$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft File: 2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft (raw, json) Hash identifier: jYKobLu47tm5GyAPMs/vMQZvygR4+JoygHyXoPGW6NA= Subject key identifier: 12:6F:D7:9F:66:C3:21:9F:D8:F0:4C:17:45:B2:0E:3B:61:2F:E5:7D Authority key identifier: D9:04:D5:52:C0:EF:32:F2:49:AB:A4:59:7B:D8:4A:15:EE:55:55:C1 Certificate issuer: /CN=A91A5ED2/serialNumber=D904D552C0EF32F249ABA4597BD84A15EE5555C1 Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft Manifest number: CC Signing time: Sat 13 Jun 2026 06:52:50 +0000 Manifest this update: Sat 13 Jun 2026 06:52:50 +0000 Manifest next update: Sat 20 Jun 2026 06:52:50 +0000 Files and hashes: 1: 2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl (hash: sO5WDJ0PnETzAwebkw8Dg4wAIPM7gRN+/DkajS79aGI=) 2: 5A9C0D58311C11F0B91A2E64C4F9AE02.roa (hash: EOyR31nb50n9WnNlb3rcrt1TfJ23uFl543E7Owa7HQI=) 3: 7C0B5320D61411F0877B8D3FC4F9AE02.roa (hash: KpQfxiJyvIICVPsdtuLBwSdbonk+CBS6pnKnS4H/dIw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 06:52:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5ED2, serialNumber=D904D552C0EF32F249ABA4597BD84A15EE5555C1 Validity Not Before: Jun 13 06:52:50 2026 GMT Not After : Jun 20 06:52:50 2026 GMT Subject: CN=6a2cfe42-53a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:61:cd:d0:c8:a6:0b:95:97:e2:18:92:ea:3e: db:9a:10:e4:75:18:c8:d5:bf:86:8a:2c:99:c5:8f: 01:df:80:a2:0e:4c:b3:68:0e:f1:ec:76:6a:3a:24: 24:83:20:73:41:fe:4e:94:61:ea:c8:9d:eb:07:0d: d7:34:a3:25:18:ff:71:eb:8b:97:d0:f8:68:6c:82: d0:b9:ef:47:99:7a:ac:ad:1a:05:e7:2f:46:44:06: 55:b7:ac:73:04:dd:62:4c:87:65:ff:69:96:f0:7c: d8:c0:30:a8:ae:a9:35:30:44:d2:1f:84:0d:f1:f3: a4:0a:66:f8:1e:b9:39:9b:08:ba:e7:3f:36:23:12: d4:d7:05:cd:e4:82:8c:9c:c0:ef:dd:22:49:48:70: 77:b5:0a:17:7e:2b:fb:fa:3d:92:c8:98:58:1d:41: a5:25:36:0a:92:c8:d3:51:61:e3:0f:77:45:23:09: 40:84:20:64:0c:7b:15:f3:2c:b1:f2:39:96:42:ba: eb:74:d7:04:c2:a2:7d:75:4f:a1:b9:31:7e:e8:8b: bb:77:99:e4:77:ee:b9:72:4c:c8:80:f9:6d:84:c8: 6f:8e:43:61:bd:98:05:77:39:64:46:c2:32:4e:71: 83:30:16:11:0c:26:f3:7e:dc:10:58:43:2f:56:d0: 6a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:6F:D7:9F:66:C3:21:9F:D8:F0:4C:17:45:B2:0E:3B:61:2F:E5:7D X509v3 Authority Key Identifier: keyid:D9:04:D5:52:C0:EF:32:F2:49:AB:A4:59:7B:D8:4A:15:EE:55:55:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:a6:f7:44:d2:16:78:fa:d4:0d:e1:35:70:fd:cd:f3:b1:58: 91:61:5b:58:bd:6e:fd:84:7a:8c:1b:2d:21:92:26:dd:50:ad: e3:00:7d:f2:cf:5d:76:88:d8:c8:b2:75:38:fa:2f:52:c0:84: ad:38:02:96:d2:6c:9d:a3:d6:d2:27:63:d7:16:cc:52:84:ae: 48:e2:cb:16:d4:31:66:69:8a:6c:85:9f:ab:e8:49:8b:c1:4c: cd:8f:26:ef:3c:5d:2c:92:25:c6:a9:04:02:76:a3:8d:07:30: 0d:f0:57:fa:21:be:e9:3a:1c:b5:a0:8c:1a:63:91:aa:f1:30: b4:c7:06:b7:2d:5a:e9:0b:ae:c8:f9:8d:98:36:91:2e:d1:09: f9:3b:4c:9c:48:74:07:47:26:37:ce:e3:cb:fb:ff:fd:b9:9f: a0:71:92:0d:4b:69:98:cf:bc:60:e7:70:db:23:39:9a:a0:13: ee:2f:f4:0a:f2:1d:1e:7a:66:c7:8e:9e:54:20:13:10:5a:99: 9b:75:ff:1e:b4:b3:94:85:60:32:4b:45:80:f9:81:6f:6b:15: 03:31:d0:c5:fa:b1:66:fc:4a:fb:46:0d:2a:42:e3:8f:dc:d4: 8f:2f:a4:62:68:a2:13:6c:f6:c2:bd:74:2b:fb:20:7d:a9:9f: 51:c3:4d:29 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVFRDIxMTAvBgNVBAUTKEQ5MDRENTUyQzBFRjMyRjI0OUFCQTQ1OTdCRDg0QTE1 RUU1NTU1QzEwHhcNMjYwNjEzMDY1MjUwWhcNMjYwNjIwMDY1MjUwWjAYMRYwFAYD VQQDEw02YTJjZmU0Mi01M2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+GHN0MimC5WX4hiS6j7bmhDkdRjI1b+GiiyZxY8B34CiDkyzaA7x7HZqOiQk gyBzQf5OlGHqyJ3rBw3XNKMlGP9x64uX0PhobILQue9HmXqsrRoF5y9GRAZVt6xz BN1iTIdl/2mW8HzYwDCorqk1METSH4QN8fOkCmb4Hrk5mwi65z82IxLU1wXN5IKM nMDv3SJJSHB3tQoXfiv7+j2SyJhYHUGlJTYKksjTUWHjD3dFIwlAhCBkDHsV8yyx 8jmWQrrrdNcEwqJ9dU+huTF+6Iu7d5nkd+65ckzIgPlthMhvjkNhvZgFdzlkRsIy TnGDMBYRDCbzftwQWEMvVtBqVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBJv159m wyGf2PBMF0WyDjthL+V9MB8GA1UdIwQYMBaAFNkE1VLA7zLySaukWXvYShXuVVXB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUVEMi9GMjQ1QjJENjMx MUIxMUYwQTJGNTExNjBDNEY5QUUwMi8yUVRWVXNEdk12SkpxNlJaZTloS0ZlNVZW Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJRVFZVc0R2TXZKSnE2UlplOWhLRmU1VlZjRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUVEMi9GMjQ1QjJENjMxMUIxMUYwQTJGNTExNjBDNEY5QUUwMi8yUVRWVXNEdk12 SkpxNlJaZTloS0ZlNVZWY0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ6b3RNIWePrUDeE1cP3N87FYkWFbWL1u/YR6jBstIZIm3VCt4wB98s9ddojY yLJ1OPovUsCErTgCltJsnaPW0idj1xbMUoSuSOLLFtQxZmmKbIWfq+hJi8FMzY8m 7zxdLJIlxqkEAnajjQcwDfBX+iG+6ToctaCMGmORqvEwtMcGty1a6QuuyPmNmDaR LtEJ+TtMnEh0B0cmN87jy/v//bmfoHGSDUtpmM+8YOdw2yM5mqAT7i/0CvIdHnpm x46eVCATEFqZm3X/HrSzlIVgMktFgPmBb2sVAzHQxfqxZvxK+0YNKkLjj9zUjy+k YmiiE2z2wr10K/sgfamfUcNNKQ== -----END CERTIFICATE-----Generated at Sat Jun 13 13:33:32 2026 by rpki-client