$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC6B1/F4A9157A088B11F1BCB153E70F3D8C67/mj2guGjFidoYRBoqcOBRSsl8QE0.mft File: mj2guGjFidoYRBoqcOBRSsl8QE0.mft (raw, json) Hash identifier: fQnmaub1Vff/byqnXoG9KYX8umufqkVtQRAGhmfIGsE= Subject key identifier: 1A:29:84:2C:19:56:39:C4:7B:AE:68:04:71:9E:01:FA:F3:C2:DD:37 Authority key identifier: 9A:3D:A0:B8:68:C5:89:DA:18:44:1A:2A:70:E0:51:4A:C9:7C:40:4D Certificate issuer: /CN=A91AC6B1/serialNumber=9A3DA0B868C589DA18441A2A70E0514AC97C404D Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj2guGjFidoYRBoqcOBRSsl8QE0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC6B1/F4A9157A088B11F1BCB153E70F3D8C67/mj2guGjFidoYRBoqcOBRSsl8QE0.mft Manifest number: 41 Signing time: Sat 13 Jun 2026 08:34:10 +0000 Manifest this update: Sat 13 Jun 2026 08:34:10 +0000 Manifest next update: Sat 20 Jun 2026 08:34:10 +0000 Files and hashes: 1: mj2guGjFidoYRBoqcOBRSsl8QE0.crl (hash: eYFJo1o43m9/PtY2fl8si09swyocq7YqtRp/1dfwgWI=) 2: 920A3E000E0611F1A3BA1443083D8C67.roa (hash: b9zTdqNPieWG5+8wmYAln2q07Z28/oicnZ6JHHByN/Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC6B1/F4A9157A088B11F1BCB153E70F3D8C67/mj2guGjFidoYRBoqcOBRSsl8QE0.crl rsync://rpki.apnic.net/member_repository/A91AC6B1/F4A9157A088B11F1BCB153E70F3D8C67/mj2guGjFidoYRBoqcOBRSsl8QE0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj2guGjFidoYRBoqcOBRSsl8QE0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 08:34:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC6B1, serialNumber=9A3DA0B868C589DA18441A2A70E0514AC97C404D Validity Not Before: Jun 13 08:34:10 2026 GMT Not After : Jun 20 08:34:10 2026 GMT Subject: CN=6a2d1602-a4b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:46:12:b0:5a:f3:f7:de:26:bd:75:c7:74:f8: 0a:1d:5b:88:a9:a9:06:c9:ef:b9:b0:ff:cb:96:ef: 2f:89:5c:20:69:b3:b5:31:48:ae:1d:19:96:3a:de: 96:9c:e3:16:8e:a6:af:18:a3:d6:90:e6:0c:99:ac: 8b:8a:71:a1:88:7b:08:2f:b9:d1:e4:73:88:3f:22: 08:14:2e:40:26:88:9b:53:b4:e5:b8:a2:55:6f:32: c4:b5:62:74:0a:3f:9d:6e:18:f0:3e:39:5e:e7:ce: 5e:3a:a9:c3:dd:67:b5:09:59:a0:55:58:a9:35:f8: 73:a2:8a:1e:6d:98:c5:d2:f3:88:7c:4d:52:15:31: 84:f2:1b:15:49:f3:ba:dd:0a:5e:9b:40:c9:ee:ef: 06:58:20:d9:8a:52:0c:4a:e0:8e:8a:c6:1f:43:1c: c2:a8:98:54:6e:ed:5d:f6:5a:dd:e7:8e:b0:f6:a3: 9b:68:de:a1:36:58:a8:e3:0b:e0:91:a6:e0:3a:0f: e6:98:f3:c8:cd:de:c3:52:9e:6e:9a:7a:6f:c9:85: 92:e5:55:92:4b:f1:ff:0a:be:ab:b8:f7:43:5c:17: fc:a5:02:28:27:75:6f:70:c4:82:c8:27:60:eb:07: eb:07:62:24:84:98:6b:3d:0f:88:ba:28:35:7a:8d: 91:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:29:84:2C:19:56:39:C4:7B:AE:68:04:71:9E:01:FA:F3:C2:DD:37 X509v3 Authority Key Identifier: keyid:9A:3D:A0:B8:68:C5:89:DA:18:44:1A:2A:70:E0:51:4A:C9:7C:40:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC6B1/F4A9157A088B11F1BCB153E70F3D8C67/mj2guGjFidoYRBoqcOBRSsl8QE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj2guGjFidoYRBoqcOBRSsl8QE0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC6B1/F4A9157A088B11F1BCB153E70F3D8C67/mj2guGjFidoYRBoqcOBRSsl8QE0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:91:a9:8f:d2:99:b4:e7:2e:55:a1:38:10:86:20:cb:4e:a3: bf:e3:5b:b0:64:b2:f5:ab:c8:b2:1e:97:3b:a8:04:1e:ef:60: 16:89:a5:df:5d:4c:53:2d:12:ab:fd:c4:60:24:66:6b:77:d9: b1:cb:75:fb:b1:28:80:8a:3c:51:a4:c2:3c:7a:f0:77:9f:d3: 0f:e4:9b:2f:6b:bf:06:a6:9b:17:b0:15:b8:5f:ac:9a:be:5a: a3:f1:6b:21:c5:3b:ed:97:32:1b:39:46:81:92:93:28:e1:c0: 7a:0d:52:1c:e8:e7:51:38:00:f7:07:84:71:5a:e3:4e:6e:80: 72:45:c3:d1:f9:ac:44:82:25:64:aa:22:bd:3a:b7:48:40:dc: 6f:9f:f7:12:a4:63:4f:20:01:e7:59:fc:d6:92:86:e4:36:39: 52:80:d0:af:bb:53:2e:b1:01:44:78:a0:84:2d:26:f3:35:77: b5:96:0a:3d:2e:d5:a5:0d:5d:84:b9:26:6b:fe:88:d9:c4:0d: c3:c1:a1:d5:e4:49:02:ad:b9:42:fa:44:ca:73:50:63:a3:74: b7:0f:98:f6:f1:54:24:de:fb:f9:b1:71:59:d6:c5:93:3f:2d: a5:f7:eb:33:bc:ec:d3:c5:c5:7b:ac:da:37:88:38:0d:58:b8: 1c:9c:e5:d5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QzZCMTExMC8GA1UEBRMoOUEzREEwQjg2OEM1ODlEQTE4NDQxQTJBNzBFMDUxNEFD OTdDNDA0RDAeFw0yNjA2MTMwODM0MTBaFw0yNjA2MjAwODM0MTBaMBgxFjAUBgNV BAMTDTZhMmQxNjAyLWE0YjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRRhKwWvP33ia9dcd0+AodW4ipqQbJ77mw/8uW7y+JXCBps7UxSK4dGZY63pac 4xaOpq8Yo9aQ5gyZrIuKcaGIewgvudHkc4g/IggULkAmiJtTtOW4olVvMsS1YnQK P51uGPA+OV7nzl46qcPdZ7UJWaBVWKk1+HOiih5tmMXS84h8TVIVMYTyGxVJ87rd Cl6bQMnu7wZYINmKUgxK4I6Kxh9DHMKomFRu7V32Wt3njrD2o5to3qE2WKjjC+CR puA6D+aY88jN3sNSnm6aem/JhZLlVZJL8f8Kvqu490NcF/ylAigndW9wxILIJ2Dr B+sHYiSEmGs9D4i6KDV6jZHrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUGimELBlW OcR7rmgEcZ4B+vPC3TcwHwYDVR0jBBgwFoAUmj2guGjFidoYRBoqcOBRSsl8QE0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFDNkIxL0Y0QTkxNTdBMDg4 QjExRjFCQ0IxNTNFNzBGM0Q4QzY3L21qMmd1R2pGaWRvWVJCb3FjT0JSU3NsOFFF MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbWoyZ3VHakZpZG9ZUkJvcWNPQlJTc2w4UUUwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFD NkIxL0Y0QTkxNTdBMDg4QjExRjFCQ0IxNTNFNzBGM0Q4QzY3L21qMmd1R2pGaWRv WVJCb3FjT0JSU3NsOFFFMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQApkamP0pm05y5VoTgQhiDLTqO/41uwZLL1q8iyHpc7qAQe72AWiaXfXUxTLRKr /cRgJGZrd9mxy3X7sSiAijxRpMI8evB3n9MP5Jsva78GppsXsBW4X6yavlqj8Wsh xTvtlzIbOUaBkpMo4cB6DVIc6OdROAD3B4RxWuNOboByRcPR+axEgiVkqiK9OrdI QNxvn/cSpGNPIAHnWfzWkobkNjlSgNCvu1MusQFEeKCELSbzNXe1lgo9LtWlDV2E uSZr/ojZxA3DwaHV5EkCrblC+kTKc1Bjo3S3D5j28VQk3vv5sXFZ1sWTPy2l9+sz vOzTxcV7rNo3iDgNWLgcnOXV -----END CERTIFICATE-----Generated at Sun Jun 14 00:15:43 2026 by rpki-client