$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft File: 88hJQLK99AJViHBvWcHm7D0hR_A.mft (raw, json) Hash identifier: J5mbChm98buRfGIGNTnaNN0hbZElwMx/WeJrPLsZmpo= Subject key identifier: 3D:81:E7:C4:7B:CA:AF:7D:76:13:E7:C9:D8:EF:65:4C:0A:0E:2A:9F Authority key identifier: F3:C8:49:40:B2:BD:F4:02:55:88:70:6F:59:C1:E6:EC:3D:21:47:F0 Certificate issuer: /CN=A91BCC23/serialNumber=F3C84940B2BDF4025588706F59C1E6EC3D2147F0 Certificate serial: 01EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft Manifest number: 01E5 Signing time: Sat 13 Jun 2026 03:25:45 +0000 Manifest this update: Sat 13 Jun 2026 03:25:45 +0000 Manifest next update: Sat 20 Jun 2026 03:25:45 +0000 Files and hashes: 1: 88hJQLK99AJViHBvWcHm7D0hR_A.crl (hash: KEvFlGz/eCJrsMAOnoywlXnl48yXy/JAs/Oy6xagEH8=) 2: D36C048A81E211EEAF423C87C4F9AE02.roa (hash: jhhoPKCQJggjIDVtaSW5EvrcG1nzgk+baXw2VG2NBWg=) 3: FC3C8A6A81E211EE963BAB87C4F9AE02.roa (hash: O6fMeAHfmA8sNvhbsQlGasdy3CAaIHGwFKK0ajItLH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.crl rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 03:25:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 495 (0x1ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCC23, serialNumber=F3C84940B2BDF4025588706F59C1E6EC3D2147F0 Validity Not Before: Jun 13 03:25:45 2026 GMT Not After : Jun 20 03:25:45 2026 GMT Subject: CN=6a2ccdb9-0ac2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:19:1f:e1:70:8b:84:33:83:7a:3f:43:b2:62: e6:0f:20:05:aa:de:b2:c2:b1:35:0e:09:81:33:3b: 41:c4:f2:11:6a:b0:f0:01:27:58:c1:db:c0:77:5e: 29:16:65:1c:50:16:16:2b:e9:37:35:15:7b:4d:cc: a4:cd:73:e4:6b:d1:39:67:ff:a2:90:be:ef:ef:c9: 5a:1c:a4:a5:7d:c9:7d:74:ee:02:b9:4f:aa:d8:91: f4:b5:f7:fc:de:41:d5:d2:66:4b:4d:d9:0c:ad:af: 38:90:b0:b5:18:2a:3c:db:3f:ef:58:78:e4:7e:4b: 67:5b:0e:8c:73:ed:b2:b0:9e:99:df:f2:81:fc:c6: c4:03:ba:a9:45:ae:90:9b:ae:61:02:cc:6e:1b:29: 4c:b9:5d:cf:33:b5:21:ee:cd:98:fd:7a:65:c7:ee: 15:77:ab:5e:22:00:5b:c5:d7:bf:47:1a:fb:4b:66: 1b:fa:6e:dc:af:c6:44:d0:26:2f:13:08:fc:ee:9b: 4a:f3:b0:67:3f:55:fb:fd:bc:e0:2f:24:57:3f:3f: d0:6b:e8:b4:ed:02:ec:25:e3:6d:8b:67:b6:ff:3c: 29:6c:0d:06:7f:17:90:6b:4c:bb:09:c8:69:44:db: 2f:12:b1:52:e1:4b:f6:03:54:13:bd:89:5e:a7:80: 7b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:81:E7:C4:7B:CA:AF:7D:76:13:E7:C9:D8:EF:65:4C:0A:0E:2A:9F X509v3 Authority Key Identifier: