$ rpki-client -vvf rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft File: lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft (raw, json) Hash identifier: dKkW7r4P+zs3BRFULpEN0cvlkq8ExyCYZVjf6DjViDc= Subject key identifier: F6:A6:33:D2:AD:66:C7:F3:1A:FC:5B:C6:AD:A2:7D:0A:70:38:66:81 Authority key identifier: 96:73:B5:CC:F0:A8:EA:5C:E4:1A:2E:47:63:11:F3:75:CD:83:C0:D2 Certificate issuer: /CN=A91A58AA/serialNumber=9673B5CCF0A8EA5CE41A2E476311F375CD83C0D2 Certificate serial: D2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnO1zPCo6lzkGi5HYxHzdc2DwNI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft Manifest number: D2 Signing time: Sat 13 Jun 2026 06:47:19 +0000 Manifest this update: Sat 13 Jun 2026 06:47:18 +0000 Manifest next update: Sat 20 Jun 2026 06:47:18 +0000 Files and hashes: 1: lnO1zPCo6lzkGi5HYxHzdc2DwNI.crl (hash: ovU4cxEz0gmaw5JOK+r4YtGdSTtbtf6xDJhxWE1xZ0k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.crl rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnO1zPCo6lzkGi5HYxHzdc2DwNI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 06:47:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A58AA, serialNumber=9673B5CCF0A8EA5CE41A2E476311F375CD83C0D2 Validity Not Before: Jun 13 06:47:18 2026 GMT Not After : Jun 20 06:47:18 2026 GMT Subject: CN=6a2cfcf6-2039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ca:27:7f:9a:49:7e:65:a6:35:fa:c0:6c:f6: 5d:86:29:a4:9b:57:d7:a5:64:5c:ee:46:b8:f3:81: a4:86:6c:6e:99:a4:1e:75:71:e2:8c:76:22:60:0e: f9:53:16:df:61:86:b2:fa:e1:b4:87:46:85:ef:6d: 66:2b:da:42:3d:57:9b:05:a6:cc:e4:f9:3e:7e:e9: b4:eb:2e:72:95:a1:a1:19:ab:ff:ad:96:ec:ac:28: ff:4a:98:87:b6:02:6c:6b:d5:c1:06:9c:f6:4c:60: bf:c3:18:28:8e:e1:74:b1:9e:df:c4:ad:3d:8b:ad: dc:e8:89:58:9a:2e:9e:f4:e3:9c:8a:03:f8:6c:30: 92:b9:d0:be:ac:12:7f:8e:a2:97:fc:99:44:4d:1d: 4b:0c:66:cb:ae:59:30:57:ea:d0:c8:00:78:d4:63: b3:2b:7b:ba:c0:10:10:a9:ba:7b:53:d8:d9:79:78: 57:be:b0:05:a7:6e:f7:45:9d:a3:e6:f4:24:8f:f1: 82:ae:dd:2e:7f:f6:0f:bf:27:b8:cb:ba:bd:04:68: 6f:46:52:8b:2c:8b:62:51:b1:d0:d7:bc:b4:4a:52: f4:52:54:41:ff:1d:f1:07:7d:3c:91:3b:83:26:2f: 15:00:cc:94:94:23:09:52:13:b3:14:87:bc:e0:1b: d9:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:A6:33:D2:AD:66:C7:F3:1A:FC:5B:C6:AD:A2:7D:0A:70:38:66:81 X509v3 Authority Key Identifier: keyid:96:73:B5:CC:F0:A8:EA:5C:E4:1A:2E:47:63:11:F3:75:CD:83:C0:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnO1zPCo6lzkGi5HYxHzdc2DwNI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A58AA/C1939CE6240211F0961B646DC4F9AE02/lnO1zPCo6lzkGi5HYxHzdc2DwNI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:08:5c:78:72:b0:35:d5:cf:b0:1d:84:89:0a:ab:e4:c8:5c: 