$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.mft File: CB6icKn0s2sOyJai0hSO5Ok-Xys.mft (raw, json) Hash identifier: kHDpzM/MmNTji+jkPlMUG5JFBYZACtBAOH+SBkEyFpc= Subject key identifier: 6C:09:9B:88:E8:7E:4E:C9:15:56:DD:EE:CF:E1:D5:85:D8:19:61:E7 Authority key identifier: 08:1E:A2:70:A9:F4:B3:6B:0E:C8:96:A2:D2:14:8E:E4:E9:3E:5F:2B Certificate issuer: /CN=A91BB921/serialNumber=081EA270A9F4B36B0EC896A2D2148EE4E93E5F2B Certificate serial: 01F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CB6icKn0s2sOyJai0hSO5Ok-Xys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.mft Manifest number: 01EE Signing time: Sat 13 Jun 2026 03:22:10 +0000 Manifest this update: Sat 13 Jun 2026 03:22:10 +0000 Manifest next update: Sat 20 Jun 2026 03:22:10 +0000 Files and hashes: 1: CB6icKn0s2sOyJai0hSO5Ok-Xys.crl (hash: 7ME8zYXD27eS3tS4l7LFL4UgyLVfZtti3wrn+HNls8M=) 2: 5A387584756311EEA256FD57C4F9AE02.roa (hash: vSlu+TQyxpav2ADnDaaL7eQcjqlvG5DFjhy5XTFprbE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.crl rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CB6icKn0s2sOyJai0hSO5Ok-Xys.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 03:22:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 501 (0x1f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB921, serialNumber=081EA270A9F4B36B0EC896A2D2148EE4E93E5F2B Validity Not Before: Jun 13 03:22:10 2026 GMT Not After : Jun 20 03:22:10 2026 GMT Subject: CN=6a2ccce2-cff6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6a:5b:af:77:e9:d4:1a:58:34:13:a6:81:44: 5d:a2:5f:3a:f3:bb:75:74:87:12:a3:bf:2e:81:7b: db:aa:9c:e5:44:7f:be:45:5d:98:14:59:8a:a0:08: 13:3c:15:fa:7f:f3:03:87:41:13:9d:4f:68:d3:38: 38:c9:21:80:2e:50:44:ea:57:17:cf:82:00:81:d1: e3:f7:9f:e8:f1:d9:07:0a:b2:44:df:9d:bc:7a:44: 15:7b:30:95:8a:ee:2b:f7:6c:95:a8:22:3c:8e:2f: df:e5:9b:e2:15:35:7a:a3:38:7a:77:4f:58:8d:90: 8b:0a:e7:e1:82:00:f0:7f:21:de:16:2a:5f:16:0b: e7:ad:4f:fd:de:6b:b7:d0:90:48:e3:af:32:0a:23: 0e:eb:df:bb:f1:ab:65:7f:a8:42:c9:aa:6a:c7:6d: 2f:f1:5c:82:90:24:7f:c2:be:67:5c:28:2f:ae:b0: df:59:10:21:43:16:36:42:3d:29:21:a3:89:e0:17: ee:8e:c3:1f:65:e9:92:d6:5f:79:d5:bd:7b:39:16: e8:e2:25:57:de:c4:67:8b:1f:ca:b3:49:4e:0f:52: bd:93:d3:1f:80:a0:d8:cd:bf:14:c5:46:5f:74:08: f0:ee:2d:04:81:fc:93:c5:90:24:2b:c6:8b:fa:1e: ae:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:09:9B:88:E8:7E:4E:C9:15:56:DD:EE:CF:E1:D5:85:D8:19:61:E7 X509v3 Authority Key Identifier: keyid:08:1E:A2:70:A9:F4:B3:6B:0E:C8:96:A2:D2:14:8E:E4:E9:3E:5F:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CB6icKn0s2sOyJai0hSO5Ok-Xys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:0a:0d:49:cc:ea:a7:3c:d0:90:93:22:da:fc:50:e8:18:12: 25:89:bd:ff:41:4c:06:16:91:e5:f1:3e:41:9e:ec:8f:78:30: ab:32:6c:9d:01:df:58:41:2c:09:7c:0c:99:5b:0c:b5:cc:77: 90:f2:ee:56:62:59:10:37:24:aa:3d:fe:c6:eb:2e:ca:a1:20: fd:22:27:73:63:c8:77:f1:8f:9f:ef:11:4f:4b:a8:86:50:fa: 0f:30:aa:a4:13:17:d6:8d:d5:2d:d2:d0:0c:a4:80:65:bd:96: 4d:ea:bf:1f:c7:48:dc:77:1b:57:b6:06:91:1a:2d:d6:4b:cc: f3:ff:c5:54:0f:6d:6b:18:d9:0a:d1:e5:35:57:fd:42:92:cc: 9b:e8:9a:00:1d:19:5c:65:c8:1d:b0:0b:4e:70:bf:4a:83:13: 59:aa:f6:c4:e0:83:72:e7:51:42:5a:fb:88:e5:44:88:29:e8: 09:49:ec:d0:04:ef:81:45:79:6a:dd:01:7a:5d:20:02:c7:d1: ff:b1:0b:f0:e6:34:2a:f3:d3:af:98:1e:83:bf:a6:a0:1a:86: 01:42:04:5b:84:53:70:9b:dd:e0:4b:f6:0b:20:ce:54:62:d1: 36:4c:fc:27:03:a2:15:61:3b:45:70:b1:50:c1:13:1b:89:ea: 93:8c:28:14 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI5MjExMTAvBgNVBAUTKDA4MUVBMjcwQTlGNEIzNkIwRUM4OTZBMkQyMTQ4RUU0 RTkzRTVGMkIwHhcNMjYwNjEzMDMyMjEwWhcNMjYwNjIwMDMyMjEwWjAYMRYwFAYD VQQDEw02YTJjY2NlMi1jZmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Wpbr3fp1BpYNBOmgURdol8687t1dIcSo78ugXvbqpzlRH++RV2YFFmKoAgT PBX6f/MDh0ETnU9o0zg4ySGALlBE6lcXz4IAgdHj95/o8dkHCrJE3528ekQVezCV iu4r92yVqCI8ji/f5ZviFTV6ozh6d09YjZCLCufhggDwfyHeFipfFgvnrU/93mu3 0JBI468yCiMO69+78atlf6hCyapqx20v8VyCkCR/wr5nXCgvrrDfWRAhQxY2Qj0p IaOJ4BfujsMfZemS1l951b17ORbo4iVX3sRnix/Ks0lOD1K9k9MfgKDYzb8UxUZf dAjw7i0EgfyTxZAkK8aL+h6uVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGwJm4jo fk7JFVbd7s/h1YXYGWHnMB8GA1UdIwQYMBaAFAgeonCp9LNrDsiWotIUjuTpPl8r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjkyMS9EREI4RTE0Qzc1 NjIxMUVFQkI4MjUyNTdDNEY5QUUwMi9DQjZpY0tuMHMyc095SmFpMGhTTzVPay1Y eXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NCNmljS24wczJzT3lKYWkwaFNPNU9rLVh5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjkyMS9EREI4RTE0Qzc1NjIxMUVFQkI4MjUyNTdDNEY5QUUwMi9DQjZpY0tuMHMy c095SmFpMGhTTzVPay1YeXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfAoNSczqpzzQkJMi2vxQ6BgSJYm9/0FMBhaR5fE+QZ7sj3gwqzJsnQHfWEEs CXwMmVsMtcx3kPLuVmJZEDckqj3+xusuyqEg/SInc2PId/GPn+8RT0uohlD6DzCq pBMX1o3VLdLQDKSAZb2WTeq/H8dI3HcbV7YGkRot1kvM8//FVA9taxjZCtHlNVf9 QpLMm+iaAB0ZXGXIHbALTnC/SoMTWar2xOCDcudRQlr7iOVEiCnoCUns0ATvgUV5 at0Bel0gAsfR/7EL8OY0KvPTr5geg7+moBqGAUIEW4RTcJvd4Ev2CyDOVGLRNkz8 JwOiFWE7RXCxUMETG4nqk4woFA== -----END CERTIFICATE-----Generated at Sat Jun 13 17:52:36 2026 by rpki-client