$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft File: nZwAihKi96YP7_liJmsFAqHKC6I.mft (raw, json) Hash identifier: GmqZfvHtPNlbXu4vY0fY3OtFmXDoYTiIBY0GbTXXYi4= Subject key identifier: 8C:68:0E:BC:74:29:37:16:B1:C5:EF:09:73:9C:C7:69:78:91:33:66 Authority key identifier: 9D:9C:00:8A:12:A2:F7:A6:0F:EF:F9:62:26:6B:05:02:A1:CA:0B:A2 Certificate issuer: /CN=A91AB85A/serialNumber=9D9C008A12A2F7A60FEFF962266B0502A1CA0BA2 Certificate serial: 05ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft Manifest number: 05DE Signing time: Fri 12 Jun 2026 23:03:08 +0000 Manifest this update: Fri 12 Jun 2026 23:03:07 +0000 Manifest next update: Fri 19 Jun 2026 23:03:07 +0000 Files and hashes: 1: nZwAihKi96YP7_liJmsFAqHKC6I.crl (hash: GH0qIGpgsG0fr9Q9kSoU3P0cLSx49OaSpLuiY8SDvtw=) 2: 460AA4AE03CF11ECA480B07CC4F9AE02.roa (hash: 8wbWE+NHbm5WX/IacxW1nTlGzZjirDSvgH7MSKpS2Nw=) 3: 46A2104603CF11ECA480B07CC4F9AE02.roa (hash: UlkMJAnK6fFfP1AdnmJ8vApdDQzCRL9Tu3cGNLiI+BY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.crl rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 23:03:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1517 (0x5ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB85A, serialNumber=9D9C008A12A2F7A60FEFF962266B0502A1CA0BA2 Validity Not Before: Jun 12 23:03:07 2026 GMT Not After : Jun 19 23:03:07 2026 GMT Subject: CN=6a2c902b-5a7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8a:a5:c3:06:b7:6a:4f:b3:f8:5f:23:36:69: 4c:c7:e8:36:ca:48:04:57:75:ad:bf:eb:75:96:41: 75:60:c1:bd:39:8a:6a:90:0c:0b:8f:1d:46:ea:73: 12:79:fb:0b:93:a6:38:f9:4a:2c:4f:e8:5a:42:dc: d9:96:75:88:78:1d:0e:c1:7e:ce:ee:7d:83:49:c8: f6:ed:11:ae:67:40:f7:2f:1e:0a:7b:20:c0:5c:49: 38:34:31:ac:f6:6c:3b:4b:9a:9e:95:40:0a:8f:be: a9:9a:77:4c:bc:b7:ee:76:a4:d8:8c:f7:40:aa:35: 0a:eb:65:b5:cf:cf:43:c9:d4:06:d2:47:ec:0b:b1: df:d7:af:5b:a3:df:b3:f2:93:e4:eb:b4:72:41:f7: bb:94:ea:56:78:d7:06:15:2f:40:10:8c:ee:f8:ec: b5:46:f4:27:e6:96:fa:e0:e0:4b:4d:6f:75:ab:70: 39:73:4b:5d:23:87:f7:94:5f:09:09:ca:91:93:f4: 3c:e9:85:7f:1d:ba:41:ec:1f:9c:16:7b:8c:ce:bf: 69:01:dc:af:e1:25:a7:ca:fe:7d:41:fa:6a:f2:fe: e3:0e:50:e6:9a:05:45:83:cb:4e:3e:37:7a:a1:ed: f5:7a:c0:96:3e:d8:b3:61:64:b9:37:54:14:ff:5c: f4:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:68:0E:BC:74:29:37:16:B1:C5:EF:09:73:9C:C7:69:78:91:33:66 X509v3 Authority Key Identifier: keyid:9D:9C:00:8A:12:A2:F7:A6:0F:EF:F9:62:26:6B:05:02:A1:CA:0B:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:3e:5d:23:76:fd:80:e7:b8:1c:a1:b9:3d:9c:98:fb:a1:06: 4a:5c:ac:9b:a5:8d:e6:84:16:66:a5:5b:79:79:07:19:72:57: 31:a7:22:78:ab:55:a2:eb:b1:7c:70:1c:fc:24:04:2b:40:f1: 36:67:20:ae:f6:d8:ba:b9:43:68:5b:c9:bf:19:e7:2a:23:b0: 49:3c:81:b1:37:b5:52:83:7a:98:32:fb:94:10:95:01:ec:da: 9a:c5:5f:bb:45:46:94:70:ea:d1:1f:56:f3:63:56:be:97:94: de:19:6b:61:b0:56:72:42:e8:d5:d4:58:41:ff:bd:64:fc:51: be:33:ac:7d:22:52:7b:a4:be:7a:0e:54:20:7d:b5:20:f6:98: 97:80:4b:01:b8:0b:9e:de:fb:09:ba:6f:81:6c:54:2c:c6:33: 3b:e5:b7:f8:6a:55:60:7a:ed:98:88:ce:27:68:35:ac:83:d6: 1c:09:7b:07:4a:8b:66:c5:70:d4:42:36:70:b1:e9:bb:a6:e0: 18:fc:27:8b:c8:f6:e6:be:71:82:05:4f:39:d5:3e:6d:cf:2d: 29:46:05:9a:8d:df:3f:e9:42:c7:2d:e4:02:b0:c8:62:3e:cc: 9a:63:36:f8:8d:65:69:04:c3:f5:04:2e:75:1a:79:4a:bd:bf: 55:a6:55:3f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI4NUExMTAvBgNVBAUTKDlEOUMwMDhBMTJBMkY3QTYwRkVGRjk2MjI2NkIwNTAy QTFDQTBCQTIwHhcNMjYwNjEyMjMwMzA3WhcNMjYwNjE5MjMwMzA3WjAYMRYwFAYD VQQDEw02YTJjOTAyYi01YTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk4qlwwa3ak+z+F8jNmlMx+g2ykgEV3Wtv+t1lkF1YMG9OYpqkAwLjx1G6nMS efsLk6Y4+UosT+haQtzZlnWIeB0OwX7O7n2DScj27RGuZ0D3Lx4KeyDAXEk4NDGs 9mw7S5qelUAKj76pmndMvLfudqTYjPdAqjUK62W1z89DydQG0kfsC7Hf169bo9+z 8pPk67RyQfe7lOpWeNcGFS9AEIzu+Oy1RvQn5pb64OBLTW91q3A5c0tdI4f3lF8J CcqRk/Q86YV/HbpB7B+cFnuMzr9pAdyv4SWnyv59Qfpq8v7jDlDmmgVFg8tOPjd6 oe31esCWPtizYWS5N1QU/1z0PQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIxoDrx0 KTcWscXvCXOcx2l4kTNmMB8GA1UdIwQYMBaAFJ2cAIoSovemD+/5YiZrBQKhygui MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjg1QS8xODVDMzlCNjAz Q0QxMUVDQUJDRTY5N0JDNEY5QUUwMi9uWndBaWhLaTk2WVA3X2xpSm1zRkFxSEtD NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25ad0FpaEtpOTZZUDdfbGlKbXNGQXFIS0M2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Qjg1QS8xODVDMzlCNjAzQ0QxMUVDQUJDRTY5N0JDNEY5QUUwMi9uWndBaWhLaTk2 WVA3X2xpSm1zRkFxSEtDNkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmz5dI3b9gOe4HKG5PZyY+6EGSlysm6WN5oQWZqVbeXkHGXJXMacieKtVouux fHAc/CQEK0DxNmcgrvbYurlDaFvJvxnnKiOwSTyBsTe1UoN6mDL7lBCVAezamsVf u0VGlHDq0R9W82NWvpeU3hlrYbBWckLo1dRYQf+9ZPxRvjOsfSJSe6S+eg5UIH21 IPaYl4BLAbgLnt77CbpvgWxULMYzO+W3+GpVYHrtmIjOJ2g1rIPWHAl7B0qLZsVw 1EI2cLHpu6bgGPwni8j25r5xggVPOdU+bc8tKUYFmo3fP+lCxy3kArDIYj7MmmM2 +I1laQTD9QQudRp5Sr2/VaZVPw== -----END CERTIFICATE-----Generated at Sat Jun 13 07:15:52 2026 by rpki-client