$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft File: -a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft (raw, json) Hash identifier: urTiRfbN+lu44p6MssfIqJu6Ek/ZAVR+lfMf83eAvoU= Subject key identifier: 02:5D:8D:AD:F9:6B:E4:45:21:4C:87:20:32:EB:9B:26:A6:2C:32:59 Authority key identifier: F9:AE:5E:2A:9D:C8:0B:51:EA:A7:57:72:78:C3:DE:06:1A:80:AB:63 Certificate issuer: /CN=A91DBAA3/serialNumber=F9AE5E2A9DC80B51EAA7577278C3DE061A80AB63 Certificate serial: 72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft Manifest number: 6C Signing time: Mon 29 Jun 2026 08:41:13 +0000 Manifest this update: Mon 29 Jun 2026 08:41:13 +0000 Manifest next update: Mon 06 Jul 2026 08:41:13 +0000 Files and hashes: 1: -a5eKp3IC1Hqp1dyeMPeBhqAq2M.crl (hash: AYmdZoPxZBLXGfRI4ksCWCX2eSqtptS2Pm8xzGkNJ/4=) 2: CF0F37FA1D1B11F1ACF733B0103D8C67.roa (hash: H5fMs/4SHZ+R2ioXCxpygGkCRluzXa/ZhyiVh3gWuO4=) 3: D0B6868A1D1B11F1ACF733B0103D8C67.roa (hash: jWdMxZZFTY4CsUZBn1lrTkWtYy/fDMYlI5r04PJk980=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.crl rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 Jul 2026 08:41:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 114 (0x72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBAA3, serialNumber=F9AE5E2A9DC80B51EAA7577278C3DE061A80AB63 Validity Not Before: Jun 29 08:41:13 2026 GMT Not After : Jul 6 08:41:13 2026 GMT Subject: CN=6a422fa9-d992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b7:82:ed:40:94:b4:e0:b3:c7:2a:44:fe:36: 8e:4b:25:17:78:12:59:f5:17:4c:3e:c7:ab:b4:c8: 1a:2c:5b:c1:b8:21:b6:5c:d5:07:0e:f9:5a:12:4e: 04:5f:6f:24:e3:92:8b:a1:ad:4f:83:04:b1:a1:63: 4b:b3:3f:63:13:6c:38:21:93:5c:11:84:15:69:12: f4:96:ac:ec:b6:df:ab:66:40:2a:7b:47:63:6f:a9: 0c:f0:0a:d6:8f:c6:75:55:e0:5b:e0:3c:22:95:33: 9f:21:4c:06:4b:dc:6e:69:d1:16:74:cc:5a:6c:10: e8:67:68:3c:6c:cf:9a:34:16:5b:6c:14:d5:c1:39: 2f:b4:ad:1c:1e:e8:14:79:fa:a6:bf:c6:cf:9d:33: af:4a:2e:85:1a:b9:ae:58:c7:59:e9:5c:45:ac:af: 4c:90:10:4f:b4:0a:54:ab:60:96:31:7e:81:82:18: f6:26:fe:fb:03:dc:11:a5:c2:9e:cf:92:f7:ef:ea: 1c:cd:99:13:d4:c5:b7:56:e5:41:eb:1d:34:f3:cf: 76:61:10:db:39:68:10:38:b8:63:e9:0b:eb:ef:7b: 2f:34:e0:05:85:4e:8b:dc:ae:db:fc:44:09:8c:cd: 50:5f:ff:9e:34:94:bb:1f:0d:0a:2e:0a:bf:b1:99: f7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:5D:8D:AD:F9:6B:E4:45:21:4C:87:20:32:EB:9B:26:A6:2C:32:59 X509v3 Authority Key Identifier: keyid:F9:AE:5E:2A:9D:C8:0B:51:EA:A7:57:72:78:C3:DE:06:1A:80:AB:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:20:5b:27:61:31:85:bf:80:f8:3a:fe:9e:77:97:00:86:b0: 3e:d0:c1:c3:60:bd:d4:22:f0:27:f3:0d:59:7d:b4:5d:03:a8: 93:e2:52:be:a2:c4:d4:fe:51:55:df:e7:80:41:8b:a7:0d:68: a0:cd:fa:38:89:45:6d:56:b3:39:f4:30:f9:aa:12:24:ce:7d: 1f:f4:09:ae:f9:59:3a:71:ad:8e:36:27:ca:07:17:18:87:a7: c0:9c:e3:1b:1b:70:ef:30:22:29:f9:09:74:fc:d8:bc:6e:1d: fc:02:ba:5d:e8:e7:6f:9a:ac:55:25:53:39:2a:3c:0f:4c:c4: 01:ac:53:35:6e:1d:38:15:86:60:b2:3c:d2:b1:20:ff:dd:85: 2e:5a:04:f2:5a:1e:4f:5e:44:61:92:76:e1:1c:f5:97:02:f7: d5:cd:7d:4b:8c:d8:27:27:7a:b5:f9:b6:39:f4:cb:d2:55:1c: a8:bc:bf:3d:7e:02:aa:fc:89:b8:1f:a2:b8:1e:3c:b1:e5:e1: 34:af:88:5e:25:f2:04:58:6d:d8:46:a4:08:6d:0a:9e:f0:28: 59:0c:27:41:0b:e1:78:0f:09:3d:af:31:c0:0d:f3:90:89:16: b3:9e:5c:ed:35:41:17:a9:c6:6b:b4:ab:01:b0:e3:9f:6d:99: 7a:21:4c:59 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBcjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QkFBMzExMC8GA1UEBRMoRjlBRTVFMkE5REM4MEI1MUVBQTc1NzcyNzhDM0RFMDYx QTgwQUI2MzAeFw0yNjA2MjkwODQxMTNaFw0yNjA3MDYwODQxMTNaMBgxFjAUBgNV BAMTDTZhNDIyZmE5LWQ5OTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyt4LtQJS04LPHKkT+No5LJRd4Eln1F0w+x6u0yBosW8G4IbZc1QcO+VoSTgRf byTjkouhrU+DBLGhY0uzP2MTbDghk1wRhBVpEvSWrOy236tmQCp7R2NvqQzwCtaP xnVV4FvgPCKVM58hTAZL3G5p0RZ0zFpsEOhnaDxsz5o0FltsFNXBOS+0rRwe6BR5 +qa/xs+dM69KLoUaua5Yx1npXEWsr0yQEE+0ClSrYJYxfoGCGPYm/vsD3BGlwp7P kvfv6hzNmRPUxbdW5UHrHTTzz3ZhENs5aBA4uGPpC+vvey804AWFTovcrtv8RAmM zVBf/540lLsfDQouCr+xmfdlAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUAl2Nrflr 5EUhTIcgMuubJqYsMlkwHwYDVR0jBBgwFoAU+a5eKp3IC1Hqp1dyeMPeBhqAq2Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURCQUEzLzFDMTc5MTNBRDkw RDExRjA4NjgwRDVGMTdDRDM2NDFELy1hNWVLcDNJQzFIcXAxZHllTVBlQmhxQXEy TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLWE1ZUtwM0lDMUhxcDFkeWVNUGVCaHFBcTJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURC QUEzLzFDMTc5MTNBRDkwRDExRjA4NjgwRDVGMTdDRDM2NDFELy1hNWVLcDNJQzFI cXAxZHllTVBlQmhxQXEyTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCcIFsnYTGFv4D4Ov6ed5cAhrA+0MHDYL3UIvAn8w1ZfbRdA6iT4lK+osTU/lFV 3+eAQYunDWigzfo4iUVtVrM59DD5qhIkzn0f9Amu+Vk6ca2ONifKBxcYh6fAnOMb G3DvMCIp+Ql0/Ni8bh38Arpd6OdvmqxVJVM5KjwPTMQBrFM1bh04FYZgsjzSsSD/ 3YUuWgTyWh5PXkRhknbhHPWXAvfVzX1LjNgnJ3q1+bY59MvSVRyovL89fgKq/Im4 H6K4Hjyx5eE0r4heJfIEWG3YRqQIbQqe8ChZDCdBC+F4Dwk9rzHADfOQiRaznlzt NUEXqcZrtKsBsOOfbZl6IUxZ -----END CERTIFICATE-----Generated at Wed Jul 1 08:27:11 2026 by rpki-client