$ rpki-client -vvf rpki.apnic.net/member_repository/A91736BD/22C621A86EE511EDB9C45385C4F9AE02/U-LhNFJFffIe8ly6OyYQ0BKpBtI.mft File: U-LhNFJFffIe8ly6OyYQ0BKpBtI.mft (raw, json) Hash identifier: 9SKoPrbConttayIlBqKezGs2f7pqxdJt3AV5MPV2KEw= Subject key identifier: 90:5D:24:66:85:18:6B:FF:87:0E:D4:92:AE:D5:53:D6:4B:83:6E:CA Authority key identifier: 53:E2:E1:34:52:45:7D:F2:1E:F2:5C:BA:3B:26:10:D0:12:A9:06:D2 Certificate issuer: /CN=A91736BD/serialNumber=53E2E13452457DF21EF25CBA3B2610D012A906D2 Certificate serial: 02A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-LhNFJFffIe8ly6OyYQ0BKpBtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91736BD/22C621A86EE511EDB9C45385C4F9AE02/U-LhNFJFffIe8ly6OyYQ0BKpBtI.mft Manifest number: 0299 Signing time: Sat 13 Jun 2026 01:41:05 +0000 Manifest this update: Sat 13 Jun 2026 01:41:04 +0000 Manifest next update: Sat 20 Jun 2026 01:41:04 +0000 Files and hashes: 1: U-LhNFJFffIe8ly6OyYQ0BKpBtI.crl (hash: yoDYAQMAKKgYMEpndyn0jPJOmZJv9mr18w+PHkgRlOQ=) 2: EB8C9B546EE911ED8F07B022C4F9AE02.roa (hash: g3eOenNLDa9Ly+07FwWBJj8yKQrhF0dtKDBoP9nh0/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91736BD/22C621A86EE511EDB9C45385C4F9AE02/U-LhNFJFffIe8ly6OyYQ0BKpBtI.crl rsync://rpki.apnic.net/member_repository/A91736BD/22C621A86EE511EDB9C45385C4F9AE02/U-LhNFJFffIe8ly6OyYQ0BKpBtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-LhNFJFffIe8ly6OyYQ0BKpBtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 01:41:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 672 (0x2a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91736BD, serialNumber=53E2E13452457DF21EF25CBA3B2610D012A906D2 Validity Not Before: Jun 13 01:41:04 2026 GMT Not After : Jun 20 01:41:04 2026 GMT Subject: CN=6a2cb531-a76d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:25:d6:49:a3:14:5a:f7:5b:b8:61:43:03:5a: 48:ab:b6:d4:47:38:17:44:c0:25:97:70:5b:16:99: 4a:24:e8:71:f0:45:6c:f7:fe:ba:3f:35:38:7b:3a: 81:f2:37:78:60:2a:91:f7:69:5c:a1:95:a1:c1:3d: 95:62:82:aa:2d:1f:63:a0:f8:d1:78:a1:60:b6:b9: cf:7e:e8:5b:6e:87:c2:b8:4a:4c:2e:2b:e9:e9:1f: 9b:c9:9f:8b:3f:79:bd:9d:c0:48:6e:71:1e:51:f7: 64:70:d0:48:a6:7c:58:7e:1b:d3:52:47:3f:f9:23: cd:61:1b:ec:7c:1b:e0:75:8c:27:1c:cb:f6:f5:ee: 5f:a1:d3:41:73:b6:25:e1:42:7a:b1:dc:2a:92:83: fa:4e:25:55:2f:bd:c6:0e:d8:ef:62:b5:b4:40:08: af:78:5f:8f:e5:16:0b:c3:a9:f0:42:07:9e:48:eb: d3:d4:60:40:d3:ce:c9:f4:2a:87:ef:7b:ce:a1:5d: dd:49:a1:c9:40:53:87:ad:36:5f:6b:59:cc:04:75: 6f:5f:5a:f4:9e:5a:ba:a2:16:58:0e:d4:88:43:73: 15:aa:52:6b:19:be:ca:19:97:ac:aa:b4:fa:7d:ba: f6:13:75:9d:83:b1:86:4b:ad:61:93:82:39:db:5e: 53:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:5D:24:66:85:18:6B:FF:87:0E:D4:92:AE:D5:53:D6:4B:83:6E:CA X509v3 Authority Key Identifier: keyid:53:E2:E1:34:52:45:7D:F2:1E:F2:5C:BA:3B:26:10:D0:12:A9:06:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91736BD/22C621A86EE511EDB9C45385C4F9AE02/U-LhNFJFffIe8ly6OyYQ0BKpBtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-LhNFJFffIe8ly6OyYQ0BKpBtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91736BD/22C621A86EE511EDB9C45385C4F9AE02/U-LhNFJFffIe8ly6OyYQ0BKpBtI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:4b:a3:8a:cb:d3:23:81:65:44:79:36:38:51:ac:a4:61:73: 60:a0:93:b3:5e:28:37:01:85:79:e0:88:65:b3:87:9a:f5:9a: 4f:89:bf:89:4c:0b:92:13:50:67:b1:e3:1f:91:2c:93:71:3f: b5:1b:f9:e4:ee:9f:57:3d:bc:21:33:43:24:ce:89:6b:c9:c6: a2:40:25:05:b8:ac:fe:75:d2:ef:9d:f5:e3:8f:a8:7e:b6:f7: 93:de:e4:86:62:ee:74:16:5a:9d:ea:22:8c:28:35:03:45:92: 3c:40:76:53:19:28:fa:c9:9c:34:04:d8:a2:5b:0d:3e:a3:5b: d5:f4:3e:29:df:48:74:54:ab:62:a1:a3:bb:62:90:ce:f1:80: 71:52:1b:81:c2:41:4d:92:5b:e9:63:6f:6c:d5:2a:b8:07:24: 1e:26:3f:84:66:d4:a7:3d:25:81:25:d6:a3:53:6a:d6:55:65: 0e:19:1f:8e:70:d7:c5:cc:dd:17:98:f9:0e:a4:f3:58:6f:37: 0d:60:93:d4:b8:26:ac:3b:e9:64:32:a3:0a:a8:58:ca:44:87: a7:87:68:f8:b8:76:a9:88:1a:72:d7:65:6a:61:49:8d:71:ae: ae:1b:f8:c7:91:0e:b3:0b:c8:82:2f:e6:29:5d:0b:aa:81:1f: 4d:9a:0e:cc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzM2QkQxMTAvBgNVBAUTKDUzRTJFMTM0NTI0NTdERjIxRUYyNUNCQTNCMjYxMEQw MTJBOTA2RDIwHhcNMjYwNjEzMDE0MTA0WhcNMjYwNjIwMDE0MTA0WjAYMRYwFAYD VQQDEw02YTJjYjUzMS1hNzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApyXWSaMUWvdbuGFDA1pIq7bURzgXRMAll3BbFplKJOhx8EVs9/66PzU4ezqB 8jd4YCqR92lcoZWhwT2VYoKqLR9joPjReKFgtrnPfuhbbofCuEpMLivp6R+byZ+L P3m9ncBIbnEeUfdkcNBIpnxYfhvTUkc/+SPNYRvsfBvgdYwnHMv29e5fodNBc7Yl 4UJ6sdwqkoP6TiVVL73GDtjvYrW0QAiveF+P5RYLw6nwQgeeSOvT1GBA087J9CqH 73vOoV3dSaHJQFOHrTZfa1nMBHVvX1r0nlq6ohZYDtSIQ3MVqlJrGb7KGZesqrT6 fbr2E3Wdg7GGS61hk4I5215TZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJBdJGaF GGv/hw7Ukq7VU9ZLg27KMB8GA1UdIwQYMBaAFFPi4TRSRX3yHvJcujsmENASqQbS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzZCRC8yMkM2MjFBODZF RTUxMUVEQjlDNDUzODVDNEY5QUUwMi9VLUxoTkZKRmZmSWU4bHk2T3lZUTBCS3BC dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1UtTGhORkpGZmZJZThseTZPeVlRMEJLcEJ0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzZCRC8yMkM2MjFBODZFRTUxMUVEQjlDNDUzODVDNEY5QUUwMi9VLUxoTkZKRmZm SWU4bHk2T3lZUTBCS3BCdEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFkujisvTI4FlRHk2OFGspGFzYKCTs14oNwGFeeCIZbOHmvWaT4m/iUwLkhNQ Z7HjH5Esk3E/tRv55O6fVz28ITNDJM6Ja8nGokAlBbis/nXS753144+ofrb3k97k hmLudBZaneoijCg1A0WSPEB2Uxko+smcNATYolsNPqNb1fQ+Kd9IdFSrYqGju2KQ zvGAcVIbgcJBTZJb6WNvbNUquAckHiY/hGbUpz0lgSXWo1Nq1lVlDhkfjnDXxczd F5j5DqTzWG83DWCT1LgmrDvpZDKjCqhYykSHp4do+Lh2qYgactdlamFJjXGurhv4 x5EOswvIgi/mKV0LqoEfTZoOzA== -----END CERTIFICATE-----Generated at Sat Jun 13 15:12:35 2026 by rpki-client