$ rpki-client -vvf rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft File: _vLBxOoJZEd1FMGqlG5sQXeNBr8.mft (raw, json) Hash identifier: huAs39vJzMRN57PE1o2++b5oz4N2buiCGEMZrmujt0w= Subject key identifier: 4F:C3:0D:DE:90:7D:0A:0A:98:B6:21:C2:29:1F:92:36:8B:FC:7B:2A Authority key identifier: FE:F2:C1:C4:EA:09:64:47:75:14:C1:AA:94:6E:6C:41:77:8D:06:BF Certificate issuer: /CN=A91D298D/serialNumber=FEF2C1C4EA0964477514C1AA946E6C41778D06BF Certificate serial: 094F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vLBxOoJZEd1FMGqlG5sQXeNBr8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft Manifest number: 0901 Signing time: Sun 31 May 2026 21:09:48 +0000 Manifest this update: Sun 31 May 2026 21:09:48 +0000 Manifest next update: Sun 07 Jun 2026 21:09:48 +0000 Files and hashes: 1: _vLBxOoJZEd1FMGqlG5sQXeNBr8.crl (hash: kQ/H8giwAghpN/drQ4fc5z/UVOyJi8jXeyyCOoh3Nu0=) 2: 65519ACC506C11EC99354984C4F9AE02.roa (hash: bKALx6YD+Z5QL+SPXX75fMgztzxC7lFsCyk2pATWF3g=) 3: 01BB1B8E7C0411EFB0D29158C4F9AE02.roa (hash: Bo7KfSmgopE09z8Ii/6iDq4ZBQOfTMw5H36AojNCI5M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.crl rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vLBxOoJZEd1FMGqlG5sQXeNBr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Jun 2026 21:09:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2383 (0x94f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D298D, serialNumber=FEF2C1C4EA0964477514C1AA946E6C41778D06BF Validity Not Before: May 31 21:09:48 2026 GMT Not After : Jun 7 21:09:48 2026 GMT Subject: CN=6a1ca39c-6dcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3b:7d:71:04:eb:c2:61:7b:f8:e0:37:05:ff: 7d:fe:d9:9a:de:2f:e2:96:da:1a:b4:cd:e2:44:ab: 77:fd:a1:50:f9:99:a1:b2:b7:a7:c9:59:7b:f8:be: 72:ff:10:df:c2:ea:c7:51:16:91:c3:74:74:8c:61: 1a:d9:1b:03:bd:c0:62:e7:4c:c7:ba:17:5f:ae:70: 24:1b:75:aa:de:54:57:d8:77:e1:9c:79:b8:0a:5a: 82:53:35:74:9e:ce:f1:3f:84:d3:4a:91:fa:ca:d9: bb:d7:71:b6:c9:6b:61:47:67:83:7b:29:02:b9:ea: a9:a2:36:3b:a7:be:59:c4:60:0d:b0:d4:b2:75:72: a4:62:65:73:b5:b1:ec:b9:97:cc:7e:27:ce:0f:70: 2a:fa:b4:05:d3:df:27:15:66:9f:de:4d:e0:e5:95: 57:20:b2:bc:70:f5:5e:fd:d0:31:bb:8a:a2:07:b2: 5d:bd:e4:2b:ba:ce:df:6c:00:e8:42:fc:c2:8a:83: 9e:2f:0f:41:7e:2c:8c:b3:6a:55:49:b4:3b:7f:2b: 11:14:35:d6:b4:a4:c3:a6:97:f3:69:dc:d9:0a:77: 16:50:c1:77:25:15:4a:ca:5f:06:1c:a8:5b:71:eb: be:a2:fd:a8:48:56:df:b1:82:8d:a4:43:1a:e0:08: b7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:C3:0D:DE:90:7D:0A:0A:98:B6:21:C2:29:1F:92:36:8B:FC:7B:2A X509v3 Authority Key Identifier: