$ rpki-client -vvf rpki.apnic.net/member_repository/A91D489F/63E088FA55C211F1B4E63802A5833773/aF3dgfRvhIHFdwGF8Id0wf5N1Tc.mft File: aF3dgfRvhIHFdwGF8Id0wf5N1Tc.mft (raw, json) Hash identifier: Uh4Kga3Yi5N/8pd0Wv6ZrL1vGwNssJnuoHv/QDXSR1A= Subject key identifier: F8:73:20:75:09:8E:FE:2D:61:80:08:77:48:37:39:77:C5:AE:04:71 Authority key identifier: 68:5D:DD:81:F4:6F:84:81:C5:77:01:85:F0:87:74:C1:FE:4D:D5:37 Certificate issuer: /CN=A91D489F/serialNumber=685DDD81F46F8481C5770185F08774C1FE4DD537 Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aF3dgfRvhIHFdwGF8Id0wf5N1Tc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D489F/63E088FA55C211F1B4E63802A5833773/aF3dgfRvhIHFdwGF8Id0wf5N1Tc.mft Manifest number: 13 Signing time: Tue 23 Jun 2026 09:20:08 +0000 Manifest this update: Tue 23 Jun 2026 09:20:08 +0000 Manifest next update: Tue 30 Jun 2026 09:20:08 +0000 Files and hashes: 1: aF3dgfRvhIHFdwGF8Id0wf5N1Tc.crl (hash: bPTanxnhkM7kYLn+A7fbDseHKybffmdu0S89R10eCtk=) 2: 5B4594F055C311F188536739A5833773.roa (hash: d4awFYfEMxrhM0/isi9cNnvYO5k9UvHtN05p4Ww23bU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D489F/63E088FA55C211F1B4E63802A5833773/aF3dgfRvhIHFdwGF8Id0wf5N1Tc.crl rsync://rpki.apnic.net/member_repository/A91D489F/63E088FA55C211F1B4E63802A5833773/aF3dgfRvhIHFdwGF8Id0wf5N1Tc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aF3dgfRvhIHFdwGF8Id0wf5N1Tc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jun 2026 09:20:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D489F, serialNumber=685DDD81F46F8481C5770185F08774C1FE4DD537 Validity Not Before: Jun 23 09:20:08 2026 GMT Not After : Jun 30 09:20:08 2026 GMT Subject: CN=6a3a4fc8-22e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:77:74:0b:3a:9c:54:74:99:e5:28:da:3e:23: 69:27:8c:62:e7:df:38:9c:26:b3:d3:cb:bb:d5:97: 09:d0:ea:ff:bb:17:b7:c8:25:af:76:ae:5f:9e:43: 45:f4:4d:0d:20:8a:ff:74:e5:57:04:65:2d:aa:07: d6:b3:ed:6c:b7:9e:1c:fb:88:9f:7d:03:fe:41:77: a9:dd:d2:10:35:0f:f4:c8:fb:c4:53:7c:d1:19:e0: b7:45:f7:fe:12:95:6e:4e:bc:40:b6:73:52:81:27: 53:7c:d2:70:18:94:95:1f:f0:c0:ad:2b:36:5f:95: 39:2a:49:6f:00:18:d3:c1:9f:04:4f:9d:2a:16:9b: b8:61:86:0c:3c:43:76:9a:40:94:8b:d1:94:3d:8b: ed:6d:69:97:cb:cf:2d:95:37:dc:2f:71:79:76:d8: 3c:9a:93:05:32:a0:84:f2:15:40:10:4f:72:47:3f: 3b:a6:7d:c7:8e:9a:d0:8a:f4:c1:70:a4:71:39:b6: 71:bb:39:39:f5:75:d1:e8:16:c1:e0:f6:db:2a:6f: b0:04:cb:df:1c:72:83:33:db:0c:79:ec:33:a2:06: 20:bd:ea:35:49:cc:22:56:68:87:14:fd:d8:02:91: 8a:bc:1e:20:f8:9e:f8:d0:73:aa:b9:be:a4:e7:82: 2a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:73:20:75:09:8E:FE:2D:61:80:08:77:48:37:39:77:C5:AE:04:71 X509v3 Authority Key Identifier: