$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft File: fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft (raw, json) Hash identifier: 5ClYs/T0VA1PLl4PBkAVkYCPJ65VNJxBxl9c5+8uOg8= Subject key identifier: 84:5A:8A:E8:B8:FD:20:FD:75:72:2A:AB:74:51:EB:3D:6B:85:2A:7F Authority key identifier: 7C:D4:AE:E4:7C:B2:1D:AE:98:77:EF:F4:1F:04:BE:95:D9:73:68:6D Certificate issuer: /CN=A91DF26F/serialNumber=7CD4AEE47CB21DAE9877EFF41F04BE95D973686D Certificate serial: 3553 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft Manifest number: 354C Signing time: Tue 02 Jun 2026 14:39:28 +0000 Manifest this update: Tue 02 Jun 2026 14:39:27 +0000 Manifest next update: Tue 09 Jun 2026 14:39:27 +0000 Files and hashes: 1: fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl (hash: h7v1J7sUt+Qyubk1sc6WlSttymK/1L7qolBC3/q1xOE=) 2: 3AF0F3E028CB11F195C91CE1BF833773.roa (hash: HjtXlASFfUyesyuq12S6h4/nNp1al3EbTL9dYMiuAwA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Jun 2026 14:39:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13651 (0x3553) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF26F, serialNumber=7CD4AEE47CB21DAE9877EFF41F04BE95D973686D Validity Not Before: Jun 2 14:39:27 2026 GMT Not After : Jun 9 14:39:27 2026 GMT Subject: CN=6a1eeb20-2efe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:60:ca:52:13:4c:de:e7:12:4a:3d:04:3b:e6: e8:1d:5c:fb:a7:0c:51:dd:14:d1:98:51:3b:3a:ac: 58:22:67:bc:ed:f9:27:2b:23:2b:53:10:d3:69:a4: f0:ed:ab:e7:7e:2c:72:61:aa:f3:70:6f:0d:2f:de: 35:22:ed:fb:17:8b:18:0c:d1:4d:de:75:fe:67:7f: 0b:d3:28:be:d8:0f:61:d8:bd:a5:43:6c:fc:7e:72: 93:2b:9d:ee:84:ce:e0:8f:c3:18:dd:bb:6d:c6:84: 71:c8:15:da:13:05:3e:c5:50:a9:87:31:33:b8:ba: ee:50:b9:10:fd:85:e1:cf:f1:6c:15:fa:9b:1e:9e: f7:89:f6:22:63:f2:07:a2:0b:c2:cd:62:90:71:df: ac:c5:e4:94:79:f4:ff:35:8a:06:d0:8a:95:eb:bc: 81:ce:40:e9:7c:cf:29:2b:83:18:26:35:a4:24:64: ae:f4:2f:e7:d9:b1:fc:f3:58:5a:46:e9:44:a7:85: 68:be:30:ec:83:e8:b5:4d:88:42:82:50:0c:09:b5: b3:ac:4e:4e:f5:a3:14:e4:28:36:16:3c:b1:21:66: 65:36:d1:7b:8a:0f:5f:d3:0e:20:64:b0:4c:d8:d2: 11:60:81:b3:cf:41:ef:b5:78:f2:71:8c:5b:d7:8a: 4a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:5A:8A:E8:B8:FD:20:FD:75:72:2A:AB:74:51:EB:3D:6B:85:2A:7F X509v3 Authority Key Identifier: keyid:7C:D4:AE:E4:7C:B2:1D:AE:98:77:EF:F4:1F:04:BE:95:D9:73:68:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:69:c5:f7:a4:fa:ca:e0:41:d7:ec:b7:88:29:8f:74:d9:c5: e1:2a:88:87:cc:0c:06:5d:31:86:ea:e0:3f:c3:9a:23:29:d1: 24:c8:e1:34:54:ba:0c:47:b4:60:72:f0:23:fa:ed:12:96:7b: 93:53:f0:3f:dd:24:a0:5f:50:97:f8:73:43:c1:a3:e8:ca:b8: 99:d1:a9:d1:d4:63:c8:84:c4:da:2b:1e:6f:ca:bd:54:ac:03: ac:98:bc:f0:4f:12:84:9c:5f:d2:53:06:43:2a:63:0f:db:db: ba:5e:22:c3:27:7a:a4:6d:0a:d5:b2:ca:79:02:f1:1f:4a:3d: e6:63:8e:49:93:54:0f:b4:a7:24:c8:70:86:f7:f3:d7:f6:7b: 00:aa:3a:42:3c:69:67:da:56:3a:70:a8:c0:28:f7:88:5a:a8: a4:90:d2:0d:47:b0:5c:ca:c5:bc:b1:6e:1e:19:3c:11:7f:f1: 1f:dd:e6:dd:df:33:6c:cc:58:2a:4b:3d:24:2b:01:ff:31:f7: e2:5a:d7:e2:9f:3a:f7:e4:67:7c:5f:66:21:f6:a5:d3:68:d0: 4e:db:ca:a4:c7:61:e3:71:58:b2:ba:35:14:5c:04:37:3d:1c: 99:69:72:53:a6:00:c6:2d:12:17:6e:0c:62:73:b0:ff:7c:8b: cb:a5:33:d3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYyNkYxMTAvBgNVBAUTKDdDRDRBRUU0N0NCMjFEQUU5ODc3RUZGNDFGMDRCRTk1 RDk3MzY4NkQwHhcNMjYwNjAyMTQzOTI3WhcNMjYwNjA5MTQzOTI3WjAYMRYwFAYD VQQDEw02YTFlZWIyMC0yZWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu2DKUhNM3ucSSj0EO+boHVz7pwxR3RTRmFE7OqxYIme87fknKyMrUxDTaaTw 7avnfixyYarzcG8NL941Iu37F4sYDNFN3nX+Z38L0yi+2A9h2L2lQ2z8fnKTK53u hM7gj8MY3bttxoRxyBXaEwU+xVCphzEzuLruULkQ/YXhz/FsFfqbHp73ifYiY/IH ogvCzWKQcd+sxeSUefT/NYoG0IqV67yBzkDpfM8pK4MYJjWkJGSu9C/n2bH881ha RulEp4VovjDsg+i1TYhCglAMCbWzrE5O9aMU5Cg2FjyxIWZlNtF7ig9f0w4gZLBM 2NIRYIGzz0HvtXjycYxb14pKBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIRaiui4 /SD9dXIqq3RR6z1rhSp/MB8GA1UdIwQYMBaAFHzUruR8sh2umHfv9B8EvpXZc2ht MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjI2Ri84Nzk2ODQ5NjFE OEUxMUUyQjE1MUYwRUMwOEIwMkNEMi9mTlN1NUh5eUhhNllkLV8wSHdTLWxkbHph RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZOU3U1SHl5SGE2WWQtXzBId1MtbGRsemFHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjI2Ri84Nzk2ODQ5NjFEOEUxMUUyQjE1MUYwRUMwOEIwMkNEMi9mTlN1NUh5eUhh NllkLV8wSHdTLWxkbHphRzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACmnF96T6yuBB1+y3iCmPdNnF4SqIh8wMBl0xhurgP8OaIynRJMjhNFS6DEe0 YHLwI/rtEpZ7k1PwP90koF9Ql/hzQ8Gj6Mq4mdGp0dRjyITE2iseb8q9VKwDrJi8 8E8ShJxf0lMGQypjD9vbul4iwyd6pG0K1bLKeQLxH0o95mOOSZNUD7SnJMhwhvfz 1/Z7AKo6QjxpZ9pWOnCowCj3iFqopJDSDUewXMrFvLFuHhk8EX/xH93m3d8zbMxY Kks9JCsB/zH34lrX4p869+RnfF9mIfal02jQTtvKpMdh43FYsro1FFwENz0cmWly U6YAxi0SF24MYnOw/3yLy6Uz0w== -----END CERTIFICATE-----Generated at Tue Jun 2 22:09:27 2026 by rpki-client