$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft File: U4XhOhtYRftEzutr7Y3rTomvOCk.mft (raw, json) Hash identifier: 9ZHldKVYhRE5A8EVEyitNL9/Z3wn9Pn9kISUrTBzOZg= Subject key identifier: 66:38:00:4D:2F:7B:E3:49:2F:92:E7:DA:DB:B2:C4:12:EC:17:B7:21 Authority key identifier: 53:85:E1:3A:1B:58:45:FB:44:CE:EB:6B:ED:8D:EB:4E:89:AF:38:29 Certificate issuer: /CN=A91ACFEB/serialNumber=5385E13A1B5845FB44CEEB6BED8DEB4E89AF3829 Certificate serial: 0A4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4XhOhtYRftEzutr7Y3rTomvOCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft Manifest number: 0A34 Signing time: Fri 12 Jun 2026 19:46:17 +0000 Manifest this update: Fri 12 Jun 2026 19:46:16 +0000 Manifest next update: Fri 19 Jun 2026 19:46:16 +0000 Files and hashes: 1: U4XhOhtYRftEzutr7Y3rTomvOCk.crl (hash: 0g2n7Rb/ujxlZLRx4ksWMylgsiU7lHh7M5FbijEKGw0=) 2: 35831FCE937011EA8A795583C4F9AE02.roa (hash: KU74ZbX8QctQD6oWhNP2ZPDiRV7nlnVfxskUU58FW+U=) 3: 3636BCD2937011EA8A795583C4F9AE02.roa (hash: pxNuh5srbtMxxnoUXoogGH47f0VhHR+2FLeTjpcucQE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.crl rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4XhOhtYRftEzutr7Y3rTomvOCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 19:46:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2634 (0xa4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACFEB, serialNumber=5385E13A1B5845FB44CEEB6BED8DEB4E89AF3829 Validity Not Before: Jun 12 19:46:16 2026 GMT Not After : Jun 19 19:46:16 2026 GMT Subject: CN=6a2c6208-1fbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7a:3d:e7:f8:31:39:3f:bc:12:e9:b3:58:cb: 6d:83:b6:2a:90:40:a2:4a:09:1f:a3:65:58:a9:7b: 93:11:7b:d4:e7:6a:86:a7:84:2a:a5:1e:f2:3b:67: 27:c6:55:0b:f0:b7:06:6b:f0:a9:11:c0:4d:94:01: 94:fc:71:ad:25:94:99:9b:b0:80:e4:1a:d4:0a:47: 29:fa:3c:37:70:2c:4b:d1:9d:dc:e5:33:d6:49:7a: 2c:e7:dd:8d:c3:67:d2:2c:44:28:a4:da:25:da:8f: 07:4a:66:82:b2:41:01:85:c8:8b:ef:27:97:77:db: e0:c2:fe:8c:d2:d5:e6:91:a6:d1:23:21:0d:9f:3d: 03:07:4b:e5:8a:3f:a7:d3:3c:df:0b:78:40:27:6b: 4d:9c:b8:8c:77:dd:8f:a6:13:b3:8c:2b:d3:72:0c: 5b:ea:27:29:08:2e:e1:65:f4:5e:40:49:e0:ac:43: ce:db:92:bc:eb:80:e3:9a:e0:62:1f:c6:92:e4:42: 6d:4c:7b:68:47:2e:34:96:e4:1a:b1:87:fa:9e:0e: 69:0a:b9:4c:c5:7d:b8:10:04:b4:aa:c8:89:e8:58: a3:5b:ce:06:c9:3e:66:e9:28:be:bf:23:71:86:a4: 1d:97:79:8c:38:9f:9c:b1:28:20:25:5a:61:c9:0d: c5:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:38:00:4D:2F:7B:E3:49:2F:92:E7:DA:DB:B2:C4:12:EC:17:B7:21 X509v3 Authority Key Identifier: keyid:53:85:E1:3A:1B:58:45:FB:44:CE:EB:6B:ED:8D:EB:4E:89:AF:38:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4XhOhtYRftEzutr7Y3rTomvOCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:b6:44:b9:e5:54:94:b6:eb:ca:95:5d:6b:f0:26:58:7e:96: 86:e7:47:25:d4:14:9f:83:44:be:49:21:7e:51:b3:34:18:66: 41:a7:d0:52:9a:c4:66:ad:c3:cd:43:98:bd:79:f6:2b:5d:fd: f5:2f:8e:07:b5:69:a2:00:9c:45:70:ce:b5:25:93:b7:20:6a: 65:f3:93:c3:81:04:56:92:85:e5:02:2d:29:c3:73:a1:f5:55: a9:2a:f2:7e:15:86:3a:f4:52:fd:64:23:e9:22:30:5d:53:80: ad:c9:53:d4:51:30:38:f0:03:d5:f2:a7:e1:77:ba:b6:4e:88: 89:a8:2b:4b:96:2c:9d:fe:57:3b:cb:d2:d7:33:13:63:3f:70: 17:d1:d6:c7:86:79:0a:a8:cc:05:79:e4:1b:f2:b9:00:73:d2: 7c:f1:d8:38:4f:d8:42:16:71:57:1c:8f:1b:b6:61:7a:1d:e1: ae:47:76:02:9c:32:26:52:cb:b9:18:07:eb:be:5e:ab:1d:65: 32:e6:b0:33:43:e6:6f:26:06:61:a1:67:eb:64:66:0f:62:1b: ae:2f:06:39:0f:12:b0:b4:ec:70:8e:b1:59:36:a1:88:4d:34: c0:5b:c8:90:d4:90:9a:ec:e1:ad:24:b1:f7:54:ae:3c:69:ee: 59:df:3c:b0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNGRUIxMTAvBgNVBAUTKDUzODVFMTNBMUI1ODQ1RkI0NENFRUI2QkVEOERFQjRF ODlBRjM4MjkwHhcNMjYwNjEyMTk0NjE2WhcNMjYwNjE5MTk0NjE2WjAYMRYwFAYD VQQDEw02YTJjNjIwOC0xZmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuXo95/gxOT+8EumzWMttg7YqkECiSgkfo2VYqXuTEXvU52qGp4QqpR7yO2cn xlUL8LcGa/CpEcBNlAGU/HGtJZSZm7CA5BrUCkcp+jw3cCxL0Z3c5TPWSXos592N w2fSLEQopNol2o8HSmaCskEBhciL7yeXd9vgwv6M0tXmkabRIyENnz0DB0vlij+n 0zzfC3hAJ2tNnLiMd92PphOzjCvTcgxb6icpCC7hZfReQEngrEPO25K864DjmuBi H8aS5EJtTHtoRy40luQasYf6ng5pCrlMxX24EAS0qsiJ6FijW84GyT5m6Si+vyNx hqQdl3mMOJ+csSggJVphyQ3F/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGY4AE0v e+NJL5Ln2tuyxBLsF7chMB8GA1UdIwQYMBaAFFOF4TobWEX7RM7ra+2N606Jrzgp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0ZFQi9DQjJDMzNFNjkz NkUxMUVBQTVFNTZCN0VDNEY5QUUwMi9VNFhoT2h0WVJmdEV6dXRyN1kzclRvbXZP Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U0WGhPaHRZUmZ0RXp1dHI3WTNyVG9tdk9Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0ZFQi9DQjJDMzNFNjkzNkUxMUVBQTVFNTZCN0VDNEY5QUUwMi9VNFhoT2h0WVJm dEV6dXRyN1kzclRvbXZPQ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOLZEueVUlLbrypVda/AmWH6WhudHJdQUn4NEvkkhflGzNBhmQafQUprEZq3D zUOYvXn2K1399S+OB7VpogCcRXDOtSWTtyBqZfOTw4EEVpKF5QItKcNzofVVqSry fhWGOvRS/WQj6SIwXVOArclT1FEwOPAD1fKn4Xe6tk6IiagrS5Ysnf5XO8vS1zMT Yz9wF9HWx4Z5CqjMBXnkG/K5AHPSfPHYOE/YQhZxVxyPG7Zheh3hrkd2ApwyJlLL uRgH675eqx1lMuawM0PmbyYGYaFn62RmD2Ibri8GOQ8SsLTscI6xWTahiE00wFvI kNSQmuzhrSSx91SuPGnuWd88sA== -----END CERTIFICATE-----Generated at Sat Jun 13 16:33:27 2026 by rpki-client