keyid:68:5D:DD:81:F4:6F:84:81:C5:77:01:85:F0:87:74:C1:FE:4D:D5:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D489F/63E088FA55C211F1B4E63802A5833773/aF3dgfRvhIHFdwGF8Id0wf5N1Tc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aF3dgfRvhIHFdwGF8Id0wf5N1Tc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D489F/63E088FA55C211F1B4E63802A5833773/aF3dgfRvhIHFdwGF8Id0wf5N1Tc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:f2:88:3a:03:e2:8b:12:5a:6a:1b:06:c6:9b:68:e2:15:a4: 06:e0:99:35:80:33:1a:ad:60:ff:0a:d5:7c:5d:fc:36:d0:25: 8b:a3:cb:63:cb:3c:a3:50:b8:f9:ee:bc:79:80:ff:fb:02:c6: 52:22:77:57:87:99:0f:40:68:91:54:14:54:13:2c:5c:c0:62: b8:56:07:a4:bd:09:98:67:97:cb:f5:be:9e:18:ec:2a:f7:70: 96:b0:a3:8f:18:96:fc:66:3c:e7:94:89:0d:e6:5c:dd:43:5a: bb:f4:88:10:b5:2b:39:0b:be:ea:09:7b:8e:fa:aa:7d:08:ea: 9a:86:08:6c:cd:12:cf:ff:40:e6:60:67:01:15:66:0b:85:78: c1:db:39:79:6d:fb:af:e7:19:22:1f:b3:ef:e1:05:4f:08:bb: 1e:11:b7:fd:c2:94:de:88:7a:33:73:2b:62:4e:e5:b7:f7:ea: b1:da:3b:0f:00:30:00:b4:cc:1e:d2:37:a2:21:32:c1:d4:bc: b6:8a:c7:f4:e1:c9:6d:6a:54:6c:bd:58:4e:90:ee:c0:e5:34: 31:f2:63:8e:c8:3f:0d:15:4a:b4:8c:37:a6:a0:09:4e:a4:7c: 0b:c0:32:8b:30:ae:fd:93:d9:64:78:f4:95:57:e2:16:a3:09: ba:87:8f:e1 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NDg5RjExMC8GA1UEBRMoNjg1REREODFGNDZGODQ4MUM1NzcwMTg1RjA4Nzc0QzFG RTRERDUzNzAeFw0yNjA2MjMwOTIwMDhaFw0yNjA2MzAwOTIwMDhaMBgxFjAUBgNV BAMTDTZhM2E0ZmM4LTIyZTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjd3QLOpxUdJnlKNo+I2knjGLn3zicJrPTy7vVlwnQ6v+7F7fIJa92rl+eQ0X0 TQ0giv905VcEZS2qB9az7Wy3nhz7iJ99A/5Bd6nd0hA1D/TI+8RTfNEZ4LdF9/4S lW5OvEC2c1KBJ1N80nAYlJUf8MCtKzZflTkqSW8AGNPBnwRPnSoWm7hhhgw8Q3aa QJSL0ZQ9i+1taZfLzy2VN9wvcXl22DyakwUyoITyFUAQT3JHPzumfceOmtCK9MFw pHE5tnG7OTn1ddHoFsHg9tsqb7AEy98ccoMz2wx57DOiBiC96jVJzCJWaIcU/dgC kYq8HiD4nvjQc6q5vqTngirHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU+HMgdQmO /i1hgAh3SDc5d8WuBHEwHwYDVR0jBBgwFoAUaF3dgfRvhIHFdwGF8Id0wf5N1Tcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0ODlGLzYzRTA4OEZBNTVD MjExRjFCNEU2MzgwMkE1ODMzNzczL2FGM2RnZlJ2aElIRmR3R0Y4SWQwd2Y1TjFU Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYUYzZGdmUnZoSUhGZHdHRjhJZDB3ZjVOMVRjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0 ODlGLzYzRTA4OEZBNTVDMjExRjFCNEU2MzgwMkE1ODMzNzczL2FGM2RnZlJ2aElI RmR3R0Y4SWQwd2Y1TjFUYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBi8og6A+KLElpqGwbGm2jiFaQG4Jk1gDMarWD/CtV8Xfw20CWLo8tjyzyjULj5 7rx5gP/7AsZSIndXh5kPQGiRVBRUEyxcwGK4VgekvQmYZ5fL9b6eGOwq93CWsKOP GJb8ZjznlIkN5lzdQ1q79IgQtSs5C77qCXuO+qp9COqahghszRLP/0DmYGcBFWYL hXjB2zl5bfuv5xkiH7Pv4QVPCLseEbf9wpTeiHozcytiTuW39+qx2jsPADAAtMwe 0jeiITLB1Ly2isf04cltalRsvVhOkO7A5TQx8mOOyD8NFUq0jDemoAlOpHwLwDKL MK79k9lkePSVV+IWowm6h4/h -----END CERTIFICATE-----Generated at Wed Jun 24 11:10:17 2026 by rpki-client