keyid:FE:F2:C1:C4:EA:09:64:47:75:14:C1:AA:94:6E:6C:41:77:8D:06:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vLBxOoJZEd1FMGqlG5sQXeNBr8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:67:1c:38:6f:bf:65:41:af:5f:d7:da:c5:6a:14:c7:3b:5a: 46:21:2e:26:ec:46:e3:3e:a3:3a:5e:4b:c5:ce:c3:34:22:4e: f9:23:c3:4d:df:a7:6a:e7:8a:a8:92:da:ac:66:9f:8e:08:4b: 96:c2:66:ed:e9:bf:24:dd:f6:d5:d6:fb:15:78:c1:aa:bf:ee: 12:18:31:5f:11:5c:8b:54:ca:40:85:f4:30:dd:ab:4a:c7:e2: bd:b5:3d:3a:4f:d9:91:97:6d:dd:17:d6:c9:84:5e:d3:72:63: 81:33:60:bc:56:41:cb:79:44:4b:9c:5f:ca:ee:40:c0:78:ae: d2:1d:2c:3f:64:35:d5:99:a4:39:66:a7:f7:f9:e5:9b:fb:f4: 3a:21:fc:0e:85:06:3e:3d:a3:b9:92:1c:4f:15:83:ef:4f:ee: 98:a6:12:c0:da:ae:ad:96:3a:cb:4d:8a:49:9e:94:51:0b:96: b0:e3:2b:45:62:58:58:c0:28:5a:6b:b0:f6:b9:7d:76:c8:03: 88:44:57:f1:13:73:bc:1d:f3:3a:bd:5f:f3:04:48:2d:15:b9: eb:e0:53:d5:88:8a:1d:dc:6f:83:4b:72:df:74:48:f5:0a:4b: 4b:42:6e:ca:2b:b5:ee:a7:14:7d:dc:62:05:da:59:67:00:44: bd:0d:28:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI5OEQxMTAvBgNVBAUTKEZFRjJDMUM0RUEwOTY0NDc3NTE0QzFBQTk0NkU2QzQx Nzc4RDA2QkYwHhcNMjYwNTMxMjEwOTQ4WhcNMjYwNjA3MjEwOTQ4WjAYMRYwFAYD VQQDEw02YTFjYTM5Yy02ZGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtjt9cQTrwmF7+OA3Bf99/tma3i/iltoatM3iRKt3/aFQ+ZmhsrenyVl7+L5y /xDfwurHURaRw3R0jGEa2RsDvcBi50zHuhdfrnAkG3Wq3lRX2HfhnHm4ClqCUzV0 ns7xP4TTSpH6ytm713G2yWthR2eDeykCueqpojY7p75ZxGANsNSydXKkYmVztbHs uZfMfifOD3Aq+rQF098nFWaf3k3g5ZVXILK8cPVe/dAxu4qiB7JdveQrus7fbADo QvzCioOeLw9BfiyMs2pVSbQ7fysRFDXWtKTDppfzadzZCncWUMF3JRVKyl8GHKhb ceu+ov2oSFbfsYKNpEMa4Ai39wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE/DDd6Q fQoKmLYhwikfkjaL/HsqMB8GA1UdIwQYMBaAFP7ywcTqCWRHdRTBqpRubEF3jQa/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjk4RC8zMzdBNjQzMkYx QTYxMUVBQjk1QzBFMkZDNEY5QUUwMi9fdkxCeE9vSlpFZDFGTUdxbEc1c1FYZU5C cjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL192TEJ4T29KWkVkMUZNR3FsRzVzUVhlTkJyOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Mjk4RC8zMzdBNjQzMkYxQTYxMUVBQjk1QzBFMkZDNEY5QUUwMi9fdkxCeE9vSlpF ZDFGTUdxbEc1c1FYZU5CcjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX2ccOG+/ZUGvX9faxWoUxztaRiEuJuxG4z6jOl5Lxc7DNCJO+SPDTd+naueK qJLarGafjghLlsJm7em/JN321db7FXjBqr/uEhgxXxFci1TKQIX0MN2rSsfivbU9 Ok/ZkZdt3RfWyYRe03JjgTNgvFZBy3lES5xfyu5AwHiu0h0sP2Q11ZmkOWan9/nl m/v0OiH8DoUGPj2juZIcTxWD70/umKYSwNqurZY6y02KSZ6UUQuWsOMrRWJYWMAo Wmuw9rl9dsgDiERX8RNzvB3zOr1f8wRILRW56+BT1YiKHdxvg0ty33RI9QpLS0Ju yiu17qcUfdxiBdpZZwBEvQ0o9g== -----END CERTIFICATE-----Generated at Tue Jun 2 22:01:33 2026 by rpki-client