$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3C2B/CFDCEFC6443811F18EB0AF7FC3833773/naybVs-kN1sQyJkjPVX2Bx7wgyE.mft File: naybVs-kN1sQyJkjPVX2Bx7wgyE.mft (raw, json) Hash identifier: zR4yfc2W/2u++pItXsSr15XKeKY1ofiJwXLTKJxbWB4= Subject key identifier: A6:A5:3B:99:A6:38:36:DE:5F:4F:58:1D:6B:81:66:10:E6:3B:4A:B0 Authority key identifier: 9D:AC:9B:56:CF:A4:37:5B:10:C8:99:23:3D:55:F6:07:1E:F0:83:21 Certificate issuer: /CN=A91A3C2B/serialNumber=9DAC9B56CFA4375B10C899233D55F6071EF08321 Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/naybVs-kN1sQyJkjPVX2Bx7wgyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3C2B/CFDCEFC6443811F18EB0AF7FC3833773/naybVs-kN1sQyJkjPVX2Bx7wgyE.mft Manifest number: 19 Signing time: Thu 11 Jun 2026 11:19:26 +0000 Manifest this update: Thu 11 Jun 2026 11:19:26 +0000 Manifest next update: Thu 18 Jun 2026 11:19:26 +0000 Files and hashes: 1: naybVs-kN1sQyJkjPVX2Bx7wgyE.crl (hash: FcvBI684AL3lOgPsU1uwDp1Fuq1Efely4QwvUEKCUkA=) 2: D041C5C644F711F1A94CB46CCC833773.roa (hash: ujAUvex6eehN8/9sST01/gQAgORLT9YZQ+hSBO6s3PM=) 3: D021169C44F611F1AD994B65CC833773.roa (hash: BzWsJODB8wb2BTymGqiakgMGysHOF2qAkOGM8uSKf0Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3C2B/CFDCEFC6443811F18EB0AF7FC3833773/naybVs-kN1sQyJkjPVX2Bx7wgyE.crl rsync://rpki.apnic.net/member_repository/A91A3C2B/CFDCEFC6443811F18EB0AF7FC3833773/naybVs-kN1sQyJkjPVX2Bx7wgyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/naybVs-kN1sQyJkjPVX2Bx7wgyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 11:19:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3C2B, serialNumber=9DAC9B56CFA4375B10C899233D55F6071EF08321 Validity Not Before: Jun 11 11:19:26 2026 GMT Not After : Jun 18 11:19:26 2026 GMT Subject: CN=6a2a99be-6ea5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:da:5a:f4:91:ff:4a:15:83:cd:88:2d:0e:a6: 47:33:93:b9:6a:57:29:b6:f3:68:f2:84:bf:3c:f4: cc:f2:71:f2:99:e2:aa:ae:11:77:f2:f8:87:c7:d9: 32:ad:cc:e4:92:74:af:45:ef:5e:3a:5b:e5:45:25: 0e:c0:4d:9f:f4:1e:e1:aa:82:3b:b9:ad:33:6a:b0: cb:0a:bf:7c:62:5c:1e:c8:ee:58:82:ef:c3:92:5a: f7:ec:a9:d5:05:62:61:f7:35:b7:42:c8:3d:bd:ee: e3:a4:92:df:08:13:54:b1:a3:20:af:35:09:54:74: ac:fd:85:2a:2c:6f:a0:23:9c:d7:33:81:98:89:f2: 6c:b0:8d:2a:27:56:8e:97:29:cd:7c:c8:34:08:6b: 18:46:a1:ec:cc:42:a7:7b:cc:11:dc:4a:14:c1:21: db:bf:f2:f2:92:ae:7e:d7:b9:09:dd:f9:78:bd:1b: 12:3a:bf:74:1c:3e:79:a5:c2:f5:43:e2:fe:34:0d: f1:b3:73:9b:ad:4b:d1:54:16:1d:f5:6d:23:6c:3a: 67:8c:f7:72:c6:4a:c5:18:f0:d3:da:8c:0f:57:0d: b7:02:83:87:43:8e:b7:3c:38:7e:92:09:30:53:c1: 61:5a:0e:e5:e7:32:81:f8:ba:10:22:6c:4a:62:f2: c3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:A5:3B:99:A6:38:36:DE:5F:4F:58:1D:6B:81:66:10:E6:3B:4A:B0 X509v3 Authority Key Identifier: keyid:9D:AC:9B:56:CF:A4:37:5B:10:C8:99:23:3D:55:F6:07:1E:F0:83:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3C2B/CFDCEFC6443811F18EB0AF7FC3833773/naybVs-kN1sQyJkjPVX2Bx7wgyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/naybVs-kN1sQyJkjPVX2Bx7wgyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3C2B/CFDCEFC6443811F18EB0AF7FC3833773/naybVs-kN1sQyJkjPVX2Bx7wgyE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:f8:5b:1b:74:5d:77:97:8a:b8:b0:2c:5b:c6:4f:a0:00:f3: 6d:00:be:39:76:5f:2e:b6:7f:18:4b:35:6e:80:b8:8d:aa:7f: c2:83:56:3a:86:90:0d:6f:36:6b:d2:73:1a:99:18:b3:d6:90: 84:8c:dd:eb:46:2a:a3:71:b1:74:07:62:72:f7:99:7f:1a:17: e1:98:4a:21:48:6c:35:5f:ae:18:9c:79:ea:58:a5:20:ff:ba: 1a:22:f7:35:8a:9c:c0:94:36:6f:22:56:8b:e4:66:aa:a1:ff: 8c:0a:11:d1:0b:c3:3f:d2:86:02:99:a8:78:0b:c7:86:f3:0c: da:53:2a:a3:ff:da:ac:c1:07:0a:85:65:60:1d:b1:76:45:fa: 55:9c:c6:04:ed:62:44:2f:f2:a6:57:5b:f7:a0:26:c4:6a:3c: 21:44:c9:d5:49:cf:c2:04:f2:8d:5a:f1:ef:7b:ae:5c:72:ef: fa:42:d3:1b:eb:b7:20:5b:67:3f:c9:24:80:44:61:89:e6:49: f5:ca:d7:b5:5a:9f:51:b0:24:70:34:d1:22:cf:1a:01:f0:22: 66:d2:d6:ed:44:d3:23:cf:2f:11:5f:88:20:a3:53:bc:2c:3b: cf:6b:72:a2:48:52:6d:c4:f1:40:1e:cd:4d:02:d0:59:af:1a: c3:d7:92:e6 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB M0MyQjExMC8GA1UEBRMoOURBQzlCNTZDRkE0Mzc1QjEwQzg5OTIzM0Q1NUY2MDcx RUYwODMyMTAeFw0yNjA2MTExMTE5MjZaFw0yNjA2MTgxMTE5MjZaMBgxFjAUBgNV BAMTDTZhMmE5OWJlLTZlYTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCz2lr0kf9KFYPNiC0Opkczk7lqVym282jyhL889MzycfKZ4qquEXfy+IfH2TKt zOSSdK9F7146W+VFJQ7ATZ/0HuGqgju5rTNqsMsKv3xiXB7I7liC78OSWvfsqdUF YmH3NbdCyD297uOkkt8IE1SxoyCvNQlUdKz9hSosb6AjnNczgZiJ8mywjSonVo6X Kc18yDQIaxhGoezMQqd7zBHcShTBIdu/8vKSrn7XuQnd+Xi9GxI6v3QcPnmlwvVD 4v40DfGzc5utS9FUFh31bSNsOmeM93LGSsUY8NPajA9XDbcCg4dDjrc8OH6SCTBT wWFaDuXnMoH4uhAibEpi8sNPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUpqU7maY4 Nt5fT1gda4FmEOY7SrAwHwYDVR0jBBgwFoAUnaybVs+kN1sQyJkjPVX2Bx7wgyEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEzQzJCL0NGRENFRkM2NDQz ODExRjE4RUIwQUY3RkMzODMzNzczL25heWJWcy1rTjFzUXlKa2pQVlgyQng3d2d5 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbmF5YlZzLWtOMXNReUpralBWWDJCeDd3Z3lFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEz QzJCL0NGRENFRkM2NDQzODExRjE4RUIwQUY3RkMzODMzNzczL25heWJWcy1rTjFz UXlKa2pQVlgyQng3d2d5RS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDA+FsbdF13l4q4sCxbxk+gAPNtAL45dl8utn8YSzVugLiNqn/Cg1Y6hpANbzZr 0nMamRiz1pCEjN3rRiqjcbF0B2Jy95l/GhfhmEohSGw1X64YnHnqWKUg/7oaIvc1 ipzAlDZvIlaL5Gaqof+MChHRC8M/0oYCmah4C8eG8wzaUyqj/9qswQcKhWVgHbF2 RfpVnMYE7WJEL/KmV1v3oCbEajwhRMnVSc/CBPKNWvHve65ccu/6QtMb67cgW2c/ ySSARGGJ5kn1yte1Wp9RsCRwNNEizxoB8CJm0tbtRNMjzy8RX4ggo1O8LDvPa3Ki SFJtxPFAHs1NAtBZrxrD15Lm -----END CERTIFICATE-----Generated at Sat Jun 13 08:53:46 2026 by rpki-client