keyid:F3:C8:49:40:B2:BD:F4:02:55:88:70:6F:59:C1:E6:EC:3D:21:47:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:35:f0:6a:2f:93:f2:96:58:eb:a1:65:aa:dd:cf:05:b3:84: d3:0d:17:f7:50:8b:5a:c0:83:57:f9:89:08:8a:e7:4b:05:86: 6f:57:ca:1b:0b:6e:93:af:02:b6:16:ad:c1:3f:79:83:28:36: 71:1a:99:16:97:9c:4a:25:58:e3:dd:fe:79:98:db:4a:f5:d0: 41:29:f4:25:b9:62:fa:80:6e:19:6c:34:79:9e:80:dc:d0:15: 74:56:af:e6:9f:eb:06:3c:65:93:d6:0e:ee:8c:1d:fd:05:f9: 2d:95:46:8a:55:6c:5f:23:4c:16:95:c0:2f:9a:21:3d:ea:42: 01:f7:31:ec:90:64:37:58:dd:68:e1:43:b4:2c:08:ba:58:7f: f0:54:c6:72:72:68:b9:31:57:b5:15:f3:97:0d:63:93:f0:3c: 68:c3:c9:dd:63:cb:14:d6:0b:46:db:e0:58:7e:66:89:e8:c9: 10:3b:d4:e2:45:56:35:7f:6f:5a:9e:85:c4:e4:2b:e9:70:5c: 6f:48:2e:1c:d9:89:5f:11:93:0d:00:b9:10:64:bf:65:a3:be: 78:8f:a6:04:83:3d:4e:12:7f:c4:cd:f0:6c:2f:96:e2:1f:b2: 02:37:a5:a5:45:fe:33:d2:17:24:72:94:ac:37:e2:10:a5:2e: 47:56:d5:ac -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkNDMjMxMTAvBgNVBAUTKEYzQzg0OTQwQjJCREY0MDI1NTg4NzA2RjU5QzFFNkVD M0QyMTQ3RjAwHhcNMjYwNjEzMDMyNTQ1WhcNMjYwNjIwMDMyNTQ1WjAYMRYwFAYD VQQDEw02YTJjY2RiOS0wYWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Rkf4XCLhDODej9DsmLmDyAFqt6ywrE1DgmBMztBxPIRarDwASdYwdvAd14p FmUcUBYWK+k3NRV7TcykzXPka9E5Z/+ikL7v78laHKSlfcl9dO4CuU+q2JH0tff8 3kHV0mZLTdkMra84kLC1GCo82z/vWHjkfktnWw6Mc+2ysJ6Z3/KB/MbEA7qpRa6Q m65hAsxuGylMuV3PM7Uh7s2Y/Xplx+4Vd6teIgBbxde/Rxr7S2Yb+m7cr8ZE0CYv Ewj87ptK87BnP1X7/bzgLyRXPz/Qa+i07QLsJeNti2e2/zwpbA0GfxeQa0y7Cchp RNsvErFS4Uv2A1QTvYlep4B7MQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD2B58R7 yq99dhPnydjvZUwKDiqfMB8GA1UdIwQYMBaAFPPISUCyvfQCVYhwb1nB5uw9IUfw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQ0MyMy85MjVDODBDRTgx RTExMUVFOENGNjZCMEFDNEY5QUUwMi84OGhKUUxLOTlBSlZpSEJ2V2NIbTdEMGhS X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg4aEpRTEs5OUFKVmlIQnZXY0htN0QwaFJfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Q0MyMy85MjVDODBDRTgxRTExMUVFOENGNjZCMEFDNEY5QUUwMi84OGhKUUxLOTlB SlZpSEJ2V2NIbTdEMGhSX0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjTXwai+T8pZY66Flqt3PBbOE0w0X91CLWsCDV/mJCIrnSwWGb1fKGwtuk68C thatwT95gyg2cRqZFpecSiVY493+eZjbSvXQQSn0Jbli+oBuGWw0eZ6A3NAVdFav 5p/rBjxlk9YO7owd/QX5LZVGilVsXyNMFpXAL5ohPepCAfcx7JBkN1jdaOFDtCwI ulh/8FTGcnJouTFXtRXzlw1jk/A8aMPJ3WPLFNYLRtvgWH5miejJEDvU4kVWNX9v Wp6FxOQr6XBcb0guHNmJXxGTDQC5EGS/ZaO+eI+mBIM9ThJ/xM3wbC+W4h+yAjel pUX+M9IXJHKUrDfiEKUuR1bVrA== -----END CERTIFICATE-----Generated at Sat Jun 13 14:28:04 2026 by rpki-client