$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.mft File: 6ibTI4Mc2ho4TpHg_jiR2wzrLsg.mft (raw, json) Hash identifier: xfNiSbn/n6paIwnh1TK736dFPiQwv2DerMARkxa8T7o= Subject key identifier: 4E:D6:B2:F9:23:CD:AC:15:68:A5:7D:23:AA:18:C3:C9:A9:A4:B7:24 Authority key identifier: EA:26:D3:23:83:1C:DA:1A:38:4E:91:E0:FE:38:91:DB:0C:EB:2E:C8 Certificate issuer: /CN=A91F6C39/serialNumber=EA26D323831CDA1A384E91E0FE3891DB0CEB2EC8 Certificate serial: 0667 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.mft Manifest number: 065B Signing time: Wed 20 May 2026 22:41:45 +0000 Manifest this update: Wed 20 May 2026 22:41:45 +0000 Manifest next update: Wed 27 May 2026 22:41:45 +0000 Files and hashes: 1: 6ibTI4Mc2ho4TpHg_jiR2wzrLsg.crl (hash: rsjmr1R9GIWUS/GIsTl4WWapVeSMEHNc5RBk+l7vNV0=) 2: 7EFC59BA5D0511EEB1F12C3BC4F9AE02.roa (hash: wVTtBB6GnMKv7oNe8pedju8FoDxU6Pr/R9wj9DvMQIc=) 3: 6F9ACE76CE7211EBAF46B61AC4F9AE02.roa (hash: mYcX8Mou9RkMoZH6tAQ0rBX8I2qYZv51Ux4N/qA8EJA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.crl rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 22:41:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1639 (0x667) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6C39, serialNumber=EA26D323831CDA1A384E91E0FE3891DB0CEB2EC8 Validity Not Before: May 20 22:41:45 2026 GMT Not After : May 27 22:41:45 2026 GMT Subject: CN=6a0e38a9-d604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:64:bf:93:65:eb:7b:b1:fa:09:a3:e8:07:86: 20:6b:89:9e:8f:ba:a7:18:de:c0:33:59:1a:9a:d4: 3e:54:99:be:18:95:10:f3:34:6f:6d:38:4e:4e:41: 5e:63:4b:ee:9e:cf:99:68:e0:1c:7c:c4:f4:d1:c8: 78:8b:82:8f:ea:1e:3b:1a:69:1b:ad:f0:ce:0d:15: 82:6d:14:5b:67:5a:4f:bc:9f:9e:bf:1a:3e:b1:45: a4:10:c4:80:16:ed:c8:12:cc:5b:0e:7b:da:f7:90: 3f:b1:d7:d5:27:43:b2:a7:ad:37:d3:22:5a:3a:ff: 1d:c2:a6:92:1c:cc:f7:9f:4f:6d:43:23:e4:8c:e0: bb:18:0f:63:92:2d:4b:df:46:3a:d6:49:85:94:6f: d2:79:66:64:9b:7e:00:88:ec:a9:96:c2:25:71:2e: 68:2f:6f:2e:33:bc:14:8b:13:9c:73:ab:07:52:b4: 76:2c:34:ae:3a:b7:af:42:b8:b1:d4:a8:6a:a1:85: f2:3c:88:81:78:47:4e:db:4d:d5:d8:bd:8f:cc:34: a2:b8:b7:07:ac:89:34:53:18:ed:f5:ad:66:bf:f9: b8:c8:d4:64:1a:ab:b6:12:d5:3c:7d:70:dd:05:bd: e7:d9:07:c0:96:2c:2b:f7:7e:3c:67:40:1e:45:8a: 7e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:D6:B2:F9:23:CD:AC:15:68:A5:7D:23:AA:18:C3:C9:A9:A4:B7:24 X509v3 Authority Key Identifier: