$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft File: 4cWfpaa8h2985KRsqq5gYE8FGGY.mft (raw, json) Hash identifier: 4hL9XoU+sxq8U5bGAhqsX2LRokv7ywY5/5A5Zr2/pWs= Subject key identifier: 83:2D:9A:FC:DB:E4:76:33:54:BA:01:53:04:34:68:E6:FD:9F:4D:FD Authority key identifier: E1:C5:9F:A5:A6:BC:87:6F:7C:E4:A4:6C:AA:AE:60:60:4F:05:18:66 Certificate issuer: /CN=A91FEDE7/serialNumber=E1C59FA5A6BC876F7CE4A46CAAAE60604F051866 Certificate serial: 70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cWfpaa8h2985KRsqq5gYE8FGGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft Manifest number: 6A Signing time: Mon 29 Jun 2026 08:41:35 +0000 Manifest this update: Mon 29 Jun 2026 08:41:35 +0000 Manifest next update: Mon 06 Jul 2026 08:41:35 +0000 Files and hashes: 1: 4cWfpaa8h2985KRsqq5gYE8FGGY.crl (hash: fpvXWA/o8XxpNOPNe0CfMbB8T/Z+vnV9gzYRZSiLbZI=) 2: 63C2AF74D99E11F0A31734B566D3641D.roa (hash: 63YdLXndxb2ZNy3UKl9Em7+7aoRcbOsCAOFA6tKDt14=) 3: C48E03F21D1A11F1AE90847F103D8C67.roa (hash: vhaf/68N75siwelbtPS2Tu3DEgGqynrrUITnReXj5p4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.crl rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cWfpaa8h2985KRsqq5gYE8FGGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 Jul 2026 08:41:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 112 (0x70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEDE7, serialNumber=E1C59FA5A6BC876F7CE4A46CAAAE60604F051866 Validity Not Before: Jun 29 08:41:35 2026 GMT Not After : Jul 6 08:41:35 2026 GMT Subject: CN=6a422fbf-4c33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:8c:18:be:49:7c:c1:32:2d:e9:43:5e:e6:87: 2c:2f:0e:b1:b9:af:9e:5d:20:38:33:4b:3d:0b:b5: 73:4f:10:0f:ce:70:bb:a8:42:3a:ca:a9:51:5b:82: 72:b1:32:12:75:d2:d6:83:bd:7e:b6:8b:3b:81:be: 45:fc:48:eb:3b:d8:20:44:e7:b5:76:7b:08:4c:7c: 35:71:d2:6c:ff:e7:70:86:86:e0:3a:09:7e:46:f5: 22:f8:1f:68:7e:cb:83:54:eb:36:a7:c5:a4:5d:58: 92:61:4b:fc:ba:f7:23:bc:e3:9d:83:53:85:07:7e: 86:85:2c:24:46:ad:42:c8:4c:57:7a:e6:7d:63:61: 5c:1b:b9:4d:c1:2d:cc:3a:80:48:86:71:b0:c9:c0: 66:31:2d:7c:e6:85:72:67:05:bf:69:92:67:e5:22: 7c:a1:1b:ae:42:97:e2:41:bb:54:4f:b3:49:8f:56: 49:d0:7f:94:bf:b1:89:fc:80:7b:76:3a:09:19:bb: 06:37:fb:d2:62:b8:7d:2a:f9:27:91:44:12:97:e4: 1c:9e:d9:91:81:40:7e:35:ea:e3:6e:30:40:32:24: 80:9f:8c:f3:61:43:2a:b1:f5:d1:d6:39:c6:cd:29: 4a:95:8a:06:29:0f:05:7b:67:48:b5:00:20:57:e3: 0d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:2D:9A:FC:DB:E4:76:33:54:BA:01:53:04:34:68:E6:FD:9F:4D:FD X509v3 Authority Key Identifier: keyid:E1:C5:9F:A5:A6:BC:87:6F:7C:E4:A4:6C:AA:AE:60:60:4F:05:18:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cWfpaa8h2985KRsqq5gYE8FGGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:48:56:d8:e6:cc:5a:40:2c:69:e3:1f:7f:87:2f:46:04:ca: e5:66:61:05:f5:d9:73:6e:e3:fe:5c:d9:54:a3:f6:82:e4:24: b8:ee:ba:10:cb:c0:2d:9a:d0:72:56:f7:47:43:e9:7f:23:dc: 50:9d:7e:ab:0c:72:cc:8f:ed:a3:08:24:2c:75:70:b9:72:40: 5a:b6:1c:a5:78:2c:f5:0d:1c:7d:08:92:2e:0f:51:d0:1b:66: d6:29:87:af:4d:b5:af:ed:61:e6:9e:d0:8d:d3:0e:ba:6c:5e: b8:19:c4:44:7d:34:2c:c0:b8:3e:4b:a2:26:39:ee:6f:e4:dd: 9f:d6:db:7f:42:af:af:83:f8:b4:3c:dd:1f:c4:f8:53:36:53: d7:c0:3e:8b:5c:77:1d:65:5d:a2:fe:bc:00:9d:98:33:af:b9: 2c:69:2c:0d:e3:20:44:ca:37:43:13:fb:0b:06:f9:01:57:a2: 63:eb:a7:54:bb:be:a6:43:b8:d1:66:5c:e2:fb:47:84:db:5c: 83:f7:ab:40:22:f5:b9:83:d3:06:e3:6a:98:ad:64:f2:88:4a: a9:2b:b8:c6:56:b6:d9:2f:ff:b5:c3:c6:1d:b7:00:ef:8a:4b: 3c:a9:8a:1b:d7:c7:81:56:49:59:e0:91:a7:96:ae:07:11:d2: eb:ec:e0:ab -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RURFNzExMC8GA1UEBRMoRTFDNTlGQTVBNkJDODc2RjdDRTRBNDZDQUFBRTYwNjA0 RjA1MTg2NjAeFw0yNjA2MjkwODQxMzVaFw0yNjA3MDYwODQxMzVaMBgxFjAUBgNV BAMTDTZhNDIyZmJmLTRjMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDsjBi+SXzBMi3pQ17mhywvDrG5r55dIDgzSz0LtXNPEA/OcLuoQjrKqVFbgnKx MhJ10taDvX62izuBvkX8SOs72CBE57V2ewhMfDVx0mz/53CGhuA6CX5G9SL4H2h+ y4NU6zanxaRdWJJhS/y69yO8452DU4UHfoaFLCRGrULITFd65n1jYVwbuU3BLcw6 gEiGcbDJwGYxLXzmhXJnBb9pkmflInyhG65Cl+JBu1RPs0mPVknQf5S/sYn8gHt2 OgkZuwY3+9JiuH0q+SeRRBKX5Bye2ZGBQH416uNuMEAyJICfjPNhQyqx9dHWOcbN KUqVigYpDwV7Z0i1ACBX4w2vAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUgy2a/Nvk djNUugFTBDRo5v2fTf0wHwYDVR0jBBgwFoAU4cWfpaa8h2985KRsqq5gYE8FGGYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZFREU3L0U3RkQzMDU4RDk5 RDExRjBCQkU3ODM5OTY2RDM2NDFELzRjV2ZwYWE4aDI5ODVLUnNxcTVnWUU4RkdH WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNGNXZnBhYThoMjk4NUtSc3FxNWdZRThGR0dZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZF REU3L0U3RkQzMDU4RDk5RDExRjBCQkU3ODM5OTY2RDM2NDFELzRjV2ZwYWE4aDI5 ODVLUnNxcTVnWUU4RkdHWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQABSFbY5sxaQCxp4x9/hy9GBMrlZmEF9dlzbuP+XNlUo/aC5CS47roQy8AtmtBy VvdHQ+l/I9xQnX6rDHLMj+2jCCQsdXC5ckBathyleCz1DRx9CJIuD1HQG2bWKYev TbWv7WHmntCN0w66bF64GcREfTQswLg+S6ImOe5v5N2f1tt/Qq+vg/i0PN0fxPhT NlPXwD6LXHcdZV2i/rwAnZgzr7ksaSwN4yBEyjdDE/sLBvkBV6Jj66dUu76mQ7jR Zlzi+0eE21yD96tAIvW5g9MG42qYrWTyiEqpK7jGVrbZL/+1w8YdtwDviks8qYob 18eBVklZ4JGnlq4HEdLr7OCr -----END CERTIFICATE-----Generated at Wed Jul 1 08:27:28 2026 by rpki-client