$ rpki-client -vvf rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft File: 1xhrKGW4YA1mKCKv65AVcAbg9BA.mft (raw, json) Hash identifier: USyLdnRTEbG+EcYaMlQamvRWYxw7aSO+EhTujiiLNJo= Subject key identifier: 16:E4:E0:8A:F0:85:C3:0F:07:11:BC:8F:62:AC:3F:16:B0:DB:0A:2E Authority key identifier: D7:18:6B:28:65:B8:60:0D:66:28:22:AF:EB:90:15:70:06:E0:F4:10 Certificate issuer: /CN=A91F428C/serialNumber=D7186B2865B8600D662822AFEB90157006E0F410 Certificate serial: 355A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xhrKGW4YA1mKCKv65AVcAbg9BA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft Manifest number: 3553 Signing time: Mon 22 Jun 2026 15:02:38 +0000 Manifest this update: Mon 22 Jun 2026 15:02:38 +0000 Manifest next update: Mon 29 Jun 2026 15:02:38 +0000 Files and hashes: 1: 1xhrKGW4YA1mKCKv65AVcAbg9BA.crl (hash: DDjknWgUIBOUnuQHQomCgQcAlgk5LAHxi8l/kK8YQ64=) 2: B8201598BED111EC93B74C4FC4F9AE02.roa (hash: 2kB+l6pOb5zT/KlsA2xEtLzgFrgfMDCnlHiA1i2V1lw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.crl rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xhrKGW4YA1mKCKv65AVcAbg9BA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Jun 2026 15:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13658 (0x355a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F428C, serialNumber=D7186B2865B8600D662822AFEB90157006E0F410 Validity Not Before: Jun 22 15:02:38 2026 GMT Not After : Jun 29 15:02:38 2026 GMT Subject: CN=6a394e8e-a1d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:de:76:c9:96:11:50:8a:48:c3:3a:0d:91:4c: 57:8a:ef:81:33:81:40:e2:eb:31:bb:05:5d:ed:4a: 43:d6:62:69:b9:54:b3:87:09:cc:f0:d6:81:f6:0f: f3:9d:67:ff:b8:55:af:48:7d:7d:fa:a3:d6:80:ab: 1a:10:0a:66:e2:c5:cd:2b:a8:46:92:a4:92:76:22: 66:f1:0c:b4:e6:3e:bd:f9:bd:c0:1d:94:6b:d1:1e: 31:e6:73:23:97:a2:b4:95:b1:b0:0f:ec:8c:f2:a3: 10:85:98:ed:91:df:6e:3b:60:90:de:9b:7d:0a:04: e2:3d:14:4c:cd:ed:ca:1f:4d:94:59:23:cd:17:e3: 8b:a4:0c:13:2e:e8:da:7d:87:cc:f7:f8:3a:b6:b4: ae:59:fc:67:d2:de:33:f2:ad:a3:98:c2:25:44:e1: 75:4d:31:00:4e:38:36:ab:a8:6c:4d:61:00:e6:27: f9:07:5e:be:90:69:90:6f:9b:dd:88:04:db:60:33: 79:f8:02:ea:6f:e1:20:df:5f:f7:56:f6:35:de:fe: 38:39:d2:ab:b4:52:3c:e0:ee:98:97:39:13:ca:7b: 48:a9:39:7f:a7:71:89:1b:d6:fd:c4:53:d3:23:55: d7:d7:a1:23:bf:78:54:0d:ff:9e:38:6f:87:34:55: 7a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:E4:E0:8A:F0:85:C3:0F:07:11:BC:8F:62:AC:3F:16:B0:DB:0A:2E X509v3 Authority Key Identifier: