$ rpki-client -vvf rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft File: CROi4pwkcA4hQx4EweNJf9X5qAA.mft (raw, json) Hash identifier: r7QGfzERMHCfZdCZq7+LYGYj2yVeU5AQWhYgddJgkY8= Subject key identifier: 13:07:AD:7C:AF:D3:3B:18:9E:9B:33:32:F1:26:10:C1:E9:BF:38:67 Authority key identifier: 09:13:A2:E2:9C:24:70:0E:21:43:1E:04:C1:E3:49:7F:D5:F9:A8:00 Certificate issuer: /CN=A91D65C2/serialNumber=0913A2E29C24700E21431E04C1E3497FD5F9A800 Certificate serial: 01E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft Manifest number: 01D1 Signing time: Fri 19 Jun 2026 03:50:27 +0000 Manifest this update: Fri 19 Jun 2026 03:50:26 +0000 Manifest next update: Fri 26 Jun 2026 03:50:26 +0000 Files and hashes: 1: CROi4pwkcA4hQx4EweNJf9X5qAA.crl (hash: ATeiMIEeASm/GAzI3Caf6zPvMchWXAuKVbkK28gHnv0=) 2: C3A53484B06011EEA1D18B7FC4F9AE02.roa (hash: mmPmljEgq/UT3GHcfHd5W8JqbEjou9e+RRjhVJG9hpU=) 3: AA134FD6BD1411EE95F45624C4F9AE02.roa (hash: PppVk2NI0XPWKna+ZtR6ofXLD7gkTcUleObVM6K34rE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.crl rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Jun 2026 03:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 482 (0x1e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D65C2, serialNumber=0913A2E29C24700E21431E04C1E3497FD5F9A800 Validity Not Before: Jun 19 03:50:26 2026 GMT Not After : Jun 26 03:50:26 2026 GMT Subject: CN=6a34bc83-a0c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b2:61:41:20:4f:8b:32:3b:20:47:31:03:46: 45:78:9c:6d:17:dc:09:f1:14:f3:84:48:26:e7:13: ca:b0:2a:ff:13:76:7f:c2:f0:83:81:2b:8a:00:97: 24:63:6e:42:e1:fd:b3:3f:80:c0:b0:a1:f6:59:0b: 09:0e:6b:b7:d1:90:9a:ff:23:37:3a:ef:db:07:bf: be:31:41:6b:e2:64:25:a0:79:69:91:11:67:41:9b: 46:c9:64:7e:cb:a8:f8:f1:9c:f8:ba:af:4c:a9:8c: 76:f6:87:a4:f9:af:ae:b3:5a:91:c0:04:16:fe:c9: 64:e1:01:5e:de:a7:af:f3:07:b7:47:88:06:1a:77: 06:90:b3:1b:4e:4a:63:5b:86:b9:c9:ae:4a:2f:e6: 0d:cd:65:20:97:a7:d0:bf:8b:c7:b8:18:66:b6:e1: 10:ea:5d:d0:ae:e3:00:a2:e6:02:ee:39:c9:4f:de: 14:ce:f6:59:4f:32:9d:07:54:d3:7e:36:5d:cb:01: a6:a8:f7:b9:0a:1c:09:ad:1a:1f:15:c3:a1:85:76: 0a:34:d3:cb:8c:37:3e:d2:0e:61:aa:c9:c9:15:85: af:e6:14:10:53:f8:fe:95:01:f9:eb:9c:38:d1:26: 4c:3b:af:f7:aa:a4:2e:f0:25:41:7d:50:20:f3:aa: 34:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:07:AD:7C:AF:D3:3B:18:9E:9B:33:32:F1:26:10:C1:E9:BF:38:67 X509v3 Authority Key Identifier: keyid:09:13:A2:E2:9C:24:70:0E:21:43:1E:04:C1:E3:49:7F:D5:F9:A8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:8b:77:79:e4:d4:d0:7a:fa:68:3d:0a:e2:65:e6:4b:c5:d9: 92:c0:ed:be:c4:f0:cc:b6:48:c4:7e:ac:fa:6c:14:21:80:f0: 02:6f:09:4e:84:af:13:e0:2d:bf:39:d6:bd:09:9d:82:6e:fb: c9:96:65:16:24:e6:4b:55:74:de:17:11:a6:66:23:4c:bb:30: 1b:05:1f:f3:04:94:3a:2b:96:ab:e8:5a:2b:39:19:eb:44:0c: cf:ea:61:b7:38:65:a5:67:db:65:5d:77:a0:2a:0f:9a:da:82: 89:48:89:b4:02:0f:66:d9:ab:59:1b:92:8d:59:c9:7d:b7:43: 59:0d:88:aa:94:89:29:44:37:ee:37:30:53:d3:c0:c1:9e:20: b4:8a:8d:1f:19:5a:a9:3a:24:33:a1:d4:2d:c1:00:22:1e:a2: 9c:5c:a7:d3:62:6f:dd:f4:6e:96:7f:aa:e5:00:4f:02:cd:0a: 63:4c:7f:b3:2f:1f:48:88:b8:74:da:ad:70:8b:be:15:1a:c7: 6a:71:24:ff:40:e7:bc:2e:4d:1b:1d:e1:3e:95:76:83:aa:7b: fa:d1:0a:24:1f:8a:56:4f:3a:68:df:9c:d0:78:41:e6:a4:9e: 9b:ca:e9:f7:cc:71:01:5c:b8:d6:6c:48:8e:ba:cd:57:28:af: 8d:e6:df:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY1QzIxMTAvBgNVBAUTKDA5MTNBMkUyOUMyNDcwMEUyMTQzMUUwNEMxRTM0OTdG RDVGOUE4MDAwHhcNMjYwNjE5MDM1MDI2WhcNMjYwNjI2MDM1MDI2WjAYMRYwFAYD VQQDEw02YTM0YmM4My1hMGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4rJhQSBPizI7IEcxA0ZFeJxtF9wJ8RTzhEgm5xPKsCr/E3Z/wvCDgSuKAJck Y25C4f2zP4DAsKH2WQsJDmu30ZCa/yM3Ou/bB7++MUFr4mQloHlpkRFnQZtGyWR+ y6j48Zz4uq9MqYx29oek+a+us1qRwAQW/slk4QFe3qev8we3R4gGGncGkLMbTkpj W4a5ya5KL+YNzWUgl6fQv4vHuBhmtuEQ6l3QruMAouYC7jnJT94UzvZZTzKdB1TT fjZdywGmqPe5ChwJrRofFcOhhXYKNNPLjDc+0g5hqsnJFYWv5hQQU/j+lQH565w4 0SZMO6/3qqQu8CVBfVAg86o0qwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBMHrXyv 0zsYnpszMvEmEMHpvzhnMB8GA1UdIwQYMBaAFAkTouKcJHAOIUMeBMHjSX/V+agA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjVDMi83NkVFNzk1Q0Iw NjAxMUVFQkJCRjY1N0NDNEY5QUUwMi9DUk9pNHB3a2NBNGhReDRFd2VOSmY5WDVx QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NST2k0cHdrY0E0aFF4NEV3ZU5KZjlYNXFBQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjVDMi83NkVFNzk1Q0IwNjAxMUVFQkJCRjY1N0NDNEY5QUUwMi9DUk9pNHB3a2NB NGhReDRFd2VOSmY5WDVxQUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAp4t3eeTU0Hr6aD0K4mXmS8XZksDtvsTwzLZIxH6s+mwUIYDwAm8JToSvE+At vznWvQmdgm77yZZlFiTmS1V03hcRpmYjTLswGwUf8wSUOiuWq+haKzkZ60QMz+ph tzhlpWfbZV13oCoPmtqCiUiJtAIPZtmrWRuSjVnJfbdDWQ2IqpSJKUQ37jcwU9PA wZ4gtIqNHxlaqTokM6HULcEAIh6inFyn02Jv3fRuln+q5QBPAs0KY0x/sy8fSIi4 dNqtcIu+FRrHanEk/0DnvC5NGx3hPpV2g6p7+tEKJB+KVk86aN+c0HhB5qSem8rp 98xxAVy41mxIjrrNVyivjebfkg== -----END CERTIFICATE-----Generated at Sat Jun 20 16:25:46 2026 by rpki-client