$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.mft File: S0QUrmheSI9CsbZH7qAd67DE86A.mft (raw, json) Hash identifier: bRdPkxfnUJS/Y14D9BRWsJ48G3GRo9YgnvhaT3QQBNw= Subject key identifier: A1:F9:47:C0:8A:06:83:83:C4:C0:68:5D:38:D5:10:17:69:2F:DE:E7 Authority key identifier: 4B:44:14:AE:68:5E:48:8F:42:B1:B6:47:EE:A0:1D:EB:B0:C4:F3:A0 Certificate issuer: /CN=A91A9B1B/serialNumber=4B4414AE685E488F42B1B647EEA01DEBB0C4F3A0 Certificate serial: 0344 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0QUrmheSI9CsbZH7qAd67DE86A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.mft Manifest number: 0338 Signing time: Sat 13 Jun 2026 01:04:17 +0000 Manifest this update: Sat 13 Jun 2026 01:04:16 +0000 Manifest next update: Sat 20 Jun 2026 01:04:16 +0000 Files and hashes: 1: S0QUrmheSI9CsbZH7qAd67DE86A.crl (hash: IlhOsdd70G5PB+jtNJZELTZoYRDhpQm6aySeKZppGUU=) 2: B4A58FE60E0F11ED89E89675C4F9AE02.roa (hash: h4h9VFlilMq7CKoOcwRr0fslyRPoCa6/sTUwfmGzOxg=) 3: B3F935160E0F11ED89E89675C4F9AE02.roa (hash: VgeFEtMT/M7sth0/aY0YUIbWeg643mp39smFMavgcMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.crl rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0QUrmheSI9CsbZH7qAd67DE86A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 01:04:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 836 (0x344) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9B1B, serialNumber=4B4414AE685E488F42B1B647EEA01DEBB0C4F3A0 Validity Not Before: Jun 13 01:04:16 2026 GMT Not After : Jun 20 01:04:16 2026 GMT Subject: CN=6a2cac91-9def Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c6:2f:64:c1:de:c3:17:cb:7b:c8:95:e9:9f: d4:1d:5b:6e:8c:fb:6c:e6:de:46:e1:b9:51:37:5d: a1:50:64:3a:93:02:58:6b:8f:75:50:6d:51:c0:a8: 2d:45:dc:83:c1:06:ac:75:80:f6:98:d6:99:69:ed: 0e:18:0a:ce:8d:8a:aa:ca:b8:c4:f3:0c:83:40:a3: f2:77:80:c4:e7:5c:f8:1c:82:9d:5b:b4:b1:b4:5a: 26:3d:b1:0a:6f:b4:cb:cd:50:c9:d7:b3:0b:37:54: 7b:81:ee:f4:48:cf:88:1f:ad:68:fb:e2:7c:10:7b: 22:a8:b5:2b:10:69:49:02:fd:a7:ca:8e:4c:83:ff: 61:60:e2:9e:72:3c:09:16:91:8a:ac:eb:d3:f6:4b: e3:de:9f:17:cf:c9:78:dd:7c:5e:75:8a:8d:15:50: 37:83:aa:2d:63:f8:50:22:90:15:37:4b:59:8c:11: 24:87:b8:33:bc:c7:44:45:17:cd:0c:9b:a3:4a:87: 0c:cf:f2:61:85:87:27:92:35:f5:62:90:f3:72:30: 2d:42:33:76:41:4b:f4:e0:03:c2:71:a0:29:a6:b4: 1e:48:a9:b1:a0:ad:a9:bb:b9:ef:43:58:70:d0:1b: dd:a9:dd:e7:75:9a:e3:eb:59:58:f0:79:c4:8c:03: 0e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:F9:47:C0:8A:06:83:83:C4:C0:68:5D:38:D5:10:17:69:2F:DE:E7 X509v3 Authority Key Identifier: