$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.mft File: cNjYKyIacSIO_Vg9kvc2F15dAvE.mft (raw, json) Hash identifier: WzPPK3GZ7KVrxj0KVCS3NWvjUVmZppMWRGw3OtY5f3g= Subject key identifier: 77:C0:BB:B3:FB:B5:54:29:31:70:FB:9C:B9:A2:BB:0D:06:F5:8D:DD Authority key identifier: 70:D8:D8:2B:22:1A:71:22:0E:FD:58:3D:92:F7:36:17:5E:5D:02:F1 Certificate issuer: /CN=A91E9B39/serialNumber=70D8D82B221A71220EFD583D92F736175E5D02F1 Certificate serial: 6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNjYKyIacSIO_Vg9kvc2F15dAvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.mft Manifest number: 68 Signing time: Tue 23 Jun 2026 08:13:54 +0000 Manifest this update: Tue 23 Jun 2026 08:13:53 +0000 Manifest next update: Tue 30 Jun 2026 08:13:53 +0000 Files and hashes: 1: cNjYKyIacSIO_Vg9kvc2F15dAvE.crl (hash: AGQb8yZQhdBW7w5vJIZ/GwqZEJzwW1a4eK7oVSIBabg=) 2: 98127914D29411F0BA72510FC4F9AE02.roa (hash: fcVzdG0+J4J9gwuAgPs1jVI9TN7koe+xVsb1q5pHJIA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.crl rsync://rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNjYKyIacSIO_Vg9kvc2F15dAvE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jun 2026 08:13:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 106 (0x6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9B39, serialNumber=70D8D82B221A71220EFD583D92F736175E5D02F1 Validity Not Before: Jun 23 08:13:53 2026 GMT Not After : Jun 30 08:13:53 2026 GMT Subject: CN=6a3a4042-a32d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fb:15:41:74:6d:a2:09:7a:24:c5:ba:3e:a3: cc:a2:65:15:09:de:c6:20:a9:8a:30:97:6c:cc:19: 7e:a8:80:c2:86:05:c3:39:13:1a:82:ac:8c:e7:32: 24:5d:6b:e2:f5:70:89:af:cc:d7:42:3a:c1:06:3f: a4:b2:52:9d:fe:23:01:ba:ea:46:b3:c5:38:2f:c6: 28:9b:f5:27:3a:4c:3c:9f:3f:6f:b6:c1:f8:f6:c4: 8a:92:da:9f:57:17:56:db:6a:79:b5:2e:04:57:83: 0e:7b:eb:50:30:2a:a0:91:1b:b2:d2:b8:d7:b6:44: 2f:81:16:14:8c:89:a0:bb:6e:2b:41:92:17:a0:36: 03:33:04:4b:d6:09:c5:96:a7:54:e1:28:94:71:30: 88:d8:6f:cf:46:10:57:88:41:b4:51:3f:e4:4a:4a: cd:01:b3:9e:fd:91:21:32:e3:66:06:9c:19:33:2b: ad:26:64:1f:6c:b2:36:fc:64:b6:7f:dd:97:b7:62: 52:87:e6:30:ff:74:bf:32:e0:25:14:8a:f3:d1:33: 7a:0a:10:66:10:d9:d3:66:aa:a3:e5:c8:9c:d0:81: a7:13:3c:45:e7:c5:c9:7e:4e:1f:a4:b3:9e:f8:20: 7d:71:f6:87:af:67:22:da:7d:de:b0:a0:26:39:d1: db:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:C0:BB:B3:FB:B5:54:29:31:70:FB:9C:B9:A2:BB:0D:06:F5:8D:DD X509v3 Authority Key Identifier: keyid:70:D8:D8:2B:22:1A:71:22:0E:FD:58:3D:92:F7:36:17:5E:5D:02:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNjYKyIacSIO_Vg9kvc2F15dAvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:4b:26:41:b7:d5:09:68:3e:b9:14:11:59:c7:d1:fd:57:ba: 39:a6:b8:af:d4:a7:64:43:c7:58:eb:f0:19:4b:c1:07:61:d6: a2:ba:99:6d:99:44:a8:25:3d:17:b0:84:2a:b4:21:8f:aa:25: d7:51:1e:9b:d9:5c:3f:a6:b4:af:99:f7:b2:08:e6:02:64:73: 88:00:d7:81:ab:36:16:61:7d:14:9c:ab:48:d0:09:d8:a4:0e: e6:ed:d1:0a:ff:c7:df:c9:2c:e8:43:7e:cc:9f:e1:8d:a4:b2: e3:e9:47:db:a5:96:a1:a3:65:eb:99:41:16:bf:4c:4b:7f:dd: 50:6e:b8:2a:ee:f0:c4:a2:7b:3d:62:f4:ce:2f:67:ce:93:f8: df:30:02:12:35:05:46:dd:0e:92:b8:69:b5:be:81:59:44:5c: b9:77:8b:d5:c1:6c:a7:ac:03:c9:5b:8a:ca:98:0d:2f:72:f8: df:a3:9e:9d:d9:97:91:05:81:bc:f8:af:b7:30:48:54:85:73: 10:29:9c:30:62:b8:11:be:e5:01:b7:3d:d7:f5:a9:6f:26:4f: b0:45:5c:ca:d5:fc:bb:a3:1a:23:c2:0b:15:da:c3:04:51:23: 07:02:b7:76:72:63:c9:cc:f2:a2:fd:81:bc:ac:dd:83:c7:81: 36:fc:46:41 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OUIzOTExMC8GA1UEBRMoNzBEOEQ4MkIyMjFBNzEyMjBFRkQ1ODNEOTJGNzM2MTc1 RTVEMDJGMTAeFw0yNjA2MjMwODEzNTNaFw0yNjA2MzAwODEzNTNaMBgxFjAUBgNV BAMTDTZhM2E0MDQyLWEzMmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDC+xVBdG2iCXokxbo+o8yiZRUJ3sYgqYowl2zMGX6ogMKGBcM5ExqCrIznMiRd a+L1cImvzNdCOsEGP6SyUp3+IwG66kazxTgvxiib9Sc6TDyfP2+2wfj2xIqS2p9X F1bbanm1LgRXgw5761AwKqCRG7LSuNe2RC+BFhSMiaC7bitBkhegNgMzBEvWCcWW p1ThKJRxMIjYb89GEFeIQbRRP+RKSs0Bs579kSEy42YGnBkzK60mZB9ssjb8ZLZ/ 3Ze3YlKH5jD/dL8y4CUUivPRM3oKEGYQ2dNmqqPlyJzQgacTPEXnxcl+Th+ks574 IH1x9oevZyLafd6woCY50dsBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUd8C7s/u1 VCkxcPucuaK7DQb1jd0wHwYDVR0jBBgwFoAUcNjYKyIacSIO/Vg9kvc2F15dAvEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5QjM5LzVBRUYyMjJDRDI5 MzExRjA4Q0E2NUQ3N0M0RjlBRTAyL2NOallLeUlhY1NJT19WZzlrdmMyRjE1ZEF2 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY05qWUt5SWFjU0lPX1ZnOWt2YzJGMTVkQXZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5 QjM5LzVBRUYyMjJDRDI5MzExRjA4Q0E2NUQ3N0M0RjlBRTAyL2NOallLeUlhY1NJ T19WZzlrdmMyRjE1ZEF2RS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCqSyZBt9UJaD65FBFZx9H9V7o5priv1KdkQ8dY6/AZS8EHYdaiupltmUSoJT0X sIQqtCGPqiXXUR6b2Vw/prSvmfeyCOYCZHOIANeBqzYWYX0UnKtI0AnYpA7m7dEK /8ffySzoQ37Mn+GNpLLj6UfbpZaho2XrmUEWv0xLf91Qbrgq7vDEons9YvTOL2fO k/jfMAISNQVG3Q6SuGm1voFZRFy5d4vVwWynrAPJW4rKmA0vcvjfo56d2ZeRBYG8 +K+3MEhUhXMQKZwwYrgRvuUBtz3X9alvJk+wRVzK1fy7oxojwgsV2sMEUSMHArd2 cmPJzPKi/YG8rN2Dx4E2/EZB -----END CERTIFICATE-----Generated at Wed Jun 24 11:15:17 2026 by rpki-client