$ rpki-client -vvf rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.mft File: nr2hI9nugwlDBaEYDCoIBX_lQGo.mft (raw, json) Hash identifier: Qr8AqoxJoWobr8gMu1lt2xvRgZXrw6gaTjD5IEr0bok= Subject key identifier: 99:7C:7C:9B:B3:51:A4:61:CD:4A:B4:33:74:C2:12:9E:53:89:E1:E6 Authority key identifier: 9E:BD:A1:23:D9:EE:83:09:43:05:A1:18:0C:2A:08:05:7F:E5:40:6A Certificate issuer: /CN=A91425C3/serialNumber=9EBDA123D9EE83094305A1180C2A08057FE5406A Certificate serial: B5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nr2hI9nugwlDBaEYDCoIBX_lQGo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.mft Manifest number: AE Signing time: Sat 13 Jun 2026 07:18:45 +0000 Manifest this update: Sat 13 Jun 2026 07:18:45 +0000 Manifest next update: Sat 20 Jun 2026 07:18:45 +0000 Files and hashes: 1: nr2hI9nugwlDBaEYDCoIBX_lQGo.crl (hash: 9/GuEJJnsNDjfhz3QCZmB8X9Jooj7fVSIQY4GE6w4Vg=) 2: 8C538C5AEFCF11F0889DE39E746F56BC.roa (hash: eiSYQZ4JbJxsufS9RcJajhzup1MJX6NMX/+qc2RSIq8=) 3: 224FBC52EFCF11F0A018F59D746F56BC.roa (hash: l6zP7eAxKoViI6F3M9uDYfZY33CWARrIielkD1703l4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.crl rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nr2hI9nugwlDBaEYDCoIBX_lQGo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 07:18:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 181 (0xb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91425C3, serialNumber=9EBDA123D9EE83094305A1180C2A08057FE5406A Validity Not Before: Jun 13 07:18:45 2026 GMT Not After : Jun 20 07:18:45 2026 GMT Subject: CN=6a2d0455-c90a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a9:31:fa:d9:9c:dc:f5:76:f0:55:c2:fe:22: d8:3d:a1:09:47:6e:8b:af:70:7e:30:5b:da:6c:c6: 0a:4d:5c:19:50:14:51:71:3f:a4:0d:5f:56:ec:7f: 79:ea:00:cb:f6:79:ff:c6:62:99:73:18:aa:d1:ce: b8:97:79:c4:b6:d4:45:96:5e:c3:15:91:46:67:de: f4:4e:a9:42:8d:7e:71:0c:7e:b2:61:a8:ef:57:8f: 97:06:83:d4:25:fa:fe:ab:ea:27:d9:0a:b9:9f:7e: c7:95:6d:e0:57:cf:82:ed:c9:a9:1e:fd:d7:b3:16: 18:3f:56:8d:81:f4:23:58:e8:19:a0:08:13:32:c0: a6:89:a6:8d:d8:38:19:20:64:ab:e1:f3:36:20:70: 1d:48:5b:ba:35:6d:cc:7b:98:2d:dc:4f:c7:46:cf: 18:5b:46:3e:fa:3f:2b:40:b3:4d:c9:91:81:a3:83: e3:c6:e9:76:1d:69:ed:df:d5:52:d8:84:ae:46:07: e2:12:0b:e8:e8:35:4a:be:32:df:52:b2:9a:f6:71: e1:ab:2f:1f:77:f4:14:1c:e2:4f:a7:74:11:4d:8c: 3c:9c:d6:8c:24:d4:79:ae:86:4d:dd:a1:c6:ab:a5: ff:20:48:95:31:f8:32:f9:83:d2:25:a1:28:43:43: e3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:7C:7C:9B:B3:51:A4:61:CD:4A:B4:33:74:C2:12:9E:53:89:E1:E6 X509v3 Authority Key Identifier: