$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft File: cJdlx9TTMfTDasa-NH-mah8CNJA.mft (raw, json) Hash identifier: U5FutehEN8oQdGVgOqmVzgSQi8iBdYShdbRxQRiePEQ= Subject key identifier: E8:F8:EB:B4:A8:6A:EF:01:D3:79:14:3E:FE:5B:26:AE:11:D3:DC:AE Authority key identifier: 70:97:65:C7:D4:D3:31:F4:C3:6A:C6:BE:34:7F:A6:6A:1F:02:34:90 Certificate issuer: /CN=A91AE85E/serialNumber=709765C7D4D331F4C36AC6BE347FA66A1F023490 Certificate serial: 35B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJdlx9TTMfTDasa-NH-mah8CNJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft Manifest number: 3579 Signing time: Fri 12 Jun 2026 14:18:18 +0000 Manifest this update: Fri 12 Jun 2026 14:18:18 +0000 Manifest next update: Fri 19 Jun 2026 14:18:18 +0000 Files and hashes: 1: cJdlx9TTMfTDasa-NH-mah8CNJA.crl (hash: ndKdbantuI712ZXZ9xDbnx1vN+JlLaOK3WVHQjuKLS4=) 2: 09E2DC32B12B11E59337F35AC4F9AE02.roa (hash: 9fz8ROlxgIz9BeZ3bDwbubljhDBRymKASujcQJN55ag=) 3: 392987D254F611E79DF7E643C4F9AE02.roa (hash: 7X7MqnwCg9AKC2Vx1jhncIIk4NudI1eSpazmHMekhvg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.crl rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJdlx9TTMfTDasa-NH-mah8CNJA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 14:18:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13746 (0x35b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE85E, serialNumber=709765C7D4D331F4C36AC6BE347FA66A1F023490 Validity Not Before: Jun 12 14:18:18 2026 GMT Not After : Jun 19 14:18:18 2026 GMT Subject: CN=6a2c152a-b9a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:af:75:12:e3:8b:fa:d8:d2:07:af:95:eb:6f: fe:6d:b1:9f:cf:64:c5:69:40:03:ec:c6:74:5f:e7: 65:70:eb:f5:80:0d:9e:12:f6:fc:20:de:df:6e:f9: ed:79:aa:60:ba:1e:97:55:3a:f8:14:ac:bb:80:a9: d3:48:b0:ef:ed:fe:23:22:c9:cc:5a:26:fc:c5:4f: fe:14:c6:81:f1:1c:9e:92:8b:f1:05:c0:74:2f:4b: c4:4f:b0:85:e8:7a:e9:6b:db:cc:ef:5f:94:5a:05: 9c:8a:05:7c:b2:18:e5:f8:56:5a:cc:59:76:4b:c6: 1a:83:4c:9a:21:5d:62:08:42:df:7d:26:69:59:3d: ae:78:89:16:c7:58:e0:20:6d:37:84:51:fc:20:0e: 6a:7f:d3:92:d1:91:51:bf:a4:83:3d:c1:d5:ae:51: 9e:a3:f2:4c:40:28:6d:d5:d9:c3:50:3c:25:f9:62: ef:ad:73:c4:6c:01:e9:66:72:f2:a8:bd:4b:5c:4a: 20:3b:4d:df:f6:a0:d2:d5:c4:fe:47:1a:32:0d:ef: 96:27:f4:27:09:1e:4b:ca:75:90:63:50:b5:16:2b: 94:dc:ab:94:a4:52:3d:02:15:58:70:f1:9e:77:06: ee:8f:00:42:1a:36:83:59:24:97:17:d3:d3:40:bd: bb:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:F8:EB:B4:A8:6A:EF:01:D3:79:14:3E:FE:5B:26:AE:11:D3:DC:AE X509v3 Authority Key Identifier: keyid:70:97:65:C7:D4:D3:31:F4:C3:6A:C6:BE:34:7F:A6:6A:1F:02:34:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJdlx9TTMfTDasa-NH-mah8CNJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:9a:db:2b:92:e9:eb:79:60:ef:e6:75:c5:b2:7b:e1:35:f6: d8:3f:b4:1e:19:ef:20:bd:6b:3c:8f:a8:f7:a9:bd:bc:75:76: 16:04:0d:01:7f:d3:84:f0:62:70:9d:7d:69:2b:45:d2:6d:1a: 3d:bb:6f:c1:3c:b9:39:42:a5:85:2e:ae:d0:44:63:42:f9:5f: ab:4a:46:29:89:ed:21:73:24:e3:06:0d:39:0b:67:48:13:b8: f1:24:7d:72:74:e7:1f:b5:b8:d5:2b:1e:cf:e8:bb:62:9a:a1: 66:8d:97:be:1a:79:d3:07:d5:f7:1f:07:e1:8b:d5:31:a0:9f: bd:25:6e:5a:fb:c1:11:a8:67:87:0a:a4:e5:bb:29:2e:ac:78: b6:11:c0:6e:e4:e7:ac:d4:6e:de:b9:27:34:e9:95:f6:e4:c3: 33:81:9b:71:22:c6:0a:f1:91:8b:0c:82:3d:5d:53:dd:65:c5: f7:11:21:e0:ca:24:ea:84:da:62:97:d3:28:d3:fa:93:83:00: 81:d7:fb:ec:0c:6f:b5:d9:02:38:3b:fd:e4:07:3b:82:31:1b: 3e:a4:d8:27:28:18:2c:89:49:a8:72:26:83:d0:77:78:8e:68: f0:18:bb:37:ea:5f:40:7b:ff:e0:17:ec:35:32:82:f9:4a:0b: b8:79:39:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU4NUUxMTAvBgNVBAUTKDcwOTc2NUM3RDREMzMxRjRDMzZBQzZCRTM0N0ZBNjZB MUYwMjM0OTAwHhcNMjYwNjEyMTQxODE4WhcNMjYwNjE5MTQxODE4WjAYMRYwFAYD VQQDEw02YTJjMTUyYS1iOWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3K91EuOL+tjSB6+V62/+bbGfz2TFaUAD7MZ0X+dlcOv1gA2eEvb8IN7fbvnt eapguh6XVTr4FKy7gKnTSLDv7f4jIsnMWib8xU/+FMaB8RyekovxBcB0L0vET7CF 6Hrpa9vM71+UWgWcigV8shjl+FZazFl2S8Yag0yaIV1iCELffSZpWT2ueIkWx1jg IG03hFH8IA5qf9OS0ZFRv6SDPcHVrlGeo/JMQCht1dnDUDwl+WLvrXPEbAHpZnLy qL1LXEogO03f9qDS1cT+RxoyDe+WJ/QnCR5LynWQY1C1FiuU3KuUpFI9AhVYcPGe dwbujwBCGjaDWSSXF9PTQL27ywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOj467So au8B03kUPv5bJq4R09yuMB8GA1UdIwQYMBaAFHCXZcfU0zH0w2rGvjR/pmofAjSQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTg1RS8wQkVEMzUyNjFE NkUxMUUyQjA0QTYxQUYwOEIwMkNEMi9jSmRseDlUVE1mVERhc2EtTkgtbWFoOENO SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NKZGx4OVRUTWZURGFzYS1OSC1tYWg4Q05KQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTg1RS8wQkVEMzUyNjFENkUxMUUyQjA0QTYxQUYwOEIwMkNEMi9jSmRseDlUVE1m VERhc2EtTkgtbWFoOENOSkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUJrbK5Lp63lg7+Z1xbJ74TX22D+0HhnvIL1rPI+o96m9vHV2FgQNAX/ThPBi cJ19aStF0m0aPbtvwTy5OUKlhS6u0ERjQvlfq0pGKYntIXMk4wYNOQtnSBO48SR9 cnTnH7W41Ssez+i7YpqhZo2Xvhp50wfV9x8H4YvVMaCfvSVuWvvBEahnhwqk5bsp Lqx4thHAbuTnrNRu3rknNOmV9uTDM4GbcSLGCvGRiwyCPV1T3WXF9xEh4Mok6oTa YpfTKNP6k4MAgdf77AxvtdkCODv95Ac7gjEbPqTYJygYLIlJqHImg9B3eI5o8Bi7 N+pfQHv/4BfsNTKC+UoLuHk5fA== -----END CERTIFICATE-----Generated at Sat Jun 13 19:15:19 2026 by rpki-client