95:0a:78:de:c7:d7:92:f6:ef:5b:cf:19:3b:39:a5:27:df:8c: 29:7d:5d:19:c1:c4:cb:aa:b9:d4:75:87:20:08:87:54:5d:47: c3:3b:bf:b6:2a:89:ba:ee:77:33:a6:aa:d8:74:ff:07:04:e2: d5:b0:6a:db:ce:98:67:03:62:50:fe:81:52:5e:1a:99:b0:43: 71:d8:76:d6:d6:32:9c:db:9c:a8:71:e9:6b:9e:ea:8f:5a:e9: 62:6c:42:0b:7d:3b:40:7d:38:75:fe:a1:82:19:52:ca:29:2a: 1c:ae:f5:d6:73:dc:e1:34:b1:d4:42:f5:1a:da:a2:e7:46:aa: 11:83:c6:0f:f4:23:a0:e6:af:6e:b6:04:36:0a:5c:af:86:7a: d1:da:b4:07:ce:44:d3:e2:d0:d9:2c:13:ac:ff:18:0e:a6:ee: da:30:2a:a4:ee:db:55:2f:50:5c:79:25:51:41:26:da:00:3d: bf:1f:4e:f1:52:35:43:c2:0a:5b:94:a8:cd:64:45:13:a4:26: a1:a0:12:1c:24:fa:c0:68:5d:82:7f:fb:e1:b7:a1:3e:5d:4d: 57:8b:77:2e:da:57:03:80:de:b6:39:27:8d:0f:cd:f6:c3:cd: be:bb:a6:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU4QUExMTAvBgNVBAUTKDk2NzNCNUNDRjBBOEVBNUNFNDFBMkU0NzYzMTFGMzc1 Q0Q4M0MwRDIwHhcNMjYwNjEzMDY0NzE4WhcNMjYwNjIwMDY0NzE4WjAYMRYwFAYD VQQDEw02YTJjZmNmNi0yMDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqMonf5pJfmWmNfrAbPZdhimkm1fXpWRc7ka484GkhmxumaQedXHijHYiYA75 UxbfYYay+uG0h0aF721mK9pCPVebBabM5Pk+fum06y5ylaGhGav/rZbsrCj/SpiH tgJsa9XBBpz2TGC/wxgojuF0sZ7fxK09i63c6IlYmi6e9OOcigP4bDCSudC+rBJ/ jqKX/JlETR1LDGbLrlkwV+rQyAB41GOzK3u6wBAQqbp7U9jZeXhXvrAFp273RZ2j 5vQkj/GCrt0uf/YPvye4y7q9BGhvRlKLLItiUbHQ17y0SlL0UlRB/x3xB308kTuD Ji8VAMyUlCMJUhOzFIe84BvZTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPamM9Kt ZsfzGvxbxq2ifQpwOGaBMB8GA1UdIwQYMBaAFJZztczwqOpc5BouR2MR83XNg8DS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNThBQS9DMTkzOUNFNjI0 MDIxMUYwOTYxQjY0NkRDNEY5QUUwMi9sbk8xelBDbzZsemtHaTVIWXhIemRjMkR3 TkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xuTzF6UENvNmx6a0dpNUhZeEh6ZGMyRHdOSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NThBQS9DMTkzOUNFNjI0MDIxMUYwOTYxQjY0NkRDNEY5QUUwMi9sbk8xelBDbzZs emtHaTVIWXhIemRjMkR3TkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoghceHKwNdXPsB2EiQqr5MhclQp43sfXkvbvW88ZOzmlJ9+MKX1dGcHEy6q5 1HWHIAiHVF1Hwzu/tiqJuu53M6aq2HT/BwTi1bBq286YZwNiUP6BUl4ambBDcdh2 1tYynNucqHHpa57qj1rpYmxCC307QH04df6hghlSyikqHK711nPc4TSx1EL1Gtqi 50aqEYPGD/QjoOavbrYENgpcr4Z60dq0B85E0+LQ2SwTrP8YDqbu2jAqpO7bVS9Q XHklUUEm2gA9vx9O8VI1Q8IKW5SozWRFE6QmoaASHCT6wGhdgn/74behPl1NV4t3 LtpXA4DetjknjQ/N9sPNvrumZg== -----END CERTIFICATE-----Generated at Sat Jun 13 15:11:07 2026 by rpki-client