$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.mft File: a1P4D46IGzcxlyZjuhiXt0qS1E0.mft (raw, json) Hash identifier: MqgyjviOQEn2oFDPev+9ZiYFM80K50rlQ+uafrEqTrk= Subject key identifier: 43:47:AC:D0:F7:46:44:59:E5:A7:10:81:33:10:F1:D3:D9:70:E3:B5 Authority key identifier: 6B:53:F8:0F:8E:88:1B:37:31:97:26:63:BA:18:97:B7:4A:92:D4:4D Certificate issuer: /CN=A91991D3/serialNumber=6B53F80F8E881B3731972663BA1897B74A92D44D Certificate serial: 02C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.mft Manifest number: 02A2 Signing time: Sat 13 Jun 2026 01:50:52 +0000 Manifest this update: Sat 13 Jun 2026 01:50:51 +0000 Manifest next update: Sat 20 Jun 2026 01:50:51 +0000 Files and hashes: 1: a1P4D46IGzcxlyZjuhiXt0qS1E0.crl (hash: qN1PP0bRJLr61CtNUN2xao8tqmvNFxTjLjOPWZacGEg=) 2: A216EC4E3C7911F0B25C0585C4F9AE02.roa (hash: PzMKVF5RWKMCBBz+uMcp/BJxucoQAleKAMkhu2SsbNI=) 3: 8361CB4E5AE611F0963E5C62C4F9AE02.roa (hash: jj9Anb+YltSNZ7XXzklotQBXr3n/2KBa9WPb7jR7Hmc=) 4: B856D46C3B9611F0B2363C74C4F9AE02.roa (hash: bXMhRP5t5yXxZ38+U5zANdmRNyogxO2UTQiQkXvbZD8=) 5: 6709E1D0D0FB11F08508FE58C4F9AE02.roa (hash: yB3ol9rUcdCMd9JnZM0DHqWp/9+cmY3NhYZPNGTCgSk=) 6: 531EFB4A8DD311EFAF53373AC4F9AE02.roa (hash: D3QE+K/fDpz/3eSAi1rPfAFHFlOdI3dak+hzzYghHZo=) 7: FA9BD5C2C5DC11F0A5504261C4F9AE02.roa (hash: iXf9KuDSIbIFYMh4V2pQ7flo3c0UEktI37Pu46KLsLQ=) 8: 026537E8861E11F0BC465F85C4F9AE02.roa (hash: jND/P0to+up6kdOpyJDFygxyQBhs5JfYLpar96q+qQI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.crl rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 01:50:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 713 (0x2c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91991D3, serialNumber=6B53F80F8E881B3731972663BA1897B74A92D44D Validity Not Before: Jun 13 01:50:51 2026 GMT Not After : Jun 20 01:50:51 2026 GMT Subject: CN=6a2cb77b-be02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1b:6d:80:0b:79:7b:80:32:d6:9f:57:ae:f2: 81:91:72:68:66:92:8c:60:73:ad:21:74:b3:a3:8d: c4:14:7e:d4:58:b4:f7:e5:f8:35:49:c4:f2:59:9c: c7:27:a6:d9:ae:df:86:77:94:63:55:b0:d4:24:23: a8:93:23:d7:0c:18:12:26:bb:fd:44:c7:bc:dd:ad: 76:ed:02:bd:f6:ae:5a:12:55:ec:9a:b3:77:60:b8: 14:12:2b:6d:c9:e0:03:6f:00:94:72:34:ca:94:a1: 3a:68:cf:06:fd:b5:1b:eb:8d:3b:86:d5:c7:f2:2c: 99:ca:dd:23:1e:20:21:2a:57:80:16:ca:de:0f:8b: 66:df:82:6b:6c:58:3e:98:d7:80:d3:c6:ca:36:f1: 92:17:c8:6e:3c:78:ee:26:cc:7d:41:75:d0:e6:92: 6c:d6:e6:68:1d:66:68:91:22:5c:60:e1:c5:e9:92: 5e:8e:8b:ae:65:a5:be:cf:29:8e:dd:9f:f0:b4:0b: 1a:17:23:e0:2f:61:0f:2f:47:dc:bb:38:04:62:ae: e5:a1:6a:55:9b:b2:86:e3:06:6c:9d:ef:40:f2:1f: 11:39:ec:98:fd:69:74:d2:98:f8:c4:8a:a1:5f:ad: 