$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.mft File: grPUpZa7l4hVoVXKr6iyYlMw3o0.mft (raw, json) Hash identifier: PnokmK9W0cN3YKQiPUv1CoUjsx1emgi8Ryll5vON/Z8= Subject key identifier: 65:C6:AD:2D:8B:DE:E1:32:6D:27:9E:F8:16:FC:E0:41:EB:2C:2E:68 Authority key identifier: 82:B3:D4:A5:96:BB:97:88:55:A1:55:CA:AF:A8:B2:62:53:30:DE:8D Certificate issuer: /CN=A91FC42A/serialNumber=82B3D4A596BB978855A155CAAFA8B2625330DE8D Certificate serial: 0E49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grPUpZa7l4hVoVXKr6iyYlMw3o0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.mft Manifest number: 0E40 Signing time: Mon 22 Jun 2026 17:45:38 +0000 Manifest this update: Mon 22 Jun 2026 17:45:37 +0000 Manifest next update: Mon 29 Jun 2026 17:45:37 +0000 Files and hashes: 1: grPUpZa7l4hVoVXKr6iyYlMw3o0.crl (hash: Gv56v2rVvvpOUqxww3Ys71neeKm7eUzQ1osotQB76FA=) 2: E4653316C87211E9ADADA185C4F9AE02.roa (hash: HF4nucogvlWev/6+Vaa0aM/i/xbw1FYeTT4JnV0mPb8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.crl rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grPUpZa7l4hVoVXKr6iyYlMw3o0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Jun 2026 17:45:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3657 (0xe49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC42A, serialNumber=82B3D4A596BB978855A155CAAFA8B2625330DE8D Validity Not Before: Jun 22 17:45:37 2026 GMT Not After : Jun 29 17:45:37 2026 GMT Subject: CN=6a3974c2-766c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1a:7a:d3:5c:d7:43:5c:74:f4:61:20:1d:b1: ed:e5:58:39:2a:4d:84:58:fa:92:23:be:71:6e:c8: dd:a4:78:ca:8e:d6:d9:1d:7c:5d:96:a0:53:c7:26: 22:f7:f1:ef:43:43:e8:e0:b9:93:5f:ea:26:6f:ca: 10:55:24:06:c0:5c:c9:6c:29:23:88:4c:9c:f6:ca: 13:e4:67:18:78:98:c8:f5:8f:1e:9f:07:dc:a3:d9: cc:1e:4c:98:f1:20:e3:ac:11:62:d7:95:bb:03:d0: 91:12:a2:71:f7:20:cb:70:9f:d9:61:ec:74:05:1f: 6b:b8:c6:05:e0:a6:d6:4f:d4:24:83:52:f1:81:10: 9a:2c:a7:10:73:bf:9e:9e:a8:dd:79:9d:a9:3b:6a: 3d:1d:f0:23:2d:02:a6:f5:77:bd:c2:4e:af:1c:99: 95:f0:b4:23:de:0a:87:e0:77:8d:70:e7:be:60:7a: 3c:96:d5:62:45:86:44:56:79:04:ac:7c:47:ab:f0: ec:72:23:15:88:e7:4b:6d:1c:3c:d8:6c:b0:c1:c8: f5:59:87:c9:a5:23:3b:4f:61:74:6d:8c:23:21:1d: 2a:61:4c:36:76:cc:f3:ee:f9:bc:80:ec:2b:c1:ba: 2a:c0:e5:5b:af:65:ea:8b:e2:9e:9f:fc:00:02:e5: 55:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:C6:AD:2D:8B:DE:E1:32:6D:27:9E:F8:16:FC:E0:41:EB:2C:2E:68 X509v3 Authority Key Identifier: