$ rpki-client -vvf rpki.apnic.net/member_repository/A91801AC/B075028A12CA11F1BCBA005E063D8C67/iQyucO4FJzcpUQC_DPAR6zIEYrc.mft File: iQyucO4FJzcpUQC_DPAR6zIEYrc.mft (raw, json) Hash identifier: JvzfJF8ou/RwTDFc2NAsIOofPAYmIGTKjE+y19YOID8= Subject key identifier: 51:D7:33:29:EF:BB:5D:11:BD:16:48:C9:EE:30:6D:6B:77:FA:75:16 Authority key identifier: 89:0C:AE:70:EE:05:27:37:29:51:00:BF:0C:F0:11:EB:32:04:62:B7 Certificate issuer: /CN=A91801AC/serialNumber=890CAE70EE052737295100BF0CF011EB320462B7 Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQyucO4FJzcpUQC_DPAR6zIEYrc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91801AC/B075028A12CA11F1BCBA005E063D8C67/iQyucO4FJzcpUQC_DPAR6zIEYrc.mft Manifest number: 40 Signing time: Sat 13 Jun 2026 08:38:35 +0000 Manifest this update: Sat 13 Jun 2026 08:38:35 +0000 Manifest next update: Sat 20 Jun 2026 08:38:35 +0000 Files and hashes: 1: iQyucO4FJzcpUQC_DPAR6zIEYrc.crl (hash: W2TzAyH8Xl2eyGBp6yTA1ca3CuDAo/H1a1AehAT2Qzk=) 2: 28C5A13E58D711F1A51CFA3FA6833773.roa (hash: vdn++VmCdwWiyzm/zFcI+x86Ju8nJ7UCVdrrR8Mfcxg=) 3: 58548E7E58D711F193388669A6833773.roa (hash: 5SoJbf8FG3By3aUEH9+1tHflBLhQTGm7shpUveBVDcQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91801AC/B075028A12CA11F1BCBA005E063D8C67/iQyucO4FJzcpUQC_DPAR6zIEYrc.crl rsync://rpki.apnic.net/member_repository/A91801AC/B075028A12CA11F1BCBA005E063D8C67/iQyucO4FJzcpUQC_DPAR6zIEYrc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQyucO4FJzcpUQC_DPAR6zIEYrc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 08:38:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91801AC, serialNumber=890CAE70EE052737295100BF0CF011EB320462B7 Validity Not Before: Jun 13 08:38:35 2026 GMT Not After : Jun 20 08:38:35 2026 GMT Subject: CN=6a2d170b-357f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:30:c7:5f:9f:2c:b3:7d:f2:18:20:0d:58:e1: 58:16:a5:8d:70:d4:90:2c:8e:30:fc:7c:38:ab:87: cf:4c:c1:7c:ad:17:8a:dc:da:05:78:80:8c:d8:4b: 95:03:b0:a5:f1:cd:f7:ca:b6:71:61:1c:97:68:2f: d5:2d:72:b8:a0:66:e6:d2:9a:de:3d:ec:88:ba:f7: 55:98:fb:78:c6:d5:47:a0:c0:28:d3:98:87:77:2c: 78:7d:ab:4d:d4:2d:89:35:c5:72:9f:3c:9a:3f:1e: 0a:10:93:6e:4d:fb:47:41:b6:ac:b4:69:4e:8f:dd: ef:53:c7:6a:2e:ba:9e:6a:4c:cd:96:d9:6d:83:5a: a8:60:34:75:4e:32:bb:86:8d:77:3e:05:29:33:e4: 42:30:89:fe:34:ad:26:71:1f:f8:72:b0:9f:82:36: d0:a1:fd:08:29:78:86:b3:9d:b6:78:13:2a:a1:13: d6:e0:a0:1f:c8:93:52:04:49:49:bf:8f:d8:6b:55: 07:ad:c3:f8:ec:97:11:39:3c:af:8d:be:a8:7b:3d: b7:d0:97:d6:fc:a9:12:a2:90:24:62:20:7a:1f:b5: 75:af:d7:cf:2b:99:c6:80:f1:9a:04:91:3c:ad:6d: ff:1f:34:69:0c:7e:63:74:13:99:5e:01:04:71:60: 96:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:D7:33:29:EF:BB:5D:11:BD:16:48:C9:EE:30:6D:6B:77:FA:75:16 X509v3 Authority Key Identifier: keyid:89:0C:AE:70:EE:05:27:37:29:51:00:BF:0C:F0:11:EB:32:04:62:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91801AC/B075028A12CA11F1BCBA005E063D8C67/iQyucO4FJzcpUQC_DPAR6zIEYrc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQyucO4FJzcpUQC_DPAR6zIEYrc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91801AC/B075028A12CA11F1BCBA005E063D8C67/iQyucO4FJzcpUQC_DPAR6zIEYrc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:8c:d6:b1:55:a4:80:bb:c9:63:29:ba:ba:61:f2:a8:5c:f2: 8f:f5:cb:e4:b2:1c:00:79:f2:1d:ca:b0:dd:3e:ca:51:b4:0b: 62:79:ed:b8:6f:60:e6:33:2c:8c:09:7c:15:de:71:84:e0:90: 5b:05:53:72:60:83:be:d0:36:2f:7c:aa:93:07:12:ca:02:ab: 03:95:1d:fc:3e:f4:e0:ca:4d:30:bd:7d:fa:bf:6e:db:70:4c: 88:d8:d9:85:5e:e2:b2:c0:6f:18:89:e0:45:a3:61:5f:a3:74: 0f:bf:76:b2:03:c6:ea:0e:c2:90:15:74:5a:cf:d0:28:db:dd: ee:45:dc:2e:f5:fb:8e:43:32:f3:71:ec:d4:75:df:67:35:51: 5c:da:2e:25:51:e6:03:43:57:6a:7e:e4:be:aa:eb:9b:92:1b: 7f:a0:3e:2c:77:b9:5b:a3:cf:22:54:26:2c:29:e2:be:87:68: 02:88:f3:24:65:83:26:f2:02:87:0b:d5:22:bc:18:4f:6b:95: c9:ee:22:74:dd:95:af:1c:6a:6d:13:77:ed:78:ac:23:b3:8a: 5e:6c:41:14:a2:c2:92:b9:28:69:03:3b:10:08:8d:32:ed:7c: 70:38:62:5d:ab:44:81:37:ae:1b:e1:2d:66:f5:30:1c:f8:3e: e3:92:aa:28 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MDFBQzExMC8GA1UEBRMoODkwQ0FFNzBFRTA1MjczNzI5NTEwMEJGMENGMDExRUIz MjA0NjJCNzAeFw0yNjA2MTMwODM4MzVaFw0yNjA2MjAwODM4MzVaMBgxFjAUBgNV BAMTDTZhMmQxNzBiLTM1N2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNMMdfnyyzffIYIA1Y4VgWpY1w1JAsjjD8fDirh89MwXytF4rc2gV4gIzYS5UD sKXxzffKtnFhHJdoL9UtcrigZubSmt497Ii691WY+3jG1UegwCjTmId3LHh9q03U LYk1xXKfPJo/HgoQk25N+0dBtqy0aU6P3e9Tx2ouup5qTM2W2W2DWqhgNHVOMruG jXc+BSkz5EIwif40rSZxH/hysJ+CNtCh/QgpeIaznbZ4EyqhE9bgoB/Ik1IESUm/ j9hrVQetw/jslxE5PK+Nvqh7PbfQl9b8qRKikCRiIHoftXWv188rmcaA8ZoEkTyt bf8fNGkMfmN0E5leAQRxYJb7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUUdczKe+7 XRG9FkjJ7jBta3f6dRYwHwYDVR0jBBgwFoAUiQyucO4FJzcpUQC/DPAR6zIEYrcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgwMUFDL0IwNzUwMjhBMTJD QTExRjFCQ0JBMDA1RTA2M0Q4QzY3L2lReXVjTzRGSnpjcFVRQ19EUEFSNnpJRVly Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaVF5dWNPNEZKemNwVVFDX0RQQVI2eklFWXJjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgw MUFDL0IwNzUwMjhBMTJDQTExRjFCQ0JBMDA1RTA2M0Q4QzY3L2lReXVjTzRGSnpj cFVRQ19EUEFSNnpJRVlyYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBdjNaxVaSAu8ljKbq6YfKoXPKP9cvkshwAefIdyrDdPspRtAtiee24b2DmMyyM CXwV3nGE4JBbBVNyYIO+0DYvfKqTBxLKAqsDlR38PvTgyk0wvX36v27bcEyI2NmF XuKywG8YieBFo2Ffo3QPv3ayA8bqDsKQFXRaz9Ao293uRdwu9fuOQzLzcezUdd9n NVFc2i4lUeYDQ1dqfuS+quubkht/oD4sd7lbo88iVCYsKeK+h2gCiPMkZYMm8gKH C9UivBhPa5XJ7iJ03ZWvHGptE3fteKwjs4pebEEUosKSuShpAzsQCI0y7XxwOGJd q0SBN64b4S1m9TAc+D7jkqoo -----END CERTIFICATE-----Generated at Sat Jun 13 18:57:32 2026 by rpki-client