keyid:D7:18:6B:28:65:B8:60:0D:66:28:22:AF:EB:90:15:70:06:E0:F4:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xhrKGW4YA1mKCKv65AVcAbg9BA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:64:2c:56:c8:74:4e:50:c0:68:21:57:29:41:e0:a8:3c:92: ac:0f:0a:d6:66:68:46:ec:20:e5:a5:8e:c7:bc:aa:3d:fc:68: 60:ca:aa:c1:c1:83:5b:61:9a:72:2d:99:b3:fd:6e:a4:ad:26: ee:74:92:ca:bf:b8:80:e4:17:a4:5f:ca:4a:9e:de:19:8c:b2: 87:d6:cc:f2:5e:cb:18:4f:d5:dd:66:bf:1a:0b:01:07:3b:a9: 59:ba:63:74:99:11:07:5e:28:40:9f:90:07:5b:9a:9b:bd:7a: 69:76:67:fd:b2:ba:f6:c6:55:27:55:2a:c8:11:cd:ad:80:8d: 32:12:2c:43:08:b4:d0:22:e5:46:64:f8:7c:23:5a:d4:41:0c: 93:99:37:e8:63:50:d1:1d:9d:f0:4c:dd:fe:ce:fc:04:29:18: 01:6d:32:10:2d:e9:a9:df:93:e3:98:0b:a5:92:11:2e:be:7f: b3:3d:90:17:c9:d1:ff:f0:ea:84:98:24:66:f3:1c:86:24:a5: dd:59:f3:a5:8d:9c:ae:9b:66:e1:76:15:ef:61:77:85:08:6f: ad:b2:a7:f5:28:fb:d0:d4:f6:65:6a:68:cb:ea:cd:68:2e:6f: 8c:71:3a:72:86:65:45:8c:8f:ad:18:37:79:ee:14:f7:49:6a: ed:5f:28:ee -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyOEMxMTAvBgNVBAUTKEQ3MTg2QjI4NjVCODYwMEQ2NjI4MjJBRkVCOTAxNTcw MDZFMEY0MTAwHhcNMjYwNjIyMTUwMjM4WhcNMjYwNjI5MTUwMjM4WjAYMRYwFAYD VQQDEw02YTM5NGU4ZS1hMWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqd52yZYRUIpIwzoNkUxXiu+BM4FA4usxuwVd7UpD1mJpuVSzhwnM8NaB9g/z nWf/uFWvSH19+qPWgKsaEApm4sXNK6hGkqSSdiJm8Qy05j69+b3AHZRr0R4x5nMj l6K0lbGwD+yM8qMQhZjtkd9uO2CQ3pt9CgTiPRRMze3KH02UWSPNF+OLpAwTLuja fYfM9/g6trSuWfxn0t4z8q2jmMIlROF1TTEATjg2q6hsTWEA5if5B16+kGmQb5vd iATbYDN5+ALqb+Eg31/3VvY13v44OdKrtFI84O6YlzkTyntIqTl/p3GJG9b9xFPT I1XX16Ejv3hUDf+eOG+HNFV6lQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBbk4Irw hcMPBxG8j2KsPxaw2wouMB8GA1UdIwQYMBaAFNcYayhluGANZigir+uQFXAG4PQQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI4Qy81MkZDQzY0ODFE QTAxMUUyQjZEODcwOTEwOEIwMkNEMi8xeGhyS0dXNFlBMW1LQ0t2NjVBVmNBYmc5 QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF4aHJLR1c0WUExbUtDS3Y2NUFWY0FiZzlCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI4Qy81MkZDQzY0ODFEQTAxMUUyQjZEODcwOTEwOEIwMkNEMi8xeGhyS0dXNFlB MW1LQ0t2NjVBVmNBYmc5QkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtmQsVsh0TlDAaCFXKUHgqDySrA8K1mZoRuwg5aWOx7yqPfxoYMqqwcGDW2Ga ci2Zs/1upK0m7nSSyr+4gOQXpF/KSp7eGYyyh9bM8l7LGE/V3Wa/GgsBBzupWbpj dJkRB14oQJ+QB1uam716aXZn/bK69sZVJ1UqyBHNrYCNMhIsQwi00CLlRmT4fCNa 1EEMk5k36GNQ0R2d8Ezd/s78BCkYAW0yEC3pqd+T45gLpZIRLr5/sz2QF8nR//Dq hJgkZvMchiSl3VnzpY2crptm4XYV72F3hQhvrbKn9Sj70NT2ZWpoy+rNaC5vjHE6 coZlRYyPrRg3ee4U90lq7V8o7g== -----END CERTIFICATE-----Generated at Wed Jun 24 11:14:14 2026 by rpki-client