$ rpki-client -vvf rpki.apnic.net/member_repository/A91756C3/5BF5192AE06711EFBC3D171BC4F9AE02/2CVmixrBt_OBXwe82lfnSMSWSpo.mft File: 2CVmixrBt_OBXwe82lfnSMSWSpo.mft (raw, json) Hash identifier: ERPlknQEokJtSOXjGE3c39f/IeTblUYWkZXw99tc8FQ= Subject key identifier: 84:D3:A4:AA:92:9C:B0:BB:CD:35:87:E1:79:F5:40:B1:DA:D6:F1:05 Authority key identifier: D8:25:66:8B:1A:C1:B7:F3:81:5F:07:BC:DA:57:E7:48:C4:96:4A:9A Certificate issuer: /CN=A91756C3/serialNumber=D825668B1AC1B7F3815F07BCDA57E748C4964A9A Certificate serial: 0108 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CVmixrBt_OBXwe82lfnSMSWSpo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91756C3/5BF5192AE06711EFBC3D171BC4F9AE02/2CVmixrBt_OBXwe82lfnSMSWSpo.mft Manifest number: 0100 Signing time: Sat 13 Jun 2026 06:16:09 +0000 Manifest this update: Sat 13 Jun 2026 06:16:08 +0000 Manifest next update: Sat 20 Jun 2026 06:16:08 +0000 Files and hashes: 1: 2CVmixrBt_OBXwe82lfnSMSWSpo.crl (hash: csPM0De5+QWY12GWm9yolyO4q3xwlX6ewGeJN2U2yR4=) 2: 00078764E06811EF8716401DC4F9AE02.roa (hash: jAgpnq1+lwtrym5arlQne7Jb3Wult1dG/3ZGpOPdDZo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91756C3/5BF5192AE06711EFBC3D171BC4F9AE02/2CVmixrBt_OBXwe82lfnSMSWSpo.crl rsync://rpki.apnic.net/member_repository/A91756C3/5BF5192AE06711EFBC3D171BC4F9AE02/2CVmixrBt_OBXwe82lfnSMSWSpo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CVmixrBt_OBXwe82lfnSMSWSpo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 06:16:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 264 (0x108) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91756C3, serialNumber=D825668B1AC1B7F3815F07BCDA57E748C4964A9A Validity Not Before: Jun 13 06:16:08 2026 GMT Not After : Jun 20 06:16:08 2026 GMT Subject: CN=6a2cf5a9-0ab7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5d:3d:1e:02:a0:01:b4:46:b3:98:f8:b8:c8: 45:51:ea:23:43:33:a7:f8:4e:e9:05:87:ba:fc:9f: 0c:1d:b1:1b:d1:00:ec:9e:a1:d0:67:69:1f:74:b9: e3:7a:f7:50:8b:a7:c2:63:6a:15:b7:0f:24:ff:d7: f0:8f:69:08:66:f3:c8:01:ab:10:6b:cb:19:1c:76: 95:58:21:a0:3b:d4:d7:2d:51:e4:05:eb:fc:cf:78: 53:a0:11:1d:ee:72:10:aa:df:b7:41:5f:28:c5:ac: de:35:b7:0c:b1:99:2f:08:e9:29:aa:7e:30:85:43: 1d:db:27:db:23:9f:c1:e0:9a:dd:d3:b5:fd:7d:60: 8f:4e:9b:d6:85:1e:90:cd:84:95:9f:9e:c0:3f:46: 9d:1a:79:51:f8:77:8a:6e:82:b9:98:e1:aa:f4:d2: 0f:06:b9:7a:3c:ba:3d:55:35:78:45:b8:d3:61:5a: a5:3d:88:5e:a0:87:1f:92:87:89:49:c7:9c:99:b1: c1:80:58:45:73:1e:45:04:d8:b9:c4:b4:e6:65:24: d8:4a:2b:d9:3e:43:2b:cf:94:93:61:eb:9f:65:3f: c5:a7:13:84:86:9f:81:59:63:d7:a4:6a:55:60:46: 0d:a5:30:d2:2a:0b:3d:ac:8b:c9:f7:38:67:5e:d4: c0:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:D3:A4:AA:92:9C:B0:BB:CD:35:87:E1:79:F5:40:B1:DA:D6:F1:05 X509v3 Authority Key Identifier: