$ rpki-client -vvf rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.mft File: nB5FqAhMMR3VAEShc2BejuPEzJU.mft (raw, json) Hash identifier: pJTg7o7IqnvFerYyRTkDgOcvRCKgKAxrWrjW0yVTrKY= Subject key identifier: 5B:48:B9:7B:01:E9:71:13:C3:DC:D1:E6:B5:DD:CF:3D:38:83:0E:47 Authority key identifier: 9C:1E:45:A8:08:4C:31:1D:D5:00:44:A1:73:60:5E:8E:E3:C4:CC:95 Certificate issuer: /CN=A91491CC/serialNumber=9C1E45A8084C311DD50044A173605E8EE3C4CC95 Certificate serial: 89 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nB5FqAhMMR3VAEShc2BejuPEzJU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.mft Manifest number: 87 Signing time: Sat 13 Jun 2026 07:38:26 +0000 Manifest this update: Sat 13 Jun 2026 07:38:26 +0000 Manifest next update: Sat 20 Jun 2026 07:38:26 +0000 Files and hashes: 1: nB5FqAhMMR3VAEShc2BejuPEzJU.crl (hash: xVzNe/ggPKhaeY/Z/4TWjADduzdmVZ3BeTnsbKV/mnY=) 2: 31E9004E9A0F11F0BC057E7DC4F9AE02.roa (hash: lMXIM574jb3Z0QsqRGCGYyP7C5VSgFPD1a4YIovILSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.crl rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nB5FqAhMMR3VAEShc2BejuPEzJU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 07:38:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91491CC, serialNumber=9C1E45A8084C311DD50044A173605E8EE3C4CC95 Validity Not Before: Jun 13 07:38:26 2026 GMT Not After : Jun 20 07:38:26 2026 GMT Subject: CN=6a2d08f2-b015 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:05:53:92:5f:22:cd:d7:e2:d4:bc:69:00:05: 1a:d5:85:2d:67:ab:3a:51:97:45:e3:72:cf:51:63: 13:5b:2d:07:01:ef:c5:24:70:09:75:5c:39:f5:60: f8:1a:f6:84:2f:ee:2b:a8:57:43:61:ee:fd:b8:4b: 3b:23:cc:d0:71:4f:80:b9:07:fa:04:6c:a1:8f:92: e5:8d:78:11:25:3f:b5:46:07:42:8d:fb:bb:77:e0: 82:50:71:41:a2:f8:fd:f7:02:5e:51:3a:f7:1b:33: 06:88:93:07:aa:a8:1c:d2:41:31:9a:02:33:21:bf: 1b:da:29:03:d7:0c:62:cf:4c:ff:a4:0d:33:e6:45: 8e:cc:d9:a9:ea:c0:25:b5:27:3b:e9:5a:61:28:c6: ed:f7:ce:f4:a0:52:fe:fc:f3:60:57:d0:01:b3:4c: fc:62:f9:1e:2e:8c:9b:e8:89:84:ca:82:1d:7b:c7: 74:22:d2:42:6e:70:ab:b8:67:1d:49:a0:a8:48:eb: 3d:1f:e9:a0:76:76:61:ca:a7:59:e6:99:03:45:26: 00:a5:db:d7:5f:75:71:c3:8c:8b:1d:af:7b:fc:df: dd:c0:33:55:8e:47:79:c1:e7:3d:73:b0:4b:04:ec: b2:57:d9:06:cb:50:bd:9c:00:56:53:a0:77:44:2d: 6f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:48:B9:7B:01:E9:71:13:C3:DC:D1:E6:B5:DD:CF:3D:38:83:0E:47 X509v3 Authority Key Identifier: keyid:9C:1E:45:A8:08:4C:31:1D:D5:00:44:A1:73:60:5E:8E:E3:C4:CC:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nB5FqAhMMR3VAEShc2BejuPEzJU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:69:58:c7:2f:e3:0f:ea:a2:10:c2:0e:da:5f:0d:e1:15:2d: c0:fb:43:34:1f:2c:d6:9a:95:1a:c7:e5:75:fd:60:06:52:b5: dd:e5:10:87:1b:a0:1e:32:4d:e8:1d:3d:fb:f7:c5:84:93:d0: d6:0f:6a:2c:c6:31:c0:d9:10:3f:3f:19:34:bd:3f:bd:07:b5: c9:03:ff:6f:98:2c:9a:bb:a0:e4:5c:d2:5a:79:85:3f:e1:c5: 26:0d:da:bd:43:a7:9e:e3:d2:8b:5f:47:cb:9d:59:96:6e:73: b0:25:65:b7:ed:e7:a8:91:b4:3e:0b:c3:0b:14:77:2e:19:53: 3a:25:b2:7e:76:27:73:8f:d4:9e:39:88:8e:ac:2d:ea:95:73: c1:46:04:17:f7:64:94:55:4d:b1:0b:d5:21:a6:4e:10:ce:da: ec:ec:43:38:85:89:e4:be:57:a2:43:74:a3:96:bd:53:8a:55: cc:53:f2:b0:0c:77:13:70:67:36:a8:51:d8:3e:44:93:8f:a2: 63:5a:63:f6:c7:15:d0:33:7c:e1:3d:5a:1e:33:15:eb:1b:79: dc:56:9f:0e:3f:86:4b:93:83:fa:19:56:58:5b:c6:4a:e7:a0: 53:1c:5e:c3:e0:2b:2f:93:af:c1:6f:d1:35:c6:74:24:b0:4c: b7:bb:dd:de -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDkxQ0MxMTAvBgNVBAUTKDlDMUU0NUE4MDg0QzMxMURENTAwNDRBMTczNjA1RThF RTNDNENDOTUwHhcNMjYwNjEzMDczODI2WhcNMjYwNjIwMDczODI2WjAYMRYwFAYD VQQDEw02YTJkMDhmMi1iMDE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1AVTkl8izdfi1LxpAAUa1YUtZ6s6UZdF43LPUWMTWy0HAe/FJHAJdVw59WD4 GvaEL+4rqFdDYe79uEs7I8zQcU+AuQf6BGyhj5LljXgRJT+1RgdCjfu7d+CCUHFB ovj99wJeUTr3GzMGiJMHqqgc0kExmgIzIb8b2ikD1wxiz0z/pA0z5kWOzNmp6sAl tSc76VphKMbt9870oFL+/PNgV9ABs0z8YvkeLoyb6ImEyoIde8d0ItJCbnCruGcd SaCoSOs9H+mgdnZhyqdZ5pkDRSYApdvXX3Vxw4yLHa97/N/dwDNVjkd5wec9c7BL BOyyV9kGy1C9nABWU6B3RC1vEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFtIuXsB 6XETw9zR5rXdzz04gw5HMB8GA1UdIwQYMBaAFJweRagITDEd1QBEoXNgXo7jxMyV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTFDQy85REYwN0U0NDlB MEUxMUYwODlDODhCN0NDNEY5QUUwMi9uQjVGcUFoTU1SM1ZBRVNoYzJCZWp1UEV6 SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25CNUZxQWhNTVIzVkFFU2hjMkJlanVQRXpKVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTFDQy85REYwN0U0NDlBMEUxMUYwODlDODhCN0NDNEY5QUUwMi9uQjVGcUFoTU1S M1ZBRVNoYzJCZWp1UEV6SlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX2lYxy/jD+qiEMIO2l8N4RUtwPtDNB8s1pqVGsfldf1gBlK13eUQhxugHjJN 6B09+/fFhJPQ1g9qLMYxwNkQPz8ZNL0/vQe1yQP/b5gsmrug5FzSWnmFP+HFJg3a vUOnnuPSi19Hy51Zlm5zsCVlt+3nqJG0PgvDCxR3LhlTOiWyfnYnc4/UnjmIjqwt 6pVzwUYEF/dklFVNsQvVIaZOEM7a7OxDOIWJ5L5XokN0o5a9U4pVzFPysAx3E3Bn NqhR2D5Ek4+iY1pj9scV0DN84T1aHjMV6xt53FafDj+GS5OD+hlWWFvGSuegUxxe w+ArL5OvwW/RNcZ0JLBMt7vd3g== -----END CERTIFICATE-----Generated at Sat Jun 13 14:30:35 2026 by rpki-client