$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.mft File: ibqQy31EKoOHxquTBzjKIA4Te60.mft (raw, json) Hash identifier: 4PPIqfU2N10MPLjYZl7TG29mA4NS74TkhTGzJqaCafU= Subject key identifier: 08:62:FF:05:C3:BB:0D:91:E0:95:AC:1B:78:29:8F:A7:BD:D5:D9:2B Authority key identifier: 89:BA:90:CB:7D:44:2A:83:87:C6:AB:93:07:38:CA:20:0E:13:7B:AD Certificate issuer: /CN=A91DD25E/serialNumber=89BA90CB7D442A8387C6AB930738CA200E137BAD Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ibqQy31EKoOHxquTBzjKIA4Te60.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.mft Manifest number: 7C Signing time: Mon 01 Jun 2026 08:27:16 +0000 Manifest this update: Mon 01 Jun 2026 08:27:16 +0000 Manifest next update: Mon 08 Jun 2026 08:27:16 +0000 Files and hashes: 1: ibqQy31EKoOHxquTBzjKIA4Te60.crl (hash: aav9ctgKRw2geDIgLq+gZcpHCtY4iYdQ/EF/CPQgMVM=) 2: 9CF6A89AA27B11F09D816A4BC4F9AE02.roa (hash: r2L+5zqyZ6IXeM2mIQAiI2PNwo+tejqOC0YJpkywEYs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.crl rsync://rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ibqQy31EKoOHxquTBzjKIA4Te60.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 08:27:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD25E, serialNumber=89BA90CB7D442A8387C6AB930738CA200E137BAD Validity Not Before: Jun 1 08:27:16 2026 GMT Not After : Jun 8 08:27:16 2026 GMT Subject: CN=6a1d4264-ee9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c5:91:1f:c3:69:fc:bd:c5:9c:19:1e:69:e0: 90:b7:91:b1:21:a9:0a:23:22:35:b8:38:75:47:d2: 95:fa:9d:a2:06:91:2a:1b:95:9e:21:40:db:6f:ca: fb:28:14:c0:dc:35:26:26:18:95:49:ad:6c:21:14: 19:5d:16:20:4e:5f:19:7c:11:d1:a7:74:0e:ad:a4: 0b:7c:b6:a6:40:c7:3c:d8:1a:9a:3b:73:e6:0a:3e: bc:4a:9c:9c:06:80:89:bd:37:16:d9:09:81:31:2d: 8e:3f:fe:33:26:8d:b6:d8:a5:41:5b:42:e6:a7:6b: 88:45:04:8e:df:fa:1d:98:1a:ae:49:32:c2:db:7c: 45:c8:48:64:a0:a8:ec:28:b4:a7:5e:52:de:a6:18: 22:cb:8c:a4:02:78:ff:56:8c:95:51:81:76:ff:09: 29:33:08:4b:ef:fe:65:e0:ab:b4:e2:7f:83:05:2c: e0:c6:60:97:88:1d:76:fd:f9:3e:e9:2b:a4:01:dc: 37:94:ec:85:7b:1f:2b:47:50:24:61:03:8d:1b:ac: 5d:a4:f9:5d:e3:9d:ef:e6:10:ce:4d:25:a4:99:1f: 4c:00:f6:d1:0c:c4:76:fb:11:cf:a7:f1:78:26:f8: 6f:ac:73:4b:cf:09:5f:36:d3:c8:68:7b:25:f6:b5: 1b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:62:FF:05:C3:BB:0D:91:E0:95:AC:1B:78:29:8F:A7:BD:D5:D9:2B X509v3 Authority Key Identifier: keyid:89:BA:90:CB:7D:44:2A:83:87:C6:AB:93:07:38:CA:20:0E:13:7B:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ibqQy31EKoOHxquTBzjKIA4Te60.