$ rpki-client -vvf rpki.apnic.net/member_repository/A91390D1/FFA43F143E0411F1AD63DF8CA6833773/CFDUhlPa5QGZunr6XjP5gKNfk-U.mft File: CFDUhlPa5QGZunr6XjP5gKNfk-U.mft (raw, json) Hash identifier: PyLQfPVeMDICkfJ0nd1qjjA/vj1i4NAdJrMc6QCDIvY= Subject key identifier: 18:4D:E6:5E:11:DB:5E:5E:07:66:90:2C:62:D0:F8:3C:56:F6:50:B4 Authority key identifier: 08:50:D4:86:53:DA:E5:01:99:BA:7A:FA:5E:33:F9:80:A3:5F:93:E5 Certificate issuer: /CN=A91390D1/serialNumber=0850D48653DAE50199BA7AFA5E33F980A35F93E5 Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CFDUhlPa5QGZunr6XjP5gKNfk-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91390D1/FFA43F143E0411F1AD63DF8CA6833773/CFDUhlPa5QGZunr6XjP5gKNfk-U.mft Manifest number: 1B Signing time: Thu 11 Jun 2026 11:14:50 +0000 Manifest this update: Thu 11 Jun 2026 11:14:49 +0000 Manifest next update: Thu 18 Jun 2026 11:14:49 +0000 Files and hashes: 1: CFDUhlPa5QGZunr6XjP5gKNfk-U.crl (hash: NFURWJwjI9DDDwwSiXiJS6zJwWTSP8TkYo2dLw7BTJ0=) 2: 2FF9F3D63E1211F1A9349102AE833773.roa (hash: VWpcu8O6MRinpVbPmabr8oFyo8vRo6lsrBwyQBIngak=) 3: 309048B83E1211F1A9349102AE833773.roa (hash: sqKxThroamkDhc6JSRBhISx43pCPlzadkHUPyjm96LY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91390D1/FFA43F143E0411F1AD63DF8CA6833773/CFDUhlPa5QGZunr6XjP5gKNfk-U.crl rsync://rpki.apnic.net/member_repository/A91390D1/FFA43F143E0411F1AD63DF8CA6833773/CFDUhlPa5QGZunr6XjP5gKNfk-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CFDUhlPa5QGZunr6XjP5gKNfk-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 11:14:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91390D1, serialNumber=0850D48653DAE50199BA7AFA5E33F980A35F93E5 Validity Not Before: Jun 11 11:14:49 2026 GMT Not After : Jun 18 11:14:49 2026 GMT Subject: CN=6a2a98a9-a4f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:df:3c:76:33:d8:ac:06:d9:e4:9b:33:38:c4: 06:18:1b:bf:5a:ec:22:34:33:ec:64:d1:b4:17:3a: 1e:f9:de:0e:8c:6a:53:23:d9:05:73:3c:67:ce:8a: e8:6a:c1:b0:e2:43:15:31:ed:5a:0e:a8:a2:ab:8d: 5d:cb:ce:3b:97:44:e4:02:ca:45:f4:32:ef:e2:bb: f4:ae:f4:4b:cc:9c:44:be:3d:8b:a1:22:2f:9c:b9: 15:7e:66:d2:49:6e:57:d3:fa:70:65:dc:1a:48:fe: 92:0c:dd:31:f3:aa:46:68:2f:0d:8d:e0:36:ca:64: 16:d7:89:cf:ec:d0:51:d1:2a:b0:d4:5f:dd:29:50: 14:1a:6b:19:f6:8e:1f:03:bb:b7:19:0a:34:e5:a6: dc:41:7e:7a:fe:51:f3:4d:ab:58:4e:86:02:44:fb: 4b:06:7e:9c:8c:0e:f0:bb:16:08:87:95:20:a0:8f: 64:15:1c:89:a6:06:4f:35:70:6e:cf:fa:32:47:58: 40:13:1c:b1:b9:4e:14:7b:4c:ba:1d:c6:9c:d7:4f: 64:d4:63:e0:99:08:0b:1a:e2:3d:7e:27:fa:c2:a2: 28:a7:a2:10:50:b5:2b:2d:55:01:53:32:64:11:d9: 52:9c:cb:9f:ee:48:04:30:d4:9b:04:32:73:4e:bf: 1a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:4D:E6:5E:11:DB:5E:5E:07:66:90:2C:62:D0:F8:3C:56:F6:50:B4 X509v3 Authority Key Identifier: keyid:08:50:D4:86:53:DA:E5:01:99:BA:7A:FA:5E:33:F9:80:A3:5F:93:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91390D1/FFA43F143E0411F1AD63DF8CA6833773/CFDUhlPa5QGZunr6XjP5gKNfk-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CFDUhlPa5QGZunr6XjP5gKNfk-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91390D1/FFA43F143E0411F1AD63DF8CA6833773/CFDUhlPa5QGZunr6XjP5gKNfk-U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:ce:c6:a7:85:77:9b:c5:18:9f:16:b2:3b:20:c5:97:e9:89: 88:3f:ba:3e:58:19:cf:83:2f:ab:03:82:dc:7d:88:49:a4:92: 8a:a2:85:ae:29:bf:b5:cf:9d:69:a8:93:a8:56:3e:c6:2b:ac: 25:8a:66:10:91:f9:48:c2:ed:d5:16:79:56:fa:3a:18:93:84: 26:61:fd:66:34:bf:d9:a9:a1:fc:85:16:98:16:40:86:d4:d3: 67:ca:04:31:ac:c9:a5:2f:e0:dc:e9:49:77:59:ff:68:a3:9c: ed:d3:81:ce:92:ef:29:e9:f8:f8:32:6d:d8:07:fd:4b:03:65: 66:d5:84:9b:b3:30:b7:05:fd:2e:a5:9d:a9:12:f5:32:e7:0a: cd:f7:5a:30:5d:bc:7d:57:80:8b:28:47:6a:f0:5f:e9:18:f3: 82:05:ae:4b:60:2c:a5:be:11:18:66:ac:1e:c6:e1:49:a0:a1: 02:fe:cb:39:c4:99:2b:5e:71:d5:5c:8f:4d:7c:be:01:f0:3c: 6b:9f:5f:db:8d:2a:1c:4c:85:50:15:d7:35:e3:9a:fb:8d:a5: 56:26:0c:91:c3:5d:0b:05:4c:71:59:76:96:2d:ca:85:6e:18: f3:ec:f7:fe:7a:83:df:0e:67:a2:9c:c7:d3:9e:69:9e:6e:5c: c0:ce:9c:1f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz OTBEMTExMC8GA1UEBRMoMDg1MEQ0ODY1M0RBRTUwMTk5QkE3QUZBNUUzM0Y5ODBB MzVGOTNFNTAeFw0yNjA2MTExMTE0NDlaFw0yNjA2MTgxMTE0NDlaMBgxFjAUBgNV BAMTDTZhMmE5OGE5LWE0ZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDI3zx2M9isBtnkmzM4xAYYG79a7CI0M+xk0bQXOh753g6MalMj2QVzPGfOiuhq wbDiQxUx7VoOqKKrjV3LzjuXROQCykX0Mu/iu/Su9EvMnES+PYuhIi+cuRV+ZtJJ blfT+nBl3BpI/pIM3THzqkZoLw2N4DbKZBbXic/s0FHRKrDUX90pUBQaaxn2jh8D u7cZCjTlptxBfnr+UfNNq1hOhgJE+0sGfpyMDvC7FgiHlSCgj2QVHImmBk81cG7P +jJHWEATHLG5ThR7TLodxpzXT2TUY+CZCAsa4j1+J/rCoiinohBQtSstVQFTMmQR 2VKcy5/uSAQw1JsEMnNOvxqNAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUGE3mXhHb Xl4HZpAsYtD4PFb2ULQwHwYDVR0jBBgwFoAUCFDUhlPa5QGZunr6XjP5gKNfk+Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5MEQxL0ZGQTQzRjE0M0Uw NDExRjFBRDYzREY4Q0E2ODMzNzczL0NGRFVobFBhNVFHWnVucjZYalA1Z0tOZmst VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ0ZEVWhsUGE1UUdadW5yNlhqUDVnS05may1VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5 MEQxL0ZGQTQzRjE0M0UwNDExRjFBRDYzREY4Q0E2ODMzNzczL0NGRFVobFBhNVFH WnVucjZYalA1Z0tOZmstVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQChzsanhXebxRifFrI7IMWX6YmIP7o+WBnPgy+rA4LcfYhJpJKKooWuKb+1z51p qJOoVj7GK6wlimYQkflIwu3VFnlW+joYk4QmYf1mNL/ZqaH8hRaYFkCG1NNnygQx rMmlL+Dc6Ul3Wf9oo5zt04HOku8p6fj4Mm3YB/1LA2Vm1YSbszC3Bf0upZ2pEvUy 5wrN91owXbx9V4CLKEdq8F/pGPOCBa5LYCylvhEYZqwexuFJoKEC/ss5xJkrXnHV XI9NfL4B8Dxrn1/bjSocTIVQFdc145r7jaVWJgyRw10LBUxxWXaWLcqFbhjz7Pf+ eoPfDmeinMfTnmmeblzAzpwf -----END CERTIFICATE-----Generated at Sat Jun 13 08:05:43 2026 by rpki-client