keyid:EA:26:D3:23:83:1C:DA:1A:38:4E:91:E0:FE:38:91:DB:0C:EB:2E:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:20:b4:65:45:43:42:1d:c8:74:c0:4f:66:7b:94:9f:5b:54: 99:42:ff:87:f9:0c:9d:c0:49:bd:24:b4:62:46:9e:c9:4e:6a: 36:b8:86:ab:27:8b:54:99:21:b9:1a:e4:56:dc:a8:82:a9:ad: d9:90:29:79:a0:3e:5d:be:4d:9f:e8:6e:ad:40:0f:ef:31:ba: 37:6b:77:f3:5f:05:80:be:11:39:a9:1c:a4:9a:42:fc:ad:9b: 2b:e0:c6:c7:24:b0:a0:ff:e5:75:4a:c3:89:4b:6d:06:aa:c6: 70:02:74:78:c2:2e:3f:63:65:6b:f4:39:92:53:67:20:4f:50: bc:74:1a:91:2b:74:f4:6d:b4:7b:63:45:0b:0d:e8:d3:f8:89: e1:d0:14:9e:9f:63:40:86:11:12:81:41:21:d8:e6:d2:54:cf: 03:78:41:35:62:e3:c5:d1:0f:97:35:22:21:46:50:fd:85:f5: 32:06:cf:97:a4:b7:80:eb:ca:5f:92:36:bf:a2:59:82:58:f6: f9:76:78:c5:ad:79:bc:76:4b:26:2c:25:af:b0:08:23:5a:17: 37:fc:b8:35:cc:3b:c4:e8:32:7b:5b:a2:61:5a:09:54:a7:16: d4:3c:92:95:93:89:be:97:92:42:c5:0b:16:04:76:72:0b:b0: 00:93:b2:ef -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZDMzkxMTAvBgNVBAUTKEVBMjZEMzIzODMxQ0RBMUEzODRFOTFFMEZFMzg5MURC MENFQjJFQzgwHhcNMjYwNTIwMjI0MTQ1WhcNMjYwNTI3MjI0MTQ1WjAYMRYwFAYD VQQDEw02YTBlMzhhOS1kNjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwWS/k2Xre7H6CaPoB4Yga4mej7qnGN7AM1kamtQ+VJm+GJUQ8zRvbThOTkFe Y0vuns+ZaOAcfMT00ch4i4KP6h47GmkbrfDODRWCbRRbZ1pPvJ+evxo+sUWkEMSA Fu3IEsxbDnva95A/sdfVJ0Oyp6030yJaOv8dwqaSHMz3n09tQyPkjOC7GA9jki1L 30Y61kmFlG/SeWZkm34AiOyplsIlcS5oL28uM7wUixOcc6sHUrR2LDSuOrevQrix 1KhqoYXyPIiBeEdO203V2L2PzDSiuLcHrIk0Uxjt9a1mv/m4yNRkGqu2EtU8fXDd Bb3n2QfAliwr9348Z0AeRYp+1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE7Wsvkj zawVaKV9I6oYw8mppLckMB8GA1UdIwQYMBaAFOom0yODHNoaOE6R4P44kdsM6y7I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkMzOS83QkYwRjI3NENF NzAxMUVCQTdFMDlCMUFDNEY5QUUwMi82aWJUSTRNYzJobzRUcEhnX2ppUjJ3enJM c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZpYlRJNE1jMmhvNFRwSGdfamlSMnd6ckxzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkMzOS83QkYwRjI3NENFNzAxMUVCQTdFMDlCMUFDNEY5QUUwMi82aWJUSTRNYzJo bzRUcEhnX2ppUjJ3enJMc2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKSC0ZUVDQh3IdMBPZnuUn1tUmUL/h/kMncBJvSS0YkaeyU5qNriGqyeLVJkh uRrkVtyogqmt2ZApeaA+Xb5Nn+hurUAP7zG6N2t3818FgL4ROakcpJpC/K2bK+DG xySwoP/ldUrDiUttBqrGcAJ0eMIuP2Nla/Q5klNnIE9QvHQakSt09G20e2NFCw3o 0/iJ4dAUnp9jQIYREoFBIdjm0lTPA3hBNWLjxdEPlzUiIUZQ/YX1MgbPl6S3gOvK X5I2v6JZglj2+XZ4xa15vHZLJiwlr7AII1oXN/y4Ncw7xOgye1uiYVoJVKcW1DyS lZOJvpeSQsULFgR2cguwAJOy7w== -----END CERTIFICATE-----Generated at Thu May 21 15:26:05 2026 by rpki-client