$ rpki-client -vvf rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.mft File: nJSl3M9qZbaJhscEOEbHIb0zvpk.mft (raw, json) Hash identifier: at0GfRMcLSbcBqSTG8flajZBnjh0IpKPUux4YfmvUAc= Subject key identifier: 14:D9:33:E7:BF:F7:04:AB:2E:7D:EE:A8:92:56:3C:81:13:18:32:2E Authority key identifier: 9C:94:A5:DC:CF:6A:65:B6:89:86:C7:04:38:46:C7:21:BD:33:BE:99 Certificate issuer: /CN=A91D66A0/serialNumber=9C94A5DCCF6A65B68986C7043846C721BD33BE99 Certificate serial: 0DF9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJSl3M9qZbaJhscEOEbHIb0zvpk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.mft Manifest number: 0DE0 Signing time: Thu 04 Jun 2026 17:52:27 +0000 Manifest this update: Thu 04 Jun 2026 17:52:27 +0000 Manifest next update: Thu 11 Jun 2026 17:52:27 +0000 Files and hashes: 1: nJSl3M9qZbaJhscEOEbHIb0zvpk.crl (hash: zCww5C31a7CnfhFx5CeRglhWRwgmIfAL88BWmukijLE=) 2: 2B17862A82EE11EAB170FD4BC4F9AE02.roa (hash: 2tWM8vEG9F+dRzyZM43QfG2NHqOSxdnWZ0mFUqy61lM=) 3: 064D129A56EA11EA84DC982BC4F9AE02.roa (hash: FAOH2k3QSSS7t1HJ3yvrPUgVPiND+/x5TUDnE1klS5s=) 4: 2BABEEB482EE11EAB170FD4BC4F9AE02.roa (hash: n+1VIRJou+nBlWU6Es4cxB80UK2IiCMsqRaa75g/YvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.crl rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJSl3M9qZbaJhscEOEbHIb0zvpk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 17:52:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3577 (0xdf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D66A0, serialNumber=9C94A5DCCF6A65B68986C7043846C721BD33BE99 Validity Not Before: Jun 4 17:52:27 2026 GMT Not After : Jun 11 17:52:27 2026 GMT Subject: CN=6a21bb5b-08bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:91:e7:e6:a7:dd:a1:23:a2:2e:5d:26:88:01: 49:b3:8f:f8:78:ee:ff:02:93:11:b1:8c:4c:d1:64: a1:27:2e:e6:33:04:1a:ae:06:6e:81:68:74:f2:7a: ed:e8:37:eb:9f:3f:86:c8:27:91:b2:f3:5e:3f:4c: 36:b1:e9:c6:d3:e2:66:56:b7:04:c6:6e:c7:10:06: 93:83:37:23:3f:b6:f7:1e:90:4c:f7:c3:e6:d4:22: bc:34:dc:d5:2d:db:b9:3a:d9:83:3d:10:31:d7:35: 26:69:c0:32:52:53:90:e7:10:85:10:ee:9e:63:9f: d1:28:0d:d3:88:a2:c2:cb:de:5b:2a:34:8f:2a:08: 9e:61:fb:72:33:ea:13:80:b0:d1:15:8a:c8:fa:ba: 94:e7:e3:ca:f5:47:6b:ee:71:54:0e:c5:80:c4:0d: 54:63:a7:35:85:12:f5:95:64:77:c5:74:d7:c9:57: 80:2f:a2:00:ae:84:f8:b4:6b:31:8d:ea:78:f1:66: c2:5f:d7:73:5a:61:98:e1:51:b5:b4:9f:05:46:7e: a8:c9:8b:36:84:6c:8b:d3:20:e4:ac:ed:b7:80:3d: 2c:44:7f:c6:98:42:09:c6:bf:cc:cc:cc:f5:ce:6f: 9c:cf:bc:63:c4:4b:af:50:da:93:88:2c:c8:8a:46: b4:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D9:33:E7:BF:F7:04:AB:2E:7D:EE:A8:92:56:3C:81:13:18:32:2E