$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft File: TNneNy0DSKwzsWel144wE_wDVx8.mft (raw, json) Hash identifier: NsG54BIDlc0EB1Dtv08MwZOaGv6MmPP8CYtPijOz9O4= Subject key identifier: E0:9A:BB:4C:9B:24:7E:A9:3C:A1:13:AB:79:FC:5E:1C:2A:31:9F:DB Authority key identifier: 4C:D9:DE:37:2D:03:48:AC:33:B1:67:A5:D7:8E:30:13:FC:03:57:1F Certificate issuer: /CN=A91DCD09/serialNumber=4CD9DE372D0348AC33B167A5D78E3013FC03571F Certificate serial: 0291 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft Manifest number: 028C Signing time: Tue 02 Jun 2026 16:19:09 +0000 Manifest this update: Tue 02 Jun 2026 16:19:09 +0000 Manifest next update: Tue 09 Jun 2026 16:19:09 +0000 Files and hashes: 1: TNneNy0DSKwzsWel144wE_wDVx8.crl (hash: utkeiwjTt6qOpDwvPf+NvllON7dMzoxI3HovTzoC8bY=) 2: 5CAB3758374A11EFB612084EC4F9AE02.roa (hash: ueHqaGP9BcHIMZqPcQWizwyy9v5xkPDp7cUx2N9DhCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.crl rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Jun 2026 15:18:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 657 (0x291) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCD09, serialNumber=4CD9DE372D0348AC33B167A5D78E3013FC03571F Validity Not Before: Jun 2 16:19:09 2026 GMT Not After : Jun 9 16:19:09 2026 GMT Subject: CN=6a1f027d-4a6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4f:eb:7f:04:8e:b9:6c:3d:d9:08:09:27:fe: aa:0b:2e:8e:2f:79:80:b7:92:65:2f:a7:4d:41:16: db:d0:4a:8d:da:f3:44:e3:0f:36:15:1f:cd:b8:41: ba:aa:13:2a:79:76:9d:6c:6a:7b:4b:37:6c:9a:ed: d3:60:f3:1a:88:69:13:e4:17:f2:0e:4d:0c:c1:f4: 2f:05:00:24:f2:03:44:4d:d1:d8:fb:21:94:6c:8a: 7e:45:2c:7d:1e:9a:13:29:f9:9c:ef:63:6f:1d:78: b8:fe:02:49:e4:30:ca:cf:01:ea:a9:3c:cf:a2:06: ee:db:7a:de:cc:d4:58:2c:ae:99:62:27:29:72:64: 4b:f4:ba:f8:62:6e:58:f2:43:28:1c:b4:2a:1e:89: cd:c2:a1:aa:58:66:e7:33:e6:28:0a:a4:0b:8a:4c: 36:c5:a9:e4:a0:22:76:01:c8:34:a2:b8:cf:5f:9e: 49:b1:a3:1b:97:6f:3f:bd:50:6d:34:67:0d:ac:96: 1a:83:93:21:9b:e2:22:fc:98:6e:d3:eb:0f:cf:dc: 7c:87:9f:59:9e:3f:5b:2b:27:c8:f5:e1:0e:cc:39: 5c:e2:f8:42:cc:43:79:15:23:63:b5:eb:61:af:87: ff:ed:ec:99:3b:4a:c2:21:e0:5b:01:eb:3f:e8:d4: 50:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:9A:BB:4C:9B:24:7E:A9:3C:A1:13:AB:79:FC:5E:1C:2A:31:9F:DB X509v3 Authority Key Identifier: keyid:4C:D9:DE:37:2D:03:48:AC:33:B1:67:A5:D7:8E:30:13:FC:03:57:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:b0:84:83:6c:ef:d2:0e:7f:94:65:8f:b6:39:5e:87:76:d2: 