$ rpki-client -vvf rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.mft File: C7ukEkukx8in-dCX7uqpgy8JeWc.mft (raw, json) Hash identifier: vThVjd/9+lPeXG3DFgcg332ZrpghxgXUzMF+GWLneWI= Subject key identifier: 84:3D:A6:57:50:AB:53:DA:95:7D:FE:08:CA:C0:B7:5D:73:EE:33:1E Authority key identifier: 0B:BB:A4:12:4B:A4:C7:C8:A7:F9:D0:97:EE:EA:A9:83:2F:09:79:67 Certificate issuer: /CN=A91D901E/serialNumber=0BBBA4124BA4C7C8A7F9D097EEEAA9832F097967 Certificate serial: A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7ukEkukx8in-dCX7uqpgy8JeWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.mft Manifest number: A2 Signing time: Tue 23 Jun 2026 07:31:16 +0000 Manifest this update: Tue 23 Jun 2026 07:31:15 +0000 Manifest next update: Tue 30 Jun 2026 07:31:15 +0000 Files and hashes: 1: C7ukEkukx8in-dCX7uqpgy8JeWc.crl (hash: Bbpo8LmlQMHDXGaighP9QOAA9uLU6GSusEYSnN8YY38=) 2: 58F7915E78DC11F084C71D2BC4F9AE02.roa (hash: SoN2OmaKDx3s/tXFdxvFr9GR6YOZ0tZJgZDuBgai0t4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.crl rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7ukEkukx8in-dCX7uqpgy8JeWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jun 2026 07:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164 (0xa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D901E, serialNumber=0BBBA4124BA4C7C8A7F9D097EEEAA9832F097967 Validity Not Before: Jun 23 07:31:15 2026 GMT Not After : Jun 30 07:31:15 2026 GMT Subject: CN=6a3a3644-22f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:6c:fa:d4:12:a8:74:11:0e:18:93:f9:22:d2: ac:2e:31:eb:b0:7d:66:a7:cb:2a:9f:08:b9:14:b5: 35:d7:2a:b7:68:63:de:79:ef:a1:90:40:74:bc:26: 2f:0a:c9:0e:8e:78:a4:f2:f5:f6:29:07:0d:ac:5d: f3:9c:90:a5:1b:48:8a:bd:17:af:5e:9a:5e:ad:22: cc:dd:70:d8:c0:2e:83:41:64:2c:47:8d:50:91:8e: 36:fb:e5:3b:ae:a5:e2:2e:d1:8d:19:05:c2:53:65: 70:0f:44:f7:68:27:f2:d9:9c:96:6f:99:a7:9c:a6: e2:60:83:7d:59:79:35:67:0a:f1:59:61:52:a6:0e: 54:87:5d:f4:67:f6:7d:e9:34:24:24:91:d2:f1:06: cd:42:4b:9a:14:29:d1:1a:1f:de:b2:27:cc:4f:12: 7f:5f:2c:87:71:67:82:23:1d:38:c6:0f:1f:f4:ad: ca:9f:c0:06:89:3e:9f:0c:fb:c5:65:e5:0c:32:13: 78:f8:25:c0:d3:3d:15:e2:53:73:e9:7c:0d:86:c3: 5d:c0:d0:b3:13:b2:38:bb:4d:79:d6:bf:80:76:b5: 52:5f:2b:d5:1d:97:5a:d8:bc:59:d6:6e:3f:fb:82: c8:9a:dc:13:50:6b:45:ba:b3:dc:fc:47:7a:d6:87: b0:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:3D:A6:57:50:AB:53:DA:95:7D:FE:08:CA:C0:B7:5D:73:EE:33:1E X509v3 Authority Key Identifier: keyid:0B:BB:A4:12:4B:A4:C7:C8:A7:F9:D0:97:EE:EA:A9:83:2F:09:79:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7ukEkukx8in-dCX7uqpgy8JeWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:bf:e0:09:95:b8:e8:7a:38:29:80:16:c8:72:60:b4:d7:a8: 13:a3:14:f3:8d:cb:28:d5:8a:85:87:ff:fc:cc:eb:08:cf:18: 15:39:54:2d:19:af:e4:9a:e7:9b:75:95:29:14:89:b7:3e:a6: 72:87:ae:cc:4e:b5:1f:94:cc:82:b0:03:69:fb:7b:62:8a:9f: 2e:e3:e3:ad:b1:a2:87:df:34:b4:5f:45:f3:84:ef:8e:2a:1d: be:4e:3c:09:ee:57:50:32:d8:12:dc:93:cf:57:b9:c7:24:6b: 38:d0:a7:2b:0a:28:58:35:04:e3:cf:cb:a6:e3:12:3b:93:a1: 20:e0:24:ab:ca:d9:dd:bf:2a:98:ec:8c:4d:75:a0:57:3d:b3: ce:76:ab:11:b7:ad:72:6a:90:e8:f2:38:5a:3f:3e:b4:b6:cf: 37:40:e6:66:5a:93:66:3f:93:2b:34:9d:8c:47:63:11:fd:55: 15:c3:90:25:fc:98:b1:87:f2:26:7b:16:b2:ab:ff:22:bc:71: bf:27:69:c6:ae:ab:2e:70:12:b1:81:3f:4f:82:1e:85:da:06: 7f:16:4e:88:c1:f5:7f:a2:08:dd:03:83:64:a7:55:81:3f:77: fa:1a:56:59:7c:f0:98:1d:56:d4:e8:b3:28:84:09:c9:60:b6: 55:43:9a:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkwMUUxMTAvBgNVBAUTKDBCQkJBNDEyNEJBNEM3QzhBN0Y5RDA5N0VFRUFBOTgz MkYwOTc5NjcwHhcNMjYwNjIzMDczMTE1WhcNMjYwNjMwMDczMTE1WjAYMRYwFAYD VQQDEw02YTNhMzY0NC0yMmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm2z61BKodBEOGJP5ItKsLjHrsH1mp8sqnwi5FLU11yq3aGPeee+hkEB0vCYv CskOjnik8vX2KQcNrF3znJClG0iKvRevXpperSLM3XDYwC6DQWQsR41QkY42++U7 rqXiLtGNGQXCU2VwD0T3aCfy2ZyWb5mnnKbiYIN9WXk1ZwrxWWFSpg5Uh130Z/Z9 6TQkJJHS8QbNQkuaFCnRGh/esifMTxJ/XyyHcWeCIx04xg8f9K3Kn8AGiT6fDPvF ZeUMMhN4+CXA0z0V4lNz6XwNhsNdwNCzE7I4u0151r+AdrVSXyvVHZda2LxZ1m4/ +4LImtwTUGtFurPc/Ed61oewWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIQ9pldQ q1PalX3+CMrAt11z7jMeMB8GA1UdIwQYMBaAFAu7pBJLpMfIp/nQl+7qqYMvCXln MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTAxRS9FNkU4ODBEODc4 REExMUYwQjBGQkUyMTZDNEY5QUUwMi9DN3VrRWt1a3g4aW4tZENYN3VxcGd5OEpl V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M3dWtFa3VreDhpbi1kQ1g3dXFwZ3k4SmVXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTAxRS9FNkU4ODBEODc4REExMUYwQjBGQkUyMTZDNEY5QUUwMi9DN3VrRWt1a3g4 aW4tZENYN3VxcGd5OEplV2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVb/gCZW46Ho4KYAWyHJgtNeoE6MU843LKNWKhYf//MzrCM8YFTlULRmv5Jrn m3WVKRSJtz6mcoeuzE61H5TMgrADaft7YoqfLuPjrbGih980tF9F84Tvjiodvk48 Ce5XUDLYEtyTz1e5xyRrONCnKwooWDUE48/LpuMSO5OhIOAkq8rZ3b8qmOyMTXWg Vz2zznarEbetcmqQ6PI4Wj8+tLbPN0DmZlqTZj+TKzSdjEdjEf1VFcOQJfyYsYfy JnsWsqv/Irxxvydpxq6rLnASsYE/T4IehdoGfxZOiMH1f6II3QODZKdVgT93+hpW WXzwmB1W1OizKIQJyWC2VUOaaQ== -----END CERTIFICATE-----Generated at Wed Jun 24 11:29:39 2026 by rpki-client