$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.mft File: toNIsZBwY8BERWnOsijqUkbQLxk.mft (raw, json) Hash identifier: OFr/1H+E93qTyIfU3LLq8hG0Legam485tIsb2uob2P0= Subject key identifier: 69:28:DA:1F:AA:1D:EF:CF:0F:51:71:02:98:1E:CC:85:D2:A0:8A:91 Authority key identifier: B6:83:48:B1:90:70:63:C0:44:45:69:CE:B2:28:EA:52:46:D0:2F:19 Certificate issuer: /CN=A91B3CB5/serialNumber=B68348B1907063C0444569CEB228EA5246D02F19 Certificate serial: 75 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/toNIsZBwY8BERWnOsijqUkbQLxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.mft Manifest number: 72 Signing time: Fri 12 Jun 2026 18:11:28 +0000 Manifest this update: Fri 12 Jun 2026 18:11:28 +0000 Manifest next update: Fri 19 Jun 2026 18:11:28 +0000 Files and hashes: 1: toNIsZBwY8BERWnOsijqUkbQLxk.crl (hash: XAIBp56jICsLKjNgk8wMGwhqsJzQYa59uMkSUCGub+A=) 2: 3AF6CDE4CE7E11F0BDD3E452C4F9AE02.roa (hash: 0wi2dknpR06NzdVHMhDQvzTD3ZFfo6Ir3jbrCyXBQX4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.crl rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/toNIsZBwY8BERWnOsijqUkbQLxk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 18:11:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3CB5, serialNumber=B68348B1907063C0444569CEB228EA5246D02F19 Validity Not Before: Jun 12 18:11:28 2026 GMT Not After : Jun 19 18:11:28 2026 GMT Subject: CN=6a2c4bd0-fde0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1d:45:1c:97:95:9f:c2:03:b3:c1:74:21:8a: a9:a0:cd:7c:5f:b3:18:c8:29:0c:73:62:0c:56:27: 84:49:73:0e:4e:2e:b7:dc:3d:5c:a8:1d:94:af:27: bc:13:29:50:12:58:66:38:2b:5c:01:03:05:60:75: a5:a1:ef:de:80:5c:21:be:3f:81:b5:f5:bf:f0:9a: d0:fb:25:3d:02:35:3f:8c:aa:2c:8b:c2:7d:47:bb: 14:c0:cb:02:8e:40:f8:33:bb:c9:a2:9f:3f:e0:55: e1:62:19:df:43:dc:4e:e0:32:53:fc:63:4c:27:2b: 78:cf:36:0f:3d:62:e3:fb:20:c7:ca:79:53:80:a4: dd:c5:6a:f7:33:1c:c8:fc:f3:85:81:31:c7:7d:a9: 82:67:1d:d1:b8:20:2a:af:d7:90:ee:2e:e6:5a:72: d1:29:76:bd:1b:12:b2:27:0c:7c:10:34:9c:ea:77: 71:da:ff:21:86:ea:ba:02:55:71:c4:31:d9:fe:e0: b3:de:f7:78:da:86:5a:23:c3:4e:97:a1:27:31:1c: 37:98:64:6d:57:bb:67:97:32:9f:c2:65:97:f4:25: d7:c2:c0:8f:7b:b5:c4:7e:0d:4a:7e:91:0d:87:d9: 65:07:e3:73:a4:aa:79:2a:87:42:e7:85:0b:45:52: 1f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:28:DA:1F:AA:1D:EF:CF:0F:51:71:02:98:1E:CC:85:D2:A0:8A:91 X509v3 Authority Key Identifier: keyid:B6:83:48:B1:90:70:63:C0:44:45:69:CE:B2:28:EA:52:46:D0:2F:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/toNIsZBwY8BERWnOsijqUkbQLxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:51:ed:f9:04:15:de:c4:85:27:9e:2a:d1:1d:90:33:fa:69: a5:41:73:3b:46:0b:35:bf:b9:c3:2a:40:18:e1:e2:bd:9a:8d: 32:2e:1b:99:80:8c:28:39:2d:6a:1d:dd:60:e0:78:5f:7f:d4: 7c:88:f9:d4:64:51:44:f3:e8:ac:d2:e7:aa:b4:3b:fa:52:65: dc:71:24:11:01:7e:c5:bb:ae:da:c0:6a:01:59:c9:76:72:f3: d2:e8:48:0e:01:ff:28:06:4d:f1:0a:fd:50:70:21:60:6d:d1: 55:24:71:77:18:1e:be:a2:aa:b0:bd:34:88:a9:3a:c8:cc:99: 49:d9:7f:eb:6c:2a:35:da:9a:86:d1:dd:ef:2d:bc:31:10:1b: 72:9e:69:51:28:d9:df:04:ea:98:ad:c3:6b:18:ab:11:1c:4d: a6:4e:7d:38:50:24:45:f9:24:a0:a0:e0:c7:10:f9:eb:f3:71: ce:73:9c:9b:0c:55:98:f1:f6:d2:9d:26:40:1b:97:c1:c6:1e: 03:a9:27:16:6e:cd:d4:b6:55:2a:a3:7f:55:58:b5:62:bb:a0: ed:68:31:bd:a7:69:28:ef:86:c3:98:b8:d7:0f:0e:af:fb:9f: 60:dc:8f:33:35:31:79:4f:05:ed:dd:e7:31:2d:84:41:32:79: bc:45:2a:9f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC M0NCNTExMC8GA1UEBRMoQjY4MzQ4QjE5MDcwNjNDMDQ0NDU2OUNFQjIyOEVBNTI0 NkQwMkYxOTAeFw0yNjA2MTIxODExMjhaFw0yNjA2MTkxODExMjhaMBgxFjAUBgNV BAMTDTZhMmM0YmQwLWZkZTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCWHUUcl5WfwgOzwXQhiqmgzXxfsxjIKQxzYgxWJ4RJcw5OLrfcPVyoHZSvJ7wT KVASWGY4K1wBAwVgdaWh796AXCG+P4G19b/wmtD7JT0CNT+MqiyLwn1HuxTAywKO QPgzu8minz/gVeFiGd9D3E7gMlP8Y0wnK3jPNg89YuP7IMfKeVOApN3FavczHMj8 84WBMcd9qYJnHdG4ICqv15DuLuZactEpdr0bErInDHwQNJzqd3Ha/yGG6roCVXHE Mdn+4LPe93jahlojw06XoScxHDeYZG1Xu2eXMp/CZZf0JdfCwI97tcR+DUp+kQ2H 2WUH43Okqnkqh0LnhQtFUh81AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUaSjaH6od 788PUXECmB7MhdKgipEwHwYDVR0jBBgwFoAUtoNIsZBwY8BERWnOsijqUkbQLxkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzQ0I1L0VEMjI1NTMyQzQz NDExRjBBODI3QTU3REM0RjlBRTAyL3RvTklzWkJ3WThCRVJXbk9zaWpxVWtiUUx4 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdG9OSXNaQndZOEJFUlduT3NpanFVa2JRTHhrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIz Q0I1L0VEMjI1NTMyQzQzNDExRjBBODI3QTU3REM0RjlBRTAyL3RvTklzWkJ3WThC RVJXbk9zaWpxVWtiUUx4ay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBLUe35BBXexIUnnirRHZAz+mmlQXM7Rgs1v7nDKkAY4eK9mo0yLhuZgIwoOS1q Hd1g4Hhff9R8iPnUZFFE8+is0ueqtDv6UmXccSQRAX7Fu67awGoBWcl2cvPS6EgO Af8oBk3xCv1QcCFgbdFVJHF3GB6+oqqwvTSIqTrIzJlJ2X/rbCo12pqG0d3vLbwx EBtynmlRKNnfBOqYrcNrGKsRHE2mTn04UCRF+SSgoODHEPnr83HOc5ybDFWY8fbS nSZAG5fBxh4DqScWbs3UtlUqo39VWLViu6DtaDG9p2ko74bDmLjXDw6v+59g3I8z NTF5TwXt3ecxLYRBMnm8RSqf -----END CERTIFICATE-----Generated at Sat Jun 13 14:37:36 2026 by rpki-client