$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB4F7/12BAB8968C6F11F0BC03A828C4F9AE02/rHzRY2nXDaZnWZ2jaOICQknLAvw.mft File: rHzRY2nXDaZnWZ2jaOICQknLAvw.mft (raw, json) Hash identifier: mn9JFfvNBwKxkZmr+8UTOJhjYbqrhDXWpuNgS+0kybw= Subject key identifier: E5:B3:CC:BD:BF:3B:E7:D0:9B:72:F4:D3:26:26:62:59:6B:A1:F9:44 Authority key identifier: AC:7C:D1:63:69:D7:0D:A6:67:59:9D:A3:68:E2:02:42:49:CB:02:FC Certificate issuer: /CN=A91FB4F7/serialNumber=AC7CD16369D70DA667599DA368E2024249CB02FC Certificate serial: 8B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rHzRY2nXDaZnWZ2jaOICQknLAvw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB4F7/12BAB8968C6F11F0BC03A828C4F9AE02/rHzRY2nXDaZnWZ2jaOICQknLAvw.mft Manifest number: 89 Signing time: Mon 01 Jun 2026 08:17:52 +0000 Manifest this update: Mon 01 Jun 2026 08:17:51 +0000 Manifest next update: Mon 08 Jun 2026 08:17:51 +0000 Files and hashes: 1: rHzRY2nXDaZnWZ2jaOICQknLAvw.crl (hash: 4hXdcpaePqiOoOm2xBJBj17TLx3ZN55UbcU/1o060zk=) 2: 53AEC77E8C7511F0BEEC137FC4F9AE02.roa (hash: TEkM5L9gYDSbXl7l7QCjyJ+tRJyP8a0ZBB6nUCwEyKY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB4F7/12BAB8968C6F11F0BC03A828C4F9AE02/rHzRY2nXDaZnWZ2jaOICQknLAvw.crl rsync://rpki.apnic.net/member_repository/A91FB4F7/12BAB8968C6F11F0BC03A828C4F9AE02/rHzRY2nXDaZnWZ2jaOICQknLAvw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rHzRY2nXDaZnWZ2jaOICQknLAvw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 08:17:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB4F7, serialNumber=AC7CD16369D70DA667599DA368E2024249CB02FC Validity Not Before: Jun 1 08:17:51 2026 GMT Not After : Jun 8 08:17:51 2026 GMT Subject: CN=6a1d402f-7293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:58:08:6c:8f:17:73:53:b2:b0:7c:98:2f:46: 7e:0a:5d:28:2f:1e:59:c0:92:25:96:c8:da:87:17: 87:cf:0a:12:a8:7b:a0:6a:33:65:22:b6:62:11:6b: 40:c1:46:c2:24:d5:37:15:dd:96:1c:e8:e6:4d:bb: f9:77:d1:f6:08:f2:27:9b:11:24:6f:20:68:da:40: c3:11:52:95:4b:f2:4e:7b:76:1d:fb:9d:f9:6e:b2: 02:53:9a:0b:2a:5b:4e:bc:f9:5b:9b:54:44:37:bd: ba:fb:75:0f:93:3a:4b:3f:ce:72:ee:b3:5c:d4:19: 1f:0a:8b:05:3a:45:2a:82:2a:1b:a4:97:5a:52:71: ba:0c:23:d7:14:2f:d3:5c:e5:4d:f4:3d:54:b9:34: b4:9e:ba:34:33:ff:07:c8:f5:80:42:be:7c:f6:b7: 48:57:a5:79:0a:a6:f5:b3:a5:74:1a:32:26:d2:4d: ab:a5:e9:61:ec:bb:52:9e:f8:b7:38:ba:3e:d4:d5: 0b:7c:3a:53:4a:73:72:14:be:08:9e:67:69:07:06: 91:7e:f0:42:97:01:c9:a3:3b:32:c9:bd:6a:71:8e: 12:7d:ba:c8:c0:15:bc:1c:34:57:a4:9e:7e:b0:19: 7f:59:26:b9:64:d3:19:49:cf:b8:38:1b:f3:06:ca: 23:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:B3:CC:BD:BF:3B:E7:D0:9B:72:F4:D3:26:26:62:59:6B:A1:F9:44 X509v3 Authority Key Identifier: keyid:AC:7C:D1:63:69:D7:0D:A6:67:59:9D:A3:68:E2:02:42:49:CB:02:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB4F7/12BAB8968C6F11F0BC03A828C4F9AE02/rHzRY2nXDaZnWZ2jaOICQknLAvw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rHzRY2nXDaZnWZ2jaOICQknLAvw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB4F7/12BAB8968C6F11F0BC03A828C4F9AE02/rHzRY2nXDaZnWZ2jaOICQknLAvw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:ce:22:c5:3d:0b:ea:97:24:50:16:b1:24:b3:a4:e4:f5:61: 5a:f3:c6:f0:6d:48:52:98:49:4b:3e:8b:c6:5c:df:ba:a5:4c: 37:54:b7:e0:84:2c:c9:22:2a:fe:1b:33:40:7f:1c:03:e4:12: eb:8c:44:40:02:b6:07:02:ce:a7:92:e4:ec:d2:e3:c0:50:fe: 85:50:b7:d8:d1:d5:ef:47:58:80:8e:5c:6b:dd:f8:72:f0:82: d6:74:dd:ff:95:ad:75:df:ce:78:4a:a0:ab:1c:60:1d:63:88: 26:9f:22:3e:03:cc:44:92:7d:be:5a:7a:29:69:15:4d:e4:18: b7:05:54:81:67:13:cd:78:85:b0:ad:a8:5a:04:c2:2b:dc:d3: 32:ca:f4:99:8a:a5:0f:fc:9e:36:c6:29:9c:49:30:18:27:4c: 7e:6d:89:61:cc:b6:c8:80:14:a2:14:ff:c8:94:bc:60:11:f7: fd:fe:42:6c:e6:8e:53:76:5e:86:61:fd:b1:53:b1:94:03:3e: 98:20:82:ef:c7:da:a9:d0:cf:0a:4d:35:00:27:93:09:ae:11: fe:9b:2c:ac:5e:c1:d9:90:c8:3c:4c:0d:cd:88:b6:f4:7a:70: d8:dd:36:23:9d:fe:8a:ff:05:bb:f3:b1:05:d9:96:8a:7c:16: 11:3a:4c:b4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI0RjcxMTAvBgNVBAUTKEFDN0NEMTYzNjlENzBEQTY2NzU5OURBMzY4RTIwMjQy NDlDQjAyRkMwHhcNMjYwNjAxMDgxNzUxWhcNMjYwNjA4MDgxNzUxWjAYMRYwFAYD VQQDEw02YTFkNDAyZi03MjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1gIbI8Xc1OysHyYL0Z+Cl0oLx5ZwJIllsjahxeHzwoSqHugajNlIrZiEWtA wUbCJNU3Fd2WHOjmTbv5d9H2CPInmxEkbyBo2kDDEVKVS/JOe3Yd+535brICU5oL KltOvPlbm1REN726+3UPkzpLP85y7rNc1BkfCosFOkUqgiobpJdaUnG6DCPXFC/T XOVN9D1UuTS0nro0M/8HyPWAQr589rdIV6V5Cqb1s6V0GjIm0k2rpelh7LtSnvi3 OLo+1NULfDpTSnNyFL4InmdpBwaRfvBClwHJozsyyb1qcY4SfbrIwBW8HDRXpJ5+ sBl/WSa5ZNMZSc+4OBvzBsoj9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOWzzL2/ O+fQm3L00yYmYllroflEMB8GA1UdIwQYMBaAFKx80WNp1w2mZ1mdo2jiAkJJywL8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjRGNy8xMkJBQjg5NjhD NkYxMUYwQkMwM0E4MjhDNEY5QUUwMi9ySHpSWTJuWERhWm5XWjJqYU9JQ1FrbkxB dncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JIelJZMm5YRGFabldaMmphT0lDUWtuTEF2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjRGNy8xMkJBQjg5NjhDNkYxMUYwQkMwM0E4MjhDNEY5QUUwMi9ySHpSWTJuWERh Wm5XWjJqYU9JQ1FrbkxBdncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGs4ixT0L6pckUBaxJLOk5PVhWvPG8G1IUphJSz6LxlzfuqVMN1S34IQsySIq /hszQH8cA+QS64xEQAK2BwLOp5Lk7NLjwFD+hVC32NHV70dYgI5ca934cvCC1nTd /5Wtdd/OeEqgqxxgHWOIJp8iPgPMRJJ9vlp6KWkVTeQYtwVUgWcTzXiFsK2oWgTC K9zTMsr0mYqlD/yeNsYpnEkwGCdMfm2JYcy2yIAUohT/yJS8YBH3/f5CbOaOU3Ze hmH9sVOxlAM+mCCC78faqdDPCk01ACeTCa4R/pssrF7B2ZDIPEwNzYi29Hpw2N02 I53+iv8Fu/OxBdmWinwWETpMtA== -----END CERTIFICATE-----Generated at Tue Jun 2 21:19:00 2026 by rpki-client