$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft File: PinOb2p9uUttCRM7c_7VLd7hLas.mft (raw, json) Hash identifier: 7pxOOOvgRvQ7UzylOkNoK62DaKoAhcU46hCphqS2GYU= Subject key identifier: F6:BF:22:8D:54:93:6A:C6:32:1A:CF:1A:07:0E:AA:04:07:76:B6:3F Authority key identifier: 3E:29:CE:6F:6A:7D:B9:4B:6D:09:13:3B:73:FE:D5:2D:DE:E1:2D:AB Certificate issuer: /CN=A91CF285/serialNumber=3E29CE6F6A7DB94B6D09133B73FED52DDEE12DAB Certificate serial: 115B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PinOb2p9uUttCRM7c_7VLd7hLas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft Manifest number: 1142 Signing time: Mon 22 Jun 2026 17:12:59 +0000 Manifest this update: Mon 22 Jun 2026 17:12:58 +0000 Manifest next update: Mon 29 Jun 2026 17:12:58 +0000 Files and hashes: 1: PinOb2p9uUttCRM7c_7VLd7hLas.crl (hash: eQnkbtNHYMnN9HbmIz80aAZvCwniDV1xdP4wguu878o=) 2: DC83478EEB0311ED875DD72EC4F9AE02.roa (hash: NK1hqtZdCO6WmHvrmwdW3dn10uFeaY5J8E6tA43KEZ0=) 3: 073BC4F4ED3B11EDB5A01A46C4F9AE02.roa (hash: iQFJd86XO7yAIa5GnWERfrbSbZ5wfHcFrug+5uoA1TM=) 4: AB731B004B2A11EFAAFCC92CC4F9AE02.roa (hash: Vx2WbMEsYUJvjxHD6WL00kPDD7uH5hiABevdW4+Xt0o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.crl rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PinOb2p9uUttCRM7c_7VLd7hLas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Jun 2026 17:12:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4443 (0x115b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF285, serialNumber=3E29CE6F6A7DB94B6D09133B73FED52DDEE12DAB Validity Not Before: Jun 22 17:12:58 2026 GMT Not After : Jun 29 17:12:58 2026 GMT Subject: CN=6a396d1a-0726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9d:1a:0e:d4:fa:03:36:f0:1a:68:25:a1:e1: 13:17:8f:47:3d:7c:ec:e7:8f:4c:e9:a4:10:0c:4d: 59:f1:b5:53:12:a4:27:a8:8f:1b:98:a7:73:3c:6b: e9:3b:ac:d7:e8:e6:d6:e2:3f:e0:a3:71:67:3b:06: fe:9c:00:44:2b:b9:5b:e7:cb:91:7c:47:eb:00:aa: 11:f1:93:45:81:ae:5d:51:d9:b5:e8:b3:84:9b:70: a7:fa:d7:fa:5e:80:91:e9:1b:d0:00:48:52:c3:5f: 3c:23:66:1c:f8:d2:fb:09:16:cd:11:85:bd:42:af: 81:cd:8a:08:9f:38:cd:63:11:44:08:3c:53:c4:9e: c6:30:d4:88:91:af:22:1d:4d:b5:d4:c3:9b:94:a7: 64:aa:5f:29:36:b4:18:ae:5a:68:47:33:75:ed:34: 60:c4:88:a7:2b:a3:b0:9d:51:c8:0e:08:13:f7:0b: 0b:ae:20:33:51:eb:2b:9a:21:37:e4:27:51:d7:7a: 8a:ea:d0:8b:05:06:61:0b:21:15:fe:e4:22:af:07: 98:00:1c:0c:61:dc:3d:4b:b2:6d:03:47:ad:27:90: af:83:d4:1e:8d:c1:1d:d2:37:d5:6e:83:87:ae:4e: 3a:03:4c:1a:80:b4:f0:71:43:49:08:1a:d7:76:2d: 1e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:BF:22:8D:54:93:6A:C6:32:1A:CF:1A:07:0E:AA:04:07:76:B6:3F