$ rpki-client -vvf rpki.apnic.net/member_repository/A91A58AA/CA50C926240211F0961B646DC4F9AE02/I3Q0S3Gynw44NSDK_GyINQw1YWg.mft File: I3Q0S3Gynw44NSDK_GyINQw1YWg.mft (raw, json) Hash identifier: sin7809dDgPqp+dyL6IbD+3mpA6ChHmxOhX2+WOqes4= Subject key identifier: 64:4D:A9:55:54:46:B2:E7:4F:56:FD:99:E8:E9:6E:A0:D3:BF:13:0C Authority key identifier: 23:74:34:4B:71:B2:9F:0E:38:35:20:CA:FC:6C:88:35:0C:35:61:68 Certificate issuer: /CN=A91A58AA/serialNumber=2374344B71B29F0E383520CAFC6C88350C356168 Certificate serial: D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3Q0S3Gynw44NSDK_GyINQw1YWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A58AA/CA50C926240211F0961B646DC4F9AE02/I3Q0S3Gynw44NSDK_GyINQw1YWg.mft Manifest number: D2 Signing time: Sat 13 Jun 2026 06:47:21 +0000 Manifest this update: Sat 13 Jun 2026 06:47:21 +0000 Manifest next update: Sat 20 Jun 2026 06:47:21 +0000 Files and hashes: 1: I3Q0S3Gynw44NSDK_GyINQw1YWg.crl (hash: mYys9fRYlR5qIKCa0x8lbij3QtH6lV5DwEkQpEo0Bfg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A58AA/CA50C926240211F0961B646DC4F9AE02/I3Q0S3Gynw44NSDK_GyINQw1YWg.crl rsync://rpki.apnic.net/member_repository/A91A58AA/CA50C926240211F0961B646DC4F9AE02/I3Q0S3Gynw44NSDK_GyINQw1YWg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3Q0S3Gynw44NSDK_GyINQw1YWg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 06:47:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A58AA, serialNumber=2374344B71B29F0E383520CAFC6C88350C356168 Validity Not Before: Jun 13 06:47:21 2026 GMT Not After : Jun 20 06:47:21 2026 GMT Subject: CN=6a2cfcf9-e9a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:9f:db:99:6c:86:55:26:2d:89:81:09:3f:78: 41:4f:13:5c:fb:ab:e6:37:6b:0f:4a:87:87:4c:f9: 31:93:4f:df:f3:4d:c1:30:28:c6:12:ae:cd:28:14: 46:f1:6d:a4:24:64:60:f6:69:66:fe:58:e3:78:43: fb:74:ea:3c:4b:ff:89:d6:be:4f:01:66:5c:84:e1: 7b:46:be:73:22:e8:c1:11:42:91:93:33:f7:e8:ba: dc:b9:ca:47:46:b7:2e:0c:7f:df:11:7e:df:bf:e4: ea:4d:7b:6a:39:3c:3d:22:d7:ed:44:48:e9:d2:56: 54:78:26:a4:f4:e2:23:42:a2:f4:b8:ca:4e:0b:b6: be:73:70:fb:01:ad:41:71:77:50:20:ed:fa:90:ac: 04:25:2a:16:f4:46:10:e5:62:f2:dc:4b:24:76:b6: 38:26:5a:c2:ba:43:80:15:55:1b:5e:e9:d7:06:05: 55:5a:05:1e:d0:8f:a6:eb:20:e5:9c:76:e0:86:3f: f9:15:f6:2e:bf:24:8c:84:34:4d:66:9b:de:8f:6a: 7a:0c:0e:6d:9f:18:a8:e1:65:34:6e:0c:af:17:f1: ac:ff:71:07:c7:95:80:a5:bd:4d:98:6f:e0:ab:5b: 74:1e:03:09:18:49:3d:60:fa:0a:5c:51:e7:81:5f: fc:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:4D:A9:55:54:46:B2:E7:4F:56:FD:99:E8:E9:6E:A0:D3:BF:13:0C X509v3 Authority Key Identifier: keyid:23:74:34:4B:71:B2:9F:0E:38:35:20:CA:FC:6C:88:35:0C:35:61:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A58AA/CA50C926240211F0961B646DC4F9AE02/I3Q0S3Gynw44NSDK_GyINQw1YWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3Q0S3Gynw44NSDK_GyINQw1YWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A58AA/CA50C926240211F0961B646DC4F9AE02/I3Q0S3Gynw44NSDK_GyINQw1YWg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:2e:55:40:6d:7f:0a:40:3d:5d:be:1c:d3:ac:f8:52:0a:88: 3d:43:b6:34:8a:2e:d4:48:e4:91:69:b9:ab:ff:c0:24:4d:f8: 96:0d:17:3d:b2:a3:e2:7e:44:d1:e5:7c:a6:30:34:a9:4f:02: d8:68:56:58:6d:e9:a1:6a:2e:78:d0:00:ac:9e:9c:33:c8:aa: 4d:d6:12:dd:d2:42:90:d9:04:d6:18:9e:e3:40:9b:22:ed:8b: c7:e2:df:e5:81:66:61:99:f1:3d:a3:61:c9:24:03:14:ab:86: 6b:46:2e:67:12:47:05:44:b4:6f:01:16:f9:db:ce:26:f8:ef: aa:52:aa:eb:ac:dc:24:e2:c7:1a:95:01:64:1b:85:9b:a8:78: a1:3c:22:fa:e8:11:38:4c:19:27:8c:f7:a9:b4:e8:2b:c8:1d: 65:99:9d:b6:1b:a0:77:7f:70:da:86:b0:c8:b5:2e:33:3f:90: c0:72:06:c9:22:f5:e2:34:c8:ad:19:aa:17:c4:21:06:5c:3f: 46:8a:42:c3:77:74:f3:65:ce:b2:1d:a0:54:4a:28:05:5d:f5: a9:fb:68:bd:1e:00:43:90:7a:c6:57:0d:37:72:53:13:38:4d: 3f:fb:eb:a7:53:78:86:2e:3c:4f:67:42:10:17:a1:35:05:16: b1:35:ca:6c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU4QUExMTAvBgNVBAUTKDIzNzQzNDRCNzFCMjlGMEUzODM1MjBDQUZDNkM4ODM1 MEMzNTYxNjgwHhcNMjYwNjEzMDY0NzIxWhcNMjYwNjIwMDY0NzIxWjAYMRYwFAYD VQQDEw02YTJjZmNmOS1lOWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiJ/bmWyGVSYtiYEJP3hBTxNc+6vmN2sPSoeHTPkxk0/f803BMCjGEq7NKBRG 8W2kJGRg9mlm/ljjeEP7dOo8S/+J1r5PAWZchOF7Rr5zIujBEUKRkzP36LrcucpH RrcuDH/fEX7fv+TqTXtqOTw9ItftREjp0lZUeCak9OIjQqL0uMpOC7a+c3D7Aa1B cXdQIO36kKwEJSoW9EYQ5WLy3EskdrY4JlrCukOAFVUbXunXBgVVWgUe0I+m6yDl nHbghj/5FfYuvySMhDRNZpvej2p6DA5tnxio4WU0bgyvF/Gs/3EHx5WApb1NmG/g q1t0HgMJGEk9YPoKXFHngV/8tQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGRNqVVU RrLnT1b9mejpbqDTvxMMMB8GA1UdIwQYMBaAFCN0NEtxsp8OODUgyvxsiDUMNWFo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNThBQS9DQTUwQzkyNjI0 MDIxMUYwOTYxQjY0NkRDNEY5QUUwMi9JM1EwUzNHeW53NDROU0RLX0d5SU5RdzFZ V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0kzUTBTM0d5bnc0NE5TREtfR3lJTlF3MVlXZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NThBQS9DQTUwQzkyNjI0MDIxMUYwOTYxQjY0NkRDNEY5QUUwMi9JM1EwUzNHeW53 NDROU0RLX0d5SU5RdzFZV2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbC5VQG1/CkA9Xb4c06z4UgqIPUO2NIou1EjkkWm5q//AJE34lg0XPbKj4n5E 0eV8pjA0qU8C2GhWWG3poWoueNAArJ6cM8iqTdYS3dJCkNkE1hie40CbIu2Lx+Lf 5YFmYZnxPaNhySQDFKuGa0YuZxJHBUS0bwEW+dvOJvjvqlKq66zcJOLHGpUBZBuF m6h4oTwi+ugROEwZJ4z3qbToK8gdZZmdthugd39w2oawyLUuMz+QwHIGySL14jTI rRmqF8QhBlw/RopCw3d082XOsh2gVEooBV31qftovR4AQ5B6xlcNN3JTEzhNP/vr p1N4hi48T2dCEBehNQUWsTXKbA== -----END CERTIFICATE-----Generated at Sat Jun 13 23:06:07 2026 by rpki-client