$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.mft File: mOmVvDpP8s0IxuNVS2Y3S2aXknA.mft (raw, json) Hash identifier: QYlx4PZguqGLO8EYV5vnjC6tI3Cu50YuvcDn9JHqnB0= Subject key identifier: A3:84:75:33:12:AA:93:47:B3:61:00:2F:ED:07:AB:D5:47:BC:23:60 Authority key identifier: 98:E9:95:BC:3A:4F:F2:CD:08:C6:E3:55:4B:66:37:4B:66:97:92:70 Certificate issuer: /CN=A91DA5F7/serialNumber=98E995BC3A4FF2CD08C6E3554B66374B66979270 Certificate serial: 52 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mOmVvDpP8s0IxuNVS2Y3S2aXknA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.mft Manifest number: 4D Signing time: Fri 05 Jun 2026 08:45:07 +0000 Manifest this update: Fri 05 Jun 2026 08:45:06 +0000 Manifest next update: Fri 12 Jun 2026 08:45:06 +0000 Files and hashes: 1: mOmVvDpP8s0IxuNVS2Y3S2aXknA.crl (hash: G6SM+3wwn3wewzd5vXQOd+S9Yirj1/dmRI2W2fMu2qM=) 2: 3150E4A4F1F211F0B442E9B1456F56BC.roa (hash: NONLn4Akv/l6YL+qj6DEc725hoLYdC323Fs/6ORru7c=) 3: 30D2517AF1F211F0B442E9B1456F56BC.roa (hash: UAtyjnkkGVt2+haohA8ppdzMqX4q+YbKNZp+6njQiaY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.crl rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mOmVvDpP8s0IxuNVS2Y3S2aXknA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 08:45:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA5F7, serialNumber=98E995BC3A4FF2CD08C6E3554B66374B66979270 Validity Not Before: Jun 5 08:45:06 2026 GMT Not After : Jun 12 08:45:06 2026 GMT Subject: CN=6a228c93-a05e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b3:af:25:dc:75:96:e1:e8:c3:69:97:2d:05: 65:ea:3d:00:4f:04:d3:62:7c:78:ae:a2:80:d2:95: ff:b1:13:7a:63:f3:3b:81:90:8d:03:d0:d0:a9:6c: b9:ab:22:7f:07:70:a5:b6:e1:a9:07:13:3a:51:6c: 11:cf:fb:79:46:c6:1a:da:98:e2:20:92:80:26:32: b9:69:b2:44:b8:aa:fa:a5:97:58:2f:c6:53:82:dc: 95:e6:81:c2:b9:12:ab:e3:6c:bc:ec:40:1f:ba:42: 82:be:96:9a:cc:ad:64:7d:72:88:46:6c:4f:be:05: 65:cd:f1:e0:d3:4a:54:51:c4:1e:a1:84:21:6f:bf: 40:df:74:f6:03:9d:b6:aa:4a:0d:3e:1e:58:b5:88: 42:48:fb:f6:00:45:ec:3c:34:84:a3:ad:db:b5:94: a3:8a:98:d5:48:18:23:2b:46:7f:57:71:8b:a2:d5: 18:fd:7f:a3:0f:82:d7:6e:00:2a:d5:23:1f:ea:22: 74:7d:29:0e:cd:1a:e4:d0:d0:8e:2e:83:d4:ce:26: b9:c0:f8:8f:f8:88:47:a9:15:78:58:7e:82:be:00: d6:ce:ca:de:ea:19:4e:44:5c:cc:ed:e9:99:cc:bc: 9a:84:61:e5:ad:c9:c3:19:4c:c8:5e:e1:83:01:ae: 08:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:84:75:33:12:AA:93:47:B3:61:00:2F:ED:07:AB:D5:47:BC:23:60 X509v3 Authority Key Identifier: