$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft File: cnQCOx-0p0kyj11N-DsN0_B_6UI.mft (raw, json) Hash identifier: Fj6VF+mbM/AgxWOx+M6AghQoBk/X7T+qQMFvRkr8aTo= Subject key identifier: 99:3E:0F:F2:12:7E:8A:CF:DF:36:96:23:74:EB:0C:B8:82:89:EF:DA Authority key identifier: 72:74:02:3B:1F:B4:A7:49:32:8F:5D:4D:F8:3B:0D:D3:F0:7F:E9:42 Certificate issuer: /CN=A91FFDF3/serialNumber=7274023B1FB4A749328F5D4DF83B0DD3F07FE942 Certificate serial: 072F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnQCOx-0p0kyj11N-DsN0_B_6UI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft Manifest number: 072F Signing time: Mon 22 Jun 2026 21:51:55 +0000 Manifest this update: Mon 22 Jun 2026 21:51:55 +0000 Manifest next update: Mon 29 Jun 2026 21:51:55 +0000 Files and hashes: 1: cnQCOx-0p0kyj11N-DsN0_B_6UI.crl (hash: 5GS5/FstKv73BIT5iFpCQPpZr5EAJmnkdcpzySvrIu4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.crl rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnQCOx-0p0kyj11N-DsN0_B_6UI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Jun 2026 21:51:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1839 (0x72f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFDF3, serialNumber=7274023B1FB4A749328F5D4DF83B0DD3F07FE942 Validity Not Before: Jun 22 21:51:55 2026 GMT Not After : Jun 29 21:51:55 2026 GMT Subject: CN=6a39ae7b-dcd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:9f:a4:31:4f:da:55:08:11:0c:ef:2b:ac:3f: 5d:69:5d:f3:8a:ca:ab:3e:b4:97:7a:59:6f:7b:60: 65:dd:07:7c:22:76:aa:17:d7:38:56:5c:4e:62:54: f4:c9:63:01:7d:d0:e8:4e:55:09:ab:4e:96:01:33: 36:f5:ea:9e:72:8d:da:15:5a:82:c1:a0:38:ed:94: 5f:25:d1:06:bb:51:78:37:2c:46:35:ad:28:81:5c: 0d:26:b2:9b:76:f3:2d:fb:7f:bc:dd:4e:50:c7:52: 36:a9:21:06:56:fb:3a:29:f6:ac:8f:11:ae:21:c9: 8f:82:cb:5f:e2:04:7f:d5:de:c7:c0:43:e0:6f:10: df:c7:a9:d3:53:8c:54:30:12:50:12:0e:06:4e:e4: 7d:ba:f7:a7:59:3d:4f:99:da:1c:b6:ad:43:78:ee: 4a:47:2a:d2:bb:09:d0:ef:4a:9c:29:af:f2:88:5d: 33:3c:91:79:7d:20:e2:b6:02:b7:31:39:ea:50:50: 6e:29:ee:a4:be:27:9b:b3:ce:56:39:1b:d3:c2:31: 29:69:df:64:f6:6b:8c:53:65:3d:ea:eb:1e:81:d7: 8a:4a:c4:e6:c7:33:d7:fd:9c:77:29:7b:39:64:91: 27:01:b0:e1:e6:f7:46:da:48:0e:25:6c:ad:29:55: 54:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:3E:0F:F2:12:7E:8A:CF:DF:36:96:23:74:EB:0C:B8:82:89:EF:DA X509v3 Authority Key Identifier: keyid:72:74:02:3B:1F:B4:A7:49:32:8F:5D:4D:F8:3B:0D:D3:F0:7F:E9:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnQCOx-0p0kyj11N-DsN0_B_6UI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:57:e3:76:f4:93:e1:91:3b:d9:b4:ce:b1:8c:4c:50:70:30: 