$ rpki-client -vvf rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft File: 0wlAzG8MECS4QLu309gBJjYGylk.mft (raw, json) Hash identifier: S5lFrj79uMkMZSwhpIQxni/Pop8ADkXd/LxB4oDNwn8= Subject key identifier: 7A:A1:9A:6E:91:5C:36:F1:1B:61:BB:B4:A3:8B:75:7A:85:42:72:78 Authority key identifier: D3:09:40:CC:6F:0C:10:24:B8:40:BB:B7:D3:D8:01:26:36:06:CA:59 Certificate issuer: /CN=A91412BC/serialNumber=D30940CC6F0C1024B840BBB7D3D801263606CA59 Certificate serial: D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wlAzG8MECS4QLu309gBJjYGylk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft Manifest number: D2 Signing time: Sat 13 Jun 2026 06:47:43 +0000 Manifest this update: Sat 13 Jun 2026 06:47:43 +0000 Manifest next update: Sat 20 Jun 2026 06:47:43 +0000 Files and hashes: 1: 0wlAzG8MECS4QLu309gBJjYGylk.crl (hash: DVi3asm19XGN6HLtfqbmI1ZH60311k7b0UzKf3/SPrU=) 2: 936B147E248A11F0AD4B1179C4F9AE02.roa (hash: LyQfyLurnqqH+WScrTsxG9TtblSEPenqHyPotX69udU=) 3: 92F3063C248A11F0AD4B1179C4F9AE02.roa (hash: snLyJB1mtilsonSg8bolW4tfoO6cxLckhLrYHgEKQiQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.crl rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wlAzG8MECS4QLu309gBJjYGylk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 06:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 216 (0xd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91412BC, serialNumber=D30940CC6F0C1024B840BBB7D3D801263606CA59 Validity Not Before: Jun 13 06:47:43 2026 GMT Not After : Jun 20 06:47:43 2026 GMT Subject: CN=6a2cfd0f-a88a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:c4:e5:db:11:3b:bd:0d:70:10:0b:9c:ea:56: b5:0c:58:7d:60:86:87:5b:e1:6f:7d:3d:db:23:e6: 2e:24:9b:90:ed:82:40:a6:15:17:d0:e4:54:b4:c4: 31:21:2b:d1:d9:88:2a:2a:74:fb:2b:fa:67:c4:56: 28:8e:56:15:7e:ce:3e:0d:03:4e:a8:8c:00:2d:3b: c7:6c:5b:29:6d:e8:45:15:0d:49:27:1b:1b:5e:53: 64:98:cf:5e:db:26:00:1c:2c:4a:12:af:ab:d2:19: 3c:15:aa:96:81:e0:16:0b:0c:ae:7f:cd:68:18:9d: 3a:41:a3:15:13:d6:17:1d:21:74:6e:4d:8d:1c:06: 30:81:7b:35:0f:e3:ab:5f:04:04:22:cb:b1:4c:0c: 35:f9:f1:2b:7a:61:2a:e1:d8:39:5d:47:37:8e:ce: a5:f0:93:b8:67:00:bf:80:95:d9:b6:3d:b5:bd:d1: 74:cc:fb:ce:c7:7e:3d:1e:2c:64:70:eb:93:68:1c: f9:a2:bc:c4:a5:cd:a8:2e:b3:ec:a9:d0:4e:1b:d5: 64:51:22:38:ee:8d:8f:d9:fd:84:e4:3e:bc:ba:6f: 13:e5:37:fc:d7:b4:96:25:a8:d5:8f:c6:92:17:53: 07:16:7b:ab:7d:aa:2d:b1:ff:3b:88:5a:b0:3d:d2: a2:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A1:9A:6E:91:5C:36:F1:1B:61:BB:B4:A3:8B:75:7A:85:42:72:78 X509v3 Authority Key Identifier: keyid:D3:09:40:CC:6F:0C:10:24:B8:40:BB:B7:D3:D8:01:26:36:06:CA:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wlAzG8MECS4QLu309gBJjYGylk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:8b:01:25:ab:6a:4d:9d:4a:c3:e1:de:e9:40:79:01:da:be: fa:5b:37:c2:8d:1c:d5:9c:51:e7:c7:25:ef:c3:b6:10:93:7f: 1c:d6:8f:26:f4:72:b1:17:55:b5:81:fd:b1:4e:2f:e4:2b:6a: fa:d9:2e:fa:b1:7a:35:50:7b:dd:f1:5d:82:dc:01:fd:b4:f9: e1:29:7e:4c:1f:9f:ef:9f:8b:dd:3f:80:03:63:da:dd:37:c2: f0:37:f6:41:48:a4:78:21:7c:36:a6:b1:ed:56:5e:76:34:96: 64:fa:02:21:71:31:c5:13:9e:2a:45:99:8a:a9:a2:7f:fd:ca: 3d:5f:97:b3:9e:a8:7e:91:c7:e6:42:6e:1a:ca:bf:10:01:86: 79:f0:4d:4b:b9:c0:e0:ef:19:74:cd:e0:1f:80:18:14:74:00: 58:31:d2:40:f0:30:43:74:c3:5f:d3:9d:ec:07:e3:ac:bf:6f: f8:72:cb:d0:ae:41:7a:38:67:fb:ed:63:69:7d:01:3c:7c:f0: b9:79:d5:99:4c:59:d9:d4:3c:8b:ea:e4:37:2c:d1:4a:e2:a3: df:96:38:b7:2f:36:9a:9f:25:86:96:7f:fb:b7:d7:75:07:a8: e3:fc:81:9d:3e:bd:e1:43:25:f3:68:3b:40:12:79:f5:ad:ac: 83:fb:83:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDEyQkMxMTAvBgNVBAUTKEQzMDk0MENDNkYwQzEwMjRCODQwQkJCN0QzRDgwMTI2 MzYwNkNBNTkwHhcNMjYwNjEzMDY0NzQzWhcNMjYwNjIwMDY0NzQzWjAYMRYwFAYD VQQDEw02YTJjZmQwZi1hODhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAisTl2xE7vQ1wEAuc6la1DFh9YIaHW+FvfT3bI+YuJJuQ7YJAphUX0ORUtMQx ISvR2YgqKnT7K/pnxFYojlYVfs4+DQNOqIwALTvHbFspbehFFQ1JJxsbXlNkmM9e 2yYAHCxKEq+r0hk8FaqWgeAWCwyuf81oGJ06QaMVE9YXHSF0bk2NHAYwgXs1D+Or XwQEIsuxTAw1+fEremEq4dg5XUc3js6l8JO4ZwC/gJXZtj21vdF0zPvOx349Hixk cOuTaBz5orzEpc2oLrPsqdBOG9VkUSI47o2P2f2E5D68um8T5Tf817SWJajVj8aS F1MHFnurfaotsf87iFqwPdKiTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHqhmm6R XDbxG2G7tKOLdXqFQnJ4MB8GA1UdIwQYMBaAFNMJQMxvDBAkuEC7t9PYASY2BspZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTJCQy8yMUE5NTMxNDI0 OEExMUYwOTk4NkQwNzdDNEY5QUUwMi8wd2xBekc4TUVDUzRRTHUzMDlnQkpqWUd5 bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB3bEF6RzhNRUNTNFFMdTMwOWdCSmpZR3lsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTJCQy8yMUE5NTMxNDI0OEExMUYwOTk4NkQwNzdDNEY5QUUwMi8wd2xBekc4TUVD UzRRTHUzMDlnQkpqWUd5bGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJIsBJatqTZ1Kw+He6UB5Adq++ls3wo0c1ZxR58cl78O2EJN/HNaPJvRysRdV tYH9sU4v5Ctq+tku+rF6NVB73fFdgtwB/bT54Sl+TB+f75+L3T+AA2Pa3TfC8Df2 QUikeCF8Nqax7VZedjSWZPoCIXExxROeKkWZiqmif/3KPV+Xs56ofpHH5kJuGsq/ EAGGefBNS7nA4O8ZdM3gH4AYFHQAWDHSQPAwQ3TDX9Od7AfjrL9v+HLL0K5Bejhn ++1jaX0BPHzwuXnVmUxZ2dQ8i+rkNyzRSuKj35Y4ty82mp8lhpZ/+7fXdQeo4/yB nT694UMl82g7QBJ59a2sg/uDHg== -----END CERTIFICATE-----Generated at Sat Jun 13 15:57:54 2026 by rpki-client