$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC3D0/A706D7CE544611F18EF4CDA7A7833773/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.mft File: Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.mft (raw, json) Hash identifier: 6rQZ/PBv7wvpSe1YIHRTYzs0W2DtBgtlnbgdmarEeCA= Subject key identifier: 3B:8C:6A:B2:98:69:6D:08:E2:AB:87:20:97:75:B5:4E:5B:AA:D1:9B Authority key identifier: 02:1E:96:A7:1D:99:74:0F:F4:25:8B:EC:39:0C:4C:87:6A:37:58:E1 Certificate issuer: /CN=A91FC3D0/serialNumber=021E96A71D99740FF4258BEC390C4C876A3758E1 Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC3D0/A706D7CE544611F18EF4CDA7A7833773/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.mft Manifest number: 11 Signing time: Mon 01 Jun 2026 09:58:34 +0000 Manifest this update: Mon 01 Jun 2026 09:58:34 +0000 Manifest next update: Mon 08 Jun 2026 09:58:34 +0000 Files and hashes: 1: Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.crl (hash: F9du4JZ3Ta+z2sNVMFu8k8poeKndwcuXUDLzvTjz6Gw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC3D0/A706D7CE544611F18EF4CDA7A7833773/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.crl rsync://rpki.apnic.net/member_repository/A91FC3D0/A706D7CE544611F18EF4CDA7A7833773/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 09:58:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC3D0, serialNumber=021E96A71D99740FF4258BEC390C4C876A3758E1 Validity Not Before: Jun 1 09:58:34 2026 GMT Not After : Jun 8 09:58:34 2026 GMT Subject: CN=6a1d57ca-4657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:44:e2:f3:1b:ee:66:ea:5f:b4:fb:e7:0b:ff: c7:ff:a8:0a:80:d3:dc:05:c8:8f:14:ed:bf:a9:0f: f3:2a:b1:a2:96:e1:06:80:19:83:8b:4d:19:fa:67: 65:8d:ed:6c:36:4d:3f:4e:ea:79:f9:d2:e9:cb:56: 66:fc:93:28:14:cd:4b:37:a4:6c:35:71:e4:98:c2: bb:00:d4:06:55:2d:16:75:44:a2:d8:65:ec:46:95: 52:33:dd:74:8f:b2:a7:5d:5b:99:ec:96:62:3d:cb: 5b:45:fe:34:fd:6a:c2:91:67:7a:31:a4:90:f9:8e: 3b:b1:2f:df:14:dc:0f:9c:b5:f9:fe:9d:4d:eb:d5: ce:61:a7:d5:f7:e1:11:bb:e6:78:33:1f:b1:d6:e4: ea:4f:86:45:5f:dc:8e:0d:82:66:4c:65:3d:e0:a8: 79:7d:6b:fe:1d:27:40:74:ad:21:6b:2b:1b:7c:c7: 35:38:f4:c6:82:c8:2f:6d:f9:6a:c0:c7:c1:d8:6f: 9d:80:bc:d6:4d:9b:b9:56:2f:dc:29:63:84:e3:82: d8:ff:b0:8e:0c:2c:42:ca:9f:e6:bd:09:f0:01:f8: 12:74:99:30:ac:71:08:08:5f:ea:74:f5:c4:d2:82: 09:9d:04:31:bc:9b:d3:1f:a7:fa:7d:54:7e:86:3a: e6:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:8C:6A:B2:98:69:6D:08:E2:AB:87:20:97:75:B5:4E:5B:AA:D1:9B X509v3 Authority Key Identifier: keyid:02:1E:96:A7:1D:99:74:0F:F4:25:8B:EC:39:0C:4C:87:6A:37:58:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC3D0/A706D7CE544611F18EF4CDA7A7833773/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC3D0/A706D7CE544611F18EF4CDA7A7833773/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:77:81:43:ea:0d:ab:b6:11:37:19:7b:bc:c5:96:1c:11:6b: bb:e5:c4:19:30:f8:cd:4d:89:69:84:bd:2a:9f:68:c3:64:a9: 09:6f:b7:a8:0c:32:a3:6c:c2:45:e3:d9:88:e8:a9:1a:9d:bf: f8:4d:3b:f7:e7:90:62:80:7d:b6:90:36:66:c4:02:6b:6e:e1: 1a:b4:5e:ba:e7:b0:50:13:7d:ab:56:a2:93:48:58:30:f8:94: c3:19:d2:0b:9c:1e:14:0e:c6:d2:bd:e3:25:e0:1a:03:7d:8c: 6f:88:8f:21:32:bd:94:13:34:d7:0f:ab:b2:4e:47:20:6d:12: 83:22:90:a5:20:52:9c:55:f3:ad:24:f2:87:42:d6:13:22:f3: 82:2c:51:78:7e:cd:37:e0:32:ef:ed:cf:3c:b5:53:a0:27:7a: c6:d9:ff:91:1c:57:3d:c6:bb:eb:a4:df:23:28:2a:11:7b:c8: 61:7b:d2:7f:a6:b1:4a:3c:c5:55:82:f2:7c:33:ee:0d:23:26: 4b:7f:c8:3c:ed:20:83:6c:6a:28:c6:b1:19:52:b7:31:8f:e9: 75:4a:b4:b5:9a:a1:db:a7:a7:a9:7b:8b:b7:65:de:ee:78:99: 64:5a:f6:86:81:66:2d:94:e0:9d:e9:cd:4a:93:e2:a0:f3:3e: 95:35:b8:a5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QzNEMDExMC8GA1UEBRMoMDIxRTk2QTcxRDk5NzQwRkY0MjU4QkVDMzkwQzRDODc2 QTM3NThFMTAeFw0yNjA2MDEwOTU4MzRaFw0yNjA2MDgwOTU4MzRaMBgxFjAUBgNV BAMTDTZhMWQ1N2NhLTQ2NTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUROLzG+5m6l+0++cL/8f/qAqA09wFyI8U7b+pD/MqsaKW4QaAGYOLTRn6Z2WN 7Ww2TT9O6nn50unLVmb8kygUzUs3pGw1ceSYwrsA1AZVLRZ1RKLYZexGlVIz3XSP sqddW5nslmI9y1tF/jT9asKRZ3oxpJD5jjuxL98U3A+ctfn+nU3r1c5hp9X34RG7 5ngzH7HW5OpPhkVf3I4NgmZMZT3gqHl9a/4dJ0B0rSFrKxt8xzU49MaCyC9t+WrA x8HYb52AvNZNm7lWL9wpY4Tjgtj/sI4MLELKn+a9CfAB+BJ0mTCscQgIX+p09cTS ggmdBDG8m9Mfp/p9VH6GOua7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUO4xqsphp bQjiq4cgl3W1Tluq0ZswHwYDVR0jBBgwFoAUAh6Wpx2ZdA/0JYvsOQxMh2o3WOEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZDM0QwL0E3MDZEN0NFNTQ0 NjExRjE4RUY0Q0RBN0E3ODMzNzczL0FoNldweDJaZEFfMEpZdnNPUXhNaDJvM1dP RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQWg2V3B4MlpkQV8wSll2c09ReE1oMm8zV09FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZD M0QwL0E3MDZEN0NFNTQ0NjExRjE4RUY0Q0RBN0E3ODMzNzczL0FoNldweDJaZEFf MEpZdnNPUXhNaDJvM1dPRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAtd4FD6g2rthE3GXu8xZYcEWu75cQZMPjNTYlphL0qn2jDZKkJb7eoDDKjbMJF 49mI6Kkanb/4TTv355BigH22kDZmxAJrbuEatF6657BQE32rVqKTSFgw+JTDGdIL nB4UDsbSveMl4BoDfYxviI8hMr2UEzTXD6uyTkcgbRKDIpClIFKcVfOtJPKHQtYT IvOCLFF4fs034DLv7c88tVOgJ3rG2f+RHFc9xrvrpN8jKCoRe8hhe9J/prFKPMVV gvJ8M+4NIyZLf8g87SCDbGooxrEZUrcxj+l1SrS1mqHbp6epe4u3Zd7ueJlkWvaG gWYtlOCd6c1Kk+Kg8z6VNbil -----END CERTIFICATE-----Generated at Tue Jun 2 21:17:43 2026 by rpki-client