$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft File: eFfRGlHcrpwuCIahDOBvVfW4QwA.mft (raw, json) Hash identifier: V4cQW7iNlkxBNQ/xb7lMNHwwCsyIEC95jSu8/zm43rU= Subject key identifier: 42:D1:93:3A:9C:E4:CD:FD:E1:7A:62:8A:F7:2C:B0:3C:E1:DB:47:D2 Authority key identifier: 78:57:D1:1A:51:DC:AE:9C:2E:08:86:A1:0C:E0:6F:55:F5:B8:43:00 Certificate issuer: /CN=A91A5D8A/serialNumber=7857D11A51DCAE9C2E0886A10CE06F55F5B84300 Certificate serial: 0684 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft Manifest number: 0673 Signing time: Fri 12 Jun 2026 22:38:28 +0000 Manifest this update: Fri 12 Jun 2026 22:38:27 +0000 Manifest next update: Fri 19 Jun 2026 22:38:27 +0000 Files and hashes: 1: eFfRGlHcrpwuCIahDOBvVfW4QwA.crl (hash: 2NmV1XUWuUdbuM+Dhu1ExfoLwjK7IyGEFZCv3uYPnT8=) 2: 18981398329B11EDB9F09862C4F9AE02.roa (hash: BIoQ+elASRB2TiBp78lt2ETWeyKSdC3Iplvz/Xmhi9o=) 3: 8183B0FACAF111EBA40AF15BC4F9AE02.roa (hash: Zg+eHPdVNDM4QI8KEgw81Og4McuXzxsHfkNcln3oKOk=) 4: 324C60ACDD2211F0BB0B52AC636F56BC.roa (hash: DeEQGurqm7eSpSsYzXwNaAtssPLf2RiuTFIL21AIcCE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.crl rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 22:38:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1668 (0x684) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5D8A, serialNumber=7857D11A51DCAE9C2E0886A10CE06F55F5B84300 Validity Not Before: Jun 12 22:38:27 2026 GMT Not After : Jun 19 22:38:27 2026 GMT Subject: CN=6a2c8a64-3dac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:af:f4:c4:3a:b4:c4:ed:f7:ab:75:55:71:57: f4:c2:19:2a:4a:4d:67:f7:fb:0d:a7:05:34:a1:a2: f5:b7:9d:87:90:86:98:93:f3:14:24:aa:1a:e8:6f: 7d:c8:41:b8:58:70:b7:2e:92:37:3f:8a:2f:e8:b4: 7f:04:12:b9:c2:b5:0e:c2:1e:0b:a4:21:d0:8c:30: 7e:54:2e:61:c1:ba:2e:08:b3:cc:c7:46:ce:a1:41: 22:53:ea:8a:e6:33:d5:95:aa:d0:48:96:a4:1f:6f: 4c:f2:2d:58:d9:87:45:0f:c7:d6:fb:7b:7c:3c:ef: 12:9d:fc:22:33:35:3e:7b:6e:e7:5f:5e:8c:4d:6b: 92:b6:9a:41:0c:38:01:38:46:9f:f5:61:92:06:2c: 78:45:9f:88:87:b1:2c:ac:3d:7c:7f:52:d0:0d:b7: a3:7d:59:7f:6f:0b:09:e1:07:c7:28:bb:36:85:c0: 57:95:04:f6:e7:a4:94:b9:44:c0:87:fa:99:21:d6: 60:b5:97:41:21:c0:2e:65:fb:d5:d6:a4:98:dc:ae: c3:36:1c:c8:1d:7c:e5:31:54:7f:be:1f:b3:39:b0: e3:44:c4:d4:c7:8b:6a:17:6b:ad:44:07:77:7d:25: 34:6c:62:2d:8a:24:be:48:3b:45:79:f4:32:73:3d: 55:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:D1:93:3A:9C:E4:CD:FD:E1:7A:62:8A:F7:2C:B0:3C:E1:DB:47:D2 X509v3 Authority Key Identifier: keyid:78:57:D1:1A:51:DC:AE:9C:2E:08:86:A1:0C:E0:6F:55:F5:B8:43:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:75:e6:7a:08:17:a0:bd:83:9f:d9:f3:e9:6b:23:db:83:1e: 98:86:00:6b:3e:ff:b6:62:66:1a:a2:8e:b2:3c:3a:9f:c3:8b: 75:31:70:f2:37:da:d5:34:6d:af:a9:ee:9f:35:d1:5e:96:88: 10:d0:be:36:dd:91:83:f4:a6:9d:ec:d8:2a:78:14:4d:c3:e9: a1:35:39:8e:8d:76:51:2c:48:ca:a3:4f:8b:27:05:8a:53:82: 82:4a:b2:39:df:4c:bb:0d:3c:30:97:11:63:3d:f2:f1:16:e9: a1:84:c5:37:d4:e2:b3:92:24:ff:e5:06:72:3c:42:eb:3f:24: 39:36:eb:41:20:aa:09:85:15:dd:f1:eb:73:c4:1f:cf:6b:ef: 16:50:09:c4:65:b7:16:29:af:bf:b1:62:0c:eb:7e:db:a6:10: 48:7d:fe:d7:15:18:40:83:38:37:ed:82:aa:1d:7b:fc:72:fc: a1:25:41:f3:05:c7:b0:74:4d:59:fc:6b:c9:86:22:18:d6:32: dc:b1:91:73:66:1a:c4:16:dd:80:13:09:7e:33:38:35:75:85: 5c:cc:29:94:f5:6b:41:92:17:bd:4d:9d:ed:fd:b1:9c:1c:0f: a4:0b:c0:93:17:d7:78:73:e5:66:de:76:de:98:d5:45:80:1c: d4:20:d9:04 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVEOEExMTAvBgNVBAUTKDc4NTdEMTFBNTFEQ0FFOUMyRTA4ODZBMTBDRTA2RjU1 RjVCODQzMDAwHhcNMjYwNjEyMjIzODI3WhcNMjYwNjE5MjIzODI3WjAYMRYwFAYD VQQDEw02YTJjOGE2NC0zZGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAja/0xDq0xO33q3VVcVf0whkqSk1n9/sNpwU0oaL1t52HkIaYk/MUJKoa6G99 yEG4WHC3LpI3P4ov6LR/BBK5wrUOwh4LpCHQjDB+VC5hwbouCLPMx0bOoUEiU+qK 5jPVlarQSJakH29M8i1Y2YdFD8fW+3t8PO8SnfwiMzU+e27nX16MTWuStppBDDgB OEaf9WGSBix4RZ+Ih7EsrD18f1LQDbejfVl/bwsJ4QfHKLs2hcBXlQT256SUuUTA h/qZIdZgtZdBIcAuZfvV1qSY3K7DNhzIHXzlMVR/vh+zObDjRMTUx4tqF2utRAd3 fSU0bGItiiS+SDtFefQycz1VDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFELRkzqc 5M394XpiivcssDzh20fSMB8GA1UdIwQYMBaAFHhX0RpR3K6cLgiGoQzgb1X1uEMA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUQ4QS9CQTJGMUI5QUNB RUUxMUVCQTJGQkQwNTZDNEY5QUUwMi9lRmZSR2xIY3Jwd3VDSWFoRE9CdlZmVzRR d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VGZlJHbEhjcnB3dUNJYWhET0J2VmZXNFF3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUQ4QS9CQTJGMUI5QUNBRUUxMUVCQTJGQkQwNTZDNEY5QUUwMi9lRmZSR2xIY3Jw d3VDSWFoRE9CdlZmVzRRd0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALHXmeggXoL2Dn9nz6Wsj24MemIYAaz7/tmJmGqKOsjw6n8OLdTFw8jfa1TRt r6nunzXRXpaIENC+Nt2Rg/SmnezYKngUTcPpoTU5jo12USxIyqNPiycFilOCgkqy Od9Muw08MJcRYz3y8RbpoYTFN9Tis5Ik/+UGcjxC6z8kOTbrQSCqCYUV3fHrc8Qf z2vvFlAJxGW3Fimvv7FiDOt+26YQSH3+1xUYQIM4N+2Cqh17/HL8oSVB8wXHsHRN WfxryYYiGNYy3LGRc2YaxBbdgBMJfjM4NXWFXMwplPVrQZIXvU2d7f2xnBwPpAvA kxfXeHPlZt523pjVRYAc1CDZBA== -----END CERTIFICATE-----Generated at Sat Jun 13 11:18:59 2026 by rpki-client