$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft File: cxfXd72qYzPNlqgQS5TeD6R1IRM.mft (raw, json) Hash identifier: 0wIjef+1jHo5MoiQ+VCrk7U7jiBnK9Y2VK+FtHtKx4M= Subject key identifier: B0:7D:32:B9:2C:CC:DE:4D:47:5D:65:E3:8F:6A:89:3E:FF:72:4B:F7 Authority key identifier: 73:17:D7:77:BD:AA:63:33:CD:96:A8:10:4B:94:DE:0F:A4:75:21:13 Certificate issuer: /CN=A91BA941/serialNumber=7317D777BDAA6333CD96A8104B94DE0FA4752113 Certificate serial: 0135 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxfXd72qYzPNlqgQS5TeD6R1IRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft Manifest number: 012C Signing time: Sat 13 Jun 2026 05:37:23 +0000 Manifest this update: Sat 13 Jun 2026 05:37:23 +0000 Manifest next update: Sat 20 Jun 2026 05:37:23 +0000 Files and hashes: 1: cxfXd72qYzPNlqgQS5TeD6R1IRM.crl (hash: vI7kWAjvx7yJ8D5Zp0XN4w9rnmB/naRMatDOreXMcWQ=) 2: 48A5FCA4A0A211EF81FA6876C4F9AE02.roa (hash: LUj3nw3I/55jfghfKNbIADhEH+zObxvm94ONzxqJb9g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.crl rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxfXd72qYzPNlqgQS5TeD6R1IRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 05:37:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 309 (0x135) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA941, serialNumber=7317D777BDAA6333CD96A8104B94DE0FA4752113 Validity Not Before: Jun 13 05:37:23 2026 GMT Not After : Jun 20 05:37:23 2026 GMT Subject: CN=6a2cec93-88e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ea:23:e7:19:dc:6d:f0:df:ca:78:6f:ad:9d: 32:c4:90:be:ea:41:c5:dc:e4:46:be:38:98:1e:15: 33:fe:ab:15:ff:10:df:f5:28:af:8d:24:bf:de:82: d3:1a:33:ed:97:66:59:be:12:9a:e2:03:97:12:3d: 82:f0:b5:7c:bc:f5:03:aa:01:b6:dd:04:7a:17:6b: 84:2d:5e:2d:5f:e6:70:6c:b7:0c:a0:63:f7:5e:3a: c3:43:76:f1:7e:d1:8e:9e:1a:5a:08:78:f7:5e:69: f9:e8:af:25:1c:6d:84:e1:f8:74:bd:b2:ad:83:e2: 9c:8d:70:e0:50:95:9b:0c:6b:fc:bf:63:41:8e:ae: bc:2d:73:e5:06:c1:c1:56:30:e1:fb:ed:0e:7a:0b: 7b:de:73:8e:f7:39:f7:6e:b3:4d:5d:98:32:7e:27: 7f:6c:92:d0:3a:ea:de:47:a1:84:ff:16:e2:4e:eb: 06:97:b1:cb:be:2d:f5:2a:36:c5:1d:78:29:4e:f2: da:04:aa:60:16:27:8d:d0:e8:71:a9:72:06:dd:b1: a2:3e:5e:ac:a8:33:85:8c:40:37:43:34:64:4d:17: 0c:65:d7:fb:fd:eb:b8:ff:62:c3:6d:d7:e9:bb:9d: ca:4c:e0:49:aa:ac:42:8a:c3:7b:ff:14:72:4b:6a: e6:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:7D:32:B9:2C:CC:DE:4D:47:5D:65:E3:8F:6A:89:3E:FF:72:4B:F7 X509v3 Authority Key Identifier: