$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft File: d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft (raw, json) Hash identifier: cfTwZa2yubNGFk7sLwd6BtRaFbiw67+DYOOCwh2zhLg= Subject key identifier: 84:25:73:56:A8:E9:92:D7:13:0E:05:21:F4:A2:03:64:F9:52:1B:6E Authority key identifier: 77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92 Certificate issuer: /CN=A91DEB81/serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892 Certificate serial: 0538 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft Manifest number: 04F0 Signing time: Thu 04 Jun 2026 23:54:52 +0000 Manifest this update: Thu 04 Jun 2026 23:54:51 +0000 Manifest next update: Thu 11 Jun 2026 23:54:51 +0000 Files and hashes: 1: d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl (hash: ZQhqw3vpGFg9kK96dnyYyTmo2vgO7xRqlmE08awLjzs=) 2: E184C6F48F2C11EEA361B22FC4F9AE02.roa (hash: kXgZNQ9cWIHfXiEIAxnhKXY51BGRFvcRzJmJYDyHg78=) 3: E0C5B7148F2C11EEA361B22FC4F9AE02.roa (hash: a2Eak+r8Eojdu+clly0gi9Nawkq6TirHUh3AZGHAXRg=) 4: E84DD6FAC9C311F0ACE5A118C4F9AE02.roa (hash: u2rzRUism7xTPxp63V3W7DOQwUN/ky3ASLXGx242uU8=) 5: EEECC55A8C3611EFA07E612DC4F9AE02.roa (hash: D21a7LlMu8RnxWZ8YgRZ6sV/m0f2ZXrJTQlAZBy166E=) 6: 1FBEA1EEDE9711EC9289256FC4F9AE02.roa (hash: GS31bTdPfKVJ1J6UCJ9YLKFQUEEmZi77Y2aiEp3HKVY=) 7: 204E25DADE9711EC9289256FC4F9AE02.roa (hash: xijaZu6pAwwNLd6WONxWQ6mZqU3GdiHzZC1uaLYBENo=) 8: 216DB034DE9711EC9289256FC4F9AE02.roa (hash: w1LkgMGS8oqwPRuQKx3FjuBZt3rf+t0hZFmWkXtaaSY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 23:54:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1336 (0x538) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEB81, serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892 Validity Not Before: Jun 4 23:54:51 2026 GMT Not After : Jun 11 23:54:51 2026 GMT Subject: CN=6a22104c-fc9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:75:bd:e9:3b:df:80:68:6a:f9:66:42:5c:77: 46:90:80:63:67:d7:0c:07:39:ee:6c:47:8d:c5:b8: d7:b4:f6:7c:ea:9c:87:70:9b:58:52:34:0a:71:21: b3:e4:91:04:3a:e7:5f:22:d7:95:f2:cf:21:35:06: 38:a7:3d:cb:36:4f:c2:60:16:e3:5b:96:f1:0d:bc: 3c:e9:47:3d:a2:cb:d6:64:30:eb:6d:16:8d:13:da: 3c:8d:af:ec:50:90:a7:a7:2d:e4:8f:7f:e3:7a:bf: 2c:cb:38:76:44:4b:39:30:5e:8c:ea:c3:2f:fc:1c: 16:4c:41:37:36:2c:c1:ad:c8:27:66:59:13:18:0f: 78:4c:6d:e4:ed:46:88:f7:43:9b:97:78:dc:6f:f4: 70:a9:2f:ad:5b:a5:9f:12:df:f4:56:a9:66:8d:2d: 03:3f:0c:cf:4d:6f:54:6b:77:3a:a9:5b:3e:08:a1: db:31:06:fa:24:6e:57:4c:84:72:1a:27:bb:dc:1a: 3a:6b:19:fc:8b:ad:e0:a6:e8:d5:7f:6d:83:61:f6: 9d:b5:90:bb:00:a5:cc:a8:e0:2c:d3:31:6e:58:39: 42:d0:6a:13:5a:c8:3e:86:59:a3:35:6a:50:86:a1: a3:ac:8b:5f:56:2d:6a:a3:ed:cf:d8:6a:c7:7f:95: 1b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:25:73:56:A8:E9:92:D7:13:0E:05:21:F4:A2:03:64:F9:52:1B:6E X509v3 Authority Key Identifier: keyid:77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:e5:a4:ae:e6:04:d0:0e:65:8d:21:09:9b:d4:0b:85:bf:5f: 36:8d:56:2d:29:a4:85:a9:8f:b2:62:a3:d0:de:27:9a:73:27: 4e:a4:22:c5:ff:5b:ec:36:93:33:af:73:ca:e3:71:77:c2:e4: 61:94:10:58:d0:bb:4e:79:46:57:2f:95:aa:c0:33:b4:07:c9: 9d:ad:db:9d:d3:85:05:6e:27:b1:4c:7e:e2:34:90:f6:0e:bc: eb:3e:f6:cb:8c:29:8a:7d:5f:9a:40:f0:05:17:dd:24:24:88: 00:86:a8:88:bc:1a:5f:a2:d7:88:61:fc:c7:71:18:13:a8:d1: 8a:ca:76:7e:0d:cc:6f:42:53:41:2e:41:10:d6:c2:6a:29:2b: c5:c3:6c:87:d2:da:89:9a:67:68:c3:f8:01:f4:01:5c:1b:28: 3e:28:13:6b:7e:cc:d5:75:16:87:84:d4:b0:52:3c:6f:a3:cb: 83:bc:a0:91:9c:fb:63:8b:e6:0c:48:48:d9:c0:f5:fc:ca:20: 41:d4:c2:7e:1b:88:99:48:d5:b2:77:88:84:32:ad:c1:13:92: 69:76:8d:55:96:61:7f:34:fa:83:fb:6a:aa:df:4c:78:54:25: 4c:1f:6d:e1:0b:76:cb:d8:d1:41:7a:eb:00:20:dd:54:7b:59: cf:0e:cf:b5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBTgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVCODExMTAvBgNVBAUTKDc3NzY2MTJBNDNDMjJEMEE2NkI4RjEzNjgwQjMwNThC RUQ1RDk4OTIwHhcNMjYwNjA0MjM1NDUxWhcNMjYwNjExMjM1NDUxWjAYMRYwFAYD VQQDEw02YTIyMTA0Yy1mYzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjHW96TvfgGhq+WZCXHdGkIBjZ9cMBznubEeNxbjXtPZ86pyHcJtYUjQKcSGz 5JEEOudfIteV8s8hNQY4pz3LNk/CYBbjW5bxDbw86Uc9osvWZDDrbRaNE9o8ja/s UJCnpy3kj3/jer8syzh2REs5MF6M6sMv/BwWTEE3NizBrcgnZlkTGA94TG3k7UaI 90Obl3jcb/RwqS+tW6WfEt/0VqlmjS0DPwzPTW9Ua3c6qVs+CKHbMQb6JG5XTIRy Gie73Bo6axn8i63gpujVf22DYfadtZC7AKXMqOAs0zFuWDlC0GoTWsg+hlmjNWpQ hqGjrItfVi1qo+3P2GrHf5Ub8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIQlc1ao 6ZLXEw4FIfSiA2T5UhtuMB8GA1UdIwQYMBaAFHd2YSpDwi0KZrjxNoCzBYvtXZiS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUI4MS9DRjk2NjNDNjcw RjcxMUVDQjMxOEU0M0FDNEY5QUUwMi9kM1poS2tQQ0xRcG11UEUyZ0xNRmktMWRt SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QzWmhLa1BDTFFwbXVQRTJnTE1GaS0xZG1KSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUI4MS9DRjk2NjNDNjcwRjcxMUVDQjMxOEU0M0FDNEY5QUUwMi9kM1poS2tQQ0xR cG11UEUyZ0xNRmktMWRtSkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMeWkruYE0A5ljSEJm9QLhb9fNo1WLSmkhamPsmKj0N4nmnMnTqQixf9b7DaT M69zyuNxd8LkYZQQWNC7TnlGVy+VqsAztAfJna3bndOFBW4nsUx+4jSQ9g686z72 y4wpin1fmkDwBRfdJCSIAIaoiLwaX6LXiGH8x3EYE6jRisp2fg3Mb0JTQS5BENbC aikrxcNsh9LaiZpnaMP4AfQBXBsoPigTa37M1XUWh4TUsFI8b6PLg7ygkZz7Y4vm DEhI2cD1/MogQdTCfhuImUjVsneIhDKtwROSaXaNVZZhfzT6g/tqqt9MeFQlTB9t 4Qt2y9jRQXrrACDdVHtZzw7PtQ== -----END CERTIFICATE-----Generated at Sat Jun 6 06:59:27 2026 by rpki-client