$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft File: SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft (raw, json) Hash identifier: WBiYjDYEMLJ0ELSHwa+11BwX+tsoCiEezz4DYhVN950= Subject key identifier: 28:3B:C5:88:21:AE:20:EF:E8:90:5F:00:EA:D1:48:A1:5B:55:68:54 Authority key identifier: 49:9D:69:1B:0F:73:2D:90:06:E9:51:3C:60:B7:36:6B:4E:69:04:00 Certificate issuer: /CN=A91D2B9A/serialNumber=499D691B0F732D9006E9513C60B7366B4E690400 Certificate serial: 51 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SZ1pGw9zLZAG6VE8YLc2a05pBAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft Manifest number: 4F Signing time: Fri 05 Jun 2026 08:44:28 +0000 Manifest this update: Fri 05 Jun 2026 08:44:27 +0000 Manifest next update: Fri 12 Jun 2026 08:44:27 +0000 Files and hashes: 1: SZ1pGw9zLZAG6VE8YLc2a05pBAA.crl (hash: 15y02ZpwjA67xjYgvjGmevnzyVIepht3OGb7fIxeoXw=) 2: 75BE67B2F12311F09E054F8D4F6F56BC.roa (hash: QeHn1agdKxmdJdH278JH44lkIuCADGys4RpsqprN2FU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.crl rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SZ1pGw9zLZAG6VE8YLc2a05pBAA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 08:44:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2B9A, serialNumber=499D691B0F732D9006E9513C60B7366B4E690400 Validity Not Before: Jun 5 08:44:27 2026 GMT Not After : Jun 12 08:44:27 2026 GMT Subject: CN=6a228c6c-8b69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:05:a5:4a:bc:d5:91:06:fe:90:21:9f:61:94: 94:32:25:39:05:4b:92:dd:b2:d7:69:07:17:ed:1d: c2:cb:2f:86:e4:e3:f2:60:52:b6:de:47:95:14:5e: 46:23:90:e8:80:ae:66:27:58:52:c7:b4:d5:73:2c: d7:be:dc:e5:65:62:4a:48:c7:7f:5b:ff:6c:7f:e0: 7b:78:60:97:a1:e9:63:b5:a3:ed:60:5c:f6:a3:41: 5a:9b:98:2f:a4:88:9b:be:f1:42:72:9d:9c:e4:8f: c8:0c:24:7e:de:16:be:06:6a:05:ab:08:cb:3d:fb: ff:f6:55:b4:de:89:8b:1b:2c:16:6d:68:3e:7e:f8: dd:45:df:0b:23:7a:f9:cc:76:42:d0:45:72:c2:1c: ad:69:47:bf:7a:89:78:43:ed:af:dc:76:eb:de:3f: 04:80:7a:09:a5:e9:dc:7e:79:40:cd:f7:28:75:d8: d1:d9:83:21:37:3e:79:d9:4a:51:20:d1:68:5f:95: d0:48:b4:8a:f4:b8:de:56:13:95:f1:56:8f:58:b6: cf:d5:11:1e:8b:87:a9:19:17:62:63:09:79:06:96: f1:2b:8f:8f:4b:69:da:e3:15:13:e0:da:81:a7:fa: 89:bb:b6:73:eb:93:3f:13:7d:94:9c:1f:f8:f1:99: 65:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:3B:C5:88:21:AE:20:EF:E8:90:5F:00:EA:D1:48:A1:5B:55:68:54 X509v3 Authority Key Identifier: keyid:49:9D:69:1B:0F:73:2D:90:06:E9:51:3C:60:B7:36:6B:4E:69:04:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SZ1pGw9zLZAG6VE8YLc2a05pBAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:65:a3:6d:50:bd:b4:61:e7:df:98:29:96:f7:ec:52:45:21: 5f:c2:69:ef:23:e0:e5:4f:1f:24:e6:1b:b4:bc:bc:e2:b2:b1: 41:d5:d8:c2:dd:67:47:9d:04:c1:c3:df:e5:52:da:a5:aa:8f: ad:0a:92:76:a9:00:63:c9:38:74:a3:1f:3a:d1:c1:98:61:f7: a4:b1:46:2d:5c:a3:1c:91:64:d6:b0:6f:e0:ba:12:bf:80:e9: fc:12:0c:42:98:11:83:94:9a:56:26:5b:8c:36:be:99:67:c6: 5c:b4:e7:d3:65:8a:00:6d:78:dd:b6:6f:0b:46:13:0d:f0:e9: 2e:76:cd:aa:13:fb:2b:44:38:b6:9e:4a:4f:bd:7b:af:af:68: b2:4d:5f:3b:43:0f:6b:45:17:b1:7c:1a:1e:d4:fe:be:f8:cb: e3:be:f9:12:58:8e:28:b3:43:05:4f:49:67:b5:14:21:fb:e9: 41:7c:90:8e:ae:c8:79:30:d4:56:88:33:dc:a3:78:52:92:49: b7:df:ea:89:35:41:50:3f:90:59:55:ce:e3:a5:cf:ba:dd:b4: be:c2:e2:bd:1e:ba:81:e4:fa:d4:7b:9a:c2:b6:e1:5b:59:e7: 7a:2b:a1:2c:18:c4:cb:ce:1a:22:eb:42:68:7d:04:68:46:f3: db:ab:c9:7d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MkI5QTExMC8GA1UEBRMoNDk5RDY5MUIwRjczMkQ5MDA2RTk1MTNDNjBCNzM2NkI0 RTY5MDQwMDAeFw0yNjA2MDUwODQ0MjdaFw0yNjA2MTIwODQ0MjdaMBgxFjAUBgNV BAMTDTZhMjI4YzZjLThiNjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCoBaVKvNWRBv6QIZ9hlJQyJTkFS5LdstdpBxftHcLLL4bk4/JgUrbeR5UUXkYj kOiArmYnWFLHtNVzLNe+3OVlYkpIx39b/2x/4Ht4YJeh6WO1o+1gXPajQVqbmC+k iJu+8UJynZzkj8gMJH7eFr4GagWrCMs9+//2VbTeiYsbLBZtaD5++N1F3wsjevnM dkLQRXLCHK1pR796iXhD7a/cduvePwSAegml6dx+eUDN9yh12NHZgyE3PnnZSlEg 0WhfldBItIr0uN5WE5XxVo9Yts/VER6Lh6kZF2JjCXkGlvErj49LadrjFRPg2oGn +om7tnPrkz8TfZScH/jxmWXlAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUKDvFiCGu IO/okF8A6tFIoVtVaFQwHwYDVR0jBBgwFoAUSZ1pGw9zLZAG6VE8YLc2a05pBAAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyQjlBLzc3OTY5QjhDRjEy MjExRjBBQzVDREE3RTRFNkY1NkJDL1NaMXBHdzl6TFpBRzZWRThZTGMyYTA1cEJB QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvU1oxcEd3OXpMWkFHNlZFOFlMYzJhMDVwQkFBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy QjlBLzc3OTY5QjhDRjEyMjExRjBBQzVDREE3RTRFNkY1NkJDL1NaMXBHdzl6TFpB RzZWRThZTGMyYTA1cEJBQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA9ZaNtUL20YeffmCmW9+xSRSFfwmnvI+DlTx8k5hu0vLzisrFB1djC3WdHnQTB w9/lUtqlqo+tCpJ2qQBjyTh0ox860cGYYfeksUYtXKMckWTWsG/guhK/gOn8EgxC mBGDlJpWJluMNr6ZZ8ZctOfTZYoAbXjdtm8LRhMN8Okuds2qE/srRDi2nkpPvXuv r2iyTV87Qw9rRRexfBoe1P6++MvjvvkSWI4os0MFT0lntRQh++lBfJCOrsh5MNRW iDPco3hSkkm33+qJNUFQP5BZVc7jpc+63bS+wuK9HrqB5PrUe5rCtuFbWed6K6Es GMTLzhoi60JofQRoRvPbq8l9 -----END CERTIFICATE-----Generated at Sat Jun 6 10:51:01 2026 by rpki-client