$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF856/EFF2A0A01C4111F0A9821F3EC4F9AE02/X2mRhqLrzUWx_2oKSvYGBvOz0I0.mft File: X2mRhqLrzUWx_2oKSvYGBvOz0I0.mft (raw, json) Hash identifier: vx+dOttWTIO0A+dmtYrgSKGgSVeOzqAQ/6A46qS6LNk= Subject key identifier: 45:55:4B:82:40:69:E5:D0:D8:2B:B7:D8:BA:74:BB:30:01:6B:12:FF Authority key identifier: 5F:69:91:86:A2:EB:CD:45:B1:FF:6A:0A:4A:F6:06:06:F3:B3:D0:8D Certificate issuer: /CN=A91DF856/serialNumber=5F699186A2EBCD45B1FF6A0A4AF60606F3B3D08D Certificate serial: E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mRhqLrzUWx_2oKSvYGBvOz0I0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF856/EFF2A0A01C4111F0A9821F3EC4F9AE02/X2mRhqLrzUWx_2oKSvYGBvOz0I0.mft Manifest number: D9 Signing time: Fri 05 Jun 2026 07:02:43 +0000 Manifest this update: Fri 05 Jun 2026 07:02:42 +0000 Manifest next update: Fri 12 Jun 2026 07:02:42 +0000 Files and hashes: 1: X2mRhqLrzUWx_2oKSvYGBvOz0I0.crl (hash: o/MQ6OqXrRZ2Aaq7meilFY8aA8BLVOSgVtb8YG83gvM=) 2: D522C16CBAEB11F09547BA51C4F9AE02.roa (hash: RnihpSJKxhqk9WNkps/6xGJCCbveQoqTufTmq79Au24=) 3: B245BA601C4311F08254DE40C4F9AE02.roa (hash: lKCCxnQLqgGAAxb0II04awvwUyFApZ9TGbpShXSvZgw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF856/EFF2A0A01C4111F0A9821F3EC4F9AE02/X2mRhqLrzUWx_2oKSvYGBvOz0I0.crl rsync://rpki.apnic.net/member_repository/A91DF856/EFF2A0A01C4111F0A9821F3EC4F9AE02/X2mRhqLrzUWx_2oKSvYGBvOz0I0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mRhqLrzUWx_2oKSvYGBvOz0I0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 07:02:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 226 (0xe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF856, serialNumber=5F699186A2EBCD45B1FF6A0A4AF60606F3B3D08D Validity Not Before: Jun 5 07:02:42 2026 GMT Not After : Jun 12 07:02:42 2026 GMT Subject: CN=6a227493-1f4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:88:4d:e3:73:e5:4f:65:33:7a:57:bc:5a:0a: ff:a1:14:ea:4e:e0:40:93:7d:f5:ff:b3:ea:63:dc: 3c:cb:5c:4b:af:86:f9:d5:1d:f9:cb:78:97:6a:92: 06:dc:35:95:8f:87:80:46:48:d3:4c:3a:8f:b6:75: f2:2d:00:61:9a:96:7b:1e:0e:13:69:6f:52:c6:c6: 0f:e6:0f:ba:51:69:2e:a9:92:65:ac:86:5b:2a:65: a3:b5:b3:f6:55:5f:c8:7b:17:5b:7b:a4:0a:7b:45: 97:85:1a:51:3f:a9:ff:1f:b5:dd:8f:0e:93:6a:80: 04:86:e4:d4:ea:00:db:2a:8a:6e:e4:1b:98:52:fd: f8:a5:4d:96:ee:c0:cb:c0:11:8b:74:7f:8a:0d:93: 27:52:7c:7f:5f:ab:1f:f5:c1:41:53:e4:89:0f:9b: 38:36:b4:d3:5e:07:cb:19:c3:b0:9e:f4:6d:79:8c: 25:de:00:7f:cf:a6:67:86:6f:94:cd:c1:7b:85:5d: 70:d9:4a:5b:ac:dd:a9:ed:a8:ed:f5:19:c4:7d:c6: c8:9b:97:ce:17:ee:71:2a:f7:e6:f9:f9:db:8e:de: 46:16:05:dd:8d:b0:e1:2f:46:29:d4:a3:f2:56:68: 7e:88:16:4d:e3:87:61:1e:1c:88:25:60:6c:66:7e: b8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:55:4B:82:40:69:E5:D0:D8:2B:B7:D8:BA:74:BB:30:01:6B:12:FF X509v3 Authority Key