$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft File: vDqLsM3Qi243IbLB0hqBcUw7IUI.mft (raw, json) Hash identifier: mIJjhNRmgrDxjsLrNSCcWIvuqLmfjdBiD/tkD0zobN4= Subject key identifier: CC:F8:03:1B:D7:31:45:1D:49:D9:D4:45:66:DC:57:A5:40:54:C0:85 Authority key identifier: BC:3A:8B:B0:CD:D0:8B:6E:37:21:B2:C1:D2:1A:81:71:4C:3B:21:42 Certificate issuer: /CN=A91E3731/serialNumber=BC3A8BB0CDD08B6E3721B2C1D21A81714C3B2142 Certificate serial: 043B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft Manifest number: 041A Signing time: Mon 01 Jun 2026 01:10:09 +0000 Manifest this update: Mon 01 Jun 2026 01:10:09 +0000 Manifest next update: Mon 08 Jun 2026 01:10:09 +0000 Files and hashes: 1: vDqLsM3Qi243IbLB0hqBcUw7IUI.crl (hash: tqcQRFLM9C2T5F9vIHp0S0DV89aZdb2eocNMmeA2apc=) 2: 2998A0E0F99011EF89B2363DC4F9AE02.roa (hash: jYyc5vfXgnps89Xpg6ne+7eG68kvvn+t/7XtsmJGJwU=) 3: B7E47C68C02511EC93BB8865C4F9AE02.roa (hash: pTwAFjG5O+8oihOllxyeWATo/u2uFYU+dPqDJne0mIY=) 4: 83CA50563C2311F0AEBA313AC4F9AE02.roa (hash: i7Zg6PXeqx5yta9f2QFLDzmys2SCsBMKZtuGdN5vZOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.crl rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 01:10:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1083 (0x43b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3731, serialNumber=BC3A8BB0CDD08B6E3721B2C1D21A81714C3B2142 Validity Not Before: Jun 1 01:10:09 2026 GMT Not After : Jun 8 01:10:09 2026 GMT Subject: CN=6a1cdbf1-3722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:2b:f4:8d:fc:86:ba:ae:97:92:c0:94:49:d5: c6:bd:3b:0b:55:12:18:14:65:6c:34:bc:57:ce:cf: 23:45:d9:f9:90:28:f8:ad:0a:1b:41:0f:3d:4b:57: ac:6c:7c:89:a5:cb:0a:d5:06:40:f9:9f:17:63:a8: 7a:10:c6:99:6f:0b:3b:e9:85:d0:8b:03:af:f9:2b: 4e:01:1b:0c:c1:8b:b0:5d:b3:42:c3:84:6e:b6:ee: bb:32:5f:16:43:5e:c3:ac:c6:27:22:30:5f:1c:e3: 69:57:93:c9:5c:f3:4b:0e:f3:79:d2:e4:72:d5:45: e6:02:e2:34:9b:7a:b4:94:d1:62:67:f2:25:84:6e: 0b:f7:cd:03:c1:ed:70:7e:53:51:0b:d4:bf:ff:c0: 86:0a:68:41:73:6f:53:4b:f3:0f:d5:f7:68:01:f3: 46:9c:16:40:af:9e:06:1f:9d:15:f3:bd:bf:91:85: 63:f3:5e:ed:30:ca:6d:59:54:50:f2:f7:7b:ca:b6: ff:5f:0d:11:eb:a6:cc:0a:5c:63:92:f7:3e:b8:a3: 73:10:3c:51:fb:e1:38:41:f8:77:24:7c:72:2e:c7: 5e:96:f2:2e:39:4b:ad:96:b9:42:62:38:76:62:e5: e9:07:0a:77:9b:49:f1:cf:fa:a9:6c:ec:65:4d:9d: 65:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:F8:03:1B:D7:31:45:1D:49:D9:D4:45:66:DC:57:A5:40:54:C0:85 X509v3 Authority Key Identifier: keyid:BC:3A:8B:B0:CD:D0:8B:6E:37:21:B2:C1:D2:1A:81:71:4C:3B:21:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:e2:42:6d:a2:55:86:a9:08:2e:07:61:f3:48:f3:b7:6d:db: ae:22:d8:43:c7:a9:56:52:38:b2:92:59:fc:48:59:1a:33:5e: 9d:19:08:bf:56:3d:9d:8f:16:54:f1:12:68:72:10:6b:e5:1e: cd:0f:8f:7b:12:03:35:b6:bb:72:89:74:d7:5f:57:9a:3e:d1: 6b:c4:66:f5:e5:a3:2b:92:ff:bf:8b:30:e3:1f:a8:81:98:79: 55:ad:3f:17:0f:98:c8:ce:ee:ed:5d:e8:f5:c2:9d:32:b0:fd: cb:ed:9d:ab:cb:a4:72:b5:32:1e:ac:35:b7:8e:51:1d:ea:87: 34:1d:33:1d:32:87:57:c6:e8:05:4a:8b:5f:5e:74:9f:49:c5: 98:de:14:9d:ef:6e:b7:99:90:81:3b:45:4f:3e:ad:9b:ba:75: 76:6e:72:f6:fd:b1:ae:08:36:46:81:88:0d:a7:0e:70:95:51: 97:21:80:2d:cb:14:c8:db:e0:e0:72:9e:b5:17:8f:e1:42:77: 82:80:95:dc:2d:18:69:39:e1:8c:7f:c9:f7:f4:d2:cf:07:dc: 7f:26:3e:2a:d0:2b:cf:31:8d:ad:3f:a1:34:3b:09:53:99:13: c4:98:ab:e9:e6:e7:f9:a2:f1:bc:17:51:8c:d6:94:ff:4b:b4: 0e:07:6f:7b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM3MzExMTAvBgNVBAUTKEJDM0E4QkIwQ0REMDhCNkUzNzIxQjJDMUQyMUE4MTcx NEMzQjIxNDIwHhcNMjYwNjAxMDExMDA5WhcNMjYwNjA4MDExMDA5WjAYMRYwFAYD VQQDEw02YTFjZGJmMS0zNzIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkyv0jfyGuq6XksCUSdXGvTsLVRIYFGVsNLxXzs8jRdn5kCj4rQobQQ89S1es bHyJpcsK1QZA+Z8XY6h6EMaZbws76YXQiwOv+StOARsMwYuwXbNCw4Rutu67Ml8W Q17DrMYnIjBfHONpV5PJXPNLDvN50uRy1UXmAuI0m3q0lNFiZ/IlhG4L980Dwe1w flNRC9S//8CGCmhBc29TS/MP1fdoAfNGnBZAr54GH50V872/kYVj817tMMptWVRQ 8vd7yrb/Xw0R66bMClxjkvc+uKNzEDxR++E4Qfh3JHxyLsdelvIuOUutlrlCYjh2 YuXpBwp3m0nxz/qpbOxlTZ1llQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMz4AxvX MUUdSdnURWbcV6VAVMCFMB8GA1UdIwQYMBaAFLw6i7DN0ItuNyGywdIagXFMOyFC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzczMS81NUIyMjNFQUMw MjIxMUVDOTI2NURBNURDNEY5QUUwMi92RHFMc00zUWkyNDNJYkxCMGhxQmNVdzdJ VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZEcUxzTTNRaTI0M0liTEIwaHFCY1V3N0lVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzczMS81NUIyMjNFQUMwMjIxMUVDOTI2NURBNURDNEY5QUUwMi92RHFMc00zUWky NDNJYkxCMGhxQmNVdzdJVUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHeJCbaJVhqkILgdh80jzt23briLYQ8epVlI4spJZ/EhZGjNenRkIv1Y9nY8W VPESaHIQa+UezQ+PexIDNba7col0119Xmj7Ra8Rm9eWjK5L/v4sw4x+ogZh5Va0/ Fw+YyM7u7V3o9cKdMrD9y+2dq8ukcrUyHqw1t45RHeqHNB0zHTKHV8boBUqLX150 n0nFmN4Une9ut5mQgTtFTz6tm7p1dm5y9v2xrgg2RoGIDacOcJVRlyGALcsUyNvg 4HKetReP4UJ3goCV3C0YaTnhjH/J9/TSzwfcfyY+KtArzzGNrT+hNDsJU5kTxJir 6ebn+aLxvBdRjNaU/0u0Dgdvew== -----END CERTIFICATE-----Generated at Tue Jun 2 21:55:03 2026 by rpki-client