$ rpki-client -vvf rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.mft File: g675MVKyUIy8gKNifjon6HvP3so.mft (raw, json) Hash identifier: YsRxiCMsd/CfOsbtH8rdyOMpkQRoenxrm7EhY8ogWhM= Subject key identifier: 85:C4:F7:65:78:1F:15:F7:C9:FF:D7:D8:37:62:8C:9D:75:6E:08:7A Authority key identifier: 83:AE:F9:31:52:B2:50:8C:BC:80:A3:62:7E:3A:27:E8:7B:CF:DE:CA Certificate issuer: /CN=A91D298D/serialNumber=83AEF93152B2508CBC80A3627E3A27E87BCFDECA Certificate serial: 08BA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g675MVKyUIy8gKNifjon6HvP3so.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.mft Manifest number: 08A1 Signing time: Sun 31 May 2026 21:09:51 +0000 Manifest this update: Sun 31 May 2026 21:09:51 +0000 Manifest next update: Sun 07 Jun 2026 21:09:51 +0000 Files and hashes: 1: g675MVKyUIy8gKNifjon6HvP3so.crl (hash: AHuQXCUQLfttoVyqD+Dz7VGEECwPvfZzD/OzNWMXaho=) 2: 51B1F2A665D911EBA6089869C4F9AE02.roa (hash: Agm1iHBSDHpN64vkTSxuS0Cc6JpxKn9+gu3qk14vA4A=) 3: 1229795E652C11EB9B039023C4F9AE02.roa (hash: GJUGEPZQBd+of4IF8rrVMeNhftE2HSnPOO2CkzhhVYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.crl rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g675MVKyUIy8gKNifjon6HvP3so.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Jun 2026 21:09:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2234 (0x8ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D298D, serialNumber=83AEF93152B2508CBC80A3627E3A27E87BCFDECA Validity Not Before: May 31 21:09:51 2026 GMT Not After : Jun 7 21:09:51 2026 GMT Subject: CN=6a1ca39f-bd67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:87:81:1b:79:a5:d6:bb:7c:34:8b:39:c6:c6: 3c:f1:5f:6b:16:ed:28:b8:77:e8:57:47:b1:62:bc: c6:ac:ad:cc:96:ad:78:8d:24:c9:49:83:5f:51:ce: 95:75:57:45:a8:4f:53:6d:f6:42:83:e1:fb:66:19: eb:87:68:9d:4f:b7:5a:e7:9a:e0:96:f2:44:d1:8a: 50:c6:2a:e8:51:3c:3b:76:d3:e2:8a:35:ca:43:e1: 34:ed:89:cb:70:8d:ec:8d:9b:97:d3:ea:8c:18:a2: 64:74:41:22:4e:f9:a1:bc:3a:fb:44:9f:62:3e:17: 77:75:ea:6e:f1:a1:b4:0e:d7:0c:56:ab:0a:cb:5b: d2:00:ca:c3:85:b2:16:00:63:13:ac:a7:86:47:6d: 5d:c2:9d:59:c4:a0:92:12:b8:cd:cd:f5:2e:fc:33: 2f:19:6a:3b:22:ae:15:af:2f:ca:fc:3d:c2:11:b2: 09:b1:0a:33:d2:cd:61:ba:14:68:50:ea:66:ce:56: ff:4d:2e:6c:69:d9:11:5e:f3:c9:95:4d:cb:87:dd: 88:73:e4:07:04:2f:18:24:fa:1b:88:8e:f2:92:57: 92:1d:ee:ec:c4:fe:ef:73:fb:d2:87:9f:fa:5b:c1: 1a:75:96:99:f4:f2:87:65:fa:a8:25:1f:11:81:34: f4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:C4:F7:65:78:1F:15:F7:C9:FF:D7:D8:37:62:8C:9D:75:6E:08:7A X509v3 Authority Key Identifier: keyid:83:AE:F9:31:52:B2:50:8C:BC:80:A3:62:7E:3A:27:E8:7B:CF:DE:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g675MVKyUIy8gKNifjon6HvP3so.