keyid:82:B3:D4:A5:96:BB:97:88:55:A1:55:CA:AF:A8:B2:62:53:30:DE:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grPUpZa7l4hVoVXKr6iyYlMw3o0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:0f:c2:f8:cd:1c:16:48:76:d3:ff:f7:f4:3a:3a:f8:e5:c3: 1c:40:7a:54:15:ea:88:61:8a:5b:05:63:96:7b:91:f8:3d:5d: 71:4e:df:e1:f5:4f:ed:ae:fd:44:77:47:3e:dd:39:b8:1d:26: c3:a3:20:33:06:c4:fd:49:1c:10:22:6a:c9:4f:ba:5e:87:11: d3:2c:c1:d9:35:c0:e9:63:06:99:73:32:61:85:fa:ae:94:df: 2c:59:04:1f:d8:9a:84:cc:c2:f3:e7:76:0d:47:00:72:a2:dd: 3a:80:d3:a9:d0:84:7c:0b:e2:02:31:99:ef:70:25:e5:b0:92: 6a:ca:78:7d:0f:29:98:5a:38:80:79:a8:38:28:23:29:d4:67: 51:62:ca:3e:1c:75:ce:90:e3:86:06:30:a6:fc:09:50:2b:a6: d8:7d:ff:fe:46:dd:e5:2b:5c:53:3b:8b:b8:7b:9d:44:2c:38: bf:88:b1:25:7d:a6:b1:18:ac:c5:fe:1a:6b:58:fc:66:2f:c0: 64:48:30:e8:34:db:21:2a:b6:00:92:9e:00:6f:b9:90:e0:ba: 04:0c:ff:f9:c5:0b:0c:35:d4:2b:f8:0b:e1:57:78:da:3d:ef: e7:e0:05:7f:de:ee:35:12:8d:dc:71:b1:cc:24:b2:cf:87:25: 81:f5:13:3c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM0MkExMTAvBgNVBAUTKDgyQjNENEE1OTZCQjk3ODg1NUExNTVDQUFGQThCMjYy NTMzMERFOEQwHhcNMjYwNjIyMTc0NTM3WhcNMjYwNjI5MTc0NTM3WjAYMRYwFAYD VQQDEw02YTM5NzRjMi03NjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsxp601zXQ1x09GEgHbHt5Vg5Kk2EWPqSI75xbsjdpHjKjtbZHXxdlqBTxyYi 9/HvQ0Po4LmTX+omb8oQVSQGwFzJbCkjiEyc9soT5GcYeJjI9Y8enwfco9nMHkyY 8SDjrBFi15W7A9CREqJx9yDLcJ/ZYex0BR9ruMYF4KbWT9Qkg1LxgRCaLKcQc7+e nqjdeZ2pO2o9HfAjLQKm9Xe9wk6vHJmV8LQj3gqH4HeNcOe+YHo8ltViRYZEVnkE rHxHq/DsciMViOdLbRw82Gywwcj1WYfJpSM7T2F0bYwjIR0qYUw2dszz7vm8gOwr wboqwOVbr2Xqi+Ken/wAAuVVUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGXGrS2L 3uEybSee+Bb84EHrLC5oMB8GA1UdIwQYMBaAFIKz1KWWu5eIVaFVyq+osmJTMN6N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzQyQS9GM0I1MkU3MkM4 NzAxMUU5OERFQ0E1ODFDNEY5QUUwMi9nclBVcFphN2w0aFZvVlhLcjZpeVlsTXcz bzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dyUFVwWmE3bDRoVm9WWEtyNml5WWxNdzNvMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzQyQS9GM0I1MkU3MkM4NzAxMUU5OERFQ0E1ODFDNEY5QUUwMi9nclBVcFphN2w0 aFZvVlhLcjZpeVlsTXczbzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhg/C+M0cFkh20//39Do6+OXDHEB6VBXqiGGKWwVjlnuR+D1dcU7f4fVP7a79 RHdHPt05uB0mw6MgMwbE/UkcECJqyU+6XocR0yzB2TXA6WMGmXMyYYX6rpTfLFkE H9iahMzC8+d2DUcAcqLdOoDTqdCEfAviAjGZ73Al5bCSasp4fQ8pmFo4gHmoOCgj KdRnUWLKPhx1zpDjhgYwpvwJUCum2H3//kbd5StcUzuLuHudRCw4v4ixJX2msRis xf4aa1j8Zi/AZEgw6DTbISq2AJKeAG+5kOC6BAz/+cULDDXUK/gL4Vd42j3v5+AF f97uNRKN3HGxzCSyz4clgfUTPA== -----END CERTIFICATE-----Generated at Wed Jun 24 11:27:08 2026 by rpki-client