X509v3 Authority Key Identifier: keyid:3E:29:CE:6F:6A:7D:B9:4B:6D:09:13:3B:73:FE:D5:2D:DE:E1:2D:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PinOb2p9uUttCRM7c_7VLd7hLas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:ee:ef:ba:b0:7b:16:52:52:1c:77:0a:d6:c2:cf:9b:02:34: ed:7e:09:84:05:00:b3:35:3d:40:9d:eb:82:c3:b0:c5:fe:ae: 68:5b:64:a5:58:80:73:91:48:db:fe:0c:b7:c5:fc:0a:1b:37: 23:33:0a:8a:e0:ca:0f:e0:2b:68:b4:d2:4f:4f:03:9e:7b:53: 09:43:97:bb:7f:d0:b4:9b:bc:59:e7:fa:f5:91:24:ce:4f:02: 30:67:fe:31:c6:03:0d:0a:8a:c3:71:40:c6:48:09:9a:56:93: c8:51:9a:f4:7a:a7:20:f4:e9:5c:18:b3:65:52:0c:51:ad:27: c8:71:ed:4b:a3:74:42:02:24:c9:fd:ae:c1:bf:12:78:d1:72: 64:59:c4:59:82:ff:ab:56:aa:52:84:70:e8:da:e9:c8:38:1a: 9c:ae:f1:18:50:51:1d:07:15:99:7b:60:b6:96:09:56:35:1a: 39:24:0e:87:f8:05:67:07:73:4e:58:5b:44:26:30:d9:17:f4: e5:00:fd:a7:5a:ed:34:62:f8:3a:35:cc:68:43:70:c9:04:60: 57:71:3f:d2:dc:38:f2:a3:91:23:5a:60:cd:db:01:73:95:87: e7:d4:73:f4:07:de:c3:ba:43:c2:c9:c2:65:aa:59:b9:0c:3b: dd:33:aa:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YyODUxMTAvBgNVBAUTKDNFMjlDRTZGNkE3REI5NEI2RDA5MTMzQjczRkVENTJE REVFMTJEQUIwHhcNMjYwNjIyMTcxMjU4WhcNMjYwNjI5MTcxMjU4WjAYMRYwFAYD VQQDEw02YTM5NmQxYS0wNzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq50aDtT6AzbwGmgloeETF49HPXzs549M6aQQDE1Z8bVTEqQnqI8bmKdzPGvp O6zX6ObW4j/go3FnOwb+nABEK7lb58uRfEfrAKoR8ZNFga5dUdm16LOEm3Cn+tf6 XoCR6RvQAEhSw188I2Yc+NL7CRbNEYW9Qq+BzYoInzjNYxFECDxTxJ7GMNSIka8i HU211MOblKdkql8pNrQYrlpoRzN17TRgxIinK6OwnVHIDggT9wsLriAzUesrmiE3 5CdR13qK6tCLBQZhCyEV/uQirweYABwMYdw9S7JtA0etJ5Cvg9QejcEd0jfVboOH rk46A0wagLTwcUNJCBrXdi0ebQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPa/Io1U k2rGMhrPGgcOqgQHdrY/MB8GA1UdIwQYMBaAFD4pzm9qfblLbQkTO3P+1S3e4S2r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjI4NS9GRDY0RjBCODM0 MEMxMUU5OTY2QzVBNzZDNEY5QUUwMi9QaW5PYjJwOXVVdHRDUk03Y183VkxkN2hM YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Bpbk9iMnA5dVV0dENSTTdjXzdWTGQ3aExhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjI4NS9GRDY0RjBCODM0MEMxMUU5OTY2QzVBNzZDNEY5QUUwMi9QaW5PYjJwOXVV dHRDUk03Y183VkxkN2hMYXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAse7vurB7FlJSHHcK1sLPmwI07X4JhAUAszU9QJ3rgsOwxf6uaFtkpViAc5FI 2/4Mt8X8Chs3IzMKiuDKD+AraLTST08DnntTCUOXu3/QtJu8Wef69ZEkzk8CMGf+ McYDDQqKw3FAxkgJmlaTyFGa9HqnIPTpXBizZVIMUa0nyHHtS6N0QgIkyf2uwb8S eNFyZFnEWYL/q1aqUoRw6NrpyDganK7xGFBRHQcVmXtgtpYJVjUaOSQOh/gFZwdz TlhbRCYw2Rf05QD9p1rtNGL4OjXMaENwyQRgV3E/0tw48qORI1pgzdsBc5WH59Rz 9Afew7pDwsnCZapZuQw73TOqZg== -----END CERTIFICATE-----Generated at Wed Jun 24 11:12:44 2026 by rpki-client