$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft File: IWrR11qT4DeulPbJGJbS1YLY_1Q.mft (raw, json) Hash identifier: nmr2r2TBLh2mVKBbPCZggnyS9G0bLrHm54bPJYdLIBE= Subject key identifier: 8B:65:82:B9:41:B5:C9:0C:27:76:FE:2C:28:F8:32:14:E9:50:3F:5C Authority key identifier: 21:6A:D1:D7:5A:93:E0:37:AE:94:F6:C9:18:96:D2:D5:82:D8:FF:54 Certificate issuer: /CN=A91FDDD1/serialNumber=216AD1D75A93E037AE94F6C91896D2D582D8FF54 Certificate serial: 022F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft Manifest number: 0218 Signing time: Thu 11 Jun 2026 05:05:34 +0000 Manifest this update: Thu 11 Jun 2026 05:05:33 +0000 Manifest next update: Thu 18 Jun 2026 05:05:33 +0000 Files and hashes: 1: IWrR11qT4DeulPbJGJbS1YLY_1Q.crl (hash: AoMQt/9/jco18MzCEkIowrLivjZua4XYQHVbsquLquE=) 2: 82C54A1E3BD311EE84056461C4F9AE02.roa (hash: p66IPaewmPaRtnsQS2xZgpPBnKkLdaVzEfPus9nU9is=) 3: 27DB37683BD211EE8094355FC4F9AE02.roa (hash: jNN3fj+EEW25PsG0U4HYziuBqb6momTUfcic3hWWRvY=) 4: 838096CA3BD311EE84056461C4F9AE02.roa (hash: cQLsMYqSdIJcG0uBESraAoEm5/hK8Y0/eizzGvwT5QU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.crl rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 05:05:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 559 (0x22f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDDD1, serialNumber=216AD1D75A93E037AE94F6C91896D2D582D8FF54 Validity Not Before: Jun 11 05:05:33 2026 GMT Not After : Jun 18 05:05:33 2026 GMT Subject: CN=6a2a421e-efb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:30:c6:cf:d5:26:49:b8:fe:e0:94:51:a7:f8: 6a:91:b2:44:a6:c4:30:40:7a:23:b4:6d:93:78:a0: 72:b0:dc:df:b8:91:3f:f9:31:11:01:c3:e8:bc:7c: 19:e9:88:6c:0f:8b:93:28:a9:d6:46:fa:e4:b7:ff: 98:75:1f:bf:08:95:0a:6e:dc:6c:71:05:6e:f1:80: ca:4f:1f:4c:b7:51:07:b1:f0:ca:d8:df:8c:2b:6c: 98:8f:41:54:57:01:3f:3f:a7:9d:3b:89:a4:ec:22: 0c:6d:0b:77:71:5a:06:f8:1a:ff:51:12:61:b4:c1: eb:e1:31:58:6d:6b:88:52:b7:59:1e:73:2b:e2:eb: f2:f6:c4:af:d1:bb:bb:18:8c:67:de:64:57:f7:27: ac:1c:13:a9:11:c8:1d:35:48:39:96:bb:c2:fc:59: 6a:d4:bd:ab:5c:47:91:f7:8e:d3:9e:a2:38:3d:1a: 2b:f4:84:46:ba:6f:f9:74:32:6d:88:78:32:0b:6a: be:21:cd:35:f2:e6:3b:5f:ca:07:a6:f9:f5:e2:ba: 5f:70:9b:69:6d:43:60:d7:10:9b:f8:23:03:9a:e6: 21:77:61:ff:31:e3:84:cf:c9:c1:8b:47:45:1a:69: c4:e4:b9:92:f8:f8:36:b2:0e:f8:73:2c:5e:66:64: 98:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:65:82:B9:41:B5:C9:0C:27:76:FE:2C:28:F8:32:14:E9:50:3F:5C X509v3 Authority Key Identifier: keyid:21:6A:D1:D7:5A:93:E0:37:AE:94:F6:C9:18:96:D2:D5:82:D8:FF:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:30:c7:2b:87:6e:2f:b2:01:58:56:1c:ed:1b:09:8e:78:35: a0:e7:c7:62:0a:5a:14:e0:bc:31:2c:b4:e0:52:3f:fa:13:82: d9:66:c0:09:0a:b7:20:71:88:5f:18:91:dc:d7:eb:84:54:3d: cc:04:e1:5d:03:a1:32:fc:26:a3:f2:f2:47:2e:1d:be:fa:4c: a1:28:3d:ef:e6:b1:4b:d0:ed:f1:3f:70:5a:c2:6d:0b:42:78: d5:4e:d4:66:48:38:31:b3:a6:79:a4:53:c5:9a:ab:9a:35:f5: d2:d0:36:2e:29:1c:1b:d8:dd:fd:4b:65:03:ba:e1:73:03:ce: d9:7f:83:d1:87:2a:04:eb:20:38:e0:9d:7a:fd:48:0d:2b:c9: aa:90:74:9a:a5:5b:2d:ed:74:64:00:d2:ca:e7:35:df:43:f1: 4a:3d:9c:04:64:30:e2:b1:d2:3b:f2:43:4c:98:03:0a:40:33: d4:96:fe:4f:cc:a5:79:19:c3:45:de:c3:2b:a6:ed:87:01:eb: e5:78:a6:71:b9:04:18:42:25:4e:a7:27:61:7f:5d:89:ce:86: fa:9a:dd:8e:16:1b:eb:e1:72:32:f7:0b:00:40:7c:bf:75:f0: 1a:ba:dc:06:81:e0:48:46:a4:0c:e8:ee:6c:0b:e0:96:09:d2: de:55:de:08 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRERDExMTAvBgNVBAUTKDIxNkFEMUQ3NUE5M0UwMzdBRTk0RjZDOTE4OTZEMkQ1 ODJEOEZGNTQwHhcNMjYwNjExMDUwNTMzWhcNMjYwNjE4MDUwNTMzWjAYMRYwFAYD VQQDEw02YTJhNDIxZS1lZmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAljDGz9UmSbj+4JRRp/hqkbJEpsQwQHojtG2TeKBysNzfuJE/+TERAcPovHwZ 6YhsD4uTKKnWRvrkt/+YdR+/CJUKbtxscQVu8YDKTx9Mt1EHsfDK2N+MK2yYj0FU VwE/P6edO4mk7CIMbQt3cVoG+Br/URJhtMHr4TFYbWuIUrdZHnMr4uvy9sSv0bu7 GIxn3mRX9yesHBOpEcgdNUg5lrvC/Flq1L2rXEeR947TnqI4PRor9IRGum/5dDJt iHgyC2q+Ic018uY7X8oHpvn14rpfcJtpbUNg1xCb+CMDmuYhd2H/MeOEz8nBi0dF GmnE5LmS+Pg2sg74cyxeZmSYQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFItlgrlB tckMJ3b+LCj4MhTpUD9cMB8GA1UdIwQYMBaAFCFq0ddak+A3rpT2yRiW0tWC2P9U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREREMS82OEMxRDQ5NjNC RDAxMUVFOEJBQzM1MUFDNEY5QUUwMi9JV3JSMTFxVDREZXVsUGJKR0piUzFZTFlf MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lXclIxMXFUNERldWxQYkpHSmJTMVlMWV8xUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REREMS82OEMxRDQ5NjNCRDAxMUVFOEJBQzM1MUFDNEY5QUUwMi9JV3JSMTFxVDRE ZXVsUGJKR0piUzFZTFlfMVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaDDHK4duL7IBWFYc7RsJjng1oOfHYgpaFOC8MSy04FI/+hOC2WbACQq3IHGI XxiR3NfrhFQ9zAThXQOhMvwmo/LyRy4dvvpMoSg97+axS9Dt8T9wWsJtC0J41U7U Zkg4MbOmeaRTxZqrmjX10tA2LikcG9jd/UtlA7rhcwPO2X+D0YcqBOsgOOCdev1I DSvJqpB0mqVbLe10ZADSyuc130PxSj2cBGQw4rHSO/JDTJgDCkAz1Jb+T8yleRnD Rd7DK6bthwHr5XimcbkEGEIlTqcnYX9dic6G+prdjhYb6+FyMvcLAEB8v3XwGrrc BoHgSEakDOjubAvglgnS3lXeCA== -----END CERTIFICATE-----Generated at Fri Jun 12 10:43:25 2026 by rpki-client