$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft File: N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft (raw, json) Hash identifier: 0BDzzZ9IUkMXDO7/ulV1ss6ERid5sVbEi/I1qpenPhI= Subject key identifier: 43:80:C8:A3:93:58:A4:35:C9:2E:54:1A:30:98:5D:6A:29:A3:8A:C7 Authority key identifier: 37:97:43:71:4C:E0:12:23:0A:A9:78:BB:1A:A8:C7:90:E7:06:67:AB Certificate issuer: /CN=A91E3E33/serialNumber=379743714CE012230AA978BB1AA8C790E70667AB Certificate serial: 12E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft Manifest number: 12BB Signing time: Thu 18 Jun 2026 17:02:21 +0000 Manifest this update: Thu 18 Jun 2026 17:02:21 +0000 Manifest next update: Thu 25 Jun 2026 17:02:21 +0000 Files and hashes: 1: N5dDcUzgEiMKqXi7GqjHkOcGZ6s.crl (hash: bq+U9+Qu45eHXHOaHXPwsLFk0qCgj78vx6pWt3ioOU4=) 2: D0B8C09E1BBF11EAA64ECF70C4F9AE02.roa (hash: QNLelKdMSlDKmsbvqvRzrLkhu/2hfJJqmOa+I6J1bAk=) 3: 4551BE2CD19D11EAA120EE14C4F9AE02.roa (hash: yX0Uzg9eTPoxhzg9lrLk/1K20OmA34T+jetmGie5oOM=) 4: 29ED0D46839011EE946C5E63C4F9AE02.roa (hash: QiP/Tw9hklight716IQFhsBaTNPHXt42nLTbqUKFQ1w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.crl rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Jun 2026 17:02:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4836 (0x12e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3E33, serialNumber=379743714CE012230AA978BB1AA8C790E70667AB Validity Not Before: Jun 18 17:02:21 2026 GMT Not After : Jun 25 17:02:21 2026 GMT Subject: CN=6a34249d-9201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:36:df:ca:c4:cd:2b:b9:f8:08:88:01:dd:2b: a2:3e:0c:a4:5f:1e:51:15:e7:03:41:49:2b:da:17: a8:a9:15:51:c8:9a:c1:e7:38:65:02:c0:e7:fb:17: 10:4c:38:ca:2e:35:4f:ed:2b:b6:d7:23:c9:53:78: e7:34:52:ca:1f:2b:a5:47:9e:95:40:8e:6a:ca:b1: 31:3e:42:11:62:cc:c7:49:e7:71:72:91:0c:fa:3d: b5:09:d6:71:fc:1c:4f:c8:20:77:e5:92:01:4d:96: d9:81:af:51:59:89:5f:30:b8:ff:53:33:55:e7:08: 6e:e4:a8:71:bc:b8:34:a5:6f:aa:45:df:db:18:ef: 7d:f4:74:34:df:a0:c3:d6:85:22:c6:77:0f:9e:28: 80:e6:01:89:b3:55:aa:d5:b0:8e:b4:4c:1a:eb:8e: 81:b0:65:da:d1:ea:50:a7:6a:3d:41:66:5b:a1:44: 67:fc:10:60:ba:87:b1:e4:e6:bd:b2:66:e9:89:fa: 9a:3b:a1:8b:d1:4a:c1:56:5d:f5:21:a8:34:0f:08: 1f:e2:2f:a9:bf:e4:61:9b:3d:2b:55:8a:6f:19:1c: 2d:3d:eb:dc:b5:27:13:3a:fa:dc:5f:5a:98:41:09: 98:48:ae:11:26:03:a3:78:0b:aa:12:b4:4c:95:db: 21:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:80:C8:A3:93:58:A4:35:C9:2E:54:1A:30:98:5D:6A:29:A3:8A:C7 X509v3 Authority Key Identifier: keyid:37:97:43:71:4C:E0:12:23:0A:A9:78:BB:1A:A8:C7:90:E7:06:67:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:11:99:5c:04:0a:dd:6f:ba:1d:5d:16:3f:0d:87:7a:81:df: 96:51:8f:33:50:1b:a0:54:33:71:36:a6:e9:99:e5:a1:29:c4: 7f:0d:99:cd:bf:3b:35:64:2e:a4:db:b4:f6:1d:6c:8f:de:5f: 6f:92:bf:b0:c2:c8:eb:29:6a:76:a3:8b:65:fe:19:de:03:7a: 85:c1:cf:7f:21:0b:4c:e4:25:8b:a9:d6:31:8a:10:eb:94:4c: d1:28:75:14:47:d0:e5:13:5d:82:79:28:4f:7c:50:46:f4:51: 93:dd:ef:90:24:9b:0b:8d:50:bd:8f:a4:5d:db:55:17:bd:dc: 64:6a:c6:88:db:ea:46:ec:0e:72:04:c8:a0:5d:55:86:0b:04: 99:19:a6:db:5e:65:55:72:03:c9:d6:36:fa:f9:b9:13:a0:b8: 3d:ad:57:01:e7:60:d4:d5:f9:3c:55:8b:a1:e1:99:9f:4c:6d: d6:f3:85:14:86:0a:74:5a:00:c6:68:b3:a0:fd:68:e2:93:0a: 49:92:17:15:1e:da:25:71:17:c6:87:90:bf:12:2e:ba:a5:37: 39:85:07:9e:f9:7e:17:8a:0c:66:0a:8e:be:95:f4:5b:0b:07: 64:ec:2a:7f:74:68:7a:a9:ca:0b:64:4b:72:eb:d2:10:f7:8d: e5:72:86:2b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEuQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNFMzMxMTAvBgNVBAUTKDM3OTc0MzcxNENFMDEyMjMwQUE5NzhCQjFBQThDNzkw RTcwNjY3QUIwHhcNMjYwNjE4MTcwMjIxWhcNMjYwNjI1MTcwMjIxWjAYMRYwFAYD VQQDEw02YTM0MjQ5ZC05MjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0jbfysTNK7n4CIgB3SuiPgykXx5RFecDQUkr2heoqRVRyJrB5zhlAsDn+xcQ TDjKLjVP7Su21yPJU3jnNFLKHyulR56VQI5qyrExPkIRYszHSedxcpEM+j21CdZx /BxPyCB35ZIBTZbZga9RWYlfMLj/UzNV5whu5KhxvLg0pW+qRd/bGO999HQ036DD 1oUixncPniiA5gGJs1Wq1bCOtEwa646BsGXa0epQp2o9QWZboURn/BBguoex5Oa9 smbpifqaO6GL0UrBVl31Iag0Dwgf4i+pv+Rhmz0rVYpvGRwtPevctScTOvrcX1qY QQmYSK4RJgOjeAuqErRMldsh7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEOAyKOT WKQ1yS5UGjCYXWopo4rHMB8GA1UdIwQYMBaAFDeXQ3FM4BIjCql4uxqox5DnBmer MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0UzMy84NzdBNzlCNkU5 RDExMUU4QUM4OTI3NzBDNEY5QUUwMi9ONWREY1V6Z0VpTUtxWGk3R3FqSGtPY0da NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL041ZERjVXpnRWlNS3FYaTdHcWpIa09jR1o2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0UzMy84NzdBNzlCNkU5RDExMUU4QUM4OTI3NzBDNEY5QUUwMi9ONWREY1V6Z0Vp TUtxWGk3R3FqSGtPY0daNnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnRGZXAQK3W+6HV0WPw2HeoHfllGPM1AboFQzcTam6ZnloSnEfw2Zzb87NWQu pNu09h1sj95fb5K/sMLI6ylqdqOLZf4Z3gN6hcHPfyELTOQli6nWMYoQ65RM0Sh1 FEfQ5RNdgnkoT3xQRvRRk93vkCSbC41QvY+kXdtVF73cZGrGiNvqRuwOcgTIoF1V hgsEmRmm215lVXIDydY2+vm5E6C4Pa1XAedg1NX5PFWLoeGZn0xt1vOFFIYKdFoA xmizoP1o4pMKSZIXFR7aJXEXxoeQvxIuuqU3OYUHnvl+F4oMZgqOvpX0WwsHZOwq f3RoeqnKC2RLcuvSEPeN5XKGKw== -----END CERTIFICATE-----Generated at Sat Jun 20 08:26:07 2026 by rpki-client