Identifier: keyid:5F:69:91:86:A2:EB:CD:45:B1:FF:6A:0A:4A:F6:06:06:F3:B3:D0:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF856/EFF2A0A01C4111F0A9821F3EC4F9AE02/X2mRhqLrzUWx_2oKSvYGBvOz0I0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mRhqLrzUWx_2oKSvYGBvOz0I0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF856/EFF2A0A01C4111F0A9821F3EC4F9AE02/X2mRhqLrzUWx_2oKSvYGBvOz0I0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:40:f3:13:78:bb:47:68:6a:97:19:9a:ed:25:a1:d8:d3:f7: e6:6b:06:e4:a5:8d:3d:ad:3d:be:9a:b6:fc:1e:00:e9:c3:20: de:4c:e8:63:fe:04:07:39:a9:7a:3f:33:dd:6f:f0:ea:37:e0: 6f:15:e8:2f:bd:d4:e4:45:01:eb:e4:af:ad:b1:1a:df:5f:fc: 41:9f:51:c4:65:e6:81:c9:ab:31:52:a4:e1:95:d4:80:63:fb: 52:93:97:e0:32:bf:98:72:ca:de:d0:5c:a1:52:ea:fc:65:74: 0a:04:89:96:f8:b1:a8:12:5e:89:c6:87:3c:e0:1a:ef:2a:6c: 52:7d:4e:07:ff:07:e4:3b:d2:b8:df:f7:c9:44:e5:ec:3a:6c: db:06:5c:dd:a4:89:87:33:58:e3:fd:ff:d6:85:13:25:16:b3: fd:41:87:05:1b:4d:27:80:88:c7:a2:98:22:4a:5f:16:2c:a8: 22:c0:ec:05:a2:fc:b0:98:c5:d5:cf:a2:0b:9f:eb:60:fc:5c: ea:2e:a9:a1:27:11:09:54:d4:1a:3d:c4:d3:3c:e6:42:c7:b5: 32:d0:6b:ee:db:cc:21:2a:5d:69:96:6f:85:81:cc:d0:10:b1: e3:14:44:0b:e9:f3:10:05:4e:2b:6b:b2:1f:e8:77:bd:fd:f6: af:74:01:57 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY4NTYxMTAvBgNVBAUTKDVGNjk5MTg2QTJFQkNENDVCMUZGNkEwQTRBRjYwNjA2 RjNCM0QwOEQwHhcNMjYwNjA1MDcwMjQyWhcNMjYwNjEyMDcwMjQyWjAYMRYwFAYD VQQDEw02YTIyNzQ5My0xZjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArohN43PlT2Uzele8Wgr/oRTqTuBAk331/7PqY9w8y1xLr4b51R35y3iXapIG 3DWVj4eARkjTTDqPtnXyLQBhmpZ7Hg4TaW9SxsYP5g+6UWkuqZJlrIZbKmWjtbP2 VV/Iexdbe6QKe0WXhRpRP6n/H7Xdjw6TaoAEhuTU6gDbKopu5BuYUv34pU2W7sDL wBGLdH+KDZMnUnx/X6sf9cFBU+SJD5s4NrTTXgfLGcOwnvRteYwl3gB/z6Znhm+U zcF7hV1w2UpbrN2p7ajt9RnEfcbIm5fOF+5xKvfm+fnbjt5GFgXdjbDhL0Yp1KPy Vmh+iBZN44dhHhyIJWBsZn64yQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEVVS4JA aeXQ2Cu32Lp0uzABaxL/MB8GA1UdIwQYMBaAFF9pkYai681Fsf9qCkr2Bgbzs9CN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjg1Ni9FRkYyQTBBMDFD NDExMUYwQTk4MjFGM0VDNEY5QUUwMi9YMm1SaHFMcnpVV3hfMm9LU3ZZR0J2T3ow STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gybVJocUxyelVXeF8yb0tTdllHQnZPejBJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Rjg1Ni9FRkYyQTBBMDFDNDExMUYwQTk4MjFGM0VDNEY5QUUwMi9YMm1SaHFMcnpV V3hfMm9LU3ZZR0J2T3owSTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA0DzE3i7R2hqlxma7SWh2NP35msG5KWNPa09vpq2/B4A6cMg3kzoY/4EBzmp ej8z3W/w6jfgbxXoL73U5EUB6+SvrbEa31/8QZ9RxGXmgcmrMVKk4ZXUgGP7UpOX 4DK/mHLK3tBcoVLq/GV0CgSJlvixqBJeicaHPOAa7ypsUn1OB/8H5DvSuN/3yUTl 7Dps2wZc3aSJhzNY4/3/1oUTJRaz/UGHBRtNJ4CIx6KYIkpfFiyoIsDsBaL8sJjF 1c+iC5/rYPxc6i6poScRCVTUGj3E0zzmQse1MtBr7tvMISpdaZZvhYHM0BCx4xRE C+nzEAVOK2uyH+h3vf32r3QBVw== -----END CERTIFICATE-----Generated at Sat Jun 6 13:25:16 2026 by rpki-client