$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft File: Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft (raw, json) Hash identifier: E0JzFHr9RL5f9EQKgO8f9YJI5PqIOCG6KVY9cHSEHko= Subject key identifier: E3:0C:BF:74:37:F9:04:79:D0:0E:9E:AC:FF:FB:AC:B7:B7:35:95:F7 Authority key identifier: 3A:AF:FB:B7:EA:4A:60:D7:7B:B4:42:84:AC:BF:25:C3:98:BA:9A:6D Certificate issuer: /CN=A91F8E3D/serialNumber=3AAFFBB7EA4A60D77BB44284ACBF25C398BA9A6D Certificate serial: 0544 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq_7t-pKYNd7tEKErL8lw5i6mm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft Manifest number: 052B Signing time: Sat 20 Jun 2026 23:38:47 +0000 Manifest this update: Sat 20 Jun 2026 23:38:46 +0000 Manifest next update: Sat 27 Jun 2026 23:38:46 +0000 Files and hashes: 1: Oq_7t-pKYNd7tEKErL8lw5i6mm0.crl (hash: 6NuxX+ZQOiSZuPFiJlnxf2i0wtpjRy7wGm+q64hKzq0=) 2: 23AF59F0EC5E11F0BAE87BA74C6F56BC.roa (hash: nAW7sLq/u3ibmVv8IggrLJMCC/imIfpqlXLWRrpvrN8=) 3: FF9D89B6AB4C11ECB0C94F67C4F9AE02.roa (hash: SKiH7V+tod/z4lBCc83CPJIwiI1zwMJD2gQincrwEEU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.crl rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq_7t-pKYNd7tEKErL8lw5i6mm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Jun 2026 23:38:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1348 (0x544) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8E3D, serialNumber=3AAFFBB7EA4A60D77BB44284ACBF25C398BA9A6D Validity Not Before: Jun 20 23:38:46 2026 GMT Not After : Jun 27 23:38:46 2026 GMT Subject: CN=6a372487-b80a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:2b:4b:7f:5b:86:c9:62:3f:4a:84:f2:04:8c: ef:3f:ea:8e:16:f3:20:af:d9:34:20:fc:e1:ca:41: 9d:a9:ae:5d:a2:40:f6:93:7a:a7:e1:82:2b:75:b3: 52:25:3d:ed:c7:e0:f8:08:b2:89:e2:17:89:79:e2: 2c:b0:6b:94:85:03:81:64:0a:d2:a1:ed:e7:8c:31: 3c:8a:77:ee:1e:71:c4:32:9c:66:f9:a4:cc:e9:99: 51:59:1c:32:f6:88:72:9c:50:63:4b:34:0e:f0:55: d0:a4:43:99:83:ba:91:f5:8f:33:1d:1e:fd:d9:8c: 47:47:7a:a5:bd:13:db:12:72:1f:03:63:bd:d6:11: a9:d1:3b:bf:91:42:71:71:4d:b2:a6:b7:a3:51:85: 37:0c:ee:a8:41:8c:8a:ea:8f:1b:7a:06:bd:d8:6f: 12:f9:92:58:b9:da:84:f0:62:96:63:f7:6d:91:d8: 1f:93:6c:a1:4a:6f:04:27:d5:c9:05:1f:0f:0d:b7: 83:c5:81:e5:c0:06:3d:70:c3:f2:53:51:cc:4d:59: fb:2c:ee:59:ca:22:2a:ae:8e:09:7b:f2:67:b8:fc: 8e:9f:ac:89:e7:4e:c7:09:2c:9a:c8:f8:0e:ab:83: bd:9b:3a:1d:a4:18:63:45:a7:27:5d:39:2b:e2:b7: be:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:0C:BF:74:37:F9:04:79:D0:0E:9E:AC:FF:FB:AC:B7:B7:35:95:F7 X509v3 Authority Key Identifier: keyid:3A:AF:FB:B7:EA:4A:60:D7:7B:B4:42:84:AC:BF:25:C3:98:BA:9A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq_7t-pKYNd7tEKErL8lw5i6mm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8E3D/0AB4386A584E11EC9FCF1779C4F9AE02/Oq_7t-pKYNd7tEKErL8lw5i6mm0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:6c:e4:ee:51:3c:ae:4c:1a:1c:3b:6c:53:5b:31:57:e6:35: 5d:23:ad:9c:7a:f5:df:95:fa:ff:5f:6b:f1:05:0f:47:46:f0: 23:11:50:6f:2f:70:87:52:0a:1e:66:b9:2e:d5:95:70:21:7d: ab:92:73:78:9a:83:f5:d8:c2:c5:10:c9:60:57:e2:7d:3c:3f: 3a:7c:1f:7b:2a:ce:ed:55:0f:e5:5d:5e:8e:03:ff:9b:42:b2: 27:b5:5e:ca:5f:43:fa:59:98:90:61:2a:30:1d:80:d5:2d:a9: a8:4b:06:6f:d2:00:84:53:1e:8b:dd:55:7b:a2:fe:4e:92:7e: 2b:72:c4:1c:bf:52:90:ba:56:ec:87:71:34:b4:a3:d5:93:d0: 2f:79:e7:b7:d3:b0:ba:38:38:7d:04:af:ec:cc:88:fd:0d:9a: 61:a9:d6:3d:e4:30:34:0c:07:b0:9e:e0:52:06:5d:64:b9:db: b5:0f:1b:66:2b:c6:19:98:5a:a2:35:fe:78:55:78:4a:e9:0d: 26:ee:7e:aa:60:42:5c:a0:ab:b5:8a:ea:91:54:cb:c4:7b:97: 5b:b1:fd:1a:a2:46:51:1c:00:81:9f:0d:f4:50:08:3b:6e:b3: 95:81:c0:8e:2c:c8:a1:2d:f1:2b:3a:a5:0c:21:a5:a3:30:93: 41:2c:fe:b8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhFM0QxMTAvBgNVBAUTKDNBQUZGQkI3RUE0QTYwRDc3QkI0NDI4NEFDQkYyNUMz OThCQTlBNkQwHhcNMjYwNjIwMjMzODQ2WhcNMjYwNjI3MjMzODQ2WjAYMRYwFAYD VQQDEw02YTM3MjQ4Ny1iODBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlCtLf1uGyWI/SoTyBIzvP+qOFvMgr9k0IPzhykGdqa5dokD2k3qn4YIrdbNS JT3tx+D4CLKJ4heJeeIssGuUhQOBZArSoe3njDE8infuHnHEMpxm+aTM6ZlRWRwy 9ohynFBjSzQO8FXQpEOZg7qR9Y8zHR792YxHR3qlvRPbEnIfA2O91hGp0Tu/kUJx cU2yprejUYU3DO6oQYyK6o8bega92G8S+ZJYudqE8GKWY/dtkdgfk2yhSm8EJ9XJ BR8PDbeDxYHlwAY9cMPyU1HMTVn7LO5ZyiIqro4Je/JnuPyOn6yJ507HCSyayPgO q4O9mzodpBhjRacnXTkr4re+zQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOMMv3Q3 +QR50A6erP/7rLe3NZX3MB8GA1UdIwQYMBaAFDqv+7fqSmDXe7RChKy/JcOYuppt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEUzRC8wQUI0Mzg2QTU4 NEUxMUVDOUZDRjE3NzlDNEY5QUUwMi9PcV83dC1wS1lOZDd0RUtFckw4bHc1aTZt bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09xXzd0LXBLWU5kN3RFS0VyTDhsdzVpNm1tMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEUzRC8wQUI0Mzg2QTU4NEUxMUVDOUZDRjE3NzlDNEY5QUUwMi9PcV83dC1wS1lO ZDd0RUtFckw4bHc1aTZtbTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAp2zk7lE8rkwaHDtsU1sxV+Y1XSOtnHr135X6/19r8QUPR0bwIxFQby9wh1IK Hma5LtWVcCF9q5JzeJqD9djCxRDJYFfifTw/OnwfeyrO7VUP5V1ejgP/m0KyJ7Ve yl9D+lmYkGEqMB2A1S2pqEsGb9IAhFMei91Ve6L+TpJ+K3LEHL9SkLpW7IdxNLSj 1ZPQL3nnt9Owujg4fQSv7MyI/Q2aYanWPeQwNAwHsJ7gUgZdZLnbtQ8bZivGGZha ojX+eFV4SukNJu5+qmBCXKCrtYrqkVTLxHuXW7H9GqJGURwAgZ8N9FAIO26zlYHA jizIoS3xKzqlDCGlozCTQSz+uA== -----END CERTIFICATE-----Generated at Sun Jun 21 07:18:01 2026 by rpki-client