$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/6ZqAcw0LqQUR27LRx_XdTaylJdo.mft File: 6ZqAcw0LqQUR27LRx_XdTaylJdo.mft (raw, json) Hash identifier: 5na10/e/gtVviEND7ktS8+5lxwm+iaJcvYYHGMEDpdk= Subject key identifier: 47:CB:3B:FD:ED:CA:A7:09:97:32:BA:21:7D:58:A0:FE:4E:29:EB:5B Authority key identifier: E9:9A:80:73:0D:0B:A9:05:11:DB:B2:D1:C7:F5:DD:4D:AC:A5:25:DA Certificate issuer: /CN=A91DD064/serialNumber=E99A80730D0BA90511DBB2D1C7F5DD4DACA525DA Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZqAcw0LqQUR27LRx_XdTaylJdo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/6ZqAcw0LqQUR27LRx_XdTaylJdo.mft Manifest number: 28 Signing time: Tue 19 May 2026 08:40:52 +0000 Manifest this update: Tue 19 May 2026 08:40:51 +0000 Manifest next update: Tue 26 May 2026 08:40:51 +0000 Files and hashes: 1: 6ZqAcw0LqQUR27LRx_XdTaylJdo.crl (hash: xqDRF5/70Q7Qa7md35X/ND3a4zzviQH5au7bpKrjp+w=) 2: C85C12E01D0011F1A9EEE03B033D8C67.roa (hash: fYSO4EkACFFF5hAoMPUl96CHjFMY11d2KjA4W0FFZmw=) 3: 3E9C9BD81D0011F1815CC9FC023D8C67.roa (hash: xxCP5LVeK0WM9e+xhYEwm/syG4ynEc+P05z25IyWt+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/6ZqAcw0LqQUR27LRx_XdTaylJdo.crl rsync://rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/6ZqAcw0LqQUR27LRx_XdTaylJdo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZqAcw0LqQUR27LRx_XdTaylJdo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 08:40:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD064, serialNumber=E99A80730D0BA90511DBB2D1C7F5DD4DACA525DA Validity Not Before: May 19 08:40:51 2026 GMT Not After : May 26 08:40:51 2026 GMT Subject: CN=6a0c2214-d599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fc:2c:a0:a7:0c:30:53:43:f2:d8:8e:5f:9f: c5:4c:d4:74:e7:7e:97:4c:d1:ed:af:ea:3e:cc:82: 60:8a:d6:a2:79:f4:4e:3e:fb:9e:ba:e0:5e:1c:ee: 91:c7:24:1c:10:98:35:f0:97:36:89:22:84:2e:66: 01:10:75:17:68:3c:da:8d:0e:ba:2b:59:d6:0e:7d: af:54:fd:ce:9e:13:14:32:47:3a:55:54:f3:e5:29: 59:29:83:9e:da:74:ea:cc:1e:ce:a8:3b:1b:2a:e2: e2:1f:91:f1:55:73:59:4b:c5:4f:c3:68:54:f5:d2: dd:f0:d2:84:a0:fb:a5:98:b4:51:95:b5:6b:22:9d: bb:1f:81:2b:0c:00:9a:0d:aa:e2:20:f5:50:8e:7b: 93:5d:3c:e0:2b:15:42:17:7f:2c:2e:2f:64:3f:b2: 73:e3:c0:03:ad:d3:d5:c6:e6:3b:08:05:fa:82:eb: eb:e2:1b:33:13:57:70:df:fd:41:7b:58:e5:58:e2: 65:1f:60:5f:ac:f3:30:8f:c9:4e:04:98:70:a9:3f: 59:27:f8:63:98:52:45:66:4e:30:b1:30:98:42:f6: 31:a5:b0:eb:e3:4d:c5:a8:06:ad:c2:a1:1c:ca:9e: c0:f8:99:26:ef:10:ab:03:eb:23:17:73:28:a4:10: d9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:CB:3B:FD:ED:CA:A7:09:97:32:BA:21:7D:58:A0:FE:4E:29:EB:5B X509v3 Authority Key Identifier: keyid:E9:9A:80:73:0D:0B:A9:05:11:DB:B2:D1:C7:F5:DD:4D:AC:A5:25:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/6ZqAcw0LqQUR27LRx_XdTaylJdo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZqAcw0LqQUR27LRx_XdTaylJdo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/6ZqAcw0LqQUR27LRx_XdTaylJdo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:1f:1c:88:cb:d0:b7:0f:33:99:6e:7c:b4:4b:b4:a6:87:4d: f2:7c:bc:9b:08:c9:71:55:db:56:b9:4f:46:ec:bc:bb:78:c3: e9:e3:fe:cb:90:60:57:83:dc:b5:3b:f9:68:ff:b5:0c:44:de: c9:c8:e5:29:c3:16:3c:ad:d6:c4:fa:f7:1a:7b:24:59:80:f4: 7d:4b:e9:67:41:2f:e1:9e:8e:47:cc:dc:5b:f5:38:cd:17:17: d4:28:51:af:a6:11:2a:f8:0e:7c:33:0c:d0:cd:d0:7f:94:fd: 50:e6:f2:43:7f:f7:70:7e:7f:3e:d6:77:75:f9:b0:9a:02:27: 33:75:d0:00:c4:79:c2:b5:a4:5d:9a:d7:cc:3a:25:e4:9d:55: 18:5c:e6:5c:f4:90:a2:f2:92:62:4e:3c:da:9b:e1:8f:9d:c0: c2:19:31:49:2d:6c:bf:72:1f:89:84:dc:ad:ac:0e:0d:c4:84: 34:94:5c:a8:cc:7f:2c:35:69:e1:f7:50:99:3f:7b:d0:6e:55: f3:bb:1a:b8:44:b7:77:21:f7:0c:cd:d1:c9:82:4b:1c:2e:aa: f9:b4:46:4c:1e:22:4a:9c:91:8c:77:7d:06:c9:44:fe:c6:cc: 37:60:a7:94:54:37:f9:ea:60:bb:8e:14:b5:24:2b:8f:51:89: 91:d4:4b:bb -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RDA2NDExMC8GA1UEBRMoRTk5QTgwNzMwRDBCQTkwNTExREJCMkQxQzdGNURENERB Q0E1MjVEQTAeFw0yNjA1MTkwODQwNTFaFw0yNjA1MjYwODQwNTFaMBgxFjAUBgNV BAMTDTZhMGMyMjE0LWQ1OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDA/CygpwwwU0Py2I5fn8VM1HTnfpdM0e2v6j7MgmCK1qJ59E4++5664F4c7pHH JBwQmDXwlzaJIoQuZgEQdRdoPNqNDrorWdYOfa9U/c6eExQyRzpVVPPlKVkpg57a dOrMHs6oOxsq4uIfkfFVc1lLxU/DaFT10t3w0oSg+6WYtFGVtWsinbsfgSsMAJoN quIg9VCOe5NdPOArFUIXfywuL2Q/snPjwAOt09XG5jsIBfqC6+viGzMTV3Df/UF7 WOVY4mUfYF+s8zCPyU4EmHCpP1kn+GOYUkVmTjCxMJhC9jGlsOvjTcWoBq3CoRzK nsD4mSbvEKsD6yMXcyikENm9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUR8s7/e3K pwmXMrohfVig/k4p61swHwYDVR0jBBgwFoAU6ZqAcw0LqQUR27LRx/XdTaylJdow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREMDY0L0QxMkIxQzc4MUNG RjExRjFBNjlFNTBGOTQxM0Q4QzY3LzZacUFjdzBMcVFVUjI3TFJ4X1hkVGF5bEpk by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNlpxQWN3MExxUVVSMjdMUnhfWGRUYXlsSmRvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE MDY0L0QxMkIxQzc4MUNGRjExRjFBNjlFNTBGOTQxM0Q4QzY3LzZacUFjdzBMcVFV UjI3TFJ4X1hkVGF5bEpkby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCHHxyIy9C3DzOZbny0S7Smh03yfLybCMlxVdtWuU9G7Ly7eMPp4/7LkGBXg9y1 O/lo/7UMRN7JyOUpwxY8rdbE+vcaeyRZgPR9S+lnQS/hno5HzNxb9TjNFxfUKFGv phEq+A58MwzQzdB/lP1Q5vJDf/dwfn8+1nd1+bCaAiczddAAxHnCtaRdmtfMOiXk nVUYXOZc9JCi8pJiTjzam+GPncDCGTFJLWy/ch+JhNytrA4NxIQ0lFyozH8sNWnh 91CZP3vQblXzuxq4RLd3IfcMzdHJgkscLqr5tEZMHiJKnJGMd30GyUT+xsw3YKeU VDf56mC7jhS1JCuPUYmR1Eu7 -----END CERTIFICATE-----Generated at Thu May 21 09:39:21 2026 by rpki-client