5d:41:79:0a:17:b1:c3:86:9a:fb:0b:d2:ae:2b:25:ce:8d:7a: 7d:46:8d:5b:ce:ab:36:a8:1b:0c:e0:28:21:15:7d:d9:8d:4d: 49:72:d5:0b:47:40:c6:fe:ad:61:b1:9e:cf:4c:44:b0:c7:90: af:36:19:55:7d:2f:87:1c:c2:9a:1b:b7:4f:39:79:48:8c:49: 8d:31:9d:c8:bc:75:ef:b4:a8:8b:33:01:01:75:47:ae:7d:16: 61:74:0b:a3:2c:38:80:b7:7a:46:df:fe:5e:98:25:3d:96:19: bc:89:0a:b6:33:a9:36:ff:42:85:26:06:a8:d3:23:07:1b:cb: a8:fa:ea:1d:9f:f2:11:f3:7a:16:a9:af:02:f9:eb:d8:84:bb: 6f:35:c1:22:e3:69:c7:d1:4f:1e:78:bf:54:e0:6d:7d:26:79: 83:44:81:09:10:a0:7b:e6:59:6a:d2:94:6f:74:67:6b:88:02: 1f:4a:4f:04:f7:17:ef:52:a4:02:a4:a1:2a:81:68:ad:50:c3: 7e:ba:22:7b:3b:ff:7e:74:5c:0b:69:40:54:2f:6c:66:86:c0: 98:37:2a:ed:9e:fe:1f:d5:c0:05:1b:4a:32:aa:13:b7:03:60: 9a:43:81:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEMDkxMTAvBgNVBAUTKDRDRDlERTM3MkQwMzQ4QUMzM0IxNjdBNUQ3OEUzMDEz RkMwMzU3MUYwHhcNMjYwNjAyMTYxOTA5WhcNMjYwNjA5MTYxOTA5WjAYMRYwFAYD VQQDEw02YTFmMDI3ZC00YTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx0/rfwSOuWw92QgJJ/6qCy6OL3mAt5JlL6dNQRbb0EqN2vNE4w82FR/NuEG6 qhMqeXadbGp7Szdsmu3TYPMaiGkT5BfyDk0MwfQvBQAk8gNETdHY+yGUbIp+RSx9 HpoTKfmc72NvHXi4/gJJ5DDKzwHqqTzPogbu23rezNRYLK6ZYicpcmRL9Lr4Ym5Y 8kMoHLQqHonNwqGqWGbnM+YoCqQLikw2xankoCJ2Acg0orjPX55JsaMbl28/vVBt NGcNrJYag5Mhm+Ii/Jhu0+sPz9x8h59Znj9bKyfI9eEOzDlc4vhCzEN5FSNjteth r4f/7eyZO0rCIeBbAes/6NRQ4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOCau0yb JH6pPKETq3n8XhwqMZ/bMB8GA1UdIwQYMBaAFEzZ3jctA0isM7FnpdeOMBP8A1cf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0QwOS81NzhCMDZDQzg4 NjQxMUVEQkY5OTVGNDJDNEY5QUUwMi9UTm5lTnkwRFNLd3pzV2VsMTQ0d0Vfd0RW eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RObmVOeTBEU0t3enNXZWwxNDR3RV93RFZ4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0QwOS81NzhCMDZDQzg4NjQxMUVEQkY5OTVGNDJDNEY5QUUwMi9UTm5lTnkwRFNL d3pzV2VsMTQ0d0Vfd0RWeDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKrCEg2zv0g5/lGWPtjleh3bSXUF5Chexw4aa+wvSrislzo16fUaNW86rNqgb DOAoIRV92Y1NSXLVC0dAxv6tYbGez0xEsMeQrzYZVX0vhxzCmhu3Tzl5SIxJjTGd yLx177SoizMBAXVHrn0WYXQLoyw4gLd6Rt/+XpglPZYZvIkKtjOpNv9ChSYGqNMj BxvLqPrqHZ/yEfN6FqmvAvnr2IS7bzXBIuNpx9FPHni/VOBtfSZ5g0SBCRCge+ZZ atKUb3Rna4gCH0pPBPcX71KkAqShKoForVDDfroiezv/fnRcC2lAVC9sZobAmDcq 7Z7+H9XABRtKMqoTtwNgmkOBpg== -----END CERTIFICATE-----Generated at Tue Jun 2 21:24:08 2026 by rpki-client