05:f1:97:f3:de:af:87:18:43:99:bc:27:d4:2e:d5:b8:2b:1c: c3:19:c3:6a:42:64:3c:1d:e1:02:c0:bb:a9:07:f1:1d:7e:6e: be:6f:dc:c5:d0:a7:df:1a:a4:9b:d8:59:31:35:96:e4:88:d6: 15:61:42:1a:de:76:e4:15:04:80:0c:13:19:3b:98:52:43:ba: 5c:bd:c3:73:54:a5:1b:4d:01:a3:aa:cd:fe:68:3d:80:32:09: 6e:a1:3c:f0:fc:bd:29:46:19:d7:11:25:43:f5:6d:60:59:20: 43:00:b4:8a:3b:c1:f7:df:f3:96:7c:5b:83:4e:b0:19:11:bb: 9b:93:d4:73:d3:6a:17:a2:e7:bf:68:f2:4a:83:1d:e6:4d:0f: f0:db:15:ae:75:1e:14:5f:13:a6:7b:bd:e3:16:6d:8b:e7:35: dd:21:ef:5c:f9:f2:14:ed:14:33:e7:0a:89:56:9f:c1:85:c6: 35:6a:a4:b1:52:24:3a:63:67:85:b0:a3:0f:f8:13:96:ee:c1: e1:de:79:68:db:1b:77:28:6d:15:48:d0:b6:5e:d2:42:3a:a5: a2:0d:06:99:47:ae:60:66:b4:50:54:fb:9b:77:59:20:fb:4d: c7:4e:49:0f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBy8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZERjMxMTAvBgNVBAUTKDcyNzQwMjNCMUZCNEE3NDkzMjhGNUQ0REY4M0IwREQz RjA3RkU5NDIwHhcNMjYwNjIyMjE1MTU1WhcNMjYwNjI5MjE1MTU1WjAYMRYwFAYD VQQDEw02YTM5YWU3Yi1kY2Q2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA15+kMU/aVQgRDO8rrD9daV3zisqrPrSXellve2Bl3Qd8InaqF9c4VlxOYlT0 yWMBfdDoTlUJq06WATM29eqeco3aFVqCwaA47ZRfJdEGu1F4NyxGNa0ogVwNJrKb dvMt+3+83U5Qx1I2qSEGVvs6KfasjxGuIcmPgstf4gR/1d7HwEPgbxDfx6nTU4xU MBJQEg4GTuR9uvenWT1Pmdoctq1DeO5KRyrSuwnQ70qcKa/yiF0zPJF5fSDitgK3 MTnqUFBuKe6kviebs85WORvTwjEpad9k9muMU2U96usegdeKSsTmxzPX/Zx3KXs5 ZJEnAbDh5vdG2kgOJWytKVVUBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJk+D/IS forP3zaWI3TrDLiCie/aMB8GA1UdIwQYMBaAFHJ0AjsftKdJMo9dTfg7DdPwf+lC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkRGMy83NTdEQjc4ODdE NzExMUVCODJEM0Q2NjFDNEY5QUUwMi9jblFDT3gtMHAwa3lqMTFOLURzTjBfQl82 VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NuUUNPeC0wcDBreWoxMU4tRHNOMF9CXzZVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RkRGMy83NTdEQjc4ODdENzExMUVCODJEM0Q2NjFDNEY5QUUwMi9jblFDT3gtMHAw a3lqMTFOLURzTjBfQl82VUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnlfjdvST4ZE72bTOsYxMUHAwBfGX896vhxhDmbwn1C7VuCscwxnDakJkPB3h AsC7qQfxHX5uvm/cxdCn3xqkm9hZMTWW5IjWFWFCGt525BUEgAwTGTuYUkO6XL3D c1SlG00Bo6rN/mg9gDIJbqE88Py9KUYZ1xElQ/VtYFkgQwC0ijvB99/zlnxbg06w GRG7m5PUc9NqF6Lnv2jySoMd5k0P8NsVrnUeFF8Tpnu94xZti+c13SHvXPnyFO0U M+cKiVafwYXGNWqksVIkOmNnhbCjD/gTlu7B4d55aNsbdyhtFUjQtl7SQjqlog0G mUeuYGa0UFT7m3dZIPtNx05JDw== -----END CERTIFICATE-----Generated at Wed Jun 24 11:17:22 2026 by rpki-client