keyid:4B:44:14:AE:68:5E:48:8F:42:B1:B6:47:EE:A0:1D:EB:B0:C4:F3:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0QUrmheSI9CsbZH7qAd67DE86A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:4a:42:e8:ae:8b:fa:48:94:f5:2b:48:10:cb:3c:1b:b5:31: 93:06:6f:4b:35:59:8e:fe:da:58:44:f4:65:38:70:8b:1e:18: 4d:07:94:1b:01:fb:a9:68:1e:48:1e:30:c9:94:4d:bc:bb:db: 48:f8:ed:42:27:9d:3d:fe:8b:75:4c:ae:59:1d:5b:7c:f8:cf: fa:e3:5f:57:e5:5e:2a:bd:6b:f1:c5:fa:be:6e:14:a5:e7:3f: c5:e2:d7:60:e6:bc:90:14:ce:2d:62:42:e4:36:97:d9:e6:a4: f7:5a:ea:94:b3:c8:69:c5:a3:71:0b:78:ca:dc:d6:00:66:48: e5:48:09:eb:39:55:e7:b6:39:57:c3:87:60:ad:ae:e9:bc:0d: 9c:84:30:c9:76:41:53:53:79:70:b1:8e:99:02:a6:45:08:24: f7:87:d2:b9:63:05:f6:f5:11:2b:d9:a4:e1:e5:46:d8:50:92: 5c:8a:10:3a:5f:bb:cd:78:88:8c:0a:90:1b:22:6e:03:0b:7b: fc:a3:c9:8d:a1:c4:a9:a4:7b:6e:8a:41:ef:97:e4:4b:83:ea: e9:b4:ac:20:5f:bc:dd:31:fa:ca:aa:1a:8d:40:2f:d1:4b:8c: e6:74:0a:54:93:52:82:a6:30:56:19:b3:9f:d8:8f:9c:05:3f: ec:e4:db:97 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA0QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlCMUIxMTAvBgNVBAUTKDRCNDQxNEFFNjg1RTQ4OEY0MkIxQjY0N0VFQTAxREVC QjBDNEYzQTAwHhcNMjYwNjEzMDEwNDE2WhcNMjYwNjIwMDEwNDE2WjAYMRYwFAYD VQQDEw02YTJjYWM5MS05ZGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvsYvZMHewxfLe8iV6Z/UHVtujPts5t5G4blRN12hUGQ6kwJYa491UG1RwKgt RdyDwQasdYD2mNaZae0OGArOjYqqyrjE8wyDQKPyd4DE51z4HIKdW7SxtFomPbEK b7TLzVDJ17MLN1R7ge70SM+IH61o++J8EHsiqLUrEGlJAv2nyo5Mg/9hYOKecjwJ FpGKrOvT9kvj3p8Xz8l43XxedYqNFVA3g6otY/hQIpAVN0tZjBEkh7gzvMdERRfN DJujSocMz/JhhYcnkjX1YpDzcjAtQjN2QUv04APCcaApprQeSKmxoK2pu7nvQ1hw 0Bvdqd3ndZrj61lY8HnEjAMOawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKH5R8CK BoODxMBoXTjVEBdpL97nMB8GA1UdIwQYMBaAFEtEFK5oXkiPQrG2R+6gHeuwxPOg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUIxQi80QjM4NjREODBF MEIxMUVEQThEMTJFNThDNEY5QUUwMi9TMFFVcm1oZVNJOUNzYlpIN3FBZDY3REU4 NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MwUVVybWhlU0k5Q3NiWkg3cUFkNjdERTg2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUIxQi80QjM4NjREODBFMEIxMUVEQThEMTJFNThDNEY5QUUwMi9TMFFVcm1oZVNJ OUNzYlpIN3FBZDY3REU4NkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkEpC6K6L+kiU9StIEMs8G7UxkwZvSzVZjv7aWET0ZThwix4YTQeUGwH7qWge SB4wyZRNvLvbSPjtQiedPf6LdUyuWR1bfPjP+uNfV+VeKr1r8cX6vm4Upec/xeLX YOa8kBTOLWJC5DaX2eak91rqlLPIacWjcQt4ytzWAGZI5UgJ6zlV57Y5V8OHYK2u 6bwNnIQwyXZBU1N5cLGOmQKmRQgk94fSuWMF9vURK9mk4eVG2FCSXIoQOl+7zXiI jAqQGyJuAwt7/KPJjaHEqaR7bopB75fkS4Pq6bSsIF+83TH6yqoajUAv0UuM5nQK VJNSgqYwVhmzn9iPnAU/7OTblw== -----END CERTIFICATE-----Generated at Sat Jun 13 07:33:28 2026 by rpki-client