$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.mft File: 6o2GS70rsdeM2IkKFQThETZ_ehM.mft (raw, json) Hash identifier: DJi2M48VJc3eb1r9psdmCbyc4+X83ji9T2iL3P08Dwg= Subject key identifier: 68:4C:1E:B9:59:87:A3:5F:4A:28:27:19:21:CD:8A:0E:7C:40:0A:FA Authority key identifier: EA:8D:86:4B:BD:2B:B1:D7:8C:D8:89:0A:15:04:E1:11:36:7F:7A:13 Certificate issuer: /CN=A91F6E65/serialNumber=EA8D864BBD2BB1D78CD8890A1504E111367F7A13 Certificate serial: 1307 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6o2GS70rsdeM2IkKFQThETZ_ehM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.mft Manifest number: 12FA Signing time: Wed 20 May 2026 17:02:03 +0000 Manifest this update: Wed 20 May 2026 17:02:02 +0000 Manifest next update: Wed 27 May 2026 17:02:02 +0000 Files and hashes: 1: 6o2GS70rsdeM2IkKFQThETZ_ehM.crl (hash: xfVv1TIw3AuOUPxJiYUnb3cQN8wyRYcPjZ7Yo1Wswvk=) 2: F87DE4E2518011E98D519C48C4F9AE02.roa (hash: 1KMAVFvyKtreBmiuwVLhoXJ1BjdtnEzfYd5CVyXTtBY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.crl rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6o2GS70rsdeM2IkKFQThETZ_ehM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4871 (0x1307) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6E65, serialNumber=EA8D864BBD2BB1D78CD8890A1504E111367F7A13 Validity Not Before: May 20 17:02:02 2026 GMT Not After : May 27 17:02:02 2026 GMT Subject: CN=6a0de90b-bc09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0d:b2:8d:60:8d:87:00:76:3b:0a:3b:90:9a: b4:2d:b6:a8:d4:8a:ef:7e:18:41:59:07:66:28:0f: a7:3f:2f:2f:9c:44:89:f2:36:5e:8d:5c:ab:02:6d: f9:ab:e8:81:65:e9:5b:0f:c6:5d:30:64:eb:09:96: 19:a3:33:af:fc:87:58:6f:31:33:90:ab:b0:94:82: cb:95:48:d0:2e:4a:1f:c8:dd:49:c7:56:9b:be:96: 4b:28:4a:5b:7b:b8:88:a7:38:f5:f9:ad:cd:50:a9: c4:b0:00:9d:ed:77:1f:2b:84:a2:e7:31:c7:50:58: 94:75:d5:2c:66:08:14:8a:1b:f2:9f:9e:17:39:63: 63:ed:82:d7:73:43:ed:82:00:c9:aa:d7:3f:0d:06: 68:c4:5f:d1:79:03:a1:22:db:83:61:51:09:e0:a1: 79:50:25:e1:0b:f1:86:34:57:cb:fd:68:08:72:1e: cb:95:cc:8f:9b:2b:2a:50:94:9a:40:09:05:fe:15: b0:55:23:3e:0f:e9:17:c5:45:05:e9:51:e2:25:60: 53:60:4d:8d:42:ee:e3:ed:8d:5e:2f:e6:92:29:18: 64:83:39:1b:13:6b:7f:c8:1f:70:ff:02:74:d3:05: 6d:b0:37:42:40:5d:cb:99:b5:5a:c7:79:40:5e:13: c9:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:4C:1E:B9:59:87:A3:5F:4A:28:27:19:21:CD:8A:0E:7C:40:0A:FA X509v3 Authority Key Identifier: