$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft File: hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft (raw, json) Hash identifier: hJMAxENqJcVEuFLQXKEJa7BNEGs16P6TkQvP908Cizg= Subject key identifier: 8F:92:E9:71:B8:C2:02:99:1A:99:83:81:B4:D7:E5:F8:42:AB:81:A7 Authority key identifier: 87:23:7F:F6:89:02:4D:94:FD:B4:9E:C2:5C:5B:12:0D:0B:B9:42:97 Certificate issuer: /CN=A91FFA15/serialNumber=87237FF689024D94FDB49EC25C5B120D0BB94297 Certificate serial: 0C9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft Manifest number: 0C8B Signing time: Mon 22 Jun 2026 18:36:04 +0000 Manifest this update: Mon 22 Jun 2026 18:36:04 +0000 Manifest next update: Mon 29 Jun 2026 18:36:04 +0000 Files and hashes: 1: hyN_9okCTZT9tJ7CXFsSDQu5Qpc.crl (hash: 2FZlK3CmFFs9wnMYy94JHxozyMe6VjwZvA2TSWgeVMM=) 2: E6D6D72E1B3E11EBBC57067AC4F9AE02.roa (hash: xWH01miclcx5O31BfTSaGuwngoIny+30I/eW071OJcs=) 3: E5C9B0541B3E11EBBC57067AC4F9AE02.roa (hash: bTLlb/2u7iS5Ad2viXPUXPjVg32ujRVd0pzOx369Isg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.crl rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Jun 2026 18:36:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3227 (0xc9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFA15, serialNumber=87237FF689024D94FDB49EC25C5B120D0BB94297 Validity Not Before: Jun 22 18:36:04 2026 GMT Not After : Jun 29 18:36:04 2026 GMT Subject: CN=6a398094-929b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:46:b4:1d:75:ac:6d:37:9b:c6:d4:ec:7e:c1: 8a:28:44:a4:fc:79:4c:4b:66:82:3b:c7:fa:f1:55: 4a:73:b7:c4:68:bb:48:7f:fd:6b:24:a0:71:ca:ae: 3d:40:16:b9:76:df:1e:ba:df:bf:5f:4b:7d:1e:c7: cc:65:23:cd:7f:d8:bb:10:36:d2:f4:30:75:41:7a: 9e:cb:98:20:7a:df:49:63:9c:57:81:a5:43:96:97: 70:cb:bd:76:49:a8:eb:e0:8a:e7:fc:fd:14:bc:f1: 7a:5d:c2:84:06:ce:69:27:d1:24:85:06:bb:77:13: b7:d1:a7:dc:aa:25:0c:0b:5c:21:69:90:ec:c9:e7: d8:66:37:af:2c:60:23:e6:a2:ff:9f:1f:20:85:56: f8:67:62:5a:7e:0a:c6:58:e5:37:29:8e:ce:6b:64: 34:03:fd:67:14:b9:6a:fd:85:91:23:21:a8:63:86: 82:7d:19:7d:7e:42:5e:0c:6c:a2:8d:8b:89:d6:85: 7f:6e:f6:20:de:fb:1f:72:96:9e:bb:d0:3f:98:d4: 50:a3:6b:53:6a:59:ee:97:18:bf:5f:ec:d1:39:08: 9a:49:56:a0:64:f5:55:16:eb:55:5e:ae:33:8b:55: 7f:c6:d1:42:f1:b5:2f:d7:40:f9:55:88:be:ca:c1: 99:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:92:E9:71:B8:C2:02:99:1A:99:83:81:B4:D7:E5:F8:42:AB:81:A7 X509v3 Authority Key Identifier: keyid:87:23:7F:F6:89:02:4D:94:FD:B4:9E:C2:5C:5B:12:0D:0B:B9:42:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:c6:b0:b1:df:49:40:db:36:01:99:b5:02:b1:fd:c5:af:c8: 60:38:07:bc:55:88:4b:3f:f0:25:18:a5:3b:66:9d:8e:37:ec: 49:2f:03:c8:7c:4c:37:52:9c:af:02:02:be:34:4d:2c:75:a3: f3:ab:fd:7b:f1:08:47:cc:b5:a1:fc:1f:64:0a:70:f4:6c:49: 35:dc:b4:d5:75:eb:10:df:81:f6:c3:e4:0f:6e:65:cf:a7:75: 53:4a:e8:c9:65:dc:dc:32:db:38:01:ed:b1:31:8d:3c:76:14: bc:71:c1:e6:48:61:40:14:df:f9:52:f0:e0:c8:63:27:81:f6: ab:f6:a4:91:b9:68:89:7c:38:41:26:f6:24:c4:f2:e1:90:5f: 02:c8:c2:b3:65:db:3f:fa:94:6a:49:8c:0a:c7:23:5b:27:50: 00:fe:ff:fb:49:55:a8:35:88:84:03:7c:d5:d7:25:25:b5:2d: ab:23:e9:f3:67:75:6a:4b:ae:73:de:7e:46:a2:f6:fb:08:59: e9:3a:ff:dd:7f:07:98:4e:e0:c9:3c:f5:30:db:61:30:90:6e: 85:be:60:b7:29:da:ba:8b:69:9d:31:94:a3:83:68:04:c5:fd: fa:65:fb:06:ab:b6:03:25:5b:c2:6d:3c:5e:4a:d2:25:a3:47: 17:75:f7:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZBMTUxMTAvBgNVBAUTKDg3MjM3RkY2ODkwMjREOTRGREI0OUVDMjVDNUIxMjBE MEJCOTQyOTcwHhcNMjYwNjIyMTgzNjA0WhcNMjYwNjI5MTgzNjA0WjAYMRYwFAYD VQQDEw02YTM5ODA5NC05MjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm0a0HXWsbTebxtTsfsGKKESk/HlMS2aCO8f68VVKc7fEaLtIf/1rJKBxyq49 QBa5dt8eut+/X0t9HsfMZSPNf9i7EDbS9DB1QXqey5gget9JY5xXgaVDlpdwy712 Sajr4Irn/P0UvPF6XcKEBs5pJ9EkhQa7dxO30afcqiUMC1whaZDsyefYZjevLGAj 5qL/nx8ghVb4Z2JafgrGWOU3KY7Oa2Q0A/1nFLlq/YWRIyGoY4aCfRl9fkJeDGyi jYuJ1oV/bvYg3vsfcpaeu9A/mNRQo2tTalnulxi/X+zROQiaSVagZPVVFutVXq4z i1V/xtFC8bUv10D5VYi+ysGZ/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI+S6XG4 wgKZGpmDgbTX5fhCq4GnMB8GA1UdIwQYMBaAFIcjf/aJAk2U/bSewlxbEg0LuUKX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkExNS83MDFGNTNEMjFE ODcxMUVBQTgxNjlCNkNDNEY5QUUwMi9oeU5fOW9rQ1RaVDl0SjdDWEZzU0RRdTVR cGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h5Tl85b2tDVFpUOXRKN0NYRnNTRFF1NVFwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RkExNS83MDFGNTNEMjFEODcxMUVBQTgxNjlCNkNDNEY5QUUwMi9oeU5fOW9rQ1Ra VDl0SjdDWEZzU0RRdTVRcGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABsawsd9JQNs2AZm1ArH9xa/IYDgHvFWISz/wJRilO2adjjfsSS8DyHxMN1Kc rwICvjRNLHWj86v9e/EIR8y1ofwfZApw9GxJNdy01XXrEN+B9sPkD25lz6d1U0ro yWXc3DLbOAHtsTGNPHYUvHHB5khhQBTf+VLw4MhjJ4H2q/akkbloiXw4QSb2JMTy 4ZBfAsjCs2XbP/qUakmMCscjWydQAP7/+0lVqDWIhAN81dclJbUtqyPp82d1akuu c95+RqL2+whZ6Tr/3X8HmE7gyTz1MNthMJBuhb5gtynauotpnTGUo4NoBMX9+mX7 Bqu2AyVbwm08XkrSJaNHF3X3Zg== -----END CERTIFICATE-----Generated at Wed Jun 24 11:20:05 2026 by rpki-client