$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDC31/10C7AFF04A3111F19BD3103690833773/1cgQTMoJtQwAk-50IwWIXbT_N9M.mft File: 1cgQTMoJtQwAk-50IwWIXbT_N9M.mft (raw, json) Hash identifier: 0JlRbO9TEmPebD+94BLD7KuhJARahW/9i0RrhXesrbY= Subject key identifier: C2:CA:51:05:7E:44:58:14:04:3D:EF:6B:11:D4:2F:11:45:09:0F:22 Authority key identifier: D5:C8:10:4C:CA:09:B5:0C:00:93:EE:74:23:05:88:5D:B4:FF:37:D3 Certificate issuer: /CN=A91FDC31/serialNumber=D5C8104CCA09B50C0093EE742305885DB4FF37D3 Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cgQTMoJtQwAk-50IwWIXbT_N9M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDC31/10C7AFF04A3111F19BD3103690833773/1cgQTMoJtQwAk-50IwWIXbT_N9M.mft Manifest number: 10 Signing time: Fri 05 Jun 2026 09:31:21 +0000 Manifest this update: Fri 05 Jun 2026 09:31:20 +0000 Manifest next update: Fri 12 Jun 2026 09:31:20 +0000 Files and hashes: 1: 1cgQTMoJtQwAk-50IwWIXbT_N9M.crl (hash: BRhHUOX1gf9RfN6FJVROarWnp7EItXB2ISl3BAaOezs=) 2: C25C2A1A4A3211F1BD5DF90392833773.roa (hash: iVkTRkOcMKD5H0a8Zq7n5fJ183jZidSEFDRuqOcWQeg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDC31/10C7AFF04A3111F19BD3103690833773/1cgQTMoJtQwAk-50IwWIXbT_N9M.crl rsync://rpki.apnic.net/member_repository/A91FDC31/10C7AFF04A3111F19BD3103690833773/1cgQTMoJtQwAk-50IwWIXbT_N9M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cgQTMoJtQwAk-50IwWIXbT_N9M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 09:31:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDC31, serialNumber=D5C8104CCA09B50C0093EE742305885DB4FF37D3 Validity Not Before: Jun 5 09:31:20 2026 GMT Not After : Jun 12 09:31:20 2026 GMT Subject: CN=6a229768-f523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:4a:83:2c:6e:0d:97:2b:8e:34:cc:ee:8b:e0: 8a:12:f9:96:7b:1a:e8:3c:fa:4f:5c:ad:0a:56:8b: 73:4a:d1:40:f3:39:45:68:bb:0e:26:5b:e8:5a:03: 8c:43:76:ea:00:16:40:cc:eb:72:b2:50:16:f4:1a: ef:34:69:d9:4f:a5:f7:1c:74:0e:e7:cf:6a:06:61: df:37:6e:31:ff:85:48:d7:fc:c9:d9:4e:88:23:2c: 60:61:74:c9:f3:b4:27:5f:2e:db:e9:71:0f:83:3e: 6f:99:cd:2a:0e:a5:a3:14:cc:f9:db:1b:f3:fa:3e: 21:8b:86:cd:42:40:3a:3c:e6:ec:87:b1:a9:9c:46: 14:1c:34:6f:9c:82:bf:f7:c9:af:6a:76:c7:37:ff: 75:cc:9a:e1:c8:58:38:2f:8a:39:fb:b9:48:4f:00: f8:18:25:7c:c8:15:eb:10:00:5e:b3:ee:a7:cc:51: 2b:83:de:27:c5:65:1a:c6:c6:9d:27:a8:b6:0a:d2: 46:f6:07:b8:d7:22:e9:3e:66:ee:67:2f:47:2c:2a: 4c:5e:65:1f:bf:16:ba:f9:52:a1:14:43:97:38:bd: 5c:02:1f:2d:8f:47:26:dc:b7:56:b2:0e:ad:ee:a6: 16:32:be:04:ba:79:b0:bc:f2:47:81:51:b0:42:e4: 95:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:CA:51:05:7E:44:58:14:04:3D:EF:6B:11:D4:2F:11:45:09:0F:22 X509v3 Authority Key Identifier: keyid:D5:C8:10:4C:CA:09:B5:0C:00:93:EE:74:23:05:88:5D:B4:FF:37:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDC31/10C7AFF04A3111F19BD3103690833773/1cgQTMoJtQwAk-50IwWIXbT_N9M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cgQTMoJtQwAk-50IwWIXbT_N9M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC31/10C7AFF04A3111F19BD3103690833773/1cgQTMoJtQwAk-50IwWIXbT_N9M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:70:3a:f7:b5:ee:05:ce:20:98:a8:37:2c:00:19:bd:70:b8: 21:3e:a3:87:10:5b:2a:64:9f:ed:97:9b:ed:93:ed:99:92:7e: be:ef:ed:21:ae:b4:5f:cc:39:6f:f6:11:62:e1:70:8e:1a:85: 02:8c:27:ff:49:bf:b3:c3:d7:3a:b4:5d:9c:83:cd:05:8a:c7: e1:6a:84:93:6c:72:4e:0e:2c:dd:41:34:eb:d9:f8:f9:9d:7c: 59:7f:43:fd:ce:d9:58:1c:b7:00:fe:9c:a1:d4:ae:82:fd:57: 2c:6c:bd:c9:84:1c:51:b0:cc:5e:bf:c9:ad:cd:5a:33:98:34: 35:dc:b1:89:63:4e:8c:26:81:c9:1c:5b:30:27:5c:ee:31:74: f7:64:aa:f4:01:4d:75:ad:39:1e:3a:6b:00:a0:b8:7d:13:58: d0:7a:1f:d0:ba:c4:20:20:3b:ff:73:97:3c:45:8c:14:2b:d8: dc:2c:06:e6:38:3f:7e:38:e0:3c:f4:62:49:2d:c6:df:41:62: d8:5e:8b:4e:5e:ea:ef:7b:f9:2c:69:c8:a0:89:a9:45:86:03: 52:e8:3b:be:40:65:ef:fa:2c:07:22:e8:0d:71:69:f7:de:dd: 61:89:1a:47:e4:58:70:c0:c0:99:db:d1:02:ff:37:8d:ae:6d: 8a:a6:d4:87 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG REMzMTExMC8GA1UEBRMoRDVDODEwNENDQTA5QjUwQzAwOTNFRTc0MjMwNTg4NURC NEZGMzdEMzAeFw0yNjA2MDUwOTMxMjBaFw0yNjA2MTIwOTMxMjBaMBgxFjAUBgNV BAMTDTZhMjI5NzY4LWY1MjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDnSoMsbg2XK440zO6L4IoS+ZZ7Gug8+k9crQpWi3NK0UDzOUVouw4mW+haA4xD duoAFkDM63KyUBb0Gu80adlPpfccdA7nz2oGYd83bjH/hUjX/MnZTogjLGBhdMnz tCdfLtvpcQ+DPm+ZzSoOpaMUzPnbG/P6PiGLhs1CQDo85uyHsamcRhQcNG+cgr/3 ya9qdsc3/3XMmuHIWDgvijn7uUhPAPgYJXzIFesQAF6z7qfMUSuD3ifFZRrGxp0n qLYK0kb2B7jXIuk+Zu5nL0csKkxeZR+/Frr5UqEUQ5c4vVwCHy2PRybct1ayDq3u phYyvgS6ebC88keBUbBC5JX7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUwspRBX5E WBQEPe9rEdQvEUUJDyIwHwYDVR0jBBgwFoAU1cgQTMoJtQwAk+50IwWIXbT/N9Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZEQzMxLzEwQzdBRkYwNEEz MTExRjE5QkQzMTAzNjkwODMzNzczLzFjZ1FUTW9KdFF3QWstNTBJd1dJWGJUX045 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMWNnUVRNb0p0UXdBay01MEl3V0lYYlRfTjlNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE QzMxLzEwQzdBRkYwNEEzMTExRjE5QkQzMTAzNjkwODMzNzczLzFjZ1FUTW9KdFF3 QWstNTBJd1dJWGJUX045TS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBbcDr3te4FziCYqDcsABm9cLghPqOHEFsqZJ/tl5vtk+2Zkn6+7+0hrrRfzDlv 9hFi4XCOGoUCjCf/Sb+zw9c6tF2cg80FisfhaoSTbHJODizdQTTr2fj5nXxZf0P9 ztlYHLcA/pyh1K6C/VcsbL3JhBxRsMxev8mtzVozmDQ13LGJY06MJoHJHFswJ1zu MXT3ZKr0AU11rTkeOmsAoLh9E1jQeh/QusQgIDv/c5c8RYwUK9jcLAbmOD9+OOA8 9GJJLcbfQWLYXotOXurve/ksacigialFhgNS6Du+QGXv+iwHIugNcWn33t1hiRpH 5FhwwMCZ29EC/zeNrm2KptSH -----END CERTIFICATE-----Generated at Sat Jun 6 15:23:23 2026 by rpki-client