$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1003/AA4E95C8320311EA8D2A1B2BC4F9AE02/pSAa7m9KXB64p-HHhTv7srp1y9I.mft File: pSAa7m9KXB64p-HHhTv7srp1y9I.mft (raw, json) Hash identifier: bnRRT8ZgmbMeBjvRh9o/drs0u0ojiHBjagp1t8LbXKc= Subject key identifier: 07:C8:26:8B:AE:23:E3:BE:3D:DE:77:8B:82:52:BE:5E:09:AF:40:FF Authority key identifier: A5:20:1A:EE:6F:4A:5C:1E:B8:A7:E1:C7:85:3B:FB:B2:BA:75:CB:D2 Certificate issuer: /CN=A91D1003/serialNumber=A5201AEE6F4A5C1EB8A7E1C7853BFBB2BA75CBD2 Certificate serial: 0C2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pSAa7m9KXB64p-HHhTv7srp1y9I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1003/AA4E95C8320311EA8D2A1B2BC4F9AE02/pSAa7m9KXB64p-HHhTv7srp1y9I.mft Manifest number: 0C22 Signing time: Thu 04 Jun 2026 18:49:04 +0000 Manifest this update: Thu 04 Jun 2026 18:49:04 +0000 Manifest next update: Thu 11 Jun 2026 18:49:04 +0000 Files and hashes: 1: pSAa7m9KXB64p-HHhTv7srp1y9I.crl (hash: JNPw0H9F9sJ/sbFDqYZqwQYLTTKCZ2BXUYRG4um8HhY=) 2: 0DC2568E320511EA8CF6B72DC4F9AE02.roa (hash: lrXJAG9pwB68/9ymul53XjFddHdzlUams6o2moAtAtg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1003/AA4E95C8320311EA8D2A1B2BC4F9AE02/pSAa7m9KXB64p-HHhTv7srp1y9I.crl rsync://rpki.apnic.net/member_repository/A91D1003/AA4E95C8320311EA8D2A1B2BC4F9AE02/pSAa7m9KXB64p-HHhTv7srp1y9I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pSAa7m9KXB64p-HHhTv7srp1y9I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 18:49:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3119 (0xc2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1003, serialNumber=A5201AEE6F4A5C1EB8A7E1C7853BFBB2BA75CBD2 Validity Not Before: Jun 4 18:49:04 2026 GMT Not After : Jun 11 18:49:04 2026 GMT Subject: CN=6a21c8a0-4cc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f6:b4:44:61:23:aa:07:6b:ab:76:0c:8c:6f: 61:0b:9d:78:d1:70:d3:b5:b5:d9:f5:57:a1:55:ee: 28:95:74:42:b5:f8:31:79:6f:95:8c:59:f1:fd:65: 94:a6:f2:81:b8:ed:33:6d:b5:a3:54:11:bf:4a:9d: a4:e5:3a:83:ca:d7:06:5b:7e:3a:ff:2e:0b:f5:bd: 93:0e:a5:a0:51:f8:aa:e2:f5:36:59:62:4b:b0:10: f6:19:6d:12:b8:9b:7f:b2:d8:23:14:c5:33:4a:7c: 3b:78:f0:64:fc:11:8d:f2:ed:b3:37:fb:30:8e:90: 92:26:95:6d:b5:21:4c:cf:bd:8c:c5:b1:6f:ca:f8: 71:8b:aa:69:bb:34:a3:97:a8:ec:64:48:52:5a:e2: 62:ea:68:e8:4c:08:19:53:21:16:29:95:2c:5e:6a: 8e:00:d7:91:75:3c:7a:a1:d5:62:7f:9e:d5:95:e7: 68:7f:ce:03:56:4c:fc:85:04:64:42:0f:b1:b3:9a: dd:26:e4:60:34:19:60:e0:47:47:9f:23:5c:52:8f: a5:b0:01:f4:2d:31:68:3d:21:a3:f5:de:79:f1:bb: 96:ed:b2:e5:bf:dd:b1:a0:d3:1f:8c:78:3e:e3:b2: 4a:36:e7:e8:83:fa:0d:09:9a:d4:e3:cd:b5:7d:3b: 32:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:C8:26:8B:AE:23:E3:BE:3D:DE:77:8B:82:52:BE:5E:09:AF:40:FF X509v3 Authority Key Identifier: keyid:A5:20:1A:EE:6F:4A:5C:1E:B8:A7:E1:C7:85:3B:FB:B2:BA:75:CB:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1003/AA4E95C8320311EA8D2A1B2BC4F9AE02/pSAa7m9KXB64p-HHhTv7srp1y9I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pSAa7m9KXB64p-HHhTv7srp1y9I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1003/AA4E95C8320311EA8D2A1B2BC4F9AE02/pSAa7m9KXB64p-HHhTv7srp1y9I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:7c:f6:f5:9f:12:f6:d2:68:aa:11:92:0a:4d:b3:94:33:68: e3:28:29:e2:19:b8:4a:0a:c0:88:93:b6:1e:37:f5:14:cb:f0: 1a:bd:cc:53:2b:e9:d5:18:2b:34:75:96:2b:14:bf:13:f2:3f: 1d:fe:16:6b:c0:ab:2b:a8:e7:5b:ba:98:12:a2:b8:32:77:a0: 6f:3b:66:11:70:93:78:56:7f:ec:c8:eb:f2:62:b2:11:76:23: e8:c5:de:cb:fb:b0:e1:1f:b4:57:1f:dc:5c:30:25:98:b7:94: a7:e6:2e:98:5d:90:fc:ef:52:3c:e0:66:aa:9a:9e:07:85:cc: b6:35:6d:f5:c1:5b:d9:5f:56:bc:33:a6:bf:fe:f6:02:31:b1: 5c:ea:98:80:8b:01:5b:8d:e3:77:fe:26:b8:84:66:63:4d:e3: 1c:1c:81:2e:6b:b5:6a:c8:51:2c:5d:a9:53:bd:a8:50:dc:a7: 3f:d7:e9:5f:12:77:2f:65:f0:92:16:d4:12:2a:eb:22:7c:e7: c6:6d:8a:4f:f9:47:9b:c1:18:bb:94:96:d3:6e:c4:dd:8a:c0: 8e:fc:0e:0b:05:ce:27:fa:b3:bf:d3:59:c6:67:4b:77:ce:0c: 19:75:37:b4:e5:64:d7:6e:89:e4:e0:4d:19:b4:d2:84:30:25: 00:3c:a2:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDC8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDEwMDMxMTAvBgNVBAUTKEE1MjAxQUVFNkY0QTVDMUVCOEE3RTFDNzg1M0JGQkIy QkE3NUNCRDIwHhcNMjYwNjA0MTg0OTA0WhcNMjYwNjExMTg0OTA0WjAYMRYwFAYD VQQDEw02YTIxYzhhMC00Y2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuva0RGEjqgdrq3YMjG9hC5140XDTtbXZ9VehVe4olXRCtfgxeW+VjFnx/WWU pvKBuO0zbbWjVBG/Sp2k5TqDytcGW346/y4L9b2TDqWgUfiq4vU2WWJLsBD2GW0S uJt/stgjFMUzSnw7ePBk/BGN8u2zN/swjpCSJpVttSFMz72MxbFvyvhxi6ppuzSj l6jsZEhSWuJi6mjoTAgZUyEWKZUsXmqOANeRdTx6odVif57Vledof84DVkz8hQRk Qg+xs5rdJuRgNBlg4EdHnyNcUo+lsAH0LTFoPSGj9d558buW7bLlv92xoNMfjHg+ 47JKNufog/oNCZrU4821fTsyAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAfIJouu I+O+Pd53i4JSvl4Jr0D/MB8GA1UdIwQYMBaAFKUgGu5vSlweuKfhx4U7+7K6dcvS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTAwMy9BQTRFOTVDODMy MDMxMUVBOEQyQTFCMkJDNEY5QUUwMi9wU0FhN205S1hCNjRwLUhIaFR2N3NycDF5 OUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BTQWE3bTlLWEI2NHAtSEhoVHY3c3JwMXk5SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTAwMy9BQTRFOTVDODMyMDMxMUVBOEQyQTFCMkJDNEY5QUUwMi9wU0FhN205S1hC NjRwLUhIaFR2N3NycDF5OUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAV3z29Z8S9tJoqhGSCk2zlDNo4ygp4hm4SgrAiJO2Hjf1FMvwGr3MUyvp1Rgr NHWWKxS/E/I/Hf4Wa8CrK6jnW7qYEqK4MnegbztmEXCTeFZ/7Mjr8mKyEXYj6MXe y/uw4R+0Vx/cXDAlmLeUp+YumF2Q/O9SPOBmqpqeB4XMtjVt9cFb2V9WvDOmv/72 AjGxXOqYgIsBW43jd/4muIRmY03jHByBLmu1ashRLF2pU72oUNynP9fpXxJ3L2Xw khbUEirrInznxm2KT/lHm8EYu5SW027E3YrAjvwOCwXOJ/qzv9NZxmdLd84MGXU3 tOVk126J5OBNGbTShDAlADyi9g== -----END CERTIFICATE-----Generated at Fri Jun 5 23:36:12 2026 by rpki-client