$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.mft File: hkuImlN4cQmFJlQfDrkSVv2vp7E.mft (raw, json) Hash identifier: bZaU6e0C3Rh7gUsOofnZlBTZA/SQP6b+IMHtSFH3GV4= Subject key identifier: DA:CD:A0:EE:E8:EF:45:A0:75:C7:20:5C:9E:2A:45:A3:F7:AA:2C:CC Authority key identifier: 86:4B:88:9A:53:78:71:09:85:26:54:1F:0E:B9:12:56:FD:AF:A7:B1 Certificate issuer: /CN=A91DB53B/serialNumber=864B889A537871098526541F0EB91256FDAFA7B1 Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkuImlN4cQmFJlQfDrkSVv2vp7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.mft Manifest number: 57 Signing time: Mon 01 Jun 2026 09:00:39 +0000 Manifest this update: Mon 01 Jun 2026 09:00:39 +0000 Manifest next update: Mon 08 Jun 2026 09:00:39 +0000 Files and hashes: 1: hkuImlN4cQmFJlQfDrkSVv2vp7E.crl (hash: it2w8OKWCNjmr8MMa9pvKRsVnMuwWGvMsq8e45DbHqQ=) 2: 53F3631AE09A11F0A599D036446F56BC.roa (hash: oVM32N+EaxRSiza2FT5vk20qgpzDKgkN9n1AMpDCt+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.crl rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkuImlN4cQmFJlQfDrkSVv2vp7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB53B, serialNumber=864B889A537871098526541F0EB91256FDAFA7B1 Validity Not Before: Jun 1 09:00:39 2026 GMT Not After : Jun 8 09:00:39 2026 GMT Subject: CN=6a1d4a37-f9d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0a:b1:8b:77:cc:47:7d:72:ea:31:4c:1d:a1: 0a:88:f6:50:c8:ed:6f:83:b0:ed:73:97:78:fe:6e: 0a:1e:f3:95:b4:72:df:c1:87:a5:ee:ba:43:ce:ce: 68:15:d6:6e:2b:28:b4:d8:a1:ef:a4:5f:c1:b4:f3: a9:0e:12:13:49:0d:b3:0c:f2:67:3b:7d:95:89:c1: 77:6b:33:a5:60:b9:a2:0f:69:17:51:cc:24:ef:62: 1f:ae:28:ab:f9:68:72:77:aa:7b:8c:7a:44:e7:39: ff:13:c8:e4:90:e1:76:df:05:80:74:82:48:60:5f: 2f:f7:ff:89:d1:1b:d6:b8:1b:b7:7d:cb:58:f5:25: 47:df:4e:70:e6:e9:c9:47:e5:32:50:bf:3c:6d:5b: 76:c6:2e:8e:e5:2b:ea:cc:ea:87:eb:74:17:c0:bd: ee:54:4c:03:76:6e:19:17:9c:d6:61:28:6b:44:04: 15:44:ea:b1:82:a9:08:ff:f7:ce:5b:f5:a7:98:4b: a8:19:a3:c9:62:8b:6d:a4:92:3d:ef:ad:3f:80:cb: 6c:fa:d7:e4:60:c9:a7:53:9b:19:2a:b6:6f:49:5f: e9:24:c8:b9:83:5c:51:5b:21:d0:5a:b9:3a:3f:9d: e8:ba:1a:b0:96:6c:4c:54:7f:b4:65:bc:46:fb:ab: 5c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:CD:A0:EE:E8:EF:45:A0:75:C7:20:5C:9E:2A:45:A3:F7:AA:2C:CC X509v3 Authority Key Identifier: keyid:86:4B:88:9A:53:78:71:09:85:26:54:1F:0E:B9:12:56:FD:AF:A7:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkuImlN4cQmFJlQfDrkSVv2vp7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:2a:06:26:39:61:a9:35:68:95:ac:73:01:69:68:d3:65:0e: 