$ rpki-client -vvf rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.mft File: 8VAZIKVfOnwnEDkUn_oop8HMOPE.mft (raw, json) Hash identifier: cyjkGWdygfHtaldHkh74aA/5XZ8oJHS8Z3qzueKYxgc= Subject key identifier: 3E:87:B2:6C:36:A5:C3:B3:10:A6:E0:CC:54:66:75:B7:E5:4C:E4:2B Authority key identifier: F1:50:19:20:A5:5F:3A:7C:27:10:39:14:9F:FA:28:A7:C1:CC:38:F1 Certificate issuer: /CN=A91B49C0/serialNumber=F1501920A55F3A7C271039149FFA28A7C1CC38F1 Certificate serial: 0427 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VAZIKVfOnwnEDkUn_oop8HMOPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.mft Manifest number: 0420 Signing time: Sat 13 Jun 2026 00:22:48 +0000 Manifest this update: Sat 13 Jun 2026 00:22:48 +0000 Manifest next update: Sat 20 Jun 2026 00:22:48 +0000 Files and hashes: 1: 8VAZIKVfOnwnEDkUn_oop8HMOPE.crl (hash: 645789i8yEnORMIdoypdDe5SHrWdc85Bpk34k/EmuGg=) 2: 8304B142B34711EC90A6DA67C4F9AE02.roa (hash: E0te7z7859at34MRFLNavnFyL+a8lv5dig7hn7bo8Ag=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.crl rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VAZIKVfOnwnEDkUn_oop8HMOPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 00:22:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1063 (0x427) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B49C0, serialNumber=F1501920A55F3A7C271039149FFA28A7C1CC38F1 Validity Not Before: Jun 13 00:22:48 2026 GMT Not After : Jun 20 00:22:48 2026 GMT Subject: CN=6a2ca2d8-d97e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d3:d8:18:d6:24:ef:f5:fc:93:1a:68:75:8f: 86:7e:04:f0:96:5b:7e:4a:25:f5:f7:0b:c2:6b:39: ca:d9:3f:fc:ed:cc:24:42:b1:e3:aa:c9:4b:b4:22: f9:3b:f5:20:ef:9e:ae:26:79:a8:9e:71:97:9c:36: 0b:6e:8e:8b:fd:65:c6:b7:0e:7f:fe:f7:6b:c9:2b: 57:03:f3:3b:2a:41:28:8c:1d:d4:63:aa:c6:69:78: 60:85:fc:65:01:51:cb:ec:c8:33:b6:92:d9:9d:61: 33:4b:f7:1a:ed:5b:89:87:bd:7c:7b:70:96:da:91: 98:a8:e8:a0:c5:2e:af:0b:46:5f:b4:1c:80:a0:a4: 6c:6d:d0:2f:91:0d:13:53:03:58:9e:a2:4c:5a:7b: 87:e6:fe:fb:dc:41:1c:17:ed:3d:28:c6:4a:79:35: 85:01:0f:6e:c2:ec:d5:82:53:a8:fd:aa:f8:5e:2f: c6:f2:c0:a8:e8:5b:87:fe:29:5d:82:26:ae:25:40: 47:3d:53:4d:05:d8:e3:2a:09:7c:f9:38:d1:e4:0c: cc:a9:36:ff:af:c9:02:be:c8:13:a2:e6:1b:2b:e2: 17:4f:12:93:f1:80:98:d4:c8:b8:1a:7e:b6:c5:bc: cd:26:09:94:c0:70:85:06:ad:c7:bd:bf:66:41:fb: b3:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:87:B2:6C:36:A5:C3:B3:10:A6:E0:CC:54:66:75:B7:E5:4C:E4:2B X509v3 Authority Key Identifier: keyid:F1:50:19:20:A5:5F:3A:7C:27:10:39:14:9F:FA:28:A7:C1:CC:38:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VAZIKVfOnwnEDkUn_oop8HMOPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:e6:a1:04:4a:1c:b8:30:55:08:a4:e0:63:af:b6:a4:96:09: c9:b6:ce:ef:f8:17:a7:5c:29:98:fd:fd:18:ca:0e:7a:0a:b4: e6:90:42:40:8f:65:b4:9e:7b:27:13:00:91:f9:c8:a1:6c:c5: eb:bf:cd:cb:a9:19:4f:d1:62:7c:f8:8d:eb:6e:9e:2a:c4:eb: db:ef:b9:8d:56:97:96:5d:69:04:94:ea:0e:4e:bd:be:72:56: 7d:2b:92:72:d8:a9:95:a4:ba:6c:21:8e:8a:49:a1:cd:c6:04: 08:3c:57:45:ab:1f:0f:3d:f2:78:fd:3b:b7:ae:aa:75:44:45: a6:4e:a3:bb:5d:1a:b6:d8:8e:bb:21:2d:2c:33:d0:a1:ad:7a: 0e:11:9c:4f:a8:3b:46:b5:d3:e8:4a:b7:b4:0b:dc:12:04:e2: 0a:83:14:ee:03:3d:7c:a1:26:8c:3f:75:db:88:dd:29:83:3c: d2:51:4c:da:12:ea:1d:e1:57:fe:0c:29:59:4f:9d:1a:60:29: 9c:4a:5a:8e:e2:e9:d2:5a:5d:7f:89:94:0e:77:81:d8:e2:1f: a8:b0:06:2e:ac:a2:6f:24:09:d8:74:f5:ba:44:f8:9a:19:27: b0:43:ab:18:ca:07:bc:62:59:26:a1:3a:94:cc:8f:be:62:8e: 50:3e:a4:b2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBCcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ5QzAxMTAvBgNVBAUTKEYxNTAxOTIwQTU1RjNBN0MyNzEwMzkxNDlGRkEyOEE3 QzFDQzM4RjEwHhcNMjYwNjEzMDAyMjQ4WhcNMjYwNjIwMDAyMjQ4WjAYMRYwFAYD VQQDEw02YTJjYTJkOC1kOTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAi9PYGNYk7/X8kxpodY+GfgTwllt+SiX19wvCaznK2T/87cwkQrHjqslLtCL5 O/Ug756uJnmonnGXnDYLbo6L/WXGtw5//vdryStXA/M7KkEojB3UY6rGaXhghfxl AVHL7MgztpLZnWEzS/ca7VuJh718e3CW2pGYqOigxS6vC0ZftByAoKRsbdAvkQ0T UwNYnqJMWnuH5v773EEcF+09KMZKeTWFAQ9uwuzVglOo/ar4Xi/G8sCo6FuH/ild giauJUBHPVNNBdjjKgl8+TjR5AzMqTb/r8kCvsgTouYbK+IXTxKT8YCY1Mi4Gn62 xbzNJgmUwHCFBq3Hvb9mQfuzKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD6Hsmw2 pcOzEKbgzFRmdbflTOQrMB8GA1UdIwQYMBaAFPFQGSClXzp8JxA5FJ/6KKfBzDjx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDlDMC82Q0IzODM1OEIz NDQxMUVDQUJDRTJBNjJDNEY5QUUwMi84VkFaSUtWZk9ud25FRGtVbl9vb3A4SE1P UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhWQVpJS1ZmT253bkVEa1VuX29vcDhITU9QRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDlDMC82Q0IzODM1OEIzNDQxMUVDQUJDRTJBNjJDNEY5QUUwMi84VkFaSUtWZk9u d25FRGtVbl9vb3A4SE1PUEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApeahBEocuDBVCKTgY6+2pJYJybbO7/gXp1wpmP39GMoOegq05pBCQI9ltJ57 JxMAkfnIoWzF67/Ny6kZT9FifPiN626eKsTr2++5jVaXll1pBJTqDk69vnJWfSuS ctiplaS6bCGOikmhzcYECDxXRasfDz3yeP07t66qdURFpk6ju10attiOuyEtLDPQ oa16DhGcT6g7RrXT6Eq3tAvcEgTiCoMU7gM9fKEmjD9124jdKYM80lFM2hLqHeFX /gwpWU+dGmApnEpajuLp0lpdf4mUDneB2OIfqLAGLqyibyQJ2HT1ukT4mhknsEOr GMoHvGJZJqE6lMyPvmKOUD6ksg== -----END CERTIFICATE-----Generated at Sun Jun 14 00:38:23 2026 by rpki-client