$ rpki-client -vvf rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft File: C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft (raw, json) Hash identifier: nZdzJsJSa1+BPB5ohmDfY52O6qYp0TRquSKmrzVNjP8= Subject key identifier: 05:6C:66:D6:C8:CF:4A:44:0F:08:3B:DE:C2:CF:20:BB:8E:65:05:4C Authority key identifier: 0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54 Certificate issuer: /CN=A91892EB/serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654 Certificate serial: 06B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft Manifest number: 0691 Signing time: Fri 12 Jun 2026 22:35:26 +0000 Manifest this update: Fri 12 Jun 2026 22:35:25 +0000 Manifest next update: Fri 19 Jun 2026 22:35:25 +0000 Files and hashes: 1: C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl (hash: ZqEtxEAnq2A+ZbYg0rJQ092XqJREvyy2CbAhGnZPrIQ=) 2: 1DE394187C2F11F0902A5A0CC4F9AE02.roa (hash: pdws3t0lZJ1KRtlaVi7T3cqSeY6vMdRKeuikmdwYWhg=) 3: 4FF7919CA3AE11F08498344CC4F9AE02.roa (hash: vr8P+P39aT/1jKl6iJb1sUFbpi5nliJVWaBLeOW46aY=) 4: F4DC3C2AC59211EBAA9C5B7BC4F9AE02.roa (hash: AcX/Q7kCXs6/lVr70u8Z/hkgVWbgvWKfVvGr/7kslLM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 22:35:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1718 (0x6b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91892EB, serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654 Validity Not Before: Jun 12 22:35:25 2026 GMT Not After : Jun 19 22:35:25 2026 GMT Subject: CN=6a2c89ae-9429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9e:8e:f6:24:0b:b7:d7:3a:b4:00:51:b9:0d: 99:26:81:2c:3e:06:5a:2e:c1:54:6c:0f:42:e2:9c: 0a:86:e0:8c:d7:20:22:03:9d:1c:1e:98:a5:44:9e: c4:51:ba:11:b8:77:81:89:5f:32:d4:14:1b:11:2f: 50:8d:78:85:1b:c2:af:8f:3b:62:2b:4c:ea:4f:d2: bb:bf:48:ee:ad:77:0f:c1:6b:39:0a:2d:af:a9:e5: 74:4c:2a:ea:05:7f:06:c4:9d:04:35:64:45:1e:a9: 69:96:f6:6b:93:09:98:7d:17:6a:a1:3b:4c:dd:70: a2:8b:2c:84:67:76:3a:f5:23:79:ce:78:31:36:79: f9:b4:30:ec:29:8b:e9:71:81:7a:3d:b2:07:a9:e1: 42:35:49:48:f4:ea:13:97:f0:3b:2b:42:6f:ae:0e: b3:20:33:3b:eb:3f:d4:5f:70:0f:b6:64:0f:b9:13: 0e:cf:00:68:c4:46:c9:30:1a:46:f0:35:8b:65:16: 3c:a5:5c:13:5a:65:04:de:d3:4a:27:8d:44:ea:a7: 9b:e8:39:84:2c:00:95:0e:9f:42:24:be:0e:64:3d: 73:d5:52:77:de:1e:5c:55:77:9e:86:74:9b:31:79: e6:5c:9f:dc:32:33:0c:9b:1a:7e:fc:26:80:dc:8e: 14:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:6C:66:D6:C8:CF:4A:44:0F:08:3B:DE:C2:CF:20:BB:8E:65:05:4C X509v3 Authority Key Identifier: keyid:0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:95:ca:b0:e1:57:1d:13:63:8f:c5:63:26:e1:fc:c6:11:ad: fc:dd:e6:3b:72:df:6c:f4:f0:cf:86:02:ac:3a:0c:75:52:a3: 4e:15:3d:e7:0c:11:e0:88:c7:56:db:60:b9:41:d7:49:9c:15: 6b:a5:ac:4b:60:f9:a6:9d:a1:c8:1c:64:22:28:d9:79:f5:72: c2:2b:48:7d:61:c6:45:d0:24:23:77:6d:13:44:57:bb:f3:83: 36:6d:35:29:2b:0d:09:23:29:b2:e7:4c:37:92:fe:6b:3b:aa: fd:07:d0:48:93:a8:d0:76:f9:17:e1:71:85:d0:93:e3:e1:67: fa:bf:1d:c9:ef:f1:6e:69:f1:b1:42:dc:97:38:30:d0:32:e5: 1c:7c:c9:aa:15:11:79:43:78:43:3f:86:ff:11:b6:46:d0:66: b8:76:af:6b:05:c5:f3:b3:0b:c6:b6:13:15:96:a3:f3:4e:a6: a3:fd:72:09:2e:0b:82:7d:f6:fd:53:de:a7:a2:b2:29:30:9d: 09:51:15:00:07:9b:a4:21:95:83:83:58:84:72:fa:6b:d1:24: d0:0c:27:3f:14:80:a3:8e:64:63:c8:ed:df:61:03:5c:e7:0c: 84:b5:4b:ad:f1:4e:73:03:16:60:55:db:ce:5c:f7:fc:78:51: 86:23:3d:36 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBrYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkyRUIxMTAvBgNVBAUTKDBCNkNERjNGQUNDNjgwQjc4NjkyNkRFMTM5RjFFMEY2 NzQ0NDA2NTQwHhcNMjYwNjEyMjIzNTI1WhcNMjYwNjE5MjIzNTI1WjAYMRYwFAYD VQQDEw02YTJjODlhZS05NDI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0p6O9iQLt9c6tABRuQ2ZJoEsPgZaLsFUbA9C4pwKhuCM1yAiA50cHpilRJ7E UboRuHeBiV8y1BQbES9QjXiFG8KvjztiK0zqT9K7v0jurXcPwWs5Ci2vqeV0TCrq BX8GxJ0ENWRFHqlplvZrkwmYfRdqoTtM3XCiiyyEZ3Y69SN5zngxNnn5tDDsKYvp cYF6PbIHqeFCNUlI9OoTl/A7K0Jvrg6zIDM76z/UX3APtmQPuRMOzwBoxEbJMBpG 8DWLZRY8pVwTWmUE3tNKJ41E6qeb6DmELACVDp9CJL4OZD1z1VJ33h5cVXeehnSb MXnmXJ/cMjMMmxp+/CaA3I4UqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAVsZtbI z0pEDwg73sLPILuOZQVMMB8GA1UdIwQYMBaAFAts3z+sxoC3hpJt4Tnx4PZ0RAZU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTJFQi9GRDAwODFERUM1 NjcxMUVCQUZFQTYwMkJDNEY5QUUwMi9DMnpmUDZ6R2dMZUdrbTNoT2ZIZzluUkVC bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MyemZQNnpHZ0xlR2ttM2hPZkhnOW5SRUJsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTJFQi9GRDAwODFERUM1NjcxMUVCQUZFQTYwMkJDNEY5QUUwMi9DMnpmUDZ6R2dM ZUdrbTNoT2ZIZzluUkVCbFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf5XKsOFXHRNjj8VjJuH8xhGt/N3mO3LfbPTwz4YCrDoMdVKjThU95wwR4IjH VttguUHXSZwVa6WsS2D5pp2hyBxkIijZefVywitIfWHGRdAkI3dtE0RXu/ODNm01 KSsNCSMpsudMN5L+azuq/QfQSJOo0Hb5F+FxhdCT4+Fn+r8dye/xbmnxsULclzgw 0DLlHHzJqhUReUN4Qz+G/xG2RtBmuHavawXF87MLxrYTFZaj806mo/1yCS4Lgn32 /VPep6KyKTCdCVEVAAebpCGVg4NYhHL6a9Ek0AwnPxSAo45kY8jt32EDXOcMhLVL rfFOcwMWYFXbzlz3/HhRhiM9Ng== -----END CERTIFICATE-----Generated at Sat Jun 13 13:49:40 2026 by rpki-client