$ rpki-client -vvf rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft File: 23LIuvHa9pOYGFLuAyIwMF7ICRA.mft (raw, json) Hash identifier: +S07VRnRtkZWe3dIaCiEY7dHGnubwNH8ruGoeySl0bU= Subject key identifier: D3:15:20:41:5A:0D:18:B9:56:41:99:EF:3E:41:3C:0E:B5:7E:74:A3 Authority key identifier: DB:72:C8:BA:F1:DA:F6:93:98:18:52:EE:03:22:30:30:5E:C8:09:10 Certificate issuer: /CN=A91B289C/serialNumber=DB72C8BAF1DAF693981852EE032230305EC80910 Certificate serial: 0962 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23LIuvHa9pOYGFLuAyIwMF7ICRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft Manifest number: 0959 Signing time: Fri 12 Jun 2026 20:09:31 +0000 Manifest this update: Fri 12 Jun 2026 20:09:30 +0000 Manifest next update: Fri 19 Jun 2026 20:09:30 +0000 Files and hashes: 1: 23LIuvHa9pOYGFLuAyIwMF7ICRA.crl (hash: EzHZdWqT/DO3S/lf36OyUYVLxsmLgMYiiODPXVlsRIs=) 2: E6F3687CBCE711EAACD6466CC4F9AE02.roa (hash: AJajG2Lmw5CKAEEdhqoEdtkkiOQieReMgo4pezqlWDM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.crl rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23LIuvHa9pOYGFLuAyIwMF7ICRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 20:09:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2402 (0x962) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B289C, serialNumber=DB72C8BAF1DAF693981852EE032230305EC80910 Validity Not Before: Jun 12 20:09:30 2026 GMT Not After : Jun 19 20:09:30 2026 GMT Subject: CN=6a2c677b-5350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d3:e3:d9:86:e4:f8:b5:e1:70:b7:d5:d1:57: 7d:07:9e:95:81:74:a2:a4:07:53:fa:fb:d0:09:4e: 2f:d8:ac:12:9e:32:ff:02:67:46:c9:f6:96:c9:d9: 0b:37:1c:c8:0b:53:08:04:5d:2d:95:62:27:a7:d7: b2:06:c8:b6:da:4e:44:92:67:6a:08:d2:bd:a0:2b: f9:88:42:f3:3f:5d:58:b2:cd:93:bc:66:0c:ad:42: de:ec:ec:82:d6:a4:78:94:80:b3:e3:00:1f:59:65: 16:db:a1:8c:c9:51:f9:c6:4f:7d:aa:36:85:10:69: b8:60:d3:aa:6e:98:2b:11:b0:d7:4b:9b:34:c0:d1: 92:09:fe:92:d5:bf:56:e2:fa:b8:8f:ff:9c:e3:89: b7:5c:85:a1:e5:ca:82:e5:71:11:86:05:5f:63:3c: 9a:dd:cb:69:0a:f1:9d:af:41:c7:ef:23:4a:9a:53: 3a:22:ad:e7:68:58:8e:61:53:98:bc:2b:f2:e8:1b: e8:74:04:55:98:c2:1f:30:35:95:68:4c:50:9c:ce: 30:ba:8d:4d:23:4a:26:5c:91:29:af:75:22:87:84: c5:0f:81:d2:5e:35:96:03:24:c2:2b:a1:f0:13:3a: a7:f4:2a:c2:f7:d9:ff:ec:dc:25:48:4f:2c:19:14: c4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:15:20:41:5A:0D:18:B9:56:41:99:EF:3E:41:3C:0E:B5:7E:74:A3 X509v3 Authority Key Identifier: