$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft File: 9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft (raw, json) Hash identifier: h1hNmZn/BPlGReA8BwycSJqgnw1z/B+Nh88kcLhY8UI= Subject key identifier: A1:63:F5:5F:3B:00:86:62:AF:21:A6:95:BB:81:35:22:7A:3E:F8:45 Authority key identifier: F4:F1:5C:67:5E:D9:A5:C2:D1:99:5B:27:FB:53:FF:60:FF:02:49:E0 Certificate issuer: /CN=A91ED571/serialNumber=F4F15C675ED9A5C2D1995B27FB53FF60FF0249E0 Certificate serial: 0E2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft Manifest number: 0E23 Signing time: Mon 22 Jun 2026 17:47:24 +0000 Manifest this update: Mon 22 Jun 2026 17:47:24 +0000 Manifest next update: Mon 29 Jun 2026 17:47:24 +0000 Files and hashes: 1: 9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl (hash: zpY18FO/yywGGHcUAKYTsTmnKA/87IAvb+9ovUy6Hn0=) 2: C9819022CE7011E98E86DD52C4F9AE02.roa (hash: qKnMxoYQzAYEoqtHJW7SDhxTwL61Wk1XcPGIb5rMW/8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Jun 2026 17:47:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3629 (0xe2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED571, serialNumber=F4F15C675ED9A5C2D1995B27FB53FF60FF0249E0 Validity Not Before: Jun 22 17:47:24 2026 GMT Not After : Jun 29 17:47:24 2026 GMT Subject: CN=6a39752c-bf3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:99:91:04:47:ab:81:0f:5c:2c:71:95:ae:36: ef:76:8a:84:f1:99:93:f8:5f:c2:0b:f0:52:61:f1: 83:73:9a:82:3d:16:79:67:21:6a:1f:88:05:d0:4a: 80:f1:a8:56:14:54:e4:b7:fa:54:90:ce:c9:c0:0d: 1f:74:12:09:5c:29:40:72:4b:4f:7d:ba:9b:e5:b8: 3e:24:c5:69:0c:18:9a:80:c3:0f:a2:05:5b:86:12: 1b:ce:96:6f:0b:e1:42:4f:19:cf:93:37:a5:42:77: b4:22:0d:43:35:2b:93:8d:bb:7c:cf:a8:d1:d7:b7: 0e:bc:f5:d8:2e:c9:10:65:0e:f7:f7:50:f2:9e:86: 39:ff:29:f4:c5:44:dd:0b:76:7f:22:78:75:15:cb: fd:08:9d:5f:c6:0e:02:63:8d:ab:bd:66:d2:eb:ea: a4:24:9d:99:2a:e6:de:3a:03:e9:c0:19:79:7a:14: f2:c7:08:ac:6e:12:1f:87:1e:5c:8f:38:9d:03:9c: 91:d0:fb:4b:8a:07:4f:4b:75:15:f0:eb:b6:8a:ff: 2c:cf:ad:fa:7d:d0:6c:93:ee:9b:7d:94:07:e1:35: 26:73:c6:27:21:94:a7:63:1a:0c:35:ae:92:7a:23: 2b:04:33:ce:c7:e0:c7:25:18:a7:5f:b8:2b:38:07: 8a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:63:F5:5F:3B:00:86:62:AF:21:A6:95:BB:81:35:22:7A:3E:F8:45 X509v3 Authority Key Identifier: keyid:F4:F1:5C:67:5E:D9:A5:C2:D1:99:5B:27:FB:53:FF:60:FF:02:49:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:6c:c3:1a:b1:a1:be:17:8d:7f:1c:d9:7f:4a:f9:33:6c:7a: 