keyid:73:17:D7:77:BD:AA:63:33:CD:96:A8:10:4B:94:DE:0F:A4:75:21:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxfXd72qYzPNlqgQS5TeD6R1IRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:06:24:0f:b5:2a:b8:ab:8d:ab:ad:15:1f:64:41:24:08:e2: 97:68:74:31:37:ed:cf:77:a7:5b:57:6b:f5:31:bd:6e:c5:94: 79:68:41:30:41:58:05:dd:9b:2d:ef:ec:52:93:a7:45:83:9d: ad:b4:fa:11:bf:39:c5:15:d9:e7:51:de:2f:97:c2:a7:a6:bc: a8:a1:18:f6:c3:73:9b:01:ca:b3:e0:d3:c4:a7:20:df:d9:fa: d8:04:97:f4:3d:b4:c4:00:c0:3b:88:c2:ef:e7:bd:95:03:2e: fd:19:55:f6:59:2e:9d:0e:8b:6e:2f:15:10:34:07:2a:a3:11: d1:a0:bd:71:77:3f:37:f2:78:c1:72:33:83:c3:13:19:86:11: 8f:b0:10:89:e2:0f:17:fb:ba:ad:fa:fb:4d:4b:a1:1b:ad:d1: a3:67:a6:d7:49:43:7f:33:f4:6b:0f:b0:de:d2:ea:a1:54:e7: e8:32:61:c8:fa:71:90:cd:3d:f7:f5:92:6b:5b:09:b3:e8:d4: 6b:e2:87:71:f2:65:ae:ef:0c:08:1f:24:d5:3d:57:45:74:41: 41:af:7d:97:69:57:86:3e:df:fe:e6:08:6b:c3:93:b9:e1:bc: 65:3f:ac:a1:ed:e2:34:5c:73:5d:be:08:5f:05:9d:63:9f:2f: da:3a:89:72 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE5NDExMTAvBgNVBAUTKDczMTdENzc3QkRBQTYzMzNDRDk2QTgxMDRCOTRERTBG QTQ3NTIxMTMwHhcNMjYwNjEzMDUzNzIzWhcNMjYwNjIwMDUzNzIzWjAYMRYwFAYD VQQDEw02YTJjZWM5My04OGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAreoj5xncbfDfynhvrZ0yxJC+6kHF3ORGvjiYHhUz/qsV/xDf9SivjSS/3oLT GjPtl2ZZvhKa4gOXEj2C8LV8vPUDqgG23QR6F2uELV4tX+ZwbLcMoGP3XjrDQ3bx ftGOnhpaCHj3Xmn56K8lHG2E4fh0vbKtg+KcjXDgUJWbDGv8v2NBjq68LXPlBsHB VjDh++0Oegt73nOO9zn3brNNXZgyfid/bJLQOureR6GE/xbiTusGl7HLvi31KjbF HXgpTvLaBKpgFieN0OhxqXIG3bGiPl6sqDOFjEA3QzRkTRcMZdf7/eu4/2LDbdfp u53KTOBJqqxCisN7/xRyS2rmtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLB9Mrks zN5NR11l449qiT7/ckv3MB8GA1UdIwQYMBaAFHMX13e9qmMzzZaoEEuU3g+kdSET MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTk0MS85QjNEMjU0OEEw QTAxMUVGOTA1MjMyNUZDNEY5QUUwMi9jeGZYZDcycVl6UE5scWdRUzVUZUQ2UjFJ Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N4ZlhkNzJxWXpQTmxxZ1FTNVRlRDZSMUlSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTk0MS85QjNEMjU0OEEwQTAxMUVGOTA1MjMyNUZDNEY5QUUwMi9jeGZYZDcycVl6 UE5scWdRUzVUZUQ2UjFJUk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANgYkD7UquKuNq60VH2RBJAjil2h0MTftz3enW1dr9TG9bsWUeWhBMEFYBd2b Le/sUpOnRYOdrbT6Eb85xRXZ51HeL5fCp6a8qKEY9sNzmwHKs+DTxKcg39n62ASX 9D20xADAO4jC7+e9lQMu/RlV9lkunQ6Lbi8VEDQHKqMR0aC9cXc/N/J4wXIzg8MT GYYRj7AQieIPF/u6rfr7TUuhG63Ro2em10lDfzP0aw+w3tLqoVTn6DJhyPpxkM09 9/WSa1sJs+jUa+KHcfJlru8MCB8k1T1XRXRBQa99l2lXhj7f/uYIa8OTueG8ZT+s oe3iNFxzXb4IXwWdY58v2jqJcg== -----END CERTIFICATE-----Generated at Sat Jun 13 19:24:14 2026 by rpki-client