$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft File: CZyBX8poKm4oYE_pYv0QcVgn6V0.mft (raw, json) Hash identifier: U9ZQfqTTQEcasqaQXYmr8GXnxaFR1sAV5qqEBh8kH8E= Subject key identifier: EA:52:9C:A2:B0:2A:8C:F8:38:CD:A3:10:5E:15:D0:45:08:51:D5:D5 Authority key identifier: 09:9C:81:5F:CA:68:2A:6E:28:60:4F:E9:62:FD:10:71:58:27:E9:5D Certificate issuer: /CN=A91DEB2E/serialNumber=099C815FCA682A6E28604FE962FD10715827E95D Certificate serial: 0290 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft Manifest number: 0287 Signing time: Thu 11 Jun 2026 04:00:35 +0000 Manifest this update: Thu 11 Jun 2026 04:00:34 +0000 Manifest next update: Thu 18 Jun 2026 04:00:34 +0000 Files and hashes: 1: CZyBX8poKm4oYE_pYv0QcVgn6V0.crl (hash: Nt2udPukqTUFRTSNgchAOLa8g7cetBuEHEYOxz6ims8=) 2: 3CB103648C2511EDB64DB410C4F9AE02.roa (hash: iZ4HCtJL7rID/wZnZvAzs70hw+YNw3/gczs7CGb7Bb8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.crl rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 04:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 656 (0x290) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEB2E, serialNumber=099C815FCA682A6E28604FE962FD10715827E95D Validity Not Before: Jun 11 04:00:34 2026 GMT Not After : Jun 18 04:00:34 2026 GMT Subject: CN=6a2a32e3-8c1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b8:38:c7:9e:76:8d:8f:c0:fc:fe:31:b0:91: bb:dc:f2:ba:9f:c8:fa:bc:c4:80:06:a7:33:97:97: a8:23:db:8f:1c:89:49:7f:aa:88:07:fd:75:67:6f: 9f:a9:97:65:98:3e:1a:e2:aa:f7:e5:17:b6:e3:29: 8b:14:30:8d:47:c9:b2:f4:c3:89:df:00:af:ed:02: 24:3a:1d:63:17:28:7c:74:94:7e:ee:93:c9:27:4b: 0c:3e:ca:8e:17:4f:21:5b:53:fb:37:53:23:86:e0: 3e:a1:e3:e4:5b:d1:e3:bb:65:4e:71:0e:3e:74:6d: 52:72:64:e8:80:b2:7c:87:df:2f:33:91:54:e6:bf: 21:3e:72:ea:b3:a4:e6:c1:bb:69:e8:50:e7:b8:3b: c6:bf:1f:fd:1c:ee:1e:10:be:1c:f0:ea:bb:4b:1c: e8:fa:39:9e:3f:1c:7f:59:cc:e5:ed:d0:52:2e:51: a9:99:2a:e8:a8:33:66:8b:b1:69:c2:e6:8c:22:0a: 8e:4b:e6:d6:bd:7a:26:28:f8:fb:ee:fd:26:57:f2: 4b:4a:91:69:77:d0:ea:53:53:d0:de:19:4a:15:92: 39:f2:dd:a1:04:65:97:1a:5c:87:fa:1e:f5:d0:98: c8:8c:4b:d0:92:c3:44:69:29:a1:1e:a8:c0:b5:ca: 88:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:52:9C:A2:B0:2A:8C:F8:38:CD:A3:10:5E:15:D0:45:08:51:D5:D5 X509v3 Authority Key Identifier: keyid:09:9C:81:5F:CA:68:2A:6E:28:60:4F:E9:62:FD:10:71:58:27:E9:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:ae:0d:2c:69:c7:48:3e:56:91:f4:33:2c:7f:c0:28:39:42: f8:0b:aa:a4:1d:69:43:aa:08:b6:cc:ee:5e:5f:ba:47:96:95: 19:8e:a1:ea:4c:96:34:4f:d7:64:5a:45:d5:61:76:ab:5e:91: 05:4b:4b:82:6d:8b:30:c3:3b:ef:bd:6f:21:9f:44:e1:cb:93: fa:3d:e2:83:68:d9:11:34:63:ce:b6:30:74:06:ba:a4:0b:25: b0:2b:4b:d2:a2:ed:77:fd:e2:51:4b:05:a0:db:2f:3f:d5:84: 1b:73:e7:62:a6:7c:53:3d:cc:4d:2d:85:e3:f8:c3:3d:77:74: 8e:7e:75:d4:fd:e4:0f:d1:aa:48:9a:59:51:c5:e1:95:21:ad: ac:2a:b7:2e:b4:7c:dc:51:32:de:04:4f:4a:95:1f:96:07:d8: 7f:19:59:0a:46:5f:4b:30:c8:de:e4:a2:2d:a8:b2:df:21:c5: ef:fd:df:92:6b:01:52:12:db:34:0b:58:75:63:89:e0:7c:37: 80:0f:09:45:2f:5e:ff:e1:02:1b:50:b0:dc:d6:59:fe:04:93: 58:0d:05:4c:82:3b:bb:d5:49:ec:4e:65:8f:30:a9:f1:ab:19: 8f:81:05:ce:f2:45:6c:89:03:d5:18:be:3d:fe:72:85:af:ae: 78:51:b2:b9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVCMkUxMTAvBgNVBAUTKDA5OUM4MTVGQ0E2ODJBNkUyODYwNEZFOTYyRkQxMDcx NTgyN0U5NUQwHhcNMjYwNjExMDQwMDM0WhcNMjYwNjE4MDQwMDM0WjAYMRYwFAYD VQQDEw02YTJhMzJlMy04YzFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnbg4x552jY/A/P4xsJG73PK6n8j6vMSABqczl5eoI9uPHIlJf6qIB/11Z2+f qZdlmD4a4qr35Re24ymLFDCNR8my9MOJ3wCv7QIkOh1jFyh8dJR+7pPJJ0sMPsqO F08hW1P7N1MjhuA+oePkW9Hju2VOcQ4+dG1ScmTogLJ8h98vM5FU5r8hPnLqs6Tm wbtp6FDnuDvGvx/9HO4eEL4c8Oq7Sxzo+jmePxx/Wczl7dBSLlGpmSroqDNmi7Fp wuaMIgqOS+bWvXomKPj77v0mV/JLSpFpd9DqU1PQ3hlKFZI58t2hBGWXGlyH+h71 0JjIjEvQksNEaSmhHqjAtcqI1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOpSnKKw Koz4OM2jEF4V0EUIUdXVMB8GA1UdIwQYMBaAFAmcgV/KaCpuKGBP6WL9EHFYJ+ld MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUIyRS82RkM4QkZERThD MjExMUVEQjJCMkYzMEFDNEY5QUUwMi9DWnlCWDhwb0ttNG9ZRV9wWXYwUWNWZ242 VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NaeUJYOHBvS200b1lFX3BZdjBRY1ZnbjZWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUIyRS82RkM4QkZERThDMjExMUVEQjJCMkYzMEFDNEY5QUUwMi9DWnlCWDhwb0tt NG9ZRV9wWXYwUWNWZ242VjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm64NLGnHSD5WkfQzLH/AKDlC+AuqpB1pQ6oItszuXl+6R5aVGY6h6kyWNE/X ZFpF1WF2q16RBUtLgm2LMMM7771vIZ9E4cuT+j3ig2jZETRjzrYwdAa6pAslsCtL 0qLtd/3iUUsFoNsvP9WEG3PnYqZ8Uz3MTS2F4/jDPXd0jn511P3kD9GqSJpZUcXh lSGtrCq3LrR83FEy3gRPSpUflgfYfxlZCkZfSzDI3uSiLaiy3yHF7/3fkmsBUhLb NAtYdWOJ4Hw3gA8JRS9e/+ECG1Cw3NZZ/gSTWA0FTII7u9VJ7E5ljzCp8asZj4EF zvJFbIkD1Ri+Pf5yha+ueFGyuQ== -----END CERTIFICATE-----Generated at Fri Jun 12 15:54:14 2026 by rpki-client