$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.mft File: 5xqfIU6Aybw7LSOf-LmqtxP27bc.mft (raw, json) Hash identifier: PZhR5cT0yB+SHOSr8Nfmgb+RbyxJJlprRSRiPjJOcSE= Subject key identifier: 1D:B9:98:1C:D0:20:1D:C3:09:0C:90:1F:E8:2D:80:B4:93:5D:53:3A Authority key identifier: E7:1A:9F:21:4E:80:C9:BC:3B:2D:23:9F:F8:B9:AA:B7:13:F6:ED:B7 Certificate issuer: /CN=A91E8525/serialNumber=E71A9F214E80C9BC3B2D239FF8B9AAB713F6EDB7 Certificate serial: 1AA5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xqfIU6Aybw7LSOf-LmqtxP27bc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.mft Manifest number: 1A8E Signing time: Mon 22 Jun 2026 16:18:26 +0000 Manifest this update: Mon 22 Jun 2026 16:18:25 +0000 Manifest next update: Mon 29 Jun 2026 16:18:25 +0000 Files and hashes: 1: 5xqfIU6Aybw7LSOf-LmqtxP27bc.crl (hash: TLuUGBEiFtXJd87XVARyL2oMTuf+A8v7rcB4/d7UqL4=) 2: 3A21C144E51211EBB1225278C4F9AE02.roa (hash: AsfjPiAFFmeSKGw8hoPthB94TPU/136PKCHDcZQINKo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.crl rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xqfIU6Aybw7LSOf-LmqtxP27bc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Jun 2026 16:18:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6821 (0x1aa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8525, serialNumber=E71A9F214E80C9BC3B2D239FF8B9AAB713F6EDB7 Validity Not Before: Jun 22 16:18:25 2026 GMT Not After : Jun 29 16:18:25 2026 GMT Subject: CN=6a396052-4330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:57:11:b2:3e:65:fd:e3:11:43:3f:ae:c2:1a: 2a:4a:42:ad:88:5e:e5:e3:71:0e:d3:97:b2:4d:e3: 82:0a:5f:28:43:92:b4:49:b2:93:5e:d9:a9:ce:99: 61:2a:d7:f8:6d:5f:8d:28:84:5c:7a:c9:1a:ef:7f: 35:1f:d6:9e:c8:98:25:f4:ae:69:59:fa:5a:22:79: e4:ee:88:2a:19:0f:69:b7:02:95:ca:d5:af:17:aa: 3d:f3:25:77:e1:67:ee:38:0f:8b:06:38:06:52:c6: e3:cb:96:a6:9e:72:a9:68:f5:bd:56:82:11:91:5b: 75:be:21:57:27:d0:0e:a4:c0:b7:bb:5d:3e:e1:87: 05:02:af:9f:68:e5:15:7b:02:37:2e:a0:86:45:2f: 50:22:85:ce:e9:6b:b7:73:bc:ed:c2:5f:d3:bc:4e: e5:4a:9c:bf:69:22:7e:c0:d9:d8:98:3d:05:ed:d7: bd:ac:a4:21:0b:a1:98:07:9b:9c:64:4a:62:35:8e: 7e:3f:32:0c:7c:3a:87:d7:b2:4b:8d:35:18:d7:71: 7d:39:36:88:af:4e:47:f4:83:4f:a8:8d:7a:70:dc: 3d:18:05:8b:d9:fd:db:74:ff:8f:0f:c9:cb:d7:3a: 0e:1b:dc:bf:d6:80:ab:e5:91:48:8b:49:10:bd:30: ae:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:B9:98:1C:D0:20:1D:C3:09:0C:90:1F:E8:2D:80:B4:93:5D:53:3A X509v3 Authority Key Identifier: keyid:E7:1A:9F:21:4E:80:C9:BC:3B:2D:23:9F:F8:B9:AA:B7:13:F6:ED:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xqfIU6Aybw7LSOf-LmqtxP27bc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:35:3e:a6:3e:55:e7:a5:1e:4d:ca:c9:c9:2c:e6:cf:f4:fc: c0:bb:8d:65:6c:ca:12:a1:29:e6:e8:f3:bd:a8:23:67:2c:f1: 8a:92:4c:42:82:8e:1a:e3:fe:ae:89:8c:0e:e8:9f:89:53:52: 17:f0:f8:96:23:27:71:3c:33:10:4c:f6:a5:04:85:6d:62:03: f0:e6:25:ab:38:cc:7a:ee:0f:e5:04:31:18:18:62:ee:03:52: fd:31:0a:7e:0f:70:da:e8:37:e6:72:07:74:67:8a:ce:57:0e: b2:bd:48:68:89:c3:d9:b1:6d:87:cc:7c:30:19:72:e9:7a:0e: 51:97:07:19:9f:1d:6f:98:38:28:66:9f:5e:1d:ab:32:62:a1: da:59:d4:e4:77:a1:b3:17:a8:21:aa:9e:a5:28:1c:09:98:0e: df:be:d1:80:11:42:74:83:6d:48:f6:ad:b0:3b:da:cc:c5:4d: 99:35:97:4b:09:f3:08:8d:26:7b:59:5a:54:18:e3:c0:14:8c: 44:e7:bf:bf:1b:dc:85:3d:7e:1c:99:53:be:68:31:9d:f0:87: 12:a2:56:c0:23:a8:ba:f0:bb:80:d6:2e:c1:3e:26:e6:bd:0e: 64:5f:6f:70:c0:2b:e3:f0:0e:fc:5e:11:1b:54:b5:86:c7:be: c5:d7:4c:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg1MjUxMTAvBgNVBAUTKEU3MUE5RjIxNEU4MEM5QkMzQjJEMjM5RkY4QjlBQUI3 MTNGNkVEQjcwHhcNMjYwNjIyMTYxODI1WhcNMjYwNjI5MTYxODI1WjAYMRYwFAYD VQQDEw02YTM5NjA1Mi00MzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArlcRsj5l/eMRQz+uwhoqSkKtiF7l43EO05eyTeOCCl8oQ5K0SbKTXtmpzplh Ktf4bV+NKIRceska7381H9aeyJgl9K5pWfpaInnk7ogqGQ9ptwKVytWvF6o98yV3 4WfuOA+LBjgGUsbjy5amnnKpaPW9VoIRkVt1viFXJ9AOpMC3u10+4YcFAq+faOUV ewI3LqCGRS9QIoXO6Wu3c7ztwl/TvE7lSpy/aSJ+wNnYmD0F7de9rKQhC6GYB5uc ZEpiNY5+PzIMfDqH17JLjTUY13F9OTaIr05H9INPqI16cNw9GAWL2f3bdP+PD8nL 1zoOG9y/1oCr5ZFIi0kQvTCuXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB25mBzQ IB3DCQyQH+gtgLSTXVM6MB8GA1UdIwQYMBaAFOcanyFOgMm8Oy0jn/i5qrcT9u23 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODUyNS81MjIxMjYxMDYx MkYxMUU3QkQyRURBMEJDNEY5QUUwMi81eHFmSVU2QXlidzdMU09mLUxtcXR4UDI3 YmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV4cWZJVTZBeWJ3N0xTT2YtTG1xdHhQMjdiYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODUyNS81MjIxMjYxMDYxMkYxMUU3QkQyRURBMEJDNEY5QUUwMi81eHFmSVU2QXli dzdMU09mLUxtcXR4UDI3YmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfTU+pj5V56UeTcrJySzmz/T8wLuNZWzKEqEp5ujzvagjZyzxipJMQoKOGuP+ romMDuifiVNSF/D4liMncTwzEEz2pQSFbWID8OYlqzjMeu4P5QQxGBhi7gNS/TEK fg9w2ug35nIHdGeKzlcOsr1IaInD2bFth8x8MBly6XoOUZcHGZ8db5g4KGafXh2r MmKh2lnU5HehsxeoIaqepSgcCZgO377RgBFCdINtSPatsDvazMVNmTWXSwnzCI0m e1laVBjjwBSMROe/vxvchT1+HJlTvmgxnfCHEqJWwCOouvC7gNYuwT4m5r0OZF9v cMAr4/AO/F4RG1S1hse+xddMIg== -----END CERTIFICATE-----Generated at Wed Jun 24 11:20:06 2026 by rpki-client