55:b1:f3:02:be:f9:71:55:b6:e8:c1:d0:6a:ff:f3:b6:e8:58: 8a:64:f1:17:1c:b7:5e:49:2a:ad:80:b8:99:9c:d3:0a:cd:20: 9d:da:ad:1b:10:33:d0:b7:a3:f6:59:f8:14:c1:26:34:6a:10: d5:9b:0b:a4:af:bc:e9:b0:68:25:4d:dd:64:f1:7a:04:32:38: 7c:04:be:dc:8b:75:1d:99:b4:af:a0:78:68:3e:16:98:02:a9: 02:ef:0b:ec:93:4e:74:9b:ba:c6:f6:54:46:bf:20:33:b3:1d: 31:af:7e:39:fc:0d:26:72:f3:0d:ea:17:8f:0f:d7:91:8a:6d: 33:d4:5e:95:32:e6:73:5b:ce:98:d6:b4:d3:e3:fd:64:96:5c: d0:4b:ff:a9:e9:52:f9:06:05:da:81:3f:57:35:0c:f1:b2:29: b0:59:4a:a8:ab:38:0a:c8:d7:1d:a2:a2:89:3e:09:42:13:4e: 10:40:a5:05:66:cf:da:da:89:a4:79:94:3e:1d:c5:27:00:7d: 21:fc:25:05:ce:30:06:ef:a6:ba:ba:43:d9:b7:f3:84:6d:bb: 26:09:38:a6:09:3b:4d:85:1c:60:5c:1b:32:e8:b8:dc:c7:1b: 13:57:ce:22 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QjUzQjExMC8GA1UEBRMoODY0Qjg4OUE1Mzc4NzEwOTg1MjY1NDFGMEVCOTEyNTZG REFGQTdCMTAeFw0yNjA2MDEwOTAwMzlaFw0yNjA2MDgwOTAwMzlaMBgxFjAUBgNV BAMTDTZhMWQ0YTM3LWY5ZDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDcCrGLd8xHfXLqMUwdoQqI9lDI7W+DsO1zl3j+bgoe85W0ct/Bh6XuukPOzmgV 1m4rKLTYoe+kX8G086kOEhNJDbMM8mc7fZWJwXdrM6VguaIPaRdRzCTvYh+uKKv5 aHJ3qnuMekTnOf8TyOSQ4XbfBYB0gkhgXy/3/4nRG9a4G7d9y1j1JUffTnDm6clH 5TJQvzxtW3bGLo7lK+rM6ofrdBfAve5UTAN2bhkXnNZhKGtEBBVE6rGCqQj/985b 9aeYS6gZo8lii22kkj3vrT+Ay2z61+RgyadTmxkqtm9JX+kkyLmDXFFbIdBauTo/ nei6GrCWbExUf7RlvEb7q1whAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU2s2g7ujv RaB1xyBcnipFo/eqLMwwHwYDVR0jBBgwFoAUhkuImlN4cQmFJlQfDrkSVv2vp7Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURCNTNCLzAwREE5RDY4RTAx QTExRjA4QUQzRUI4RDYyNkY1NkJDL2hrdUltbE40Y1FtRkpsUWZEcmtTVnYydnA3 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaGt1SW1sTjRjUW1GSmxRZkRya1NWdjJ2cDdFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURC NTNCLzAwREE5RDY4RTAxQTExRjA4QUQzRUI4RDYyNkY1NkJDL2hrdUltbE40Y1Ft RkpsUWZEcmtTVnYydnA3RS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA/KgYmOWGpNWiVrHMBaWjTZQ5VsfMCvvlxVbbowdBq//O26FiKZPEXHLdeSSqt gLiZnNMKzSCd2q0bEDPQt6P2WfgUwSY0ahDVmwukr7zpsGglTd1k8XoEMjh8BL7c i3UdmbSvoHhoPhaYAqkC7wvsk050m7rG9lRGvyAzsx0xr345/A0mcvMN6hePD9eR im0z1F6VMuZzW86Y1rTT4/1kllzQS/+p6VL5BgXagT9XNQzxsimwWUqoqzgKyNcd oqKJPglCE04QQKUFZs/a2omkeZQ+HcUnAH0h/CUFzjAG76a6ukPZt/OEbbsmCTim CTtNhRxgXBsy6LjcxxsTV84i -----END CERTIFICATE-----Generated at Tue Jun 2 22:09:52 2026 by rpki-client