$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.mft File: RxDk3mQVxI6LUxtZzUekHNeTRV4.mft (raw, json) Hash identifier: XdM79XpGttlQxOZ15bWog65BLz505Q8xCO9CtXIIZXM= Subject key identifier: 3A:8D:01:7B:AD:1A:4C:E5:3D:54:DF:AA:ED:98:9C:B3:E5:3F:7D:CA Authority key identifier: 47:10:E4:DE:64:15:C4:8E:8B:53:1B:59:CD:47:A4:1C:D7:93:45:5E Certificate issuer: /CN=A91D9A24/serialNumber=4710E4DE6415C48E8B531B59CD47A41CD793455E Certificate serial: 01AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxDk3mQVxI6LUxtZzUekHNeTRV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.mft Manifest number: 01A0 Signing time: Mon 01 Jun 2026 04:58:49 +0000 Manifest this update: Mon 01 Jun 2026 04:58:48 +0000 Manifest next update: Mon 08 Jun 2026 04:58:48 +0000 Files and hashes: 1: RxDk3mQVxI6LUxtZzUekHNeTRV4.crl (hash: PC/jGpLoIiEUOj3EMZ1aS9BsY/FNz1JXx64v1H2Nn4c=) 2: FE2FF9B0E64611EEA8AE7979C4F9AE02.roa (hash: gwlx15NOKSSuTtep9jvIiBRjXxDd5hg+UsW+yrk+0q0=) 3: A18158C6E64611EE95C0CE78C4F9AE02.roa (hash: +Ua9rrAMwKOamiQjmwWUScI/yyEA3IFkaNxRdZM8mwE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.crl rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxDk3mQVxI6LUxtZzUekHNeTRV4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 04:58:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 429 (0x1ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9A24, serialNumber=4710E4DE6415C48E8B531B59CD47A41CD793455E Validity Not Before: Jun 1 04:58:48 2026 GMT Not After : Jun 8 04:58:48 2026 GMT Subject: CN=6a1d1189-c538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3d:aa:4c:58:13:a7:5e:77:e8:16:5e:21:47: 04:e6:72:3d:7f:6f:43:15:09:3c:44:18:0e:76:1d: d1:9c:10:db:e0:10:26:1b:27:98:35:6d:ea:b8:79: 8a:d6:e7:2f:f7:7b:90:4a:7b:bb:99:82:83:98:6d: 7f:75:c7:e2:ad:5d:66:b7:55:7a:f7:34:ca:dd:aa: dc:62:6a:0f:62:62:8c:10:de:ab:f9:30:0a:5a:bf: 97:05:02:8a:00:ac:a2:b9:b1:47:78:c5:25:57:85: 53:78:33:e1:30:ad:7b:3d:15:b5:fa:6d:fe:3a:c4: 3a:91:d5:f0:af:75:66:1f:94:88:ce:3a:f2:45:13: c5:a3:56:74:6d:2b:fd:d6:28:fb:ae:b4:f7:d7:2f: ad:fc:90:ac:7c:fd:82:4c:fd:00:d6:50:59:e4:cc: 69:d6:05:d2:a8:b1:6f:35:78:de:0a:0a:9d:98:a6: c1:7f:6e:67:72:1c:ac:3b:3a:18:13:63:21:a5:e0: c2:5a:a3:74:80:c1:74:ee:a2:30:13:2b:83:0c:3e: e2:68:31:0d:b8:8c:8c:b3:35:a0:f1:05:d1:11:8c: 22:52:95:e9:f7:e1:6a:10:2c:2b:1b:a6:cd:26:05: bb:90:c8:b8:34:54:9b:b7:b6:9c:e4:58:eb:53:11: 09:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:8D:01:7B:AD:1A:4C:E5:3D:54:DF:AA:ED:98:9C:B3:E5:3F:7D:CA X509v3 Authority Key Identifier: keyid:47:10:E4:DE:64:15:C4:8E:8B:53:1B:59:CD:47:A4:1C:D7:93:45:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxDk3mQVxI6LUxtZzUekHNeTRV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:b0:9d:da:84:49:21:43:04:08:c4:e5:e3:7b:43:a0:17:75: 42:03:05:4a:f4:87:82:ef:b5:3e:a1:21:b2:04:0d:d3:ee:27: 42:8f:3a:24:e1:b9:84:46:ed:88:53:2a:21:a1:fc:21:88:27: 6d:c4:40:12:cf:bb:18:3b:eb:89:db:69:03:e9:b5:98:52:ff: 3e:21:46:f4:eb:81:73:b1:03:77:2c:61:00:65:f8:b3:75:b8: 78:25:9c:3e:72:30:73:75:87:4a:b9:4e:2a:ef:05:bc:30:d6: 5a:df:33:d0:e2:e3:5a:65:ea:92:90:e8:75:16:51:d9:fc:de: fb:37:b4:7e:61:39:91:82:6f:45:42:84:37:1b:f1:af:76:cf: 2a:4a:bc:16:8c:10:d9:dd:3e:c6:08:11:bf:4f:eb:04:fa:51: 7a:81:50:b8:26:3c:55:69:5a:36:b5:0a:46:81:a1:1d:f9:ba: 3b:91:cb:49:41:77:9b:31:2c:cd:0a:49:68:df:89:c0:fa:50: 5d:81:fe:8e:6e:c4:56:c3:3d:22:0d:ef:30:22:b8:10:16:88: 01:8f:95:8e:89:43:f4:43:d3:c9:0e:13:bd:b1:9d:3a:51:e6: 04:ba:39:c8:c8:ef:b3:d9:67:23:fe:eb:6a:dd:15:2f:15:8b: 09:3a:8d:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlBMjQxMTAvBgNVBAUTKDQ3MTBFNERFNjQxNUM0OEU4QjUzMUI1OUNENDdBNDFD RDc5MzQ1NUUwHhcNMjYwNjAxMDQ1ODQ4WhcNMjYwNjA4MDQ1ODQ4WjAYMRYwFAYD VQQDEw02YTFkMTE4OS1jNTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzz2qTFgTp1536BZeIUcE5nI9f29DFQk8RBgOdh3RnBDb4BAmGyeYNW3quHmK 1ucv93uQSnu7mYKDmG1/dcfirV1mt1V69zTK3arcYmoPYmKMEN6r+TAKWr+XBQKK AKyiubFHeMUlV4VTeDPhMK17PRW1+m3+OsQ6kdXwr3VmH5SIzjryRRPFo1Z0bSv9 1ij7rrT31y+t/JCsfP2CTP0A1lBZ5Mxp1gXSqLFvNXjeCgqdmKbBf25nchysOzoY E2MhpeDCWqN0gMF07qIwEyuDDD7iaDENuIyMszWg8QXREYwiUpXp9+FqECwrG6bN JgW7kMi4NFSbt7ac5FjrUxEJEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDqNAXut GkzlPVTfqu2YnLPlP33KMB8GA1UdIwQYMBaAFEcQ5N5kFcSOi1MbWc1HpBzXk0Ve MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUEyNC85Mzk4NENGMkU2 NDUxMUVFQjVBNzM1NzdDNEY5QUUwMi9SeERrM21RVnhJNkxVeHRaelVla0hOZVRS VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J4RGszbVFWeEk2TFV4dFp6VWVrSE5lVFJWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUEyNC85Mzk4NENGMkU2NDUxMUVFQjVBNzM1NzdDNEY5QUUwMi9SeERrM21RVnhJ NkxVeHRaelVla0hOZVRSVjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACrCd2oRJIUMECMTl43tDoBd1QgMFSvSHgu+1PqEhsgQN0+4nQo86JOG5hEbt iFMqIaH8IYgnbcRAEs+7GDvridtpA+m1mFL/PiFG9OuBc7EDdyxhAGX4s3W4eCWc PnIwc3WHSrlOKu8FvDDWWt8z0OLjWmXqkpDodRZR2fze+ze0fmE5kYJvRUKENxvx r3bPKkq8FowQ2d0+xggRv0/rBPpReoFQuCY8VWlaNrUKRoGhHfm6O5HLSUF3mzEs zQpJaN+JwPpQXYH+jm7EVsM9Ig3vMCK4EBaIAY+VjolD9EPTyQ4TvbGdOlHmBLo5 yMjvs9lnI/7rat0VLxWLCTqN2w== -----END CERTIFICATE-----Generated at Tue Jun 2 21:48:24 2026 by rpki-client