keyid:DB:72:C8:BA:F1:DA:F6:93:98:18:52:EE:03:22:30:30:5E:C8:09:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23LIuvHa9pOYGFLuAyIwMF7ICRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:46:5e:db:5c:f1:ca:d0:e6:10:53:3f:f4:55:69:24:37:c7: 62:c3:d6:1e:ca:aa:24:4e:19:cc:97:c9:42:c1:58:a2:eb:eb: e3:57:7f:6a:40:c2:a0:b1:15:82:22:62:0d:2f:4c:a2:42:5b: f0:7d:f8:85:53:15:df:05:59:02:0b:83:f1:c6:ef:5f:8b:ae: 1f:d9:05:ce:77:68:62:a5:9b:d9:ae:56:dd:df:7a:f8:8b:0b: 14:25:bd:ec:3a:62:86:1b:69:85:70:ad:fb:a8:99:e1:87:28: db:1b:70:a4:1d:13:60:3f:14:97:7a:6b:06:4c:f7:93:58:d3: 66:ac:1a:73:84:df:c0:38:38:eb:9e:80:bd:98:9c:f6:f9:a5: 16:8c:b5:8a:4c:f7:71:fc:e3:ff:30:d1:71:4a:43:e2:98:ad: 40:50:86:1f:df:0a:04:87:eb:0c:08:2c:e4:ab:a1:d8:05:7c: 11:47:ab:9e:56:2a:77:07:a2:c0:1d:3b:ba:34:5f:fb:31:32: 5d:9d:f0:b7:00:77:3e:67:c1:8b:61:2a:fe:57:b4:58:e0:ee: 5e:3d:47:d1:a6:72:a5:11:a6:c8:10:b4:71:3b:ea:a7:28:87: 07:0c:f5:0c:27:10:01:df:1c:07:83:66:1c:df:b3:33:5c:cd: 39:42:cb:a5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI4OUMxMTAvBgNVBAUTKERCNzJDOEJBRjFEQUY2OTM5ODE4NTJFRTAzMjIzMDMw NUVDODA5MTAwHhcNMjYwNjEyMjAwOTMwWhcNMjYwNjE5MjAwOTMwWjAYMRYwFAYD VQQDEw02YTJjNjc3Yi01MzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAntPj2Ybk+LXhcLfV0Vd9B56VgXSipAdT+vvQCU4v2KwSnjL/AmdGyfaWydkL NxzIC1MIBF0tlWInp9eyBsi22k5EkmdqCNK9oCv5iELzP11Yss2TvGYMrULe7OyC 1qR4lICz4wAfWWUW26GMyVH5xk99qjaFEGm4YNOqbpgrEbDXS5s0wNGSCf6S1b9W 4vq4j/+c44m3XIWh5cqC5XERhgVfYzya3ctpCvGdr0HH7yNKmlM6Iq3naFiOYVOY vCvy6BvodARVmMIfMDWVaExQnM4wuo1NI0omXJEpr3Uih4TFD4HSXjWWAyTCK6Hw Ezqn9CrC99n/7NwlSE8sGRTEhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNMVIEFa DRi5VkGZ7z5BPA61fnSjMB8GA1UdIwQYMBaAFNtyyLrx2vaTmBhS7gMiMDBeyAkQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjg5Qy8zQUIxRTJEQ0JD RTcxMUVBQkU5NzJDNkNDNEY5QUUwMi8yM0xJdXZIYTlwT1lHRkx1QXlJd01GN0lD UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzIzTEl1dkhhOXBPWUdGTHVBeUl3TUY3SUNSQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Mjg5Qy8zQUIxRTJEQ0JDRTcxMUVBQkU5NzJDNkNDNEY5QUUwMi8yM0xJdXZIYTlw T1lHRkx1QXlJd01GN0lDUkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX0Ze21zxytDmEFM/9FVpJDfHYsPWHsqqJE4ZzJfJQsFYouvr41d/akDCoLEV giJiDS9MokJb8H34hVMV3wVZAguD8cbvX4uuH9kFzndoYqWb2a5W3d96+IsLFCW9 7DpihhtphXCt+6iZ4Yco2xtwpB0TYD8Ul3prBkz3k1jTZqwac4TfwDg4656AvZic 9vmlFoy1ikz3cfzj/zDRcUpD4pitQFCGH98KBIfrDAgs5Kuh2AV8EUernlYqdwei wB07ujRf+zEyXZ3wtwB3PmfBi2Eq/le0WODuXj1H0aZypRGmyBC0cTvqpyiHBwz1 DCcQAd8cB4NmHN+zM1zNOULLpQ== -----END CERTIFICATE-----Generated at Sat Jun 13 14:38:20 2026 by rpki-client