$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.mft File: MW2JZH8NDLBrNzIHikIwrxFWUzQ.mft (raw, json) Hash identifier: 2vclxUVLv42/1Jb/kQGZnWRwWugM3jjBJvI+rj9K8Jg= Subject key identifier: 38:E8:8A:4E:D9:AA:6E:1A:F6:9B:16:1A:EF:7D:83:7F:9F:53:32:00 Authority key identifier: 31:6D:89:64:7F:0D:0C:B0:6B:37:32:07:8A:42:30:AF:11:56:53:34 Certificate issuer: /CN=A91E3441/serialNumber=316D89647F0D0CB06B3732078A4230AF11565334 Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MW2JZH8NDLBrNzIHikIwrxFWUzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.mft Manifest number: 4C Signing time: Mon 01 Jun 2026 09:07:00 +0000 Manifest this update: Mon 01 Jun 2026 09:06:59 +0000 Manifest next update: Mon 08 Jun 2026 09:06:59 +0000 Files and hashes: 1: MW2JZH8NDLBrNzIHikIwrxFWUzQ.crl (hash: Am8f9iOYlrTpLf5UdivreRjlRNPbML/RfBOpuPk+A5I=) 2: 3954E33CEE9E11F0B32FB2E5666F56BC.roa (hash: 91UfSDMa7uQJKbxkjWHGuOg640JuLtPHQKq29mthHYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.crl rsync://rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MW2JZH8NDLBrNzIHikIwrxFWUzQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 09:06:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3441, serialNumber=316D89647F0D0CB06B3732078A4230AF11565334 Validity Not Before: Jun 1 09:06:59 2026 GMT Not After : Jun 8 09:06:59 2026 GMT Subject: CN=6a1d4bb3-bda2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8c:ae:43:17:e9:7f:6a:46:a8:f7:f6:42:49: 34:dd:35:6d:83:94:94:3f:7c:b4:cb:30:e8:a6:2b: 52:d6:08:d5:90:b0:e2:f3:3e:a6:6b:7f:65:71:64: d7:61:07:dd:bf:d6:fa:a4:3d:b9:72:a1:6a:48:4e: 26:08:da:0e:40:81:5f:a6:d9:40:6c:7b:ee:82:bd: 37:fc:b1:2d:04:11:2c:a2:3e:2d:04:c7:80:9d:c1: 4d:dc:81:3e:d4:c4:b8:79:23:a6:e3:ab:5d:af:b1: e5:94:96:53:c1:9b:3d:a4:92:c3:01:c5:b3:aa:c0: 96:70:67:2b:c2:c1:c5:a1:07:6a:46:b9:1f:80:07: 94:65:a0:74:d2:d7:a3:0b:78:35:aa:9b:0f:3c:d7: 90:7e:1d:79:09:20:c1:7b:24:40:dd:31:a0:d0:86: 9c:bb:fa:84:35:1f:3e:82:d7:3c:9b:2d:8d:b8:7e: 8d:7a:dc:08:19:e9:17:15:77:8f:68:d9:bd:a9:e2: 08:a1:06:96:c0:7e:4d:00:d6:88:c5:c5:7b:c5:7a: 07:f6:64:36:40:26:89:ba:06:c7:75:37:dc:eb:eb: 2a:f6:eb:21:83:60:bd:1d:86:09:ca:c5:e3:5c:d3: 55:93:83:81:96:d9:20:f7:4e:14:25:02:a0:69:14: 7d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E8:8A:4E:D9:AA:6E:1A:F6:9B:16:1A:EF:7D:83:7F:9F:53:32:00 X509v3 Authority Key Identifier: keyid:31:6D:89:64:7F:0D:0C:B0:6B:37:32:07:8A:42:30:AF:11:56:53:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MW2JZH8NDLBrNzIHikIwrxFWUzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:3c:08:99:07:65:5a:e8:7b:28:ac:09:fe:f8:e7:ac:3b:b9: bb:c1:b4:bf:97:42:89:d3:d0:ba:7e:c5:41:b9:8d:86:9b:5a: a5:9f:76:69:cc:b3:62:2a:fa:42:c5:35:f9:fa:c6:d8:1d:2e: ec:52:47:ed:6f:02:79:2a:a2:71:60:c5:d5:a6:e9:25:55:51: 64:a6:6f:41:4c:c3:6e:17:30:80:28:3b:3f:b7:38:28:9f:3e: 3b:c0:ab:75:a8:50:ab:d2:7e:44:65:d0:29:fc:6b:7f:23:79: 3c:46:0a:96:e4:1c:b9:5c:24:9c:45:11:53:3a:14:95:47:f3: b1:15:ef:c4:29:e9:80:f5:bf:6c:bb:dc:20:47:bc:ec:ae:fd: 1f:df:97:04:0a:b8:76:fa:a4:6c:79:b3:d6:5f:5d:4a:b2:00: e8:e6:1f:ac:88:f7:2a:65:cb:bd:59:b1:f4:96:02:3c:9a:c7: b9:7a:d4:e9:67:f0:c4:ba:3f:87:ca:7a:06:55:3c:f1:48:55: f1:91:58:dc:72:8e:c2:27:a7:c0:ad:37:a8:11:f5:f7:f7:7b: ba:f4:48:8d:73:23:1d:84:06:ad:9e:3b:45:ab:c4:29:cf:0a: 38:2b:91:70:22:11:16:f7:0c:f8:6b:45:83:e7:1f:8f:19:44: c1:fc:af:7a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MzQ0MTExMC8GA1UEBRMoMzE2RDg5NjQ3RjBEMENCMDZCMzczMjA3OEE0MjMwQUYx MTU2NTMzNDAeFw0yNjA2MDEwOTA2NTlaFw0yNjA2MDgwOTA2NTlaMBgxFjAUBgNV BAMTDTZhMWQ0YmIzLWJkYTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3jK5DF+l/akao9/ZCSTTdNW2DlJQ/fLTLMOimK1LWCNWQsOLzPqZrf2VxZNdh B92/1vqkPblyoWpITiYI2g5AgV+m2UBse+6CvTf8sS0EESyiPi0Ex4CdwU3cgT7U xLh5I6bjq12vseWUllPBmz2kksMBxbOqwJZwZyvCwcWhB2pGuR+AB5RloHTS16ML eDWqmw8815B+HXkJIMF7JEDdMaDQhpy7+oQ1Hz6C1zybLY24fo163AgZ6RcVd49o 2b2p4gihBpbAfk0A1ojFxXvFegf2ZDZAJom6Bsd1N9zr6yr26yGDYL0dhgnKxeNc 01WTg4GW2SD3ThQlAqBpFH2FAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUOOiKTtmq bhr2mxYa732Df59TMgAwHwYDVR0jBBgwFoAUMW2JZH8NDLBrNzIHikIwrxFWUzQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzNDQxL0UwODFBNjBBRUU5 RDExRjBBQ0UyNUM5RDY2NkY1NkJDL01XMkpaSDhORExCck56SUhpa0l3cnhGV1V6 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTVcySlpIOE5ETEJyTnpJSGlrSXdyeEZXVXpRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUz NDQxL0UwODFBNjBBRUU5RDExRjBBQ0UyNUM5RDY2NkY1NkJDL01XMkpaSDhORExC ck56SUhpa0l3cnhGV1V6US5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAWPAiZB2Va6HsorAn++OesO7m7wbS/l0KJ09C6fsVBuY2Gm1qln3ZpzLNiKvpC xTX5+sbYHS7sUkftbwJ5KqJxYMXVpuklVVFkpm9BTMNuFzCAKDs/tzgonz47wKt1 qFCr0n5EZdAp/Gt/I3k8RgqW5By5XCScRRFTOhSVR/OxFe/EKemA9b9su9wgR7zs rv0f35cECrh2+qRsebPWX11KsgDo5h+siPcqZcu9WbH0lgI8mse5etTpZ/DEuj+H ynoGVTzxSFXxkVjcco7CJ6fArTeoEfX393u69EiNcyMdhAatnjtFq8Qpzwo4K5Fw IhEW9wz4a0WD5x+PGUTB/K96 -----END CERTIFICATE-----Generated at Tue Jun 2 21:44:55 2026 by rpki-client