$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/AK9gGF0fuaCKWLd-9ASBrDgK8bE.mft File: AK9gGF0fuaCKWLd-9ASBrDgK8bE.mft (raw, json) Hash identifier: H9FsQX8oMJ9cV82eWKIFAvB2T1CfY3huAnwuamk7WsI= Subject key identifier: B6:8C:BA:82:A4:0B:3E:D3:AC:F0:7B:E9:9E:AC:1D:68:7C:02:AF:14 Authority key identifier: 00:AF:60:18:5D:1F:B9:A0:8A:58:B7:7E:F4:04:81:AC:38:0A:F1:B1 Certificate issuer: /CN=A91FFBAF/serialNumber=00AF60185D1FB9A08A58B77EF40481AC380AF1B1 Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AK9gGF0fuaCKWLd-9ASBrDgK8bE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/AK9gGF0fuaCKWLd-9ASBrDgK8bE.mft Manifest number: 71 Signing time: Tue 23 Jun 2026 08:02:23 +0000 Manifest this update: Tue 23 Jun 2026 08:02:22 +0000 Manifest next update: Tue 30 Jun 2026 08:02:22 +0000 Files and hashes: 1: AK9gGF0fuaCKWLd-9ASBrDgK8bE.crl (hash: SZJEVFYhvQg4/klMlaWXOwdXBqP7qpx9piVBz11ktnM=) 2: C7200E0EC37D11F09171F578C4F9AE02.roa (hash: E6omI9lqZzM/PwLCS0UMdFdpwNRWOrVUdR04/HJ2Es8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/AK9gGF0fuaCKWLd-9ASBrDgK8bE.crl rsync://rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/AK9gGF0fuaCKWLd-9ASBrDgK8bE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AK9gGF0fuaCKWLd-9ASBrDgK8bE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jun 2026 08:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFBAF, serialNumber=00AF60185D1FB9A08A58B77EF40481AC380AF1B1 Validity Not Before: Jun 23 08:02:22 2026 GMT Not After : Jun 30 08:02:22 2026 GMT Subject: CN=6a3a3d8f-41f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4a:90:7f:cd:3a:78:4f:3d:64:53:ff:b0:e3: dd:ac:b6:25:e0:2f:77:9a:3c:14:51:b6:5e:1d:93: d3:3d:61:21:c8:f2:6b:fc:38:9d:d1:dc:aa:81:75: f3:3a:f1:d9:63:b2:9d:89:36:fa:7c:91:e6:5d:af: 8e:71:5f:f6:72:95:70:1e:40:fb:76:cb:b7:0e:f0: 0b:69:59:0a:bb:cf:86:c6:aa:bd:95:88:8c:cb:82: 63:f2:b7:b4:32:ef:53:c7:f2:5e:b2:2c:f9:d7:27: 1a:c7:4a:27:f9:a0:7f:40:06:21:ff:bc:a9:5d:ae: 21:9b:66:fb:28:2f:da:3f:14:5a:ff:14:2d:bc:65: 74:3c:f6:3a:ce:a1:da:7f:8f:80:60:a5:8a:4b:0c: 45:98:8b:ca:08:17:ef:f2:7e:11:08:79:8e:bc:6c: fb:9e:b8:5f:99:34:79:53:f5:cb:b3:a5:90:0f:4c: 61:e9:4d:0d:b9:90:b2:f0:8c:d0:6c:bb:98:c9:eb: 3c:59:99:db:53:64:eb:1d:2c:bb:4a:25:9a:18:5c: 73:25:7b:45:5b:1c:d2:5b:03:4e:b5:af:ed:1c:71: 8f:2d:ce:fb:c2:ba:4e:19:d3:a8:bf:5a:a9:eb:31: f0:85:9e:76:2a:93:31:8f:bf:4a:a9:e7:ef:98:0d: 50:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:8C:BA:82:A4:0B:3E:D3:AC:F0:7B:E9:9E:AC:1D:68:7C:02:AF:14 X509v3 Authority Key Identifier: keyid:00:AF:60:18:5D:1F:B9:A0:8A:58:B7:7E:F4:04:81:AC:38:0A:F1:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/AK9gGF0fuaCKWLd-9ASBrDgK8bE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AK9gGF0fuaCKWLd-9ASBrDgK8bE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/AK9gGF0fuaCKWLd-9ASBrDgK8bE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:4f:ae:27:82:33:1d:bb:50:cf:84:02:f8:65:c5:40:3b:37: f6:8c:f2:8d:3c:b4:5e:c6:0b:20:b4:2e:93:67:b3:56:7e:81: 55:11:71:67:45:26:70:17:2d:3d:fe:c5:0e:64:47:58:6f:32: d0:11:2e:5e:81:54:72:22:4d:9c:ee:9d:34:68:16:f0:34:6b: c0:69:ce:80:5d:3d:b9:83:f5:5f:21:ca:91:fa:e1:40:93:b0: b6:39:b1:9d:2b:ff:ac:7e:f1:d5:eb:80:26:20:f8:a6:02:03: 6e:7c:31:37:83:b8:c9:f3:fc:25:e0:c3:6c:55:2a:3f:25:37: 6e:fc:b5:21:1b:1a:55:da:af:e4:6e:45:dc:33:15:e3:d7:da: 0b:9f:97:d7:db:6b:d6:75:9a:cf:e9:e1:bf:a7:28:6b:e0:94: f1:21:7f:70:96:79:d9:4e:6b:d1:ea:3a:82:da:5b:b8:f0:b4: 1c:43:7c:9d:d0:04:f6:24:c3:1a:92:b9:2b:2e:14:d9:3d:a2: 3d:90:87:04:2e:a6:7e:23:7d:fd:05:b2:2a:82:e8:ea:b7:ed: 98:38:59:a3:19:37:15:99:c5:58:b3:4f:e5:09:81:8c:34:f5: 90:27:9e:11:a7:c4:c7:2e:9f:37:3a:5e:b3:2b:24:37:bd:ac: ff:c8:51:72 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RkJBRjExMC8GA1UEBRMoMDBBRjYwMTg1RDFGQjlBMDhBNThCNzdFRjQwNDgxQUMz ODBBRjFCMTAeFw0yNjA2MjMwODAyMjJaFw0yNjA2MzAwODAyMjJaMBgxFjAUBgNV BAMTDTZhM2EzZDhmLTQxZjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKSpB/zTp4Tz1kU/+w492stiXgL3eaPBRRtl4dk9M9YSHI8mv8OJ3R3KqBdfM6 8dljsp2JNvp8keZdr45xX/ZylXAeQPt2y7cO8AtpWQq7z4bGqr2ViIzLgmPyt7Qy 71PH8l6yLPnXJxrHSif5oH9ABiH/vKldriGbZvsoL9o/FFr/FC28ZXQ89jrOodp/ j4BgpYpLDEWYi8oIF+/yfhEIeY68bPueuF+ZNHlT9cuzpZAPTGHpTQ25kLLwjNBs u5jJ6zxZmdtTZOsdLLtKJZoYXHMle0VbHNJbA061r+0ccY8tzvvCuk4Z06i/Wqnr MfCFnnYqkzGPv0qp5++YDVA3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUtoy6gqQL PtOs8HvpnqwdaHwCrxQwHwYDVR0jBBgwFoAUAK9gGF0fuaCKWLd+9ASBrDgK8bEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZGQkFGLzcwRkNBNzcyQzM3 QzExRjBCNTE4QTUzMkM0RjlBRTAyL0FLOWdHRjBmdWFDS1dMZC05QVNCckRnSzhi RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQUs5Z0dGMGZ1YUNLV0xkLTlBU0JyRGdLOGJFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZG QkFGLzcwRkNBNzcyQzM3QzExRjBCNTE4QTUzMkM0RjlBRTAyL0FLOWdHRjBmdWFD S1dMZC05QVNCckRnSzhiRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCdT64ngjMdu1DPhAL4ZcVAOzf2jPKNPLRexgsgtC6TZ7NWfoFVEXFnRSZwFy09 /sUOZEdYbzLQES5egVRyIk2c7p00aBbwNGvAac6AXT25g/VfIcqR+uFAk7C2ObGd K/+sfvHV64AmIPimAgNufDE3g7jJ8/wl4MNsVSo/JTdu/LUhGxpV2q/kbkXcMxXj 19oLn5fX22vWdZrP6eG/pyhr4JTxIX9wlnnZTmvR6jqC2lu48LQcQ3yd0AT2JMMa krkrLhTZPaI9kIcELqZ+I339BbIqgujqt+2YOFmjGTcVmcVYs0/lCYGMNPWQJ54R p8THLp83Ol6zKyQ3vaz/yFFy -----END CERTIFICATE-----Generated at Wed Jun 24 11:17:43 2026 by rpki-client