$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft File: D6tO-YKPSvJnwW2K1HEKjuybu64.mft (raw, json) Hash identifier: ph+E8VXdpBqdl5p2e0kvuSCRC+g1kUChVVafwk3AwgY= Subject key identifier: EE:D0:58:C3:0F:50:50:9F:20:6F:7E:B9:B1:2C:1E:E7:FD:2F:A4:AD Authority key identifier: 0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE Certificate issuer: /CN=A91BEBE9/serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE Certificate serial: 024C Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft Manifest number: 023B Signing time: Sat 13 Jun 2026 02:30:37 +0000 Manifest this update: Sat 13 Jun 2026 02:30:37 +0000 Manifest next update: Sat 20 Jun 2026 02:30:37 +0000 Files and hashes: 1: D6tO-YKPSvJnwW2K1HEKjuybu64.crl (hash: Rb5Noyz+gOgPPPa7zF+srQXEzrGaAlrNNYnXsaM7TLs=) 2: A1C0742EFDF811EEA4D57274C4F9AE02.roa (hash: weDayyeYutvx0b8e1SLUbhE0mFruNtfvUzk0Kx4AkzY=) 3: A0DEDD52FDF811EEA4D57274C4F9AE02.roa (hash: hT0A2KRW/3QOLTyxBn8Un7aA6iluT3rc/l0TDSw8688=) 4: A16366C6FDF811EEA4D57274C4F9AE02.roa (hash: d03oC9NyvqRx8U/l5SE7fqdhkjTewkYgCSF6lgvXCMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 02:30:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 588 (0x24c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEBE9, serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE Validity Not Before: Jun 13 02:30:37 2026 GMT Not After : Jun 20 02:30:37 2026 GMT Subject: CN=6a2cc0cd-0033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:18:90:d8:54:79:db:9d:ef:65:5d:73:3d:04: 6e:56:78:64:fa:04:ee:04:eb:ef:0f:78:b2:2d:76: 33:d3:f4:74:9b:f8:b8:13:a1:73:c0:3f:9c:92:61: 2e:5c:9e:22:5b:01:59:fb:6f:ed:8a:28:af:69:61: ee:04:92:0e:98:f8:71:16:e0:33:c6:b2:5e:84:8d: 34:89:49:97:a2:c2:b3:21:85:f0:b3:bd:d9:cf:c0: c5:09:aa:f4:68:cc:28:e6:15:50:64:52:cc:25:bc: 3d:3a:bf:ae:45:73:59:53:41:84:5d:ed:99:8c:74: 42:06:b3:d6:7a:73:51:5c:20:aa:cd:d0:d6:05:d2: 02:90:81:4a:46:34:f0:f9:25:e7:03:cd:ec:48:45: 4a:a1:1f:6d:1e:ee:90:ea:92:d0:da:c1:17:93:8b: 83:da:52:f9:0c:7b:14:67:98:1e:48:32:f6:a2:f3: c2:24:55:94:c4:41:34:6d:72:bc:6c:08:a9:fa:70: 04:c3:8e:b3:cb:13:3c:9a:c4:28:97:97:20:36:21: 5c:73:0a:22:d3:47:34:54:35:fb:48:51:44:41:ac: 40:93:08:20:e6:22:f1:3d:4c:df:4e:1b:b5:ea:cf: 45:60:c5:f4:5a:8e:4a:d0:76:ba:1c:2b:1d:2f:16: 98:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:D0:58:C3:0F:50:50:9F:20:6F:7E:B9:B1:2C:1E:E7:FD:2F:A4:AD X509v3 Authority Key Identifier: keyid:0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:6f:6e:70:0c:42:e3:5b:52:62:a5:5b:58:f9:6f:98:08:e2: 77:ed:2e:50:7b:01:2e:f5:59:95:9b:a9:57:10:e1:f7:6f:8a: 86:23:ab:f8:87:d4:6d:07:20:dc:51:39:17:bb:b0:92:d7:e7: 7e:e8:c8:86:f8:7b:e8:18:28:9a:20:b8:5a:87:c6:e5:ca:69: ef:b7:05:33:d5:01:a7:ba:e0:7d:90:04:0e:13:aa:34:2a:ec: a3:9f:6d:29:5b:de:21:3a:b7:db:e0:2c:de:4d:27:d8:51:85: 1f:1d:cc:eb:0b:b2:bf:3b:53:1b:bb:90:2a:5e:5e:29:40:5f: 77:09:a0:05:17:a8:86:d4:42:6a:ec:63:41:00:ce:47:23:0c: 3c:7d:1d:f7:ad:88:fc:bd:ad:35:cb:ce:c7:ed:f1:ab:f1:d0: c2:d9:03:08:53:57:4c:1b:f1:e4:5d:75:d5:c4:59:7b:70:d0: ce:71:c5:40:09:83:97:f0:f0:37:34:9b:15:40:6e:28:fc:69: f4:c6:30:5d:72:6b:ee:9c:