$ rpki-client -vvf rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft File: 3owRZVEEK-jnJkvttYLwo3e7JL0.mft (raw, json) Hash identifier: iRFFSufkfddrYYVTmOGvKuwP+4zDseVEs/H6OkoJNLM= Subject key identifier: 79:4F:13:14:77:35:D4:2B:B1:CF:14:2A:6B:88:E2:DB:17:18:A9:EE Authority key identifier: DE:8C:11:65:51:04:2B:E8:E7:26:4B:ED:B5:82:F0:A3:77:BB:24:BD Certificate issuer: /CN=A91471A0/serialNumber=DE8C116551042BE8E7264BEDB582F0A377BB24BD Certificate serial: 6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3owRZVEEK-jnJkvttYLwo3e7JL0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft Manifest number: 64 Signing time: Sat 13 Jun 2026 08:10:51 +0000 Manifest this update: Sat 13 Jun 2026 08:10:51 +0000 Manifest next update: Sat 20 Jun 2026 08:10:51 +0000 Files and hashes: 1: 3owRZVEEK-jnJkvttYLwo3e7JL0.crl (hash: aXJIos+SAzJ1IhccDh+n0gpviYGDPx9xXTHbTTVz2fs=) 2: 9572FAF41D1B11F1B62EA9A5103D8C67.roa (hash: YxVjuj/u6cFjLolYA4vHKI/ekIe2/ZI5hcZUBzFakNE=) 3: 947595301D1B11F1B62EA9A5103D8C67.roa (hash: fyVIn40fjMUq1jfx5eUqoEzNu3Qfs0MIIOR0mSpXHec=) 4: A4A022041D1B11F188B066AA103D8C67.roa (hash: 0UiK+7UG4gazEA6M9ztbhs59f2RFRj/xH1mxg/FNT2U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.crl rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3owRZVEEK-jnJkvttYLwo3e7JL0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 08:10:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 111 (0x6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91471A0, serialNumber=DE8C116551042BE8E7264BEDB582F0A377BB24BD Validity Not Before: Jun 13 08:10:51 2026 GMT Not After : Jun 20 08:10:51 2026 GMT Subject: CN=6a2d108b-2651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:43:ad:a1:9c:8e:c7:d0:92:5e:56:b7:27:2d: ef:7d:34:18:e4:ac:5b:f7:41:18:23:fe:af:04:0a: d0:1b:f2:a5:c8:59:f1:7e:22:d2:b0:af:8a:e8:cc: ea:3e:57:df:7c:7a:0e:da:a3:b6:93:c4:a3:55:39: b7:d1:1c:1d:76:3a:51:f1:bd:ac:e3:f5:9d:7b:1c: 0d:32:97:59:1f:03:f1:c8:e5:7a:71:59:59:df:b0: aa:5c:32:4f:de:eb:fd:a3:5c:37:42:c3:69:e1:36: ac:8a:f5:11:e5:9e:e9:df:3e:b3:61:6f:51:3a:ad: 3a:02:1f:53:a2:23:a2:b0:69:a1:0f:07:c5:90:a3: 98:1c:d5:3f:1d:dc:0c:c8:99:0f:45:ca:46:dd:5e: b4:fa:74:24:26:b2:9d:b7:43:b2:b8:3f:f9:80:5f: ae:5c:19:5f:01:08:28:2d:04:be:4f:eb:14:7e:48: d1:7c:8b:c2:11:10:8b:7c:8b:d0:a0:84:d6:d1:71: 1e:80:9f:cb:95:2e:81:38:cc:94:da:91:3c:f4:cf: 90:fd:b4:c1:d2:64:96:5e:00:b7:6f:79:46:36:93: 0e:ca:7f:04:fe:7d:0f:34:b4:9c:82:ec:25:69:de: 86:03:e4:e6:5b:1e:72:a5:5e:cd:56:d4:64:44:12: 12:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:4F:13:14:77:35:D4:2B:B1:CF:14:2A:6B:88:E2:DB:17:18:A9:EE X509v3 Authority Key Identifier: keyid:DE:8C:11:65:51:04:2B:E8:E7:26:4B:ED:B5:82:F0:A3:77:BB:24:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3owRZVEEK-jnJkvttYLwo3e7JL0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:49:46:26:1d:aa:44:b3:a3:d1:cb:cc:9b:ab:ff:35:7b:2c: 57:b8:51:2f:0b:6c:31:21:04:2b:50:32:48:46:58:82:1d:2d: 9b:fb:14:e0:04:50:0e:e3:89:d7:13:9a:22:7a:b2:58:de:13: d2:41:bd:fd:5c:51:fc:cd:49:f9:0b:23:79:f8:1e:2a:be:56: 5a:8a:f1:11:67:fb:0a:ef:92:f7:7a:d4:05:7e:05:bb:83:80: 37:a1:ff:3d:37:1e:2e:f7:d7:c1:b5:06:0e:91:d0:6a:c1:22: 57:c1:af:b9:e5:0c:7e:10:68:c0:0d:c7:0f:d0:a4:eb:76:f0: 22:84:37:d5:75:14:78:b8:80:c6:c5:a5:f5:aa:0f:c9:a3:8b: 48:5a:2d:ee:d6:92:e8:db:57:6c:f5:a5:9d:20:a5:f6:08:52: d8:c1:0c:24:c1:d7:8a:25:d3:f1:17:89:40:d6:4f:da:08:90: ad:99:1e:0f:52:b1:29:b1:e9:0e:10:7b:bf:25:2c:74:31:96: f3:ca:4d:55:d1:1b:7c:81:69:17:f5:06:72:79:42:7d:2d:58: 85:ef:a2:4d:3f:e6:df:cb:c2:df:31:17:6a:db:6b:a4:7b:17: e3:9b:22:7d:ed:3a:cd:37:0d:75:cc:d5:f4:71:30:14:1b:d4: 61:a8:22:2f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBbzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NzFBMDExMC8GA1UEBRMoREU4QzExNjU1MTA0MkJFOEU3MjY0QkVEQjU4MkYwQTM3 N0JCMjRCRDAeFw0yNjA2MTMwODEwNTFaFw0yNjA2MjAwODEwNTFaMBgxFjAUBgNV BAMTDTZhMmQxMDhiLTI2NTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEQ62hnI7H0JJeVrcnLe99NBjkrFv3QRgj/q8ECtAb8qXIWfF+ItKwr4rozOo+ V998eg7ao7aTxKNVObfRHB12OlHxvazj9Z17HA0yl1kfA/HI5XpxWVnfsKpcMk/e 6/2jXDdCw2nhNqyK9RHlnunfPrNhb1E6rToCH1OiI6KwaaEPB8WQo5gc1T8d3AzI mQ9FykbdXrT6dCQmsp23Q7K4P/mAX65cGV8BCCgtBL5P6xR+SNF8i8IREIt8i9Cg hNbRcR6An8uVLoE4zJTakTz0z5D9tMHSZJZeALdveUY2kw7KfwT+fQ80tJyC7CVp 3oYD5OZbHnKlXs1W1GREEhI/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUeU8TFHc1 1CuxzxQqa4ji2xcYqe4wHwYDVR0jBBgwFoAU3owRZVEEK+jnJkvttYLwo3e7JL0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3MUEwL0Q2OTk0REU2REEz RTExRjA4MUY1QTQ1NzhFRDM2NDFELzNvd1JaVkVFSy1qbkprdnR0WUx3bzNlN0pM MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM293UlpWRUVLLWpuSmt2dHRZTHdvM2U3SkwwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 MUEwL0Q2OTk0REU2REEzRTExRjA4MUY1QTQ1NzhFRDM2NDFELzNvd1JaVkVFSy1q bkprdnR0WUx3bzNlN0pMMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCHSUYmHapEs6PRy8ybq/81eyxXuFEvC2wxIQQrUDJIRliCHS2b+xTgBFAO44nX E5oierJY3hPSQb39XFH8zUn5CyN5+B4qvlZaivERZ/sK75L3etQFfgW7g4A3of89 Nx4u99fBtQYOkdBqwSJXwa+55Qx+EGjADccP0KTrdvAihDfVdRR4uIDGxaX1qg/J o4tIWi3u1pLo21ds9aWdIKX2CFLYwQwkwdeKJdPxF4lA1k/aCJCtmR4PUrEpsekO EHu/JSx0MZbzyk1V0Rt8gWkX9QZyeUJ9LViF76JNP+bfy8LfMRdq22ukexfjmyJ9 7TrNNw11zNX0cTAUG9RhqCIv -----END CERTIFICATE-----Generated at Sun Jun 14 01:03:27 2026 by rpki-client