74:05:07:a0:7e:f7:bd:3b:ba:76:ae:69:1a:60:e3: e5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:47:AC:D0:F7:46:44:59:E5:A7:10:81:33:10:F1:D3:D9:70:E3:B5 X509v3 Authority Key Identifier: keyid:6B:53:F8:0F:8E:88:1B:37:31:97:26:63:BA:18:97:B7:4A:92:D4:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:91:31:38:cb:b9:c8:b8:88:a8:6c:83:b2:9c:16:32:6f:0c: 2e:30:32:db:72:19:04:fe:f0:b9:97:9f:c2:4c:8e:bc:20:e9: 87:7f:bf:0f:4a:61:c1:b2:63:6f:c5:f2:b2:89:e6:19:ba:f2: d0:e6:70:a6:75:c4:69:e5:1b:59:a6:aa:99:58:7b:92:bf:6a: 85:f7:ab:9f:bf:fb:9e:07:fc:15:a3:68:cf:da:cd:b4:80:3f: 63:7a:62:f9:7a:8d:16:35:c3:68:48:2a:e1:84:b0:39:b5:d5: da:40:05:5a:16:ea:14:f1:f4:a9:2e:26:86:4e:35:35:de:6c: f8:8d:74:3e:e9:79:9b:90:c2:51:94:d0:3a:2d:19:17:90:f9: 5f:f6:9e:93:a5:3d:68:ae:1e:d0:7c:dc:4f:a4:31:43:42:a1: 6c:19:7c:39:99:96:8d:55:b9:2d:61:3a:ec:ac:e3:89:7d:c7: 98:7c:7e:6d:7d:d5:7b:b8:25:73:55:70:ad:6c:7f:a1:65:27: c1:e6:19:6a:4e:95:09:60:2b:e8:8d:50:ef:1d:1d:d0:89:b1: 91:86:96:03:f8:bb:fb:c2:66:f0:21:94:85:e9:09:1a:a0:3b: 99:58:e9:14:50:ee:85:ad:ce:3e:13:28:e0:e6:0a:3b:a6:58: cd:ca:58:87 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkxRDMxMTAvBgNVBAUTKDZCNTNGODBGOEU4ODFCMzczMTk3MjY2M0JBMTg5N0I3 NEE5MkQ0NEQwHhcNMjYwNjEzMDE1MDUxWhcNMjYwNjIwMDE1MDUxWjAYMRYwFAYD VQQDEw02YTJjYjc3Yi1iZTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnBttgAt5e4Ay1p9XrvKBkXJoZpKMYHOtIXSzo43EFH7UWLT35fg1ScTyWZzH J6bZrt+Gd5RjVbDUJCOokyPXDBgSJrv9RMe83a127QK99q5aElXsmrN3YLgUEitt yeADbwCUcjTKlKE6aM8G/bUb6407htXH8iyZyt0jHiAhKleAFsreD4tm34JrbFg+ mNeA08bKNvGSF8huPHjuJsx9QXXQ5pJs1uZoHWZokSJcYOHF6ZJejouuZaW+zymO 3Z/wtAsaFyPgL2EPL0fcuzgEYq7loWpVm7KG4wZsne9A8h8ROeyY/Wl00pj4xIqh X610BQegfve9O7p2rmkaYOPlFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFENHrND3 RkRZ5acQgTMQ8dPZcOO1MB8GA1UdIwQYMBaAFGtT+A+OiBs3MZcmY7oYl7dKktRN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTFEMy81RkEzNkUzNDg5 MjMxMUVEQkNBMjk2MTNDNEY5QUUwMi9hMVA0RDQ2SUd6Y3hseVpqdWhpWHQwcVMx RTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ExUDRENDZJR3pjeGx5Wmp1aGlYdDBxUzFFMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTFEMy81RkEzNkUzNDg5MjMxMUVEQkNBMjk2MTNDNEY5QUUwMi9hMVA0RDQ2SUd6 Y3hseVpqdWhpWHQwcVMxRTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGpExOMu5yLiIqGyDspwWMm8MLjAy23IZBP7wuZefwkyOvCDph3+/D0phwbJj b8XysonmGbry0OZwpnXEaeUbWaaqmVh7kr9qhfern7/7ngf8FaNoz9rNtIA/Y3pi +XqNFjXDaEgq4YSwObXV2kAFWhbqFPH0qS4mhk41Nd5s+I10Pul5m5DCUZTQOi0Z F5D5X/aek6U9aK4e0HzcT6QxQ0KhbBl8OZmWjVW5LWE67KzjiX3HmHx+bX3Ve7gl c1VwrWx/oWUnweYZak6VCWAr6I1Q7x0d0ImxkYaWA/i7+8Jm8CGUhekJGqA7mVjp FFDuha3OPhMo4OYKO6ZYzcpYhw== -----END CERTIFICATE-----Generated at Sat Jun 13 07:37:18 2026 by rpki-client