keyid:EA:8D:86:4B:BD:2B:B1:D7:8C:D8:89:0A:15:04:E1:11:36:7F:7A:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6o2GS70rsdeM2IkKFQThETZ_ehM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:f4:0f:e1:a3:df:93:f0:a1:67:58:59:73:57:a4:13:53:b5: 4f:f0:35:43:ce:68:f4:e1:99:16:ee:c9:73:68:59:ef:86:f2: ec:41:71:74:56:a7:82:04:1b:ae:d9:4b:5a:2a:10:c3:c7:e1: be:08:27:7e:17:9c:57:d7:33:ee:bc:58:ee:d7:b9:d9:56:68: ef:a1:7d:51:4c:49:18:36:a9:e3:59:c0:1a:fa:47:1f:db:5f: 12:f1:1c:22:89:bd:58:19:72:d4:a0:3a:21:99:d6:a9:7c:d6: f6:69:63:59:b0:b2:ef:83:91:0a:6d:10:3c:b5:70:6d:73:ab: d1:ba:41:74:c9:d5:a6:c1:d3:d7:ad:f4:fa:70:cd:53:e0:47: 06:82:8d:11:0a:a0:d1:7c:b4:67:5b:06:13:e7:8c:d2:78:2d: 71:9b:37:8e:83:42:56:fa:6f:af:57:54:9a:96:df:0f:4c:d9: 23:4e:23:ee:59:1e:50:0d:28:af:89:43:e0:3b:ad:bc:f8:a6: 18:34:17:ce:09:1c:4c:71:d4:d9:18:f2:95:34:2b:5e:e6:07: dc:48:b1:89:78:09:8f:2e:af:f2:bd:a2:80:d5:51:78:66:93: a3:8a:f3:f0:30:e0:e1:7d:25:d6:20:07:97:34:f8:90:42:af: a4:2c:3c:aa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEwcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZFNjUxMTAvBgNVBAUTKEVBOEQ4NjRCQkQyQkIxRDc4Q0Q4ODkwQTE1MDRFMTEx MzY3RjdBMTMwHhcNMjYwNTIwMTcwMjAyWhcNMjYwNTI3MTcwMjAyWjAYMRYwFAYD VQQDEw02YTBkZTkwYi1iYzA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQ2yjWCNhwB2Owo7kJq0Lbao1IrvfhhBWQdmKA+nPy8vnESJ8jZejVyrAm35 q+iBZelbD8ZdMGTrCZYZozOv/IdYbzEzkKuwlILLlUjQLkofyN1Jx1abvpZLKEpb e7iIpzj1+a3NUKnEsACd7XcfK4Si5zHHUFiUddUsZggUihvyn54XOWNj7YLXc0Pt ggDJqtc/DQZoxF/ReQOhItuDYVEJ4KF5UCXhC/GGNFfL/WgIch7LlcyPmysqUJSa QAkF/hWwVSM+D+kXxUUF6VHiJWBTYE2NQu7j7Y1eL+aSKRhkgzkbE2t/yB9w/wJ0 0wVtsDdCQF3LmbVax3lAXhPJSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGhMHrlZ h6NfSignGSHNig58QAr6MB8GA1UdIwQYMBaAFOqNhku9K7HXjNiJChUE4RE2f3oT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkU2NS9GRUQ5M0E3Q0Q4 OEExMUU4QTNFQ0ZGNERDNEY5QUUwMi82bzJHUzcwcnNkZU0ySWtLRlFUaEVUWl9l aE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZvMkdTNzByc2RlTTJJa0tGUVRoRVRaX2VoTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkU2NS9GRUQ5M0E3Q0Q4OEExMUU4QTNFQ0ZGNERDNEY5QUUwMi82bzJHUzcwcnNk ZU0ySWtLRlFUaEVUWl9laE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEfQP4aPfk/ChZ1hZc1ekE1O1T/A1Q85o9OGZFu7Jc2hZ74by7EFxdFanggQb rtlLWioQw8fhvggnfhecV9cz7rxY7te52VZo76F9UUxJGDap41nAGvpHH9tfEvEc Iom9WBly1KA6IZnWqXzW9mljWbCy74ORCm0QPLVwbXOr0bpBdMnVpsHT1630+nDN U+BHBoKNEQqg0Xy0Z1sGE+eM0ngtcZs3joNCVvpvr1dUmpbfD0zZI04j7lkeUA0o r4lD4DutvPimGDQXzgkcTHHU2RjylTQrXuYH3EixiXgJjy6v8r2igNVReGaTo4rz 8DDg4X0l1iAHlzT4kEKvpCw8qg== -----END CERTIFICATE-----Generated at Thu May 21 10:14:27 2026 by rpki-client