keyid:98:E9:95:BC:3A:4F:F2:CD:08:C6:E3:55:4B:66:37:4B:66:97:92:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mOmVvDpP8s0IxuNVS2Y3S2aXknA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:cd:1f:2f:7b:89:9a:7b:19:72:30:6f:34:ea:3a:88:b6:2d: b5:11:60:2e:3f:5f:06:75:fc:cb:6d:38:de:29:2c:bd:35:ea: 07:1d:3e:23:6f:cd:1c:d6:ea:1e:fb:83:09:27:b4:18:df:26: e0:78:33:8b:f1:1b:23:9c:5e:98:a7:72:07:1d:74:ec:9a:20: a9:ba:5d:de:7e:48:61:89:c9:03:18:13:f1:b5:6c:89:27:bf: a1:71:13:62:27:3a:50:14:4a:1d:40:75:d4:7b:0d:22:50:24: 37:46:20:de:0d:56:43:4b:3a:2d:8e:41:96:10:ac:07:4b:ca: 6d:ed:f0:f9:d2:1e:97:d3:bc:44:6c:c9:b6:58:5f:a2:2f:63: 1e:cb:ec:57:9d:d0:c9:3d:76:f5:1a:99:f0:0b:0b:ce:1e:7f: 7b:5c:a8:2e:8c:a6:44:fc:fd:c8:12:bb:5e:3b:61:a7:2d:c3: f9:eb:de:e5:cd:9e:3b:fa:51:c1:da:8d:91:dd:a0:41:38:6d: 83:18:3a:bf:84:47:1a:7b:0a:28:9c:84:8e:1e:fb:47:43:1b: 55:2f:03:68:f3:de:b9:19:59:04:07:ea:22:cc:4e:6c:80:b4: 5a:a2:4b:c0:74:5b:42:2e:30:28:9c:fe:78:94:b3:0c:18:03: 17:77:3b:02 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QTVGNzExMC8GA1UEBRMoOThFOTk1QkMzQTRGRjJDRDA4QzZFMzU1NEI2NjM3NEI2 Njk3OTI3MDAeFw0yNjA2MDUwODQ1MDZaFw0yNjA2MTIwODQ1MDZaMBgxFjAUBgNV BAMTDTZhMjI4YzkzLWEwNWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFs68l3HWW4ejDaZctBWXqPQBPBNNifHiuooDSlf+xE3pj8zuBkI0D0NCpbLmr In8HcKW24akHEzpRbBHP+3lGxhramOIgkoAmMrlpskS4qvqll1gvxlOC3JXmgcK5 EqvjbLzsQB+6QoK+lprMrWR9cohGbE++BWXN8eDTSlRRxB6hhCFvv0DfdPYDnbaq Sg0+Hli1iEJI+/YARew8NISjrdu1lKOKmNVIGCMrRn9XcYui1Rj9f6MPgtduACrV Ix/qInR9KQ7NGuTQ0I4ug9TOJrnA+I/4iEepFXhYfoK+ANbOyt7qGU5EXMzt6ZnM vJqEYeWtycMZTMhe4YMBrgjNAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUo4R1MxKq k0ezYQAv7Qer1Ue8I2AwHwYDVR0jBBgwFoAUmOmVvDpP8s0IxuNVS2Y3S2aXknAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURBNUY3L0YwRENDREQ0RjFG MTExRjBBQjIxRjkzQjQ1NkY1NkJDL21PbVZ2RHBQOHMwSXh1TlZTMlkzUzJhWGtu QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvbU9tVnZEcFA4czBJeHVOVlMyWTNTMmFYa25BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURB NUY3L0YwRENDREQ0RjFGMTExRjBBQjIxRjkzQjQ1NkY1NkJDL21PbVZ2RHBQOHMw SXh1TlZTMlkzUzJhWGtuQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAKzR8ve4maexlyMG806jqIti21EWAuP18GdfzLbTjeKSy9NeoHHT4jb80c1uoe +4MJJ7QY3ybgeDOL8RsjnF6Yp3IHHXTsmiCpul3efkhhickDGBPxtWyJJ7+hcRNi JzpQFEodQHXUew0iUCQ3RiDeDVZDSzotjkGWEKwHS8pt7fD50h6X07xEbMm2WF+i L2Mey+xXndDJPXb1GpnwCwvOHn97XKgujKZE/P3IErteO2GnLcP5697lzZ47+lHB 2o2R3aBBOG2DGDq/hEcaewoonISOHvtHQxtVLwNo8965GVkEB+oizE5sgLRaokvA dFtCLjAonP54lLMMGAMXdzsC -----END CERTIFICATE-----Generated at Sat Jun 6 12:08:17 2026 by rpki-client