$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE7C5/330749461B5011F1BD5AD0E8243D8C67/33H2KoYwGsbTrKQJgyzDqdmcmhE.mft File: 33H2KoYwGsbTrKQJgyzDqdmcmhE.mft (raw, json) Hash identifier: 5oeyAMVF+C849x2bXe+NER86tuuE6TVoMfI8rQDEPCM= Subject key identifier: 38:97:08:0D:FF:A0:16:10:8D:79:0E:12:97:80:32:62:25:95:93:30 Authority key identifier: DF:71:F6:2A:86:30:1A:C6:D3:AC:A4:09:83:2C:C3:A9:D9:9C:9A:11 Certificate issuer: /CN=A91AE7C5/serialNumber=DF71F62A86301AC6D3ACA409832CC3A9D99C9A11 Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/33H2KoYwGsbTrKQJgyzDqdmcmhE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE7C5/330749461B5011F1BD5AD0E8243D8C67/33H2KoYwGsbTrKQJgyzDqdmcmhE.mft Manifest number: 33 Signing time: Sat 13 Jun 2026 08:42:44 +0000 Manifest this update: Sat 13 Jun 2026 08:42:43 +0000 Manifest next update: Sat 20 Jun 2026 08:42:43 +0000 Files and hashes: 1: 33H2KoYwGsbTrKQJgyzDqdmcmhE.crl (hash: qC/DUuDzdbogI0qCOX1Vjvbx7Ae1L+AjsgFEroCJ2fA=) 2: 08A46B6A1B5111F18293DF0B253D8C67.roa (hash: TF6EFrOkoOfXprH347Zxdrds6n86GSJg1BTmg1x6OAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE7C5/330749461B5011F1BD5AD0E8243D8C67/33H2KoYwGsbTrKQJgyzDqdmcmhE.crl rsync://rpki.apnic.net/member_repository/A91AE7C5/330749461B5011F1BD5AD0E8243D8C67/33H2KoYwGsbTrKQJgyzDqdmcmhE.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/33H2KoYwGsbTrKQJgyzDqdmcmhE.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 08:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE7C5, serialNumber=DF71F62A86301AC6D3ACA409832CC3A9D99C9A11 Validity Not Before: Jun 13 08:42:43 2026 GMT Not After : Jun 20 08:42:43 2026 GMT Subject: CN=6a2d1804-1734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9b:5a:59:bf:44:02:be:df:c1:44:e1:4b:1e: 10:ed:f3:bb:d2:3a:5b:16:6e:2c:c3:3f:69:23:2c: 95:09:53:b3:40:49:88:1e:6b:ef:d6:53:03:a5:41: c1:4b:2d:47:ec:74:cb:c0:bd:f8:d8:39:e0:77:59: 27:b7:34:c7:8a:b7:f4:78:bb:24:c9:47:e2:91:86: 1e:a2:1c:3c:d5:81:60:fa:d6:cc:2a:81:3b:e4:16: ca:b6:a2:52:b1:9a:83:fc:5e:17:79:1e:cf:04:c5: 1e:93:e4:b9:6e:4f:eb:b3:49:58:41:0d:aa:17:6d: 76:b8:9d:60:7b:65:e7:33:b6:60:fc:39:4a:5e:1f: f4:e2:e0:e4:4d:a9:c4:30:e7:f2:27:fa:61:80:64: 38:5d:3b:01:7f:72:35:5b:00:09:06:5e:26:88:9c: 73:13:bc:5c:a9:0b:e8:14:83:65:12:e0:79:ae:a9: 27:56:83:82:e0:8b:8c:89:c0:6e:d9:b0:0b:90:0d: 54:5d:68:ac:ee:43:38:ea:44:02:54:fd:45:13:36: 71:88:32:51:87:9f:18:ae:4c:6e:5f:62:0f:e4:19: 37:a2:87:92:b1:9b:d6:25:e3:ee:1c:25:06:78:aa: 1e:1f:c5:c8:5d:75:12:df:d1:22:0a:69:0a:92:b6: 85:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:97:08:0D:FF:A0:16:10:8D:79:0E:12:97:80:32:62:25:95:93:30 X509v3 Authority Key Identifier: keyid:DF:71:F6:2A:86:30:1A:C6:D3:AC:A4:09:83:2C:C3:A9:D9:9C:9A:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE7C5/330749461B5011F1BD5AD0E8243D8C67/33H2KoYwGsbTrKQJgyzDqdmcmhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/33H2KoYwGsbTrKQJgyzDqdmcmhE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE7C5/330749461B5011F1BD5AD0E8243D8C67/33H2KoYwGsbTrKQJgyzDqdmcmhE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:f9:5d:1d:32:94:95:65:ad:fb:5a:84:a8:d7:e4:ea:62:26: d8:87:fb:a2:17:f7:94:6f:f7:39:55:6d:dc:a1:7b:de:01:57: 06:27:f2:9d:8f:4d:26:97:2f:0d:0b:69:06:77:01:2e:90:22: cd:1c:2f:87:30:83:cf:53:f3:da:a1:aa:4d:57:a0:a2:50:24: 6a:a9:b6:c0:d8:45:5b:b9:ac:33:62:b2:dd:d0:c9:34:f3:03: 7b:85:97:37:c0:51:f6:3b:48:9b:ca:bf:05:ba:fb:b7:91:f8: d2:c9:2a:2f:1a:ec:5a:f0:2d:21:aa:b0:69:c2:43:ef:79:b1: 52:55:d5:e3:a8:d3:7d:1d:15:57:bb:99:49:81:65:be:d4:52: 03:56:0d:78:5b:0e:41:1e:2a:af:09:ed:2d:e8:fd:24:7d:42: 08:f2:ca:a1:ef:41:21:24:b4:4b:d3:bd:50:2f:e3:5b:f9:a0: 40:a3:23:ae:e4:b5:1d:8b:14:86:44:ea:3d:d1:f6:47:14:93: 7c:b8:7d:ad:01:44:6a:8c:ad:74:cb:23:77:e4:f9:ed:34:c1: 50:42:69:36:7e:e0:93:e0:b7:61:42:23:fd:fb:80:45:c8:49: ee:ed:c0:eb:b5:55:57:fb:2a:bd:03:29:b3:45:44:47:ee:ed: 1c:f1:10:97 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RTdDNTExMC8GA1UEBRMoREY3MUY2MkE4NjMwMUFDNkQzQUNBNDA5ODMyQ0MzQTlE OTlDOUExMTAeFw0yNjA2MTMwODQyNDNaFw0yNjA2MjAwODQyNDNaMBgxFjAUBgNV BAMTDTZhMmQxODA0LTE3MzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCym1pZv0QCvt/BROFLHhDt87vSOlsWbizDP2kjLJUJU7NASYgea+/WUwOlQcFL LUfsdMvAvfjYOeB3WSe3NMeKt/R4uyTJR+KRhh6iHDzVgWD61swqgTvkFsq2olKx moP8Xhd5Hs8ExR6T5LluT+uzSVhBDaoXbXa4nWB7ZecztmD8OUpeH/Ti4ORNqcQw 5/In+mGAZDhdOwF/cjVbAAkGXiaInHMTvFypC+gUg2US4HmuqSdWg4Lgi4yJwG7Z sAuQDVRdaKzuQzjqRAJU/UUTNnGIMlGHnxiuTG5fYg/kGTeih5Kxm9Yl4+4cJQZ4 qh4fxchddRLf0SIKaQqStoU9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUOJcIDf+g FhCNeQ4Sl4AyYiWVkzAwHwYDVR0jBBgwFoAU33H2KoYwGsbTrKQJgyzDqdmcmhEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFFN0M1LzMzMDc0OTQ2MUI1 MDExRjFCRDVBRDBFODI0M0Q4QzY3LzMzSDJLb1l3R3NiVHJLUUpneXpEcWRtY21o RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvMzNIMktvWXdHc2JUcktRSmd5ekRxZG1jbWhFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFF N0M1LzMzMDc0OTQ2MUI1MDExRjFCRDVBRDBFODI0M0Q4QzY3LzMzSDJLb1l3R3Ni VHJLUUpneXpEcWRtY21oRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCA+V0dMpSVZa37WoSo1+TqYibYh/uiF/eUb/c5VW3coXveAVcGJ/Kdj00mly8N C2kGdwEukCLNHC+HMIPPU/PaoapNV6CiUCRqqbbA2EVbuawzYrLd0Mk08wN7hZc3 wFH2O0ibyr8Fuvu3kfjSySovGuxa8C0hqrBpwkPvebFSVdXjqNN9HRVXu5lJgWW+ 1FIDVg14Ww5BHiqvCe0t6P0kfUII8sqh70EhJLRL071QL+Nb+aBAoyOu5LUdixSG ROo90fZHFJN8uH2tAURqjK10yyN35PntNMFQQmk2fuCT4LdhQiP9+4BFyEnu7cDr tVVX+yq9AymzRURH7u0c8RCX -----END CERTIFICATE-----Generated at Sun Jun 14 00:32:30 2026 by rpki-client