$ rpki-client -vvf rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft File: 7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft (raw, json) Hash identifier: ok6N44lZgeJ++Sk2pLoMERXnb/KBjwwCuCAoUjLUizg= Subject key identifier: 5D:E8:CE:4C:48:C8:A9:F8:9D:87:B8:D7:6F:4F:6A:E9:19:86:8F:B7 Authority key identifier: ED:9B:0E:60:85:A2:5D:F2:67:49:FF:27:58:1A:4E:8B:C7:C1:86:CC Certificate issuer: /CN=A91A02D8/serialNumber=ED9B0E6085A25DF26749FF27581A4E8BC7C186CC Certificate serial: 018C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft Manifest number: 017D Signing time: Sat 13 Jun 2026 04:38:21 +0000 Manifest this update: Sat 13 Jun 2026 04:38:21 +0000 Manifest next update: Sat 20 Jun 2026 04:38:21 +0000 Files and hashes: 1: 7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl (hash: Wo33dFbw8LqfHs86PXsL670ew1N5OO1rDBY+6aoByzM=) 2: 2C7C9DD2258E11F0B42E1529C4F9AE02.roa (hash: Xhmndf5ojRbPlnBHYgYgyJ2fjmYQp+txk1dvG9nv9jQ=) 3: 86F9CBCC2AB711EF996EC819C4F9AE02.roa (hash: pdK2+bFIXT9bXK2PREvdd0iUpjsO8yecUrGAwJUdC0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 396 (0x18c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A02D8, serialNumber=ED9B0E6085A25DF26749FF27581A4E8BC7C186CC Validity Not Before: Jun 13 04:38:21 2026 GMT Not After : Jun 20 04:38:21 2026 GMT Subject: CN=6a2cdebd-3cd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:17:af:77:2c:9f:29:67:48:f8:51:05:74:68: 9d:5f:84:25:da:26:6d:dd:3d:a9:14:c1:de:97:c8: c8:fe:f1:cc:64:bf:26:bd:6e:1f:4b:f3:b1:af:3e: a3:b7:d9:b1:fb:39:08:89:70:51:b1:86:29:87:12: 8d:4d:00:bf:b2:a4:95:ae:27:2d:96:04:70:23:56: 76:5a:4f:3c:2b:df:6c:61:0a:3f:69:58:8e:a3:3b: 6f:22:7d:d9:b0:de:b7:b4:f1:1f:f3:02:97:26:d7: 60:bd:31:cb:ad:77:50:2f:bb:93:73:4c:88:d9:58: 29:90:ca:6f:9d:2e:6e:d6:58:2e:98:df:03:36:df: 36:05:4f:ae:3b:66:9e:74:c7:58:67:3a:0c:97:65: 26:fa:a4:aa:dd:92:a1:bb:35:37:f6:ef:77:ba:66: ce:b2:54:31:64:be:d0:74:bf:93:8a:fd:31:fc:7d: 91:7b:88:c5:8b:dd:a0:ba:2e:47:bb:fa:e9:79:18: 97:ff:d8:c1:a4:30:a5:99:11:b8:69:64:73:df:f6: 89:49:e6:e3:79:cd:0f:1e:fa:9c:bf:e6:5e:ae:8b: 7b:c9:2f:30:01:8e:69:3c:f6:50:32:e2:02:18:c1: 95:3c:73:92:be:ac:ea:19:70:5c:38:85:84:19:9a: 69:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:E8:CE:4C:48:C8:A9:F8:9D:87:B8:D7:6F:4F:6A:E9:19:86:8F:B7 X509v3 Authority Key Identifier: keyid:ED:9B:0E:60:85:A2:5D:F2:67:49:FF:27:58:1A:4E:8B:C7:C1:86:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:9e:dc:bc:e9:68:8a:4e:6e:86:71:38:20:f5:81:a9:03:fb: b5:07:4e:9b:9b:b6:f6:6a:a8:62:2a:7d:ac:ca:fa:e4:68:e4: 86:5d:3d:e1:e6:66:44:5e:42:54:5a:6f:51:f6:21:e9:65:90: 72:3f:12:92:47:12:13:f4:52:43:23:ee:49:3a:3f:66:05:38: b1:ac:98:68:5b:4e:b8:61:57:ca:63:e9:c0:04:ff:66:ec:4d: 39:23:d5:35:3d:09:e8:eb:85:a0:5b:d9:92:ec:5e:8b:ba:ae: 7f:93:be:a8:8f:65:e7:16:d8:54:78:91:ab:f1:57:58:5c:b7: 25:13:c7:d3:68:ff:bc:94:90:3c:74:38:9c:ff:fd:2c:e9:12: 6b:90:f7:7e:38:2e:9b:93:5d:d2:60:b9:03:ba:e2:e1:12:7d: 45:80:d5:1e:ff:6f:da:d7:63:ae:d2:19:c6:57:9f:ba:9e:07: b6:c7:a9:2c:7d:18:15:a8:54:31:d9:38:85:60:6a:ca:77:10: 5f:09:dc:57:16:d0:5e:44:5b:39:7f:0e:23:9a:52:a4:cd:38: 78:da:19:3a:37:07:d1:77:7e:c7:83:86:63:71:4e:43:96:27: fc:c6:fd:f8:2c:9d:d8:e7:41:5f:db:2d:81:2f:cc:d8:a5:c2: eb:d4:8c:b6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTAyRDgxMTAvBgNVBAUTKEVEOUIwRTYwODVBMjVERjI2NzQ5RkYyNzU4MUE0RThC QzdDMTg2Q0MwHhcNMjYwNjEzMDQzODIxWhcNMjYwNjIwMDQzODIxWjAYMRYwFAYD VQQDEw02YTJjZGViZC0zY2Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnxevdyyfKWdI+FEFdGidX4Ql2iZt3T2pFMHel8jI/vHMZL8mvW4fS/Oxrz6j t9mx+zkIiXBRsYYphxKNTQC/sqSVrictlgRwI1Z2Wk88K99sYQo/aViOoztvIn3Z sN63tPEf8wKXJtdgvTHLrXdQL7uTc0yI2VgpkMpvnS5u1lgumN8DNt82BU+uO2ae dMdYZzoMl2Um+qSq3ZKhuzU39u93umbOslQxZL7QdL+Tiv0x/H2Re4jFi92gui5H u/rpeRiX/9jBpDClmRG4aWRz3/aJSebjec0PHvqcv+Zerot7yS8wAY5pPPZQMuIC GMGVPHOSvqzqGXBcOIWEGZppMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF3ozkxI yKn4nYe4129PaukZho+3MB8GA1UdIwQYMBaAFO2bDmCFol3yZ0n/J1gaTovHwYbM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDJEOC9FMDkyNDhFQTJB QjYxMUVGQjMzOUZEODFDNEY5QUUwMi83WnNPWUlXaVhmSm5TZjhuV0JwT2k4ZkJo c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdac09ZSVdpWGZKblNmOG5XQnBPaThmQmhzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDJEOC9FMDkyNDhFQTJBQjYxMUVGQjMzOUZEODFDNEY5QUUwMi83WnNPWUlXaVhm Sm5TZjhuV0JwT2k4ZkJoc3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXp7cvOloik5uhnE4IPWBqQP7tQdOm5u29mqoYip9rMr65Gjkhl094eZmRF5C VFpvUfYh6WWQcj8SkkcSE/RSQyPuSTo/ZgU4sayYaFtOuGFXymPpwAT/ZuxNOSPV NT0J6OuFoFvZkuxei7quf5O+qI9l5xbYVHiRq/FXWFy3JRPH02j/vJSQPHQ4nP/9 LOkSa5D3fjgum5Nd0mC5A7ri4RJ9RYDVHv9v2tdjrtIZxlefup4HtsepLH0YFahU Mdk4hWBqyncQXwncVxbQXkRbOX8OI5pSpM04eNoZOjcH0Xd+x4OGY3FOQ5Yn/Mb9 +Cyd2OdBX9stgS/M2KXC69SMtg== -----END CERTIFICATE-----Generated at Sat Jun 13 08:33:56 2026 by rpki-client