keyid:D8:25:66:8B:1A:C1:B7:F3:81:5F:07:BC:DA:57:E7:48:C4:96:4A:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91756C3/5BF5192AE06711EFBC3D171BC4F9AE02/2CVmixrBt_OBXwe82lfnSMSWSpo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CVmixrBt_OBXwe82lfnSMSWSpo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91756C3/5BF5192AE06711EFBC3D171BC4F9AE02/2CVmixrBt_OBXwe82lfnSMSWSpo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:ad:26:25:2d:ab:41:df:f0:8c:fc:f2:87:03:84:8e:fc:ad: 52:e4:27:b8:88:d6:cf:35:65:4d:c0:98:ee:58:49:54:2e:22: 96:a5:8b:d2:60:bc:c9:c6:96:1d:8a:ac:63:10:6a:ac:28:69: b9:d6:f2:b5:af:77:b2:13:35:00:d7:f2:42:be:1e:11:4b:41: 7b:f3:a6:9d:c8:2f:d7:5a:d4:26:bc:53:df:dd:b5:79:1e:fe: b0:db:08:a2:56:8b:b4:4a:fc:ab:56:d2:21:09:64:d0:47:80: 64:02:c1:f7:ce:c9:b4:e4:e6:68:ed:95:5a:41:05:41:a1:3f: 57:7e:1a:d5:98:f2:d5:9c:ba:fb:bf:86:b0:4d:6d:91:10:f1: 85:4a:76:2d:18:9c:57:d8:65:11:44:1c:9e:3a:46:ce:d3:5a: b5:09:19:66:14:69:ae:b0:ad:fd:06:be:9a:06:dd:5a:34:0c: 7e:56:c7:eb:ad:af:4d:04:7e:95:8d:37:98:2d:94:b9:4e:8b: e5:28:47:f5:2b:45:86:c1:a5:f6:3a:2c:68:69:48:17:77:76: 98:54:30:bb:11:b4:63:38:8e:4e:a1:34:41:1f:da:17:e4:ab: 34:57:10:6a:10:23:e0:36:6b:1d:2e:49:1b:f7:ff:dd:fa:a5: c2:d3:b8:bb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU2QzMxMTAvBgNVBAUTKEQ4MjU2NjhCMUFDMUI3RjM4MTVGMDdCQ0RBNTdFNzQ4 QzQ5NjRBOUEwHhcNMjYwNjEzMDYxNjA4WhcNMjYwNjIwMDYxNjA4WjAYMRYwFAYD VQQDEw02YTJjZjVhOS0wYWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzl09HgKgAbRGs5j4uMhFUeojQzOn+E7pBYe6/J8MHbEb0QDsnqHQZ2kfdLnj evdQi6fCY2oVtw8k/9fwj2kIZvPIAasQa8sZHHaVWCGgO9TXLVHkBev8z3hToBEd 7nIQqt+3QV8oxazeNbcMsZkvCOkpqn4whUMd2yfbI5/B4Jrd07X9fWCPTpvWhR6Q zYSVn57AP0adGnlR+HeKboK5mOGq9NIPBrl6PLo9VTV4RbjTYVqlPYheoIcfkoeJ ScecmbHBgFhFcx5FBNi5xLTmZSTYSivZPkMrz5STYeufZT/FpxOEhp+BWWPXpGpV YEYNpTDSKgs9rIvJ9zhnXtTASQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFITTpKqS nLC7zTWH4Xn1QLHa1vEFMB8GA1UdIwQYMBaAFNglZosawbfzgV8HvNpX50jElkqa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTZDMy81QkY1MTkyQUUw NjcxMUVGQkMzRDE3MUJDNEY5QUUwMi8yQ1ZtaXhyQnRfT0JYd2U4MmxmblNNU1dT cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJDVm1peHJCdF9PQlh3ZTgybGZuU01TV1Nwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTZDMy81QkY1MTkyQUUwNjcxMUVGQkMzRDE3MUJDNEY5QUUwMi8yQ1ZtaXhyQnRf T0JYd2U4MmxmblNNU1dTcG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYa0mJS2rQd/wjPzyhwOEjvytUuQnuIjWzzVlTcCY7lhJVC4ilqWL0mC8ycaW HYqsYxBqrChpudbyta93shM1ANfyQr4eEUtBe/Omncgv11rUJrxT3921eR7+sNsI olaLtEr8q1bSIQlk0EeAZALB987JtOTmaO2VWkEFQaE/V34a1Zjy1Zy6+7+GsE1t kRDxhUp2LRicV9hlEUQcnjpGztNatQkZZhRprrCt/Qa+mgbdWjQMflbH662vTQR+ lY03mC2UuU6L5ShH9StFhsGl9josaGlIF3d2mFQwuxG0YziOTqE0QR/aF+SrNFcQ ahAj4DZrHS5JG/f/3fqlwtO4uw== -----END CERTIFICATE-----Generated at Sat Jun 13 13:18:56 2026 by rpki-client