$ rpki-client -vvf rpki.apnic.net/member_repository/A91B40B2/D146E4F0DA3611F0A933D24C8CD3641D/IPO71Jj0PJeRPuG5lCnbiQtHYrA.mft File: IPO71Jj0PJeRPuG5lCnbiQtHYrA.mft (raw, json) Hash identifier: uxwjgnruKWDl5SrGXFjJjbq3/T0Y1kvuM8v1yQxnvv8= Subject key identifier: F9:D5:CF:70:AA:70:8A:0E:F7:CB:F2:DB:BF:C0:4A:69:E6:C7:2B:3A Authority key identifier: 20:F3:BB:D4:98:F4:3C:97:91:3E:E1:B9:94:29:DB:89:0B:47:62:B0 Certificate issuer: /CN=A91B40B2/serialNumber=20F3BBD498F43C97913EE1B99429DB890B4762B0 Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IPO71Jj0PJeRPuG5lCnbiQtHYrA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B40B2/D146E4F0DA3611F0A933D24C8CD3641D/IPO71Jj0PJeRPuG5lCnbiQtHYrA.mft Manifest number: 5D Signing time: Sat 13 Jun 2026 08:10:30 +0000 Manifest this update: Sat 13 Jun 2026 08:10:30 +0000 Manifest next update: Sat 20 Jun 2026 08:10:30 +0000 Files and hashes: 1: IPO71Jj0PJeRPuG5lCnbiQtHYrA.crl (hash: 0kHQ5IsFUohYHJnmPsYZyAdKbwDGmMMe66F/k0coN1k=) 2: 78211876DA3811F080F82F148DD3641D.roa (hash: iQuCstGoIK1MPnU6/cDDIt+974fe7iZAlTkSxssvjXw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B40B2/D146E4F0DA3611F0A933D24C8CD3641D/IPO71Jj0PJeRPuG5lCnbiQtHYrA.crl rsync://rpki.apnic.net/member_repository/A91B40B2/D146E4F0DA3611F0A933D24C8CD3641D/IPO71Jj0PJeRPuG5lCnbiQtHYrA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IPO71Jj0PJeRPuG5lCnbiQtHYrA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 08:10:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B40B2, serialNumber=20F3BBD498F43C97913EE1B99429DB890B4762B0 Validity Not Before: Jun 13 08:10:30 2026 GMT Not After : Jun 20 08:10:30 2026 GMT Subject: CN=6a2d1076-1cac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3e:44:d5:e1:be:66:81:fb:b9:77:04:0c:2d: b9:5c:65:a9:ce:e5:66:62:73:7a:89:b6:a0:a2:8f: 41:19:35:f3:09:cd:d6:12:ec:b2:72:59:4d:1d:f8: d6:c0:22:80:dd:be:4e:fe:0d:24:e9:f7:8c:df:20: 91:96:b9:03:a2:e8:f0:40:58:e1:ba:db:28:1e:d8: 7f:78:9c:83:b3:b6:b4:1f:72:08:ff:3c:dd:a8:62: 07:3a:cf:72:10:15:50:20:09:83:8a:31:fd:2c:43: 4b:0e:fd:95:2b:f9:c5:f7:61:60:a9:7c:08:c7:45: 49:b6:9a:96:a7:26:32:a4:1a:0e:55:2e:18:c9:0e: af:36:a3:1d:31:06:f2:90:9a:fc:24:f8:52:53:05: 38:cc:62:b9:4b:9d:73:79:80:53:ed:25:c8:9d:5b: 09:10:59:9c:c3:4a:9f:f3:e2:ac:78:e6:f3:54:ca: af:7c:ce:ce:64:ca:97:04:0e:93:6e:22:d9:59:39: e4:e3:c0:de:ab:de:3c:04:e7:c1:d9:ca:9c:f7:29: 7a:6b:35:78:cb:28:70:da:ae:72:99:61:1e:1c:da: 63:41:3d:90:10:de:e3:d2:7d:98:2b:4e:ab:c7:35: 73:bc:d1:64:10:8b:c4:0e:06:f5:94:b1:64:67:3e: 46:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:D5:CF:70:AA:70:8A:0E:F7:CB:F2:DB:BF:C0:4A:69:E6:C7:2B:3A X509v3 Authority Key Identifier: keyid:20:F3:BB:D4:98:F4:3C:97:91:3E:E1:B9:94:29:DB:89:0B:47:62:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B40B2/D146E4F0DA3611F0A933D24C8CD3641D/IPO71Jj0PJeRPuG5lCnbiQtHYrA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IPO71Jj0PJeRPuG5lCnbiQtHYrA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B40B2/D146E4F0DA3611F0A933D24C8CD3641D/IPO71Jj0PJeRPuG5lCnbiQtHYrA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:b2:b6:8a:4d:9f:e0:da:c2:f3:66:72:39:6f:f3:e9:95:f4: b4:48:1b:c5:03:1d:3c:c7:29:65:a6:2e:db:50:b6:59:a5:78: 98:69:d9:43:81:09:42:c8:0f:7a:9b:31:3d:5e:d7:d9:e2:ca: a7:68:3e:39:a0:48:e9:0a:a6:1d:b2:bf:3b:b7:c8:36:4f:e9: ba:cc:44:de:a1:f7:ef:d0:81:8f:03:ee:36:9a:fc:55:92:8f: 7a:3c:7d:de:cc:41:a1:61:81:6f:50:ba:fe:31:dc:ee:55:e5: b5:a7:c7:8c:85:33:ce:dc:92:45:e7:d3:28:5c:37:ef:d4:85: e5:2e:11:a1:6d:75:69:07:77:d5:d5:83:81:19:f7:19:11:0d: 30:c6:9a:d3:11:81:07:ce:38:d4:6a:86:bb:34:15:ea:b1:6e: 72:4b:5f:82:8d:f6:23:6c:f8:d7:fb:a9:7b:0a:aa:75:03:d9: ff:43:d9:51:28:96:08:5c:0b:15:c5:e1:40:db:fb:36:e9:2f: 85:91:1b:c0:6d:ef:33:29:6f:85:94:45:5e:1e:d9:bf:98:81: 16:ca:2c:a7:16:c6:e1:13:81:f5:4a:99:ef:41:ba:61:73:8f: a3:4e:3e:36:3d:2f:0f:e4:82:c8:f1:91:95:92:f3:88:b6:8f: d8:05:d9:16 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NDBCMjExMC8GA1UEBRMoMjBGM0JCRDQ5OEY0M0M5NzkxM0VFMUI5OTQyOURCODkw QjQ3NjJCMDAeFw0yNjA2MTMwODEwMzBaFw0yNjA2MjAwODEwMzBaMBgxFjAUBgNV BAMTDTZhMmQxMDc2LTFjYWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDPkTV4b5mgfu5dwQMLblcZanO5WZic3qJtqCij0EZNfMJzdYS7LJyWU0d+NbA IoDdvk7+DSTp94zfIJGWuQOi6PBAWOG62yge2H94nIOztrQfcgj/PN2oYgc6z3IQ FVAgCYOKMf0sQ0sO/ZUr+cX3YWCpfAjHRUm2mpanJjKkGg5VLhjJDq82ox0xBvKQ mvwk+FJTBTjMYrlLnXN5gFPtJcidWwkQWZzDSp/z4qx45vNUyq98zs5kypcEDpNu ItlZOeTjwN6r3jwE58HZypz3KXprNXjLKHDarnKZYR4c2mNBPZAQ3uPSfZgrTqvH NXO80WQQi8QOBvWUsWRnPkYbAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU+dXPcKpw ig73y/Lbv8BKaebHKzowHwYDVR0jBBgwFoAUIPO71Jj0PJeRPuG5lCnbiQtHYrAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0MEIyL0QxNDZFNEYwREEz NjExRjBBOTMzRDI0QzhDRDM2NDFEL0lQTzcxSmowUEplUlB1RzVsQ25iaVF0SFly QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSVBPNzFKajBQSmVSUHVHNWxDbmJpUXRIWXJBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0 MEIyL0QxNDZFNEYwREEzNjExRjBBOTMzRDI0QzhDRDM2NDFEL0lQTzcxSmowUEpl UlB1RzVsQ25iaVF0SFlyQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAesraKTZ/g2sLzZnI5b/PplfS0SBvFAx08xyllpi7bULZZpXiYadlDgQlCyA96 mzE9XtfZ4sqnaD45oEjpCqYdsr87t8g2T+m6zETeoffv0IGPA+42mvxVko96PH3e zEGhYYFvULr+MdzuVeW1p8eMhTPO3JJF59MoXDfv1IXlLhGhbXVpB3fV1YOBGfcZ EQ0wxprTEYEHzjjUaoa7NBXqsW5yS1+CjfYjbPjX+6l7Cqp1A9n/Q9lRKJYIXAsV xeFA2/s26S+FkRvAbe8zKW+FlEVeHtm/mIEWyiynFsbhE4H1SpnvQbphc4+jTj42 PS8P5ILI8ZGVkvOIto/YBdkW -----END CERTIFICATE-----Generated at Sat Jun 13 14:27:36 2026 by rpki-client