X509v3 Authority Key Identifier: keyid:9C:94:A5:DC:CF:6A:65:B6:89:86:C7:04:38:46:C7:21:BD:33:BE:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJSl3M9qZbaJhscEOEbHIb0zvpk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:3e:fd:10:7a:c4:ce:4a:04:4f:20:a6:a9:4a:b0:cd:05:ff: ac:43:e0:38:c6:3a:81:b6:dc:6c:6c:a1:f0:58:80:0c:bd:cd: 08:5c:13:57:91:a1:5b:d5:33:fe:09:e6:87:dc:3a:80:3d:01: 8b:d8:7e:8d:8f:98:16:bb:99:1b:d2:5f:9d:73:5a:0f:49:e5: aa:bb:7b:5e:39:c7:20:f7:bb:4c:ad:c1:ed:66:33:35:41:90: a0:f8:9c:55:d2:90:97:fb:ca:6f:94:d6:ba:18:e9:c3:de:22: 0c:1a:5c:22:0a:d1:3d:ea:8b:93:5f:3c:45:e2:56:73:83:f5: 57:c3:ad:86:1e:bb:8b:be:ca:ac:b6:f0:f0:51:eb:63:be:19: cf:ec:3d:9c:a5:21:87:8c:c3:ed:d2:a9:cf:3e:05:73:5c:3f: 8c:fe:8b:d0:ec:07:19:0f:5c:cb:bf:16:64:d2:1b:bd:24:fe: d2:75:fc:2d:8c:a2:01:2b:8f:d5:0e:74:49:ce:f3:ae:df:22: 01:50:4a:9c:1a:43:19:c4:ae:bd:7f:51:6e:19:cc:bd:73:6e: 7a:01:d5:5a:82:9e:70:97:27:f8:fa:c0:7f:6a:8c:9b:ea:ba: b2:01:fd:29:6e:bb:d0:60:91:8c:d1:6b:55:8e:11:93:2e:cb: 73:62:d0:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY2QTAxMTAvBgNVBAUTKDlDOTRBNURDQ0Y2QTY1QjY4OTg2QzcwNDM4NDZDNzIx QkQzM0JFOTkwHhcNMjYwNjA0MTc1MjI3WhcNMjYwNjExMTc1MjI3WjAYMRYwFAYD VQQDEw02YTIxYmI1Yi0wOGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArJHn5qfdoSOiLl0miAFJs4/4eO7/ApMRsYxM0WShJy7mMwQargZugWh08nrt 6Dfrnz+GyCeRsvNeP0w2senG0+JmVrcExm7HEAaTgzcjP7b3HpBM98Pm1CK8NNzV Ldu5OtmDPRAx1zUmacAyUlOQ5xCFEO6eY5/RKA3TiKLCy95bKjSPKgieYftyM+oT gLDRFYrI+rqU5+PK9Udr7nFUDsWAxA1UY6c1hRL1lWR3xXTXyVeAL6IAroT4tGsx jep48WbCX9dzWmGY4VG1tJ8FRn6oyYs2hGyL0yDkrO23gD0sRH/GmEIJxr/MzMz1 zm+cz7xjxEuvUNqTiCzIika0GQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBTZM+e/ 9wSrLn3uqJJWPIETGDIuMB8GA1UdIwQYMBaAFJyUpdzPamW2iYbHBDhGxyG9M76Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjZBMC82MjVGRjcyNkQ5 RTcxMUU5ODgwNTQwMTZDNEY5QUUwMi9uSlNsM005cVpiYUpoc2NFT0ViSEliMHp2 cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25KU2wzTTlxWmJhSmhzY0VPRWJISWIwenZway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjZBMC82MjVGRjcyNkQ5RTcxMUU5ODgwNTQwMTZDNEY5QUUwMi9uSlNsM005cVpi YUpoc2NFT0ViSEliMHp2cGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADj79EHrEzkoETyCmqUqwzQX/rEPgOMY6gbbcbGyh8FiADL3NCFwTV5GhW9Uz /gnmh9w6gD0Bi9h+jY+YFruZG9JfnXNaD0nlqrt7XjnHIPe7TK3B7WYzNUGQoPic VdKQl/vKb5TWuhjpw94iDBpcIgrRPeqLk188ReJWc4P1V8Othh67i77KrLbw8FHr Y74Zz+w9nKUhh4zD7dKpzz4Fc1w/jP6L0OwHGQ9cy78WZNIbvST+0nX8LYyiASuP 1Q50Sc7zrt8iAVBKnBpDGcSuvX9RbhnMvXNuegHVWoKecJcn+PrAf2qMm+q6sgH9 KW670GCRjNFrVY4Rky7Lc2LQkg== -----END CERTIFICATE-----Generated at Sat Jun 6 16:53:46 2026 by rpki-client