keyid:9E:BD:A1:23:D9:EE:83:09:43:05:A1:18:0C:2A:08:05:7F:E5:40:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nr2hI9nugwlDBaEYDCoIBX_lQGo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:ed:d0:f4:b8:6b:ea:3a:ce:4e:9c:c5:13:eb:10:ca:58:ad: a5:78:21:19:ef:39:57:a5:cd:f2:af:2a:98:56:84:fa:fd:ae: c8:96:d9:9a:b5:7f:66:2f:ec:66:ed:32:5a:dc:42:cd:7c:73: 6e:84:b1:3f:5d:5a:56:3d:1c:b8:20:fa:b7:2e:f1:aa:2f:f4: cf:35:9a:0d:8f:80:c0:c7:e6:bc:c2:36:a7:5e:b8:d2:18:02: a2:f7:20:69:93:a4:eb:50:b6:39:43:4e:1b:5b:f0:39:ca:da: 6d:09:97:64:a8:8e:4f:43:d0:e2:90:a2:d9:5d:8f:68:09:d3: e8:84:42:12:c5:4f:ea:33:81:46:2b:da:6f:91:c5:80:a2:36: 9c:40:d2:e3:b2:76:58:07:51:1e:de:8e:7a:24:ee:75:32:3d: 67:39:d8:d5:db:28:68:ba:97:5c:97:03:57:1e:1f:e7:75:90: 77:26:da:b9:cb:3c:8b:92:ec:d3:00:73:c1:af:24:78:11:80: 8c:95:f5:d2:03:0a:8c:52:0b:7c:c5:92:57:01:b9:0d:47:65: e8:b6:d0:cb:5d:a9:80:6f:e7:10:de:65:ff:d7:be:c7:65:25: 51:b7:6c:a2:12:3b:1e:20:a8:f9:4f:16:40:08:16:2e:e4:f1: df:70:aa:fe -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI1QzMxMTAvBgNVBAUTKDlFQkRBMTIzRDlFRTgzMDk0MzA1QTExODBDMkEwODA1 N0ZFNTQwNkEwHhcNMjYwNjEzMDcxODQ1WhcNMjYwNjIwMDcxODQ1WjAYMRYwFAYD VQQDEw02YTJkMDQ1NS1jOTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtqkx+tmc3PV28FXC/iLYPaEJR26Lr3B+MFvabMYKTVwZUBRRcT+kDV9W7H95 6gDL9nn/xmKZcxiq0c64l3nEttRFll7DFZFGZ970TqlCjX5xDH6yYajvV4+XBoPU Jfr+q+on2Qq5n37HlW3gV8+C7cmpHv3XsxYYP1aNgfQjWOgZoAgTMsCmiaaN2DgZ IGSr4fM2IHAdSFu6NW3Me5gt3E/HRs8YW0Y++j8rQLNNyZGBo4Pjxul2HWnt39VS 2ISuRgfiEgvo6DVKvjLfUrKa9nHhqy8fd/QUHOJPp3QRTYw8nNaMJNR5roZN3aHG q6X/IEiVMfgy+YPSJaEoQ0Pj2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJl8fJuz UaRhzUq0M3TCEp5TieHmMB8GA1UdIwQYMBaAFJ69oSPZ7oMJQwWhGAwqCAV/5UBq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjVDMy8yMzI2QzYzRTY2 MDQxMUYwQTRDNTE5MkJDNEY5QUUwMi9ucjJoSTludWd3bERCYUVZRENvSUJYX2xR R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25yMmhJOW51Z3dsREJhRVlEQ29JQlhfbFFHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjVDMy8yMzI2QzYzRTY2MDQxMUYwQTRDNTE5MkJDNEY5QUUwMi9ucjJoSTludWd3 bERCYUVZRENvSUJYX2xRR28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVu3Q9Lhr6jrOTpzFE+sQylitpXghGe85V6XN8q8qmFaE+v2uyJbZmrV/Zi/s Zu0yWtxCzXxzboSxP11aVj0cuCD6ty7xqi/0zzWaDY+AwMfmvMI2p1640hgCovcg aZOk61C2OUNOG1vwOcrabQmXZKiOT0PQ4pCi2V2PaAnT6IRCEsVP6jOBRivab5HF gKI2nEDS47J2WAdRHt6OeiTudTI9ZznY1dsoaLqXXJcDVx4f53WQdybaucs8i5Ls 0wBzwa8keBGAjJX10gMKjFILfMWSVwG5DUdl6LbQy12pgG/nEN5l/9e+x2UlUbds ohI7HiCo+U8WQAgWLuTx33Cq/g== -----END CERTIFICATE-----Generated at Sat Jun 13 20:58:25 2026 by rpki-client