10:fd:32:f9:30:a7:33:6f:a9:e8:13:5b:30:86:49:c5:b9:0d: d9:81:f3:a3:69:0f:62:c1:d0:c4:01:39:f2:54:28:9b:27:b9: 78:99:39:e6:ae:b3:97:ac:a7:f0:cc:66:04:f4:32:79:44:c0: 00:22:95:17:93:af:44:47:e9:02:71:74:95:93:fe:d2:bf:ec: 4a:e7:f2:61:a5:fc:c5:6c:14:1a:94:c4:dd:ba:7e:da:39:9d: fc:a8:c5:9f:6f:5c:d0:b3:37:f4:ce:01:ab:66:0f:83:ac:00: 92:e5:e4:ab:e4:13:40:3b:78:e2:0e:5c:ad:70:58:49:4c:76: b7:e8:21:1a:69:4e:14:79:f9:67:31:e7:49:45:05:d9:d0:dc: b8:57:e5:9a:cd:e8:65:3d:18:14:7f:60:97:42:d5:0a:c2:85: 8f:68:e8:c2:0a:35:0d:4a:88:71:70:45:2e:4d:08:79:5e:84: 7b:93:76:d9:9d:df:34:d4:62:71:10:1d:a3:13:ce:77:87:a0: c3:6f:8a:4f:d9:7c:b9:c4:6d:bb:67:b4:b4:41:19:3c:83:49: fc:d0:04:9f:1e:a6:22:53:49:40:51:17:0f:26:e6:0f:8f:c2: b1:41:30:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ1NzExMTAvBgNVBAUTKEY0RjE1QzY3NUVEOUE1QzJEMTk5NUIyN0ZCNTNGRjYw RkYwMjQ5RTAwHhcNMjYwNjIyMTc0NzI0WhcNMjYwNjI5MTc0NzI0WjAYMRYwFAYD VQQDEw02YTM5NzUyYy1iZjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArpmRBEergQ9cLHGVrjbvdoqE8ZmT+F/CC/BSYfGDc5qCPRZ5ZyFqH4gF0EqA 8ahWFFTkt/pUkM7JwA0fdBIJXClAcktPfbqb5bg+JMVpDBiagMMPogVbhhIbzpZv C+FCTxnPkzelQne0Ig1DNSuTjbt8z6jR17cOvPXYLskQZQ7391DynoY5/yn0xUTd C3Z/Inh1Fcv9CJ1fxg4CY42rvWbS6+qkJJ2ZKubeOgPpwBl5ehTyxwisbhIfhx5c jzidA5yR0PtLigdPS3UV8Ou2iv8sz636fdBsk+6bfZQH4TUmc8YnIZSnYxoMNa6S eiMrBDPOx+DHJRinX7grOAeK5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKFj9V87 AIZiryGmlbuBNSJ6PvhFMB8GA1UdIwQYMBaAFPTxXGde2aXC0ZlbJ/tT/2D/Akng MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDU3MS9FQ0QyREY5NkNF NkYxMUU5QTBEODZENTFDNEY5QUUwMi85UEZjWjE3WnBjTFJtVnNuLTFQX1lQOENT ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlQRmNaMTdacGNMUm1Wc24tMVBfWVA4Q1NlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDU3MS9FQ0QyREY5NkNFNkYxMUU5QTBEODZENTFDNEY5QUUwMi85UEZjWjE3WnBj TFJtVnNuLTFQX1lQOENTZUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAR2zDGrGhvheNfxzZf0r5M2x6EP0y+TCnM2+p6BNbMIZJxbkN2YHzo2kPYsHQ xAE58lQomye5eJk55q6zl6yn8MxmBPQyeUTAACKVF5OvREfpAnF0lZP+0r/sSufy YaX8xWwUGpTE3bp+2jmd/KjFn29c0LM39M4Bq2YPg6wAkuXkq+QTQDt44g5crXBY SUx2t+ghGmlOFHn5ZzHnSUUF2dDcuFflms3oZT0YFH9gl0LVCsKFj2jowgo1DUqI cXBFLk0IeV6Ee5N22Z3fNNRicRAdoxPOd4egw2+KT9l8ucRtu2e0tEEZPINJ/NAE nx6mIlNJQFEXDybmD4/CsUEwpg== -----END CERTIFICATE-----Generated at Wed Jun 24 09:56:14 2026 by rpki-client