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:0b:0a:83:f7:81:46:bd:3d:9c:18:78:e0:9d:1f:8c:cd:88: a0:c5:0b:e7:c6:86:19:19:21:c5:09:06:4b:af:7e:dc:9d:7b: 8b:a8:99:c4:bd:f9:8f:e8:c5:76:66:ef:a0:7d:2b:e3:1c:66: 40:46:a0:ec:72:f3:61:91:b9:67:39:45:09:29:b5:d6:0a:b3: 46:a8:37:16:f9:a0:2e:b7:25:7f:cc:fc:17:be:98:68:93:9f: 07:2e:7e:c5:94:09:93:3d:35:20:ea:03:d5:e7:05:60:f0:36: 8e:a5:7d:95:47:da:cf:f9:1f:03:8f:6f:be:88:7f:6c:ec:b3: 05:63:9a:fa:7f:ab:19:e8:4e:94:60:ab:15:d5:09:a6:f6:13: c0:e6:25:a0:8f:4d:ae:ee:9c:4f:e3:8e:2f:95:8c:db:d7:81: 91:a3:1d:25:de:83:c9:17:8e:31:71:2f:a6:bc:ac:76:2d:d6: d7:55:7d:84:5a:95:68:a8:42:cc:56:f5:dd:8f:2c:76:9d:bd: 70:6a:f3:6c:4b:de:31:b0:70:79:61:11:bf:21:f8:5f:47:60: 73:b2:b6:78:02:d5:c5:6d:6f:c0:32:92:80:bc:e6:2d:88:49: 35:05:91:14:a2:34:bf:cc:98:04:8b:98:8c:e4:64:74:c6:28: ac:72:ef:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI5OEQxMTAvBgNVBAUTKDgzQUVGOTMxNTJCMjUwOENCQzgwQTM2MjdFM0EyN0U4 N0JDRkRFQ0EwHhcNMjYwNTMxMjEwOTUxWhcNMjYwNjA3MjEwOTUxWjAYMRYwFAYD VQQDEw02YTFjYTM5Zi1iZDY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwoeBG3ml1rt8NIs5xsY88V9rFu0ouHfoV0exYrzGrK3Mlq14jSTJSYNfUc6V dVdFqE9TbfZCg+H7Zhnrh2idT7da55rglvJE0YpQxiroUTw7dtPiijXKQ+E07YnL cI3sjZuX0+qMGKJkdEEiTvmhvDr7RJ9iPhd3depu8aG0DtcMVqsKy1vSAMrDhbIW AGMTrKeGR21dwp1ZxKCSErjNzfUu/DMvGWo7Iq4Vry/K/D3CEbIJsQoz0s1huhRo UOpmzlb/TS5sadkRXvPJlU3Lh92Ic+QHBC8YJPobiI7ykleSHe7sxP7vc/vSh5/6 W8EadZaZ9PKHZfqoJR8RgTT0/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIXE92V4 HxX3yf/X2DdijJ11bgh6MB8GA1UdIwQYMBaAFIOu+TFSslCMvICjYn46J+h7z97K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjk4RC8yQ0IxMUZDRUYx QTYxMUVBQjk1QzBFMkZDNEY5QUUwMi9nNjc1TVZLeVVJeThnS05pZmpvbjZIdlAz c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2c2NzVNVkt5VUl5OGdLTmlmam9uNkh2UDNzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Mjk4RC8yQ0IxMUZDRUYxQTYxMUVBQjk1QzBFMkZDNEY5QUUwMi9nNjc1TVZLeVVJ eThnS05pZmpvbjZIdlAzc28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWQsKg/eBRr09nBh44J0fjM2IoMUL58aGGRkhxQkGS69+3J17i6iZxL35j+jF dmbvoH0r4xxmQEag7HLzYZG5ZzlFCSm11gqzRqg3FvmgLrclf8z8F76YaJOfBy5+ xZQJkz01IOoD1ecFYPA2jqV9lUfaz/kfA49vvoh/bOyzBWOa+n+rGehOlGCrFdUJ pvYTwOYloI9Nru6cT+OOL5WM29eBkaMdJd6DyReOMXEvprysdi3W11V9hFqVaKhC zFb13Y8sdp29cGrzbEveMbBweWERvyH4X0dgc7K2eALVxW1vwDKSgLzmLYhJNQWR FKI0v8yYBIuYjORkdMYorHLv9w== -----END CERTIFICATE-----Generated at Tue Jun 2 21:33:26 2026 by rpki-client