$ rpki-client -vvf rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft File: 0Z0h9lpMk802wwczAhMPTmW38Ok.mft (raw, json) Hash identifier: sQ6/2s0w682tHzm5GScTgL0wDM6+qsyr4FwYei34yCA= Subject key identifier: 28:2A:4B:CA:BE:8B:3A:1E:D6:C8:C6:02:89:56:70:20:B4:4A:E2:8E Authority key identifier: D1:9D:21:F6:5A:4C:93:CD:36:C3:07:33:02:13:0F:4E:65:B7:F0:E9 Certificate issuer: /CN=A91765CB/serialNumber=D19D21F65A4C93CD36C3073302130F4E65B7F0E9 Certificate serial: 024B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft Manifest number: 023D Signing time: Sat 13 Jun 2026 02:35:20 +0000 Manifest this update: Sat 13 Jun 2026 02:35:20 +0000 Manifest next update: Sat 20 Jun 2026 02:35:20 +0000 Files and hashes: 1: 0Z0h9lpMk802wwczAhMPTmW38Ok.crl (hash: Abs/9Lr6UEC0CDxFOnsFtqVYY/1ovQqpYAhQaOKyvfM=) 2: 4C30AA30B08411EFA29E6722C4F9AE02.roa (hash: 0B4BKsEG1wa08J+lgPO912Kog9bxXq5IB8X43UFFcls=) 3: 5CBE3872145C11F0BFD6B347C4F9AE02.roa (hash: eIw4Uvs7+0h1YsqxH/qfh6oIU/c0LpW3ku/O5IbbbMI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.crl rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 02:35:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 587 (0x24b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91765CB, serialNumber=D19D21F65A4C93CD36C3073302130F4E65B7F0E9 Validity Not Before: Jun 13 02:35:20 2026 GMT Not After : Jun 20 02:35:20 2026 GMT Subject: CN=6a2cc1e8-33aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:91:2d:b2:90:02:1b:f4:cd:8c:26:15:59:fa: 8c:1f:9e:0a:d2:66:69:0a:a4:c9:0e:28:3d:36:1d: 71:60:29:31:ea:10:c7:3b:78:68:d0:dc:96:39:50: 36:bf:29:82:88:f1:44:5b:3b:7e:ba:f1:44:25:9f: 55:d5:66:bd:6c:77:93:24:df:b3:0e:ff:dc:1e:ab: 57:cb:5a:de:0a:63:1b:74:65:96:1b:e7:5f:ba:a9: 97:5d:74:fa:64:39:99:bf:4d:2c:5d:6e:25:f0:4f: 4d:b5:45:12:00:be:ec:b4:a6:69:3a:ab:43:31:7b: 65:98:9f:a3:ec:aa:e6:24:0b:e1:35:ac:6c:7f:ed: 81:e8:93:1e:16:c0:65:3f:59:92:1f:74:7a:7a:f5: 15:f2:07:df:6f:71:de:08:b6:0c:28:2f:57:b1:aa: 0b:b4:19:b1:25:c0:06:7a:ff:7a:15:5a:35:26:1f: 26:ea:62:50:bf:f9:9e:ea:25:1f:e6:f1:c7:4b:5a: 4f:ee:c6:2f:01:2f:f8:7e:13:ca:b4:dd:53:f8:35: 87:b0:85:b3:21:33:64:d2:97:f8:03:9b:30:7b:a4: d3:f8:11:55:8e:8e:ae:9e:16:cb:46:06:01:3d:22: cc:b2:28:ee:29:37:11:91:c5:cb:eb:fc:e5:24:fd: c1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:2A:4B:CA:BE:8B:3A:1E:D6:C8:C6:02:89:56:70:20:B4:4A:E2:8E X509v3 Authority Key Identifier: keyid:D1:9D:21:F6:5A:4C:93:CD:36:C3:07:33:02:13:0F:4E:65:B7:F0:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:57:3e:44:71:2b:a7:d0:82:27:43:a6:c1:b1:a7:26:69:44: ce:43:8e:98:04:33:eb:fb:f5:a8:c2:fe:f4:9e:40:3d:2f:2b: b2:e9:83:91:26:04:b9:5b:ca:32:81:0f:c9:c8:7c:53:56:f1: a6:37:f6:44:67:67:3b:4b:4b:97:93:37:de:c1:de:d3:14:3e: 32:33:d8:52:ce:bd:94:23:d3:46:20:df:5b:f2:bf:4e:ef:b4: a2:7e:64:87:53:cf:06:2b:b5:2e:f7:63:31:3d:02:05:cc:f0: 39:c5:35:39:f0:88:80:b3:59:d6:5a:d4:d4:e8:62:57:98:47: 52:c8:7c:1c:6b:9f:5e:73:5a:d9:63:d8:33:b4:f0:83:a8:3b: db:08:85:9e:9f:d6:df:a8:a2:1b:db:d2:8a:07:41:2c:e8:38: b9:22:2a:1e:40:cc:a2:b6:91:8f:01:22:2f:73:b6:ee:06:26: 93:7e:f1:19:b0:05:d4:f8:6d:9d:6e:b2:bd:0a:86:92:eb:46: 57:6a:1d:ef:95:f0:54:b9:69:68:38:ab:01:79:fc:62:de:12: 83:24:a6:21:4e:a3:33:3f:f7:4d:c7:09:0c:27:2a:0e:ac:52: 7c:7b:e0:be:8b:92:58:88:7b:ce:f2:6e:79:09:30:49:46:4e: 6d:d7:13:35 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY1Q0IxMTAvBgNVBAUTKEQxOUQyMUY2NUE0QzkzQ0QzNkMzMDczMzAyMTMwRjRF NjVCN0YwRTkwHhcNMjYwNjEzMDIzNTIwWhcNMjYwNjIwMDIzNTIwWjAYMRYwFAYD VQQDEw02YTJjYzFlOC0zM2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq5EtspACG/TNjCYVWfqMH54K0mZpCqTJDig9Nh1xYCkx6hDHO3ho0NyWOVA2 vymCiPFEWzt+uvFEJZ9V1Wa9bHeTJN+zDv/cHqtXy1reCmMbdGWWG+dfuqmXXXT6 ZDmZv00sXW4l8E9NtUUSAL7stKZpOqtDMXtlmJ+j7KrmJAvhNaxsf+2B6JMeFsBl P1mSH3R6evUV8gffb3HeCLYMKC9XsaoLtBmxJcAGev96FVo1Jh8m6mJQv/me6iUf 5vHHS1pP7sYvAS/4fhPKtN1T+DWHsIWzITNk0pf4A5swe6TT+BFVjo6unhbLRgYB PSLMsijuKTcRkcXL6/zlJP3BCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCgqS8q+ izoe1sjGAolWcCC0SuKOMB8GA1UdIwQYMBaAFNGdIfZaTJPNNsMHMwITD05lt/Dp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjVDQi82OTU1MTVFMDA2 MjgxMUVFQTcxNEMyNjNDNEY5QUUwMi8wWjBoOWxwTWs4MDJ3d2N6QWhNUFRtVzM4 T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBaMGg5bHBNazgwMnd3Y3pBaE1QVG1XMzhPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjVDQi82OTU1MTVFMDA2MjgxMUVFQTcxNEMyNjNDNEY5QUUwMi8wWjBoOWxwTWs4 MDJ3d2N6QWhNUFRtVzM4T2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUVc+RHErp9CCJ0OmwbGnJmlEzkOOmAQz6/v1qML+9J5APS8rsumDkSYEuVvK MoEPych8U1bxpjf2RGdnO0tLl5M33sHe0xQ+MjPYUs69lCPTRiDfW/K/Tu+0on5k h1PPBiu1LvdjMT0CBczwOcU1OfCIgLNZ1lrU1OhiV5hHUsh8HGufXnNa2WPYM7Tw g6g72wiFnp/W36iiG9vSigdBLOg4uSIqHkDMoraRjwEiL3O27gYmk37xGbAF1Pht nW6yvQqGkutGV2od75XwVLlpaDirAXn8Yt4SgySmIU6jMz/3TccJDCcqDqxSfHvg vouSWIh7zvJueQkwSUZObdcTNQ== -----END CERTIFICATE-----Generated at Sat Jun 13 10:00:32 2026 by rpki-client