$ rpki-client -vvf rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft File: DxfzfbyUhNluGgq8eKT5ys1e2oo.mft (raw, json) Hash identifier: lzhSNmiI8hsWGyO8W1966INSiHHSP/L5ixlUfNtaNrA= Subject key identifier: CC:93:C6:9E:95:A6:6A:D0:E5:F9:67:D1:39:BB:5B:BF:29:91:6C:E8 Authority key identifier: 0F:17:F3:7D:BC:94:84:D9:6E:1A:0A:BC:78:A4:F9:CA:CD:5E:DA:8A Certificate issuer: /CN=A91B036A/serialNumber=0F17F37DBC9484D96E1A0ABC78A4F9CACD5EDA8A Certificate serial: 0204 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft Manifest number: 01DF Signing time: Sat 13 Jun 2026 04:03:14 +0000 Manifest this update: Sat 13 Jun 2026 04:03:14 +0000 Manifest next update: Sat 20 Jun 2026 04:03:14 +0000 Files and hashes: 1: DxfzfbyUhNluGgq8eKT5ys1e2oo.crl (hash: OoiWYWSebBBC60CZbtyKqjVSkPNE8hFRTZMObmjiQL0=) 2: B060FCD00E4311F1AA27A3801A3D8C67.roa (hash: /jHwnGcod93mkftOIXxHTA503k6CU3aAb5UZbSQZX9A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.crl rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 516 (0x204) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B036A, serialNumber=0F17F37DBC9484D96E1A0ABC78A4F9CACD5EDA8A Validity Not Before: Jun 13 04:03:14 2026 GMT Not After : Jun 20 04:03:14 2026 GMT Subject: CN=6a2cd682-a215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:09:9b:5d:8c:c2:ae:2e:ee:5d:96:13:2c:7c: 45:e9:87:56:0a:6a:47:9a:ec:00:26:88:43:15:99: fc:e6:f0:7f:a0:c9:72:92:4e:22:15:db:62:21:96: a1:1c:55:8f:12:bd:10:4e:88:e3:8a:de:02:f9:8b: ee:08:5c:d8:54:57:ed:9e:9d:33:c8:f2:1d:40:43: a3:64:ae:18:07:fb:43:b5:af:8a:2f:ae:8e:10:70: 8b:2f:a6:1a:44:b7:9f:a4:ab:47:f5:73:09:b1:83: 5c:07:9c:19:a9:3e:a7:b0:1a:c8:fe:ff:d9:85:ef: a1:6f:9d:26:69:c9:51:96:68:3a:81:5d:54:c9:db: 87:a0:4a:21:4c:c9:0e:99:8e:63:ee:ac:99:f8:14: 72:4c:12:b1:1e:27:62:89:6e:8a:3d:da:59:30:62: 0d:bb:6e:67:40:3c:c4:ed:ef:6e:06:1c:1b:7d:9a: aa:17:30:2c:24:25:87:df:f2:32:5a:18:50:a9:56: d6:ff:42:54:35:74:2e:34:2a:b8:f3:52:13:d9:7b: 8d:e6:49:66:ab:53:6f:02:21:e0:c1:0b:08:ce:a4: 59:8d:ac:68:c8:9d:86:fa:ad:55:51:2d:ee:7a:c9: 0c:57:15:85:f7:c5:d2:63:a8:e6:ba:7a:ad:dc:7d: 72:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:93:C6:9E:95:A6:6A:D0:E5:F9:67:D1:39:BB:5B:BF:29:91:6C:E8 X509v3 Authority Key Identifier: keyid:0F:17:F3:7D:BC:94:84:D9:6E:1A:0A:BC:78:A4:F9:CA:CD:5E:DA:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:1f:b7:9b:04:29:6c:de:79:6b:16:4f:fd:aa:50:56:d0:ac: f7:d1:cb:46:a8:80:77:69:74:84:0a:5a:04:de:9c:d5:a8:dc: 08:b7:55:d7:0f:37:8a:a4:bc:15:b2:6f:34:41:fe:98:78:60: 9d:b0:56:f1:7b:38:7c:5d:8c:2a:e0:62:09:b5:29:4c:28:29: 7a:af:11:52:ed:ba:fe:88:50:24:f8:b8:70:b8:1c:d0:6b:46: be:98:24:4f:20:9d:ce:f1:f5:1b:87:aa:75:b4:95:1c:f2:d0: fa:35:bb:db:d5:2b:4c:7e:38:58:22:4f:5d:d7:fa:ff:b6:be: 45:5a:d5:97:63:9e:5f:6c:bb:8a:c7:19:a6:26:23:88:00:4d: 34:28:4f:47:ad:de:63:36:b2:80:e7:bd:f5:34:b8:a6:af:fe: 02:f6:95:64:63:8d:f9:4f:1d:92:8c:00:6d:64:e8:4e:6a:a3: 50:5d:0a:e4:87:36:2f:58:85:23:b9:53:8c:c7:b4:20:85:b1: 5d:1d:10:a6:57:79:5a:9c:64:df:20:bc:d0:ff:96:0b:7e:3a: 08:76:9a:5e:92:75:a4:a8:c2:a2:17:3c:aa:ca:a6:cf:03:26: 23:77:90:33:20:dd:a0:45:ba:df:14:8e:7c:25:7b:26:fd:ca: 81:ef:e4:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAzNkExMTAvBgNVBAUTKDBGMTdGMzdEQkM5NDg0RDk2RTFBMEFCQzc4QTRGOUNB Q0Q1RURBOEEwHhcNMjYwNjEzMDQwMzE0WhcNMjYwNjIwMDQwMzE0WjAYMRYwFAYD VQQDEw02YTJjZDY4Mi1hMjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4QmbXYzCri7uXZYTLHxF6YdWCmpHmuwAJohDFZn85vB/oMlykk4iFdtiIZah HFWPEr0QTojjit4C+YvuCFzYVFftnp0zyPIdQEOjZK4YB/tDta+KL66OEHCLL6Ya RLefpKtH9XMJsYNcB5wZqT6nsBrI/v/Zhe+hb50maclRlmg6gV1UyduHoEohTMkO mY5j7qyZ+BRyTBKxHidiiW6KPdpZMGINu25nQDzE7e9uBhwbfZqqFzAsJCWH3/Iy WhhQqVbW/0JUNXQuNCq481IT2XuN5klmq1NvAiHgwQsIzqRZjaxoyJ2G+q1VUS3u eskMVxWF98XSY6jmunqt3H1yLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMyTxp6V pmrQ5fln0Tm7W78pkWzoMB8GA1UdIwQYMBaAFA8X8328lITZbhoKvHik+crNXtqK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDM2QS9CQkMyRjc3NkQx RjExMUVFODYwNTFBNjFDNEY5QUUwMi9EeGZ6ZmJ5VWhObHVHZ3E4ZUtUNXlzMWUy b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R4ZnpmYnlVaE5sdUdncThlS1Q1eXMxZTJvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDM2QS9CQkMyRjc3NkQxRjExMUVFODYwNTFBNjFDNEY5QUUwMi9EeGZ6ZmJ5VWhO bHVHZ3E4ZUtUNXlzMWUyb28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmR+3mwQpbN55axZP/apQVtCs99HLRqiAd2l0hApaBN6c1ajcCLdV1w83iqS8 FbJvNEH+mHhgnbBW8Xs4fF2MKuBiCbUpTCgpeq8RUu26/ohQJPi4cLgc0GtGvpgk TyCdzvH1G4eqdbSVHPLQ+jW729UrTH44WCJPXdf6/7a+RVrVl2OeX2y7iscZpiYj iABNNChPR63eYzaygOe99TS4pq/+AvaVZGON+U8dkowAbWToTmqjUF0K5Ic2L1iF I7lTjMe0IIWxXR0Qpld5Wpxk3yC80P+WC346CHaaXpJ1pKjCohc8qsqmzwMmI3eQ MyDdoEW63xSOfCV7Jv3Kge/knA== -----END CERTIFICATE-----Generated at Sat Jun 13 08:38:42 2026 by rpki-client