$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft File: MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft (raw, json) Hash identifier: WwKA6uYIMD0vcSU2vPCiM1CekmR3jEUJDY16Z4KOgoY= Subject key identifier: C1:37:1D:6B:8D:75:CD:D9:FF:79:19:90:90:28:F6:77:A5:D4:7F:06 Authority key identifier: 31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14 Certificate issuer: /CN=A91E3493/serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114 Certificate serial: A0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft Manifest number: 88 Signing time: Mon 01 Jun 2026 00:03:41 +0000 Manifest this update: Mon 01 Jun 2026 00:03:40 +0000 Manifest next update: Mon 08 Jun 2026 00:03:40 +0000 Files and hashes: 1: MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl (hash: bDTpbuqh8BqJYllEiSyanwZaE0ZIqUeOz2tO15Img+8=) 2: 48DA881CA5FF11F08004B67CC4F9AE02.roa (hash: vLVmclqSWSw9c6sWEF49QFNtj33DBN50eIGMmcN8s88=) 3: 485C422CA5FF11F08004B67CC4F9AE02.roa (hash: ES3xbmOIjTGPeT8IfY1TCtnhdjiNJx4hr7CiNHyRg0w=) 4: 3D85F9E653BB11F19AC0B954B9833773.roa (hash: kXyzSAEuWraJGLeRl8Ev4HWfqkONz/RaOPivNONbhAA=) 5: 474BBE8AA5FF11F08004B67CC4F9AE02.roa (hash: OAI+YN11U1PZfLdiNPQNMB7UXRmGheB6bQN72SIA05g=) 6: 4988E222A5FF11F08004B67CC4F9AE02.roa (hash: G9FNuAU8h0eYcNdJ/v+kuiqEGbw+uC7kAoaWzDV1Tvw=) 7: 47D5EEA2A5FF11F08004B67CC4F9AE02.roa (hash: dWHrgDdQ9oxBHH3ChoJxtFZzUQfQ+vX9Kd8hcoNAwZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 00:03:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3493, serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114 Validity Not Before: Jun 1 00:03:40 2026 GMT Not After : Jun 8 00:03:40 2026 GMT Subject: CN=6a1ccc5d-1785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:26:28:72:47:87:6f:62:f9:ff:cd:ec:19:7a: 49:b3:cb:96:3c:f6:e2:a4:f6:7d:56:e3:cb:d4:36: 2d:b1:a5:4e:a1:96:14:e6:f9:03:d2:60:ec:6a:e2: 86:63:f2:de:0c:24:65:99:b9:6d:c1:44:2d:3d:30: 36:79:cd:aa:ca:c6:1d:6a:d3:e0:4e:cb:e5:d2:10: c3:cc:7b:4a:3d:ce:06:0a:85:b7:27:f4:f5:44:1e: 86:36:dd:be:b1:73:0e:f7:aa:58:fe:33:f4:de:96: d3:de:dd:33:8c:20:5b:f8:b9:7c:8e:b9:cd:4a:2d: f8:ee:c7:a6:7f:81:a6:76:4b:2d:3d:d2:bd:6c:a2: 0c:d9:e7:52:ae:45:57:4d:dc:f0:a4:8f:8a:b3:a2: d6:78:a3:5b:8b:4d:f9:6c:ad:40:87:f5:a0:ce:d0: 79:ab:48:4f:f2:53:69:67:8c:7e:1e:94:f2:a7:b7: b7:54:93:c3:25:f2:44:ab:c6:73:57:1a:29:63:0e: 3c:ba:fa:aa:f5:09:f9:f6:87:05:d3:56:47:ea:b9: f7:27:0f:11:6f:84:58:b4:26:73:22:e3:c5:a6:2c: 25:91:fe:ba:2c:23:b6:50:fb:aa:92:ea:8f:44:84: a4:23:a7:48:57:b9:44:7b:1c:c9:da:95:ab:ce:1e: e7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:37:1D:6B:8D:75:CD:D9:FF:79:19:90:90:28:F6:77:A5:D4:7F:06 X509v3 Authority Key Identifier: keyid:31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:c3:68:1c:64:cb:59:7a:20:05:be:6a:5d:4f:ad:2a:42:96: d5:f9:34:bb:24:f9:b8:8e:86:de:10:1e:5f:a3:ae:02:a4:13: fc:68:fc:d4:ae:c3:d0:b5:e2:4e:dc:b6:b1:7f:43:33:bb:be: 97:7a:ef:43:40:11:1e:cc:7f:7a:ea:7e:1e:67:0e:fd:d0:96: 25:3b:f9:6b:55:62:75:de:bc:11:f5:4e:c3:ad:01:b6:a7:bc: bb:ad:67:ce:49:37:07:c9:f5:b3:b3:d2:51:19:dc:a1:f9:bd: d3:a3:23:c9:8e:96:3a:d9:e2:7e:de:0a:24:d3:35:9a:9f:d1: 46:86:c4:5e:13:05:ea:c6:df:8d:0d:50:d3:71:db:93:2a:ff: 7f:3c:63:80:2d:8c:77:a3:94:3f:18:05:bb:f2:15:55:91:79: 0d:41:75:1a:1a:5a:f5:b4:1c:a4:2c:b3:d9:08:16:82:c2:e9: 41:52:c0:f0:36:53:7d:14:05:4a:1a:bb:b7:da:dc:6f:a2:64: 02:b4:12:e8:8e:f8:54:11:83:f2:48:00:73:35:1a:09:86:40: 85:0c:ad:34:6f:0a:d4:d4:f4:f4:16:fd:3c:0b:be:fe:74:d5: 7d:23:8a:0f:1c:64:9a:5c:d1:7f:f3:45:be:dd:fa:5b:f8:4a: a0:c9:55:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM0OTMxMTAvBgNVBAUTKDMxMzExQ0ZDQzE0MDFCRDZEMEU2QjZCMzkxNjdCNjVD MjEwOTIxMTQwHhcNMjYwNjAxMDAwMzQwWhcNMjYwNjA4MDAwMzQwWjAYMRYwFAYD VQQDEw02YTFjY2M1ZC0xNzg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuiYockeHb2L5/83sGXpJs8uWPPbipPZ9VuPL1DYtsaVOoZYU5vkD0mDsauKG Y/LeDCRlmbltwUQtPTA2ec2qysYdatPgTsvl0hDDzHtKPc4GCoW3J/T1RB6GNt2+ sXMO96pY/jP03pbT3t0zjCBb+Ll8jrnNSi347semf4GmdkstPdK9bKIM2edSrkVX TdzwpI+Ks6LWeKNbi035bK1Ah/WgztB5q0hP8lNpZ4x+HpTyp7e3VJPDJfJEq8Zz VxopYw48uvqq9Qn59ocF01ZH6rn3Jw8Rb4RYtCZzIuPFpiwlkf66LCO2UPuqkuqP RISkI6dIV7lEexzJ2pWrzh7nkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFME3HWuN dc3Z/3kZkJAo9nel1H8GMB8GA1UdIwQYMBaAFDExHPzBQBvW0Oa2s5FntlwhCSEU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzQ5My9FNTJDMTRDMDlG RkExMUYwQkFENTBCNjFDNEY5QUUwMi9NVEVjX01GQUc5YlE1cmF6a1dlMlhDRUpJ UlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01URWNfTUZBRzliUTVyYXprV2UyWENFSklSUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzQ5My9FNTJDMTRDMDlGRkExMUYwQkFENTBCNjFDNEY5QUUwMi9NVEVjX01GQUc5 YlE1cmF6a1dlMlhDRUpJUlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARMNoHGTLWXogBb5qXU+tKkKW1fk0uyT5uI6G3hAeX6OuAqQT/Gj81K7D0LXi Tty2sX9DM7u+l3rvQ0ARHsx/eup+HmcO/dCWJTv5a1Vidd68EfVOw60Btqe8u61n zkk3B8n1s7PSURncofm906MjyY6WOtnift4KJNM1mp/RRobEXhMF6sbfjQ1Q03Hb kyr/fzxjgC2Md6OUPxgFu/IVVZF5DUF1Ghpa9bQcpCyz2QgWgsLpQVLA8DZTfRQF Shq7t9rcb6JkArQS6I74VBGD8kgAczUaCYZAhQytNG8K1NT09Bb9PAu+/nTVfSOK DxxkmlzRf/NFvt36W/hKoMlVvg== -----END CERTIFICATE-----Generated at Tue Jun 2 21:19:35 2026 by rpki-client