$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft File: 1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft (raw, json) Hash identifier: OEfg2seXKcGwdYjLe6fnonvYDcBuoPzdCHYZLFGS80I= Subject key identifier: 68:E7:7C:92:52:96:5F:55:89:D1:62:6E:56:9C:B9:F1:A9:F0:E7:EA Authority key identifier: D4:59:D2:67:52:52:34:A0:53:5E:C3:8D:8C:CC:89:90:19:4D:E1:89 Certificate issuer: /CN=A91A8B67/serialNumber=D459D267525234A0535EC38D8CCC8990194DE189 Certificate serial: 012E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft Manifest number: 011D Signing time: Thu 11 Jun 2026 08:15:30 +0000 Manifest this update: Thu 11 Jun 2026 08:15:29 +0000 Manifest next update: Thu 18 Jun 2026 08:15:29 +0000 Files and hashes: 1: 1FnSZ1JSNKBTXsONjMyJkBlN4Yk.crl (hash: +cs5vO7nxuGIpRbqzg8En8LI3jQghbqOK9G7KfUB21Y=) 2: 1363F5E60E8E11F082304B42C4F9AE02.roa (hash: /AunwFrvROT949ER300con7tMv9t6hnrAMstakDSUnc=) 3: E90F04F4114711F0B6E44E12C4F9AE02.roa (hash: wpQZ9n5tOzLHw2Dp8uE1s9PaRxpgXwgFNni9J4wuW/Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.crl rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 08:15:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 302 (0x12e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8B67, serialNumber=D459D267525234A0535EC38D8CCC8990194DE189 Validity Not Before: Jun 11 08:15:29 2026 GMT Not After : Jun 18 08:15:29 2026 GMT Subject: CN=6a2a6ea2-bd00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:e2:b5:f5:2b:23:0c:91:7f:fb:a0:e6:fa:2a: 98:1f:6c:a9:eb:c8:74:f2:59:44:87:c6:27:56:30: 8d:db:ea:77:79:9f:8d:64:84:c8:0c:82:2a:e8:0e: 86:54:d5:9c:f2:fc:11:51:af:73:0c:f3:aa:c6:6b: e7:42:d3:9b:71:fd:09:2f:24:35:03:25:e4:cb:c3: 01:c8:5b:76:bd:32:7c:9c:16:b3:99:b5:48:88:2c: 87:19:e4:14:bd:70:74:2a:92:cc:19:01:a3:9f:e8: 27:8a:04:90:fd:cc:bd:21:42:61:b3:7a:2d:f4:0f: 56:64:b4:a9:83:37:8d:02:cd:b7:30:01:f7:15:9d: e1:57:51:2c:c9:af:42:43:11:70:93:7e:cd:2a:48: 29:77:70:b8:88:1b:ec:58:83:4b:2b:76:9a:e1:1f: b8:48:e9:3b:16:aa:a5:40:87:1e:a9:41:07:ce:e1: bb:b0:75:71:8a:66:28:1b:af:a5:4f:dc:79:b4:21: 63:80:15:0c:7b:1c:eb:b0:b5:00:59:bc:aa:7f:e1: 2a:1c:f0:d0:c8:68:27:76:02:7d:fe:df:d5:2f:64: 6f:69:53:99:21:ff:72:a5:36:88:cf:ec:c5:42:59: f7:63:59:d3:bb:42:88:58:50:75:f5:f8:7f:d4:0c: 94:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:E7:7C:92:52:96:5F:55:89:D1:62:6E:56:9C:B9:F1:A9:F0:E7:EA X509v3 Authority Key Identifier: keyid:D4:59:D2:67:52:52:34:A0:53:5E:C3:8D:8C:CC:89:90:19:4D:E1:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:ba:7c:9f:a1:97:57:8d:3b:d6:77:f5:36:79:20:2f:af:9f: 7b:6a:7c:db:03:71:57:9a:d4:f3:8a:df:af:1d:4a:11:a1:1f: 3f:6f:aa:02:28:cb:b0:d3:5c:42:da:57:41:2a:37:87:36:13: 34:02:cf:c5:14:9a:a5:a3:40:08:3b:09:ff:0f:dc:be:1b:4e: ab:b1:1e:fb:07:f2:44:22:95:31:28:f9:0a:f3:eb:f7:67:4f: 60:32:7b:f0:74:fa:94:48:17:38:93:de:0f:20:3b:90:78:93: 62:8b:61:c0:08:66:49:8a:4c:75:14:d5:b4:4b:df:d7:d7:03: eb:61:68:e4:be:ad:85:79:5e:71:09:ca:76:60:54:9e:f7:86: 52:0e:17:5c:53:29:fa:37:81:74:53:2a:87:ab:b6:c9:5b:c5: 17:d2:e7:02:3b:51:63:12:2a:3e:28:8f:c6:b0:2f:7a:82:05: 44:54:f6:26:f2:92:73:c0:e7:ff:b2:bb:ae:ed:48:e4:2d:97: 19:0e:5b:10:dd:8e:52:2f:66:a9:03:b7:72:30:f2:4e:d1:ac: ff:a7:b9:07:09:29:06:9a:d0:70:40:c6:87:54:7e:21:2d:68: 61:0e:ba:42:ab:3d:0e:63:c8:00:9c:fb:39:06:f7:33:a7:29: cb:f3:55:8a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThCNjcxMTAvBgNVBAUTKEQ0NTlEMjY3NTI1MjM0QTA1MzVFQzM4RDhDQ0M4OTkw MTk0REUxODkwHhcNMjYwNjExMDgxNTI5WhcNMjYwNjE4MDgxNTI5WjAYMRYwFAYD VQQDEw02YTJhNmVhMi1iZDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7OK19SsjDJF/+6Dm+iqYH2yp68h08llEh8YnVjCN2+p3eZ+NZITIDIIq6A6G VNWc8vwRUa9zDPOqxmvnQtObcf0JLyQ1AyXky8MByFt2vTJ8nBazmbVIiCyHGeQU vXB0KpLMGQGjn+gnigSQ/cy9IUJhs3ot9A9WZLSpgzeNAs23MAH3FZ3hV1Esya9C QxFwk37NKkgpd3C4iBvsWINLK3aa4R+4SOk7FqqlQIceqUEHzuG7sHVximYoG6+l T9x5tCFjgBUMexzrsLUAWbyqf+EqHPDQyGgndgJ9/t/VL2RvaVOZIf9ypTaIz+zF Qln3Y1nTu0KIWFB19fh/1AyUgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGjnfJJS ll9VidFiblacufGp8OfqMB8GA1UdIwQYMBaAFNRZ0mdSUjSgU17DjYzMiZAZTeGJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEI2Ny8yRkEwMEQzRUM2 QUExMUVGODRGQjBEMERDNEY5QUUwMi8xRm5TWjFKU05LQlRYc09Oak15SmtCbE40 WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFGblNaMUpTTktCVFhzT05qTXlKa0JsTjRZay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEI2Ny8yRkEwMEQzRUM2QUExMUVGODRGQjBEMERDNEY5QUUwMi8xRm5TWjFKU05L QlRYc09Oak15SmtCbE40WWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdbp8n6GXV4071nf1NnkgL6+fe2p82wNxV5rU84rfrx1KEaEfP2+qAijLsNNc QtpXQSo3hzYTNALPxRSapaNACDsJ/w/cvhtOq7Ee+wfyRCKVMSj5CvPr92dPYDJ7 8HT6lEgXOJPeDyA7kHiTYothwAhmSYpMdRTVtEvf19cD62Fo5L6thXlecQnKdmBU nveGUg4XXFMp+jeBdFMqh6u2yVvFF9LnAjtRYxIqPiiPxrAveoIFRFT2JvKSc8Dn /7K7ru1I5C2XGQ5bEN2OUi9mqQO3cjDyTtGs/6e5BwkpBprQcEDGh1R+IS1oYQ66 Qqs9DmPIAJz7OQb3M6cpy/NVig== -----END CERTIFICATE-----Generated at Sat Jun 13 07:18:54 2026 by rpki-client