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:d0:90:58:fe:5e:eb:67:97:f7:7f:39:2b:06:8f:7f:17:33: a6:e1:f6:08:25:5e:20:ac:74:e1:d9:df:13:6a:18:ef:dd:88: 7a:10:8e:c5:85:8d:cb:2f:44:30:d7:39:7e:02:62:af:fe:8f: a5:f4:63:de:c6:81:b9:b0:ab:6a:c0:0c:da:5c:44:3d:7d:b6: 28:75:fd:87:a8:25:5b:32:60:3a:0d:4d:4c:bb:e8:0b:99:28: e6:a8:40:55:40:a2:21:ca:a4:f7:88:ae:6a:69:6c:e0:fc:66: 40:f4:91:0c:42:f5:32:b0:2e:fe:d1:95:d4:68:51:a9:91:1e: e8:09:8e:26:17:f7:e7:e6:8b:e3:6c:91:5a:b3:82:40:72:d2: 3f:6c:90:6f:81:42:a6:87:99:f0:88:ed:d0:b2:7a:7f:67:82: 79:be:0b:7a:de:1e:16:29:dd:02:c1:51:2a:cf:03:e1:bc:2c: d6:38:18:be:c5:e6:84:b5:d6:79:70:16:b4:7e:e4:2f:8e:c7: aa:63:42:b4:1c:a5:e6:07:ee:49:4b:49:8c:49:de:9a:58:3e: 19:c1:b0:c8:77:53:21:78:0c:bc:92:40:8d:ff:7f:46:74:8a: 1c:a4:eb:65:e2:1f:3a:de:fc:16:70:22:8b:35:f9:5d:67:60: be:2a:cf:a7 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RDI1RTExMC8GA1UEBRMoODlCQTkwQ0I3RDQ0MkE4Mzg3QzZBQjkzMDczOENBMjAw RTEzN0JBRDAeFw0yNjA2MDEwODI3MTZaFw0yNjA2MDgwODI3MTZaMBgxFjAUBgNV BAMTDTZhMWQ0MjY0LWVlOWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCIxZEfw2n8vcWcGR5p4JC3kbEhqQojIjW4OHVH0pX6naIGkSoblZ4hQNtvyvso FMDcNSYmGJVJrWwhFBldFiBOXxl8EdGndA6tpAt8tqZAxzzYGpo7c+YKPrxKnJwG gIm9NxbZCYExLY4//jMmjbbYpUFbQuana4hFBI7f+h2YGq5JMsLbfEXISGSgqOwo tKdeUt6mGCLLjKQCeP9WjJVRgXb/CSkzCEvv/mXgq7Tif4MFLODGYJeIHXb9+T7p K6QB3DeU7IV7HytHUCRhA40brF2k+V3jne/mEM5NJaSZH0wA9tEMxHb7Ec+n8Xgm +G+sc0vPCV8208hoeyX2tRtnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUCGL/BcO7 DZHglawbeCmPp73V2SswHwYDVR0jBBgwFoAUibqQy31EKoOHxquTBzjKIA4Te60w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREMjVFLzM1NUJFQzg2QTI3 QjExRjA5ODBGRDA0QUM0RjlBRTAyL2licVF5MzFFS29PSHhxdVRCempLSUE0VGU2 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaWJxUXkzMUVLb09IeHF1VEJ6aktJQTRUZTYwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE MjVFLzM1NUJFQzg2QTI3QjExRjA5ODBGRDA0QUM0RjlBRTAyL2licVF5MzFFS29P SHhxdVRCempLSUE0VGU2MC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAq0JBY/l7rZ5f3fzkrBo9/FzOm4fYIJV4grHTh2d8Tahjv3Yh6EI7FhY3LL0Qw 1zl+AmKv/o+l9GPexoG5sKtqwAzaXEQ9fbYodf2HqCVbMmA6DU1Mu+gLmSjmqEBV QKIhyqT3iK5qaWzg/GZA9JEMQvUysC7+0ZXUaFGpkR7oCY4mF/fn5ovjbJFas4JA ctI/bJBvgUKmh5nwiO3Qsnp/Z4J5vgt63h4WKd0CwVEqzwPhvCzWOBi+xeaEtdZ5 cBa0fuQvjseqY0K0HKXmB+5JS0mMSd6aWD4ZwbDId1MheAy8kkCN/39GdIocpOtl 4h863vwWcCKLNfldZ2C+Ks+n -----END CERTIFICATE-----Generated at Tue Jun 2 21:19:33 2026 by rpki-client