:2b: 4c:8e:55:ef -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD1swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VGM0UxMTAvBgNVBAUTKDkzMkVDMkU2RTUyQjVBRjZDN0IwM0M0MTUwMjBFREUy NzJBQUExNDUwHhcNMjYwNjAyMTczNTAzWhcNMjYwNjA5MTczNTAzWjAYMRYwFAYD VQQDEw02YTFmMTQ0Ny04YjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApKxjrPyxHmF61evDfGhn//zxtJczpNj/Gn8GY3QWHDcdjv3sGAG87G8dVQ3t Uz/LyxHmY9TgnHzH3TFwGtyQKJVQ2DowKAoOb4y5JUGCRQRMfJhcmVE5juVAdki1 QXnoMjfYy/WnJBLIP9hL05HLQ5j80SHwjbGG076cB3tSJ25Byau3IRlkTYR48eP5 bxxiNR3zRsUySNJZeoGgO/QI2snFrQdzbsO56xsx8J9OHjW9W712k5PN9ggMjdwV S1iBfsAbkoLsF/wzHfLM4NebevvQ4Wi5pnrp71+jKTt+UfXHT5Wp/CnjypayQssB fjlCy2q6kNnSHG1BAekRIsYpowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPqA+Ywn 16fpQiZY+n+34qVUR4e9MB8GA1UdIwQYMBaAFJMuwublK1r2x7A8QVAg7eJyqqFF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUYzRS9DQjc0Q0Y2RTk4 N0IxMUU5ODNFQ0NGMTNDNEY5QUUwMi9reTdDNXVVcld2YkhzRHhCVUNEdDRuS3Fv VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2t5N0M1dVVyV3ZiSHNEeEJVQ0R0NG5LcW9VVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUYzRS9DQjc0Q0Y2RTk4N0IxMUU5ODNFQ0NGMTNDNEY5QUUwMi9reTdDNXVVcld2 YkhzRHhCVUNEdDRuS3FvVVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZ3np4/oa6ImDfN8m0sUlOTwNNmIo/ZFY6/HOEn+lIByI1EWOOmtXcTls2VMy 3PvhrvGljiXsqUwxhxsY888g7743Wri0AW28MZ51ckB20271DnIph4Lti/8SuGLU FVPNx1fbPaqGe/M2JU0aHwT3sA0zxBzDsktE7HELrn1Acu9mynMc5+Ab1NaftNJr HwaLW52z14dSsekBdHR7UQLadZAL7VvqAprDzhx74+AFhvbtRklL7RoMC0ttJiLK eiq2ae++epqhv0zi0W/aAW90c3QsioNT9dMnf7ZbblObrKpRplx0MWD8jiEGK/PA zNC0vNOg3NVuBX/9XrMrTI5V7w== -----END CERTIFICATE-----Generated at Tue Jun 2 21:19:22 2026 by rpki-client