$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft File: 8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft (raw, json) Hash identifier: XzMt4qn4E0lMwYqunapycHUw69Zbv99kTKa/u41nd5Q= Subject key identifier: D1:8D:60:5E:B3:BA:4A:43:CA:5F:A9:96:46:19:F1:87:FE:F9:AF:A7 Authority key identifier: F0:FD:9E:5A:6D:C9:45:9A:88:E0:11:3F:24:F5:61:A6:FD:D7:40:5F Certificate issuer: /CN=A91FDC84/serialNumber=F0FD9E5A6DC9459A88E0113F24F561A6FDD7405F Certificate serial: 6F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8P2eWm3JRZqI4BE_JPVhpv3XQF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft Manifest number: 6A Signing time: Mon 01 Jun 2026 08:43:39 +0000 Manifest this update: Mon 01 Jun 2026 08:43:39 +0000 Manifest next update: Mon 08 Jun 2026 08:43:39 +0000 Files and hashes: 1: 8P2eWm3JRZqI4BE_JPVhpv3XQF8.crl (hash: fs+o4vIUQJVTd3+bEIFOEfTSdPoIbTYI6fn/Jlsqt40=) 2: 635E7900C51211F093EC3E85C4F9AE02.roa (hash: mjo3hh7WWuFxyFUKnVZbsH/uC4E6yqFulVk1pK4NVdw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.crl rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8P2eWm3JRZqI4BE_JPVhpv3XQF8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 08:43:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 111 (0x6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDC84, serialNumber=F0FD9E5A6DC9459A88E0113F24F561A6FDD7405F Validity Not Before: Jun 1 08:43:39 2026 GMT Not After : Jun 8 08:43:39 2026 GMT Subject: CN=6a1d463b-d093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:59:9e:f6:80:f8:97:4d:aa:46:2e:db:cd:42: 0c:8b:f5:4b:b5:09:14:44:cd:67:0b:42:ab:02:7d: 3d:c7:e2:ba:11:ac:8d:3d:1c:84:eb:c9:21:f8:f1: 72:9c:f0:b0:a2:fb:6d:a2:92:b0:72:d6:9a:43:ef: 8d:7d:e8:e9:cc:82:95:bc:e2:54:ae:d5:d4:82:28: 49:e5:7e:82:da:ec:37:95:3c:a9:1c:fd:41:b0:e2: 85:98:63:c6:32:72:07:31:5e:53:d1:57:12:b0:35: f2:5d:cb:5e:50:f0:ca:73:b0:6c:20:dd:db:e6:76: bc:c7:4f:92:8e:97:ae:00:6f:b5:5b:89:a1:29:2f: a0:26:01:63:ca:57:5d:2e:7e:be:1d:8a:d9:f0:a0: 42:c4:34:c4:e4:91:17:d2:01:5e:b4:9c:19:fb:4a: 87:0f:14:77:93:5f:3b:70:5c:9e:91:de:0b:77:c0: bd:b7:ea:92:85:93:40:61:46:5c:53:ff:1b:e6:b7: 1b:2b:b2:6a:cd:5a:eb:4b:9f:e9:45:fd:c9:bb:9b: 92:73:8b:be:50:66:bd:61:59:dc:d4:e5:91:e9:04: ed:df:cd:11:b4:63:dc:11:21:bf:c9:f3:48:1d:0a: 66:2a:ac:96:1f:c4:fb:10:66:08:07:33:c2:77:2f: d3:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:8D:60:5E:B3:BA:4A:43:CA:5F:A9:96:46:19:F1:87:FE:F9:AF:A7 X509v3 Authority Key Identifier: keyid:F0:FD:9E:5A:6D:C9:45:9A:88:E0:11:3F:24:F5:61:A6:FD:D7:40:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8P2eWm3JRZqI4BE_JPVhpv3XQF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:c2:81:98:3a:52:9d:cb:29:50:25:f8:29:15:1c:e5:9b:16: 1e:34:66:bc:de:ed:d1:fd:1e:b4:ac:78:ba:06:de:ee:b5:3f: 91:8e:ef:ec:58:e6:ec:70:de:d5:87:a4:e0:0b:90:de:67:86: 23:d6:99:27:1f:b0:b6:6d:77:68:8d:54:27:e0:ca:bf:2f:7e: 95:20:bb:6a:cf:45:70:19:bf:e9:a2:b1:5f:c3:61:53:8e:28: 00:95:8d:8b:6a:d6:3d:6b:10:97:81:08:d5:4f:64:1b:b2:00: be:92:ae:a1:95:a0:ba:ef:07:a3:80:72:c4:12:e7:e4:4a:f1: ff:8d:d5:5a:c2:4e:9c:4b:92:1d:04:3f:55:77:97:11:b2:2a: 7b:8e:0d:26:19:72:41:2a:78:fc:eb:86:18:e7:41:9f:b1:8c: 44:b2:5f:e5:c6:d1:4a:33:24:07:40:26:0e:fa:51:14:96:82: 6c:31:23:bf:8d:00:f5:d2:c3:71:c3:e1:e0:ac:a4:02:9d:33: 2c:99:31:eb:00:8e:0a:98:e9:19:2c:e1:ed:44:89:3f:9a:a3: ef:ac:c1:7b:e1:d5:c7:9d:96:c0:22:59:ce:f3:37:12:8d:62: 3a:d8:66:94:12:a5:68:63:03:18:49:60:aa:9c:a9:3b:69:c8: a6:7a:42:b3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBbzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG REM4NDExMC8GA1UEBRMoRjBGRDlFNUE2REM5NDU5QTg4RTAxMTNGMjRGNTYxQTZG REQ3NDA1RjAeFw0yNjA2MDEwODQzMzlaFw0yNjA2MDgwODQzMzlaMBgxFjAUBgNV BAMTDTZhMWQ0NjNiLWQwOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvWZ72gPiXTapGLtvNQgyL9Uu1CRREzWcLQqsCfT3H4roRrI09HITrySH48XKc 8LCi+22ikrBy1ppD74196OnMgpW84lSu1dSCKEnlfoLa7DeVPKkc/UGw4oWYY8Yy cgcxXlPRVxKwNfJdy15Q8MpzsGwg3dvmdrzHT5KOl64Ab7VbiaEpL6AmAWPKV10u fr4ditnwoELENMTkkRfSAV60nBn7SocPFHeTXztwXJ6R3gt3wL236pKFk0BhRlxT /xvmtxsrsmrNWutLn+lF/cm7m5Jzi75QZr1hWdzU5ZHpBO3fzRG0Y9wRIb/J80gd CmYqrJYfxPsQZggHM8J3L9PRAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU0Y1gXrO6 SkPKX6mWRhnxh/75r6cwHwYDVR0jBBgwFoAU8P2eWm3JRZqI4BE/JPVhpv3XQF8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZEQzg0L0RGQjQ5QzQ4QzUx MDExRjA5RDhEQjc1RkM0RjlBRTAyLzhQMmVXbTNKUlpxSTRCRV9KUFZocHYzWFFG OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOFAyZVdtM0pSWnFJNEJFX0pQVmhwdjNYUUY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE Qzg0L0RGQjQ5QzQ4QzUxMDExRjA5RDhEQjc1RkM0RjlBRTAyLzhQMmVXbTNKUlpx STRCRV9KUFZocHYzWFFGOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQACwoGYOlKdyylQJfgpFRzlmxYeNGa83u3R/R60rHi6Bt7utT+Rju/sWObscN7V h6TgC5DeZ4Yj1pknH7C2bXdojVQn4Mq/L36VILtqz0VwGb/porFfw2FTjigAlY2L atY9axCXgQjVT2QbsgC+kq6hlaC67wejgHLEEufkSvH/jdVawk6cS5IdBD9Vd5cR sip7jg0mGXJBKnj864YY50GfsYxEsl/lxtFKMyQHQCYO+lEUloJsMSO/jQD10sNx w+HgrKQCnTMsmTHrAI4KmOkZLOHtRIk/mqPvrMF74dXHnZbAIlnO8zcSjWI62GaU EqVoYwMYSWCqnKk7acimekKz -----END CERTIFICATE-----Generated at Tue Jun 2 21:23:13 2026 by rpki-client