$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft File: US3AbkHAiZokofyIXrNG5FMH80c.mft (raw, json) Hash identifier: bYhHj9vM6a8/5xb3tZl3bOjsX65puDQ0lzmeK+4BD/w= Subject key identifier: 78:40:5D:29:2F:25:12:C1:D6:58:3D:E3:88:D1:CC:41:40:12:20:69 Authority key identifier: 51:2D:C0:6E:41:C0:89:9A:24:A1:FC:88:5E:B3:46:E4:53:07:F3:47 Certificate issuer: /CN=A91BA4F2/serialNumber=512DC06E41C0899A24A1FC885EB346E45307F347 Certificate serial: 0A20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US3AbkHAiZokofyIXrNG5FMH80c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft Manifest number: 0A18 Signing time: Fri 12 Jun 2026 19:48:22 +0000 Manifest this update: Fri 12 Jun 2026 19:48:22 +0000 Manifest next update: Fri 19 Jun 2026 19:48:22 +0000 Files and hashes: 1: US3AbkHAiZokofyIXrNG5FMH80c.crl (hash: 4552vYe5zAUraPIZWi0BzQBZXMOOTtG0OjlEHuvWlL0=) 2: 9EEA3006979411EA8C6FC25AC4F9AE02.roa (hash: TtvgX0HunQnxwePu7sD+x5FU7eZoqly/IQVqoa8h86s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.crl rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US3AbkHAiZokofyIXrNG5FMH80c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 19:48:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2592 (0xa20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA4F2, serialNumber=512DC06E41C0899A24A1FC885EB346E45307F347 Validity Not Before: Jun 12 19:48:22 2026 GMT Not After : Jun 19 19:48:22 2026 GMT Subject: CN=6a2c6286-13dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:87:b9:9c:e0:30:f8:7b:bf:41:e8:cc:c0:f0: d2:e0:80:92:06:b9:da:63:d1:71:53:6d:4f:75:de: c7:28:ab:ae:e1:79:b3:d4:c1:0f:cc:d2:ce:62:70: 30:5a:d7:f4:d1:2f:71:91:e5:e8:47:dd:3f:17:39: 22:3f:39:54:84:1f:d6:b8:0c:ab:fb:bf:ab:4f:f0: 24:4d:41:bf:a1:b3:62:0a:f1:8f:b2:f6:71:9e:e2: 76:ef:d7:43:f3:a9:2a:0c:95:ed:ce:61:e8:10:85: a9:b5:11:03:0c:25:34:7b:cb:82:67:6d:13:4b:86: 7d:1c:a4:71:fa:13:eb:45:b3:57:a7:90:96:36:b2: 9b:f1:b9:c7:99:ed:16:aa:d1:12:a4:6c:38:55:31: ba:e1:89:30:46:b1:f5:4a:9e:d2:e7:d7:8a:6f:cd: 5c:06:72:0f:c3:b9:75:a6:11:b6:bb:80:df:3e:1b: 38:c7:56:87:13:0b:6f:45:49:a4:bc:f8:97:20:59: 5a:1b:45:21:05:6e:3f:8e:21:59:58:4f:f7:a2:3a: 83:07:53:ca:cf:26:2a:2e:85:22:7f:9f:5a:38:9f: ca:74:df:b8:37:3d:55:51:9b:92:96:a5:41:39:70: 39:68:82:67:ac:23:20:68:e8:ce:9c:7a:64:98:ee: 43:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:40:5D:29:2F:25:12:C1:D6:58:3D:E3:88:D1:CC:41:40:12:20:69 X509v3 Authority Key Identifier: keyid:51:2D:C0:6E:41:C0:89:9A:24:A1:FC:88:5E:B3:46:E4:53:07:F3:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US3AbkHAiZokofyIXrNG5FMH80c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:1b:0b:4a:32:f2:ed:1a:9d:cf:7b:76:3e:2e:58:eb:e0:27: 11:e3:9f:36:4a:91:8f:22:a7:af:f7:b2:36:b3:01:97:bc:5c: 78:1b:0a:29:dc:05:7c:fe:05:76:1e:07:a2:71:8d:46:52:af: 6d:36:e4:78:f0:21:b8:66:5e:57:6a:ef:cb:7b:94:a0:79:7a: 72:b4:ee:6f:ff:d5:62:a8:74:69:44:f5:fc:95:c1:40:ec:2a: 8e:fc:d7:c0:a1:f9:e1:0d:8a:76:91:53:a9:41:71:22:db:bb: e0:c7:3c:fa:20:8c:7d:4e:84:87:3f:25:7c:ef:ee:30:a2:02: 9e:42:cd:89:41:9b:a4:ab:7e:b9:05:37:36:43:cc:65:43:b7: cd:aa:0b:6a:d1:bc:01:79:99:52:09:f7:0b:ff:df:22:50:8b: 36:11:e1:f8:e7:9f:b0:1a:ee:34:b3:c3:4f:46:23:9f:37:ff: dd:72:3b:47:87:e6:b3:00:8c:b0:54:06:5e:09:d8:24:3e:ae: 21:a0:78:97:39:fb:17:d3:1b:04:a6:a8:ac:36:1b:dd:d7:6e: 0f:46:d8:63:cc:1f:ad:4c:d9:af:96:5c:ff:52:dc:27:15:4c: 18:6f:15:13:b8:fa:90:d6:ff:7b:27:f6:80:2c:33:fc:c6:0d: 0a:1b:ca:6d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE0RjIxMTAvBgNVBAUTKDUxMkRDMDZFNDFDMDg5OUEyNEExRkM4ODVFQjM0NkU0 NTMwN0YzNDcwHhcNMjYwNjEyMTk0ODIyWhcNMjYwNjE5MTk0ODIyWjAYMRYwFAYD VQQDEw02YTJjNjI4Ni0xM2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+Ye5nOAw+Hu/QejMwPDS4ICSBrnaY9FxU21Pdd7HKKuu4Xmz1MEPzNLOYnAw Wtf00S9xkeXoR90/FzkiPzlUhB/WuAyr+7+rT/AkTUG/obNiCvGPsvZxnuJ279dD 86kqDJXtzmHoEIWptREDDCU0e8uCZ20TS4Z9HKRx+hPrRbNXp5CWNrKb8bnHme0W qtESpGw4VTG64YkwRrH1Sp7S59eKb81cBnIPw7l1phG2u4DfPhs4x1aHEwtvRUmk vPiXIFlaG0UhBW4/jiFZWE/3ojqDB1PKzyYqLoUif59aOJ/KdN+4Nz1VUZuSlqVB OXA5aIJnrCMgaOjOnHpkmO5DEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHhAXSkv JRLB1lg944jRzEFAEiBpMB8GA1UdIwQYMBaAFFEtwG5BwImaJKH8iF6zRuRTB/NH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTRGMi8yQUVERUY5QTk3 OTMxMUVBQjJBRDI5NTZDNEY5QUUwMi9VUzNBYmtIQWlab2tvZnlJWHJORzVGTUg4 MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VTM0Fia0hBaVpva29meUlYck5HNUZNSDgwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTRGMi8yQUVERUY5QTk3OTMxMUVBQjJBRDI5NTZDNEY5QUUwMi9VUzNBYmtIQWla b2tvZnlJWHJORzVGTUg4MGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaRsLSjLy7Rqdz3t2Pi5Y6+AnEeOfNkqRjyKnr/eyNrMBl7xceBsKKdwFfP4F dh4HonGNRlKvbTbkePAhuGZeV2rvy3uUoHl6crTub//VYqh0aUT1/JXBQOwqjvzX wKH54Q2KdpFTqUFxItu74Mc8+iCMfU6Ehz8lfO/uMKICnkLNiUGbpKt+uQU3NkPM ZUO3zaoLatG8AXmZUgn3C//fIlCLNhHh+OefsBruNLPDT0Yjnzf/3XI7R4fmswCM sFQGXgnYJD6uIaB4lzn7F9MbBKaorDYb3dduD0bYY8wfrUzZr5Zc/1LcJxVMGG8V E7j6kNb/eyf2gCwz/MYNChvKbQ== -----END CERTIFICATE-----Generated at Sat Jun 13 08:19:27 2026 by rpki-client