$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft File: cS61otcGnxjunGXzsBMnGtvx9UA.mft (raw, json) Hash identifier: XQHelazO7v9Cc3PG0yiQQWkNOClvgwmDNGh5WnVFWjw= Subject key identifier: 58:63:36:94:E4:46:6D:8E:61:BD:1B:81:F6:D6:C9:35:2A:F7:F8:B6 Authority key identifier: 71:2E:B5:A2:D7:06:9F:18:EE:9C:65:F3:B0:13:27:1A:DB:F1:F5:40 Certificate issuer: /CN=A91A8A52/serialNumber=712EB5A2D7069F18EE9C65F3B013271ADBF1F540 Certificate serial: 02B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft Manifest number: 029F Signing time: Sat 13 Jun 2026 01:42:19 +0000 Manifest this update: Sat 13 Jun 2026 01:42:18 +0000 Manifest next update: Sat 20 Jun 2026 01:42:18 +0000 Files and hashes: 1: cS61otcGnxjunGXzsBMnGtvx9UA.crl (hash: a6SIqp8YhY/yCBY1asZFLdupni6pDZV6PfHNWJqHVUs=) 2: 655B85F0225B11EFADDE6F63C4F9AE02.roa (hash: P6xx3LV0yIZz7Bt3wASwzM1QkFL56uH39jrYrM1xsJw=) 3: 8F14EDAA70B911EDB6E1F81BC4F9AE02.roa (hash: niAe7uFd21HH6WERU7iTs3hEOi8m5PmAvBhzB5K4rB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.crl rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 01:42:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 689 (0x2b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8A52, serialNumber=712EB5A2D7069F18EE9C65F3B013271ADBF1F540 Validity Not Before: Jun 13 01:42:18 2026 GMT Not After : Jun 20 01:42:18 2026 GMT Subject: CN=6a2cb57b-1413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:77:53:fd:d2:df:37:71:7d:b9:b5:0a:6b:a5: c4:d2:e9:12:d7:46:f9:01:b1:c8:b1:a8:07:f7:1b: fe:0e:86:cd:13:43:05:dd:91:21:71:f7:83:6e:2c: 72:13:7e:86:75:3e:f6:7d:c6:3d:bc:c5:89:bc:3a: f7:48:26:8f:db:0a:ea:36:a9:1c:30:00:65:88:59: 4c:1e:16:40:01:6a:1b:b6:59:f7:f1:06:93:45:6f: bd:13:09:a1:a4:6e:1b:c8:25:e1:20:d0:c2:e0:93: d2:5c:1e:c0:23:73:54:5b:3e:3a:a9:1e:8f:25:89: d6:ca:75:67:9e:17:85:d7:5a:ae:a8:1c:11:34:61: 78:cf:49:39:79:aa:d8:51:7c:8d:52:6e:be:d8:b2: 19:38:21:48:5f:6d:f4:2d:59:18:d7:ed:9b:87:07: 00:da:5a:d6:b6:a6:8b:10:86:a7:ab:64:f3:1b:49: 47:0b:98:74:76:2f:a0:4e:97:d6:da:09:76:8e:f4: 75:84:ad:e1:4e:4f:17:14:24:7d:28:18:fb:50:c1: 6d:4c:79:9e:6b:31:ea:ea:08:34:42:00:cb:04:c5: 60:1b:b0:16:67:1a:4e:d9:f5:29:d3:d7:03:0b:b6: 60:02:7f:95:64:4b:88:61:96:04:b8:bb:ad:fc:a7: 86:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:63:36:94:E4:46:6D:8E:61:BD:1B:81:F6:D6:C9:35:2A:F7:F8:B6 X509v3 Authority Key Identifier: keyid:71:2E:B5:A2:D7:06:9F:18:EE:9C:65:F3:B0:13:27:1A:DB:F1:F5:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:24:e1:3f:c1:1c:01:1d:4b:55:db:e8:89:8f:9f:94:dd:b1: 08:6e:04:6d:1f:35:d9:97:b0:7a:51:55:c9:75:86:c3:90:df: fc:3c:3a:64:b9:7f:01:90:e2:1f:c7:21:f9:99:a4:2b:84:9d: a0:9c:97:6b:db:cc:a0:0d:c7:a2:40:5b:10:ca:78:ac:3f:80: 0b:fc:7d:d9:22:be:70:9f:fa:c3:d1:94:f0:6a:43:ce:24:16: 83:e8:a8:39:7e:a7:7f:66:70:32:b0:f3:fb:4c:78:d4:d5:36: b7:34:dd:d4:75:d8:e9:31:ef:6d:56:2d:8c:e6:87:dc:f8:bd: 47:2f:af:20:f0:72:ed:da:91:5e:50:95:82:2c:1f:a2:f8:bb: b2:6f:83:65:a7:ff:d0:68:3e:31:e6:13:85:9b:e8:4f:b7:fe: 26:48:b9:a6:66:47:f8:2f:ad:b8:e2:68:41:43:fe:3c:99:b1: 8b:3a:f6:c9:ba:ab:39:d0:37:cd:e1:d4:c0:54:4e:04:13:45: 78:b2:99:e1:b9:a7:28:cf:dd:bc:05:b7:41:07:b3:00:6e:c4: 41:4a:d9:ee:34:8e:21:d8:7d:3d:ec:10:1a:91:41:3f:d0:d4: 53:82:ab:e2:9f:cb:1f:80:25:54:d3:cf:17:59:f3:37:ef:3c: 4a:e6:d2:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThBNTIxMTAvBgNVBAUTKDcxMkVCNUEyRDcwNjlGMThFRTlDNjVGM0IwMTMyNzFB REJGMUY1NDAwHhcNMjYwNjEzMDE0MjE4WhcNMjYwNjIwMDE0MjE4WjAYMRYwFAYD VQQDEw02YTJjYjU3Yi0xNDEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt3dT/dLfN3F9ubUKa6XE0ukS10b5AbHIsagH9xv+DobNE0MF3ZEhcfeDbixy E36GdT72fcY9vMWJvDr3SCaP2wrqNqkcMABliFlMHhZAAWobtln38QaTRW+9Ewmh pG4byCXhINDC4JPSXB7AI3NUWz46qR6PJYnWynVnnheF11quqBwRNGF4z0k5earY UXyNUm6+2LIZOCFIX230LVkY1+2bhwcA2lrWtqaLEIanq2TzG0lHC5h0di+gTpfW 2gl2jvR1hK3hTk8XFCR9KBj7UMFtTHmeazHq6gg0QgDLBMVgG7AWZxpO2fUp09cD C7ZgAn+VZEuIYZYEuLut/KeGDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFhjNpTk Rm2OYb0bgfbWyTUq9/i2MB8GA1UdIwQYMBaAFHEutaLXBp8Y7pxl87ATJxrb8fVA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEE1Mi9GQjdFNEJERTcw QjUxMUVEOTNGMEREMTZDNEY5QUUwMi9jUzYxb3RjR254anVuR1h6c0JNbkd0dng5 VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NTNjFvdGNHbnhqdW5HWHpzQk1uR3R2eDlVQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEE1Mi9GQjdFNEJERTcwQjUxMUVEOTNGMEREMTZDNEY5QUUwMi9jUzYxb3RjR254 anVuR1h6c0JNbkd0dng5VUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlSThP8EcAR1LVdvoiY+flN2xCG4EbR812ZewelFVyXWGw5Df/Dw6ZLl/AZDi H8ch+ZmkK4SdoJyXa9vMoA3HokBbEMp4rD+AC/x92SK+cJ/6w9GU8GpDziQWg+io OX6nf2ZwMrDz+0x41NU2tzTd1HXY6THvbVYtjOaH3Pi9Ry+vIPBy7dqRXlCVgiwf ovi7sm+DZaf/0Gg+MeYThZvoT7f+Jki5pmZH+C+tuOJoQUP+PJmxizr2ybqrOdA3 zeHUwFROBBNFeLKZ4bmnKM/dvAW3QQezAG7EQUrZ7jSOIdh9PewQGpFBP9DUU4Kr 4p/LH4AlVNPPF1nzN+88SubSRw== -----END CERTIFICATE-----Generated at Sun Jun 14 10:49:09 2026 by rpki-client