$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft File: raez5kKEQOUk2gaDhqHt8yH4gR4.mft (raw, json) Hash identifier: WA9C19+LHe1VDBnoZLA6ctM3Hw5YB7U2f85WdWaJvTc= Subject key identifier: C2:49:15:1D:4C:51:0B:2C:A3:A8:0F:75:C6:4E:8C:63:C4:33:3E:17 Authority key identifier: AD:A7:B3:E6:42:84:40:E5:24:DA:06:83:86:A1:ED:F3:21:F8:81:1E Certificate issuer: /CN=A91D7103/serialNumber=ADA7B3E6428440E524DA068386A1EDF321F8811E Certificate serial: 021B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft Manifest number: 0211 Signing time: Mon 15 Jun 2026 03:01:15 +0000 Manifest this update: Mon 15 Jun 2026 03:01:14 +0000 Manifest next update: Mon 22 Jun 2026 03:01:14 +0000 Files and hashes: 1: raez5kKEQOUk2gaDhqHt8yH4gR4.crl (hash: wpcI7xLAeCk9iHFX57P5juvTFWZ7pznqat3HnRnc+7I=) 2: 1E35039C42D511EEAE5F803AC4F9AE02.roa (hash: NAyqjXxHew3fTgSiTUVKkUKTCbweGmMoTZZqsBbKNGc=) 3: EFB54FEC42D211EE9D8A0832C4F9AE02.roa (hash: 6PnVAS1g7LHhPhFEbNomaCcQC2sh7domCqwSzK4ikhg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.crl rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Jun 2026 01:32:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 539 (0x21b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7103, serialNumber=ADA7B3E6428440E524DA068386A1EDF321F8811E Validity Not Before: Jun 15 03:01:14 2026 GMT Not After : Jun 22 03:01:14 2026 GMT Subject: CN=6a2f6afb-b5d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:14:99:7d:7c:61:a6:2c:c8:63:fa:c8:73:1b: 8c:29:a4:4e:c7:3b:5e:9b:58:96:68:2e:99:06:4a: 6f:2f:07:96:d9:6c:ed:57:35:f1:c1:71:60:f5:30: bd:ee:15:b0:62:72:1b:b3:9b:c7:7c:bb:e8:9a:de: 11:33:37:14:46:1b:87:58:1a:f1:c3:06:c5:e8:2b: 6b:45:f9:98:e7:1e:e4:a6:e5:6b:fd:f6:35:21:de: b2:e1:cb:70:30:48:d1:76:3a:f3:07:15:ad:07:a6: d2:13:11:f9:cc:8a:17:6b:d6:69:1c:0b:a7:12:71: 0b:f4:76:db:e8:ee:79:d8:52:b7:fd:43:d2:93:0a: 61:d2:3a:c7:98:a8:1f:d5:39:e0:40:c9:ad:cd:30: 0e:d2:7a:cc:b6:6f:bf:f3:ab:da:31:19:3d:7d:b5: 47:88:94:cd:0c:a1:2d:ec:49:74:a7:3b:0c:b8:1b: 4c:e1:77:e3:1e:51:d6:35:a5:d6:3a:e8:a8:94:0c: c1:5c:18:0f:4e:5d:32:4f:00:1f:f5:5c:ef:08:8a: 4c:a2:1e:22:e1:cc:25:cc:c2:23:b4:0e:49:1d:df: 4f:a3:55:f8:98:54:92:8b:e2:c7:3b:60:cb:ab:61: eb:bb:fa:29:fd:82:55:0f:7a:9f:72:01:20:c1:f8: 02:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:49:15:1D:4C:51:0B:2C:A3:A8:0F:75:C6:4E:8C:63:C4:33:3E:17 X509v3 Authority Key Identifier: keyid:AD:A7:B3:E6:42:84:40:E5:24:DA:06:83:86:A1:ED:F3:21:F8:81:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:b3:f7:ba:78:cb:d4:e1:82:83:84:63:b5:2f:ec:c4:22:d1: 0f:73:42:53:64:ac:a0:c5:a8:2a:c7:b2:ae:09:8d:4a:78:cf: 45:da:99:37:3a:38:01:55:35:fb:f3:1a:c7:3d:c7:8a:52:58: 52:1e:cf:96:bd:0c:4d:7c:12:a4:a1:1f:b2:7d:7f:c8:66:6c: 87:5b:ed:ce:e5:63:f6:a5:fe:71:7a:9d:61:e5:6c:97:9c:ec: 05:33:8f:2e:42:d9:dc:b0:95:fa:f1:76:7f:ca:b0:b6:25:d4: f2:5d:10:20:65:0e:40:52:97:aa:7f:34:9b:63:34:b8:2b:04: 60:cd:93:19:b2:ee:fb:47:de:83:21:60:c0:46:2f:4c:15:35: c2:40:e3:88:5d:16:b8:3a:75:8a:03:03:ab:ed:63:9f:11:bd: 81:fb:93:3e:3e:92:58:64:8e:8a:33:ec:6b:04:be:74:8a:4b: 75:18:7c:cf:e5:d8:cd:86:04:e4:3c:a5:fa:b8:bc:ec:59:f5: 93:31:ef:94:ce:b3:ae:19:f6:d9:08:69:60:bb:f3:23:a4:b3: 23:9a:f6:69:1f:e6:cf:c7:7e:4a:9e:d2:87:57:19:92:91:fc: 8f:49:c6:54:3c:74:04:41:19:ee:00:f5:9c:b8:a5:ec:35:4a: f1:ab:be:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDcxMDMxMTAvBgNVBAUTKEFEQTdCM0U2NDI4NDQwRTUyNERBMDY4Mzg2QTFFREYz MjFGODgxMUUwHhcNMjYwNjE1MDMwMTE0WhcNMjYwNjIyMDMwMTE0WjAYMRYwFAYD VQQDEw02YTJmNmFmYi1iNWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxRSZfXxhpizIY/rIcxuMKaROxztem1iWaC6ZBkpvLweW2WztVzXxwXFg9TC9 7hWwYnIbs5vHfLvomt4RMzcURhuHWBrxwwbF6CtrRfmY5x7kpuVr/fY1Id6y4ctw MEjRdjrzBxWtB6bSExH5zIoXa9ZpHAunEnEL9Hbb6O552FK3/UPSkwph0jrHmKgf 1TngQMmtzTAO0nrMtm+/86vaMRk9fbVHiJTNDKEt7El0pzsMuBtM4XfjHlHWNaXW OuiolAzBXBgPTl0yTwAf9VzvCIpMoh4i4cwlzMIjtA5JHd9Po1X4mFSSi+LHO2DL q2Hru/op/YJVD3qfcgEgwfgCHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMJJFR1M UQsso6gPdcZOjGPEMz4XMB8GA1UdIwQYMBaAFK2ns+ZChEDlJNoGg4ah7fMh+IEe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzEwMy83QUI4MTEyQTQy RDIxMUVFQjdDNEQwMUVDNEY5QUUwMi9yYWV6NWtLRVFPVWsyZ2FEaHFIdDh5SDRn UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JhZXo1a0tFUU9VazJnYURocUh0OHlINGdSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzEwMy83QUI4MTEyQTQyRDIxMUVFQjdDNEQwMUVDNEY5QUUwMi9yYWV6NWtLRVFP VWsyZ2FEaHFIdDh5SDRnUjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhLP3unjL1OGCg4RjtS/sxCLRD3NCU2SsoMWoKseyrgmNSnjPRdqZNzo4AVU1 +/Maxz3HilJYUh7Plr0MTXwSpKEfsn1/yGZsh1vtzuVj9qX+cXqdYeVsl5zsBTOP LkLZ3LCV+vF2f8qwtiXU8l0QIGUOQFKXqn80m2M0uCsEYM2TGbLu+0fegyFgwEYv TBU1wkDjiF0WuDp1igMDq+1jnxG9gfuTPj6SWGSOijPsawS+dIpLdRh8z+XYzYYE 5Dyl+ri87Fn1kzHvlM6zrhn22QhpYLvzI6SzI5r2aR/mz8d+Sp7Sh1cZkpH8j0nG VDx0BEEZ7gD1nLil7DVK8au+nA== -----END CERTIFICATE-----Generated at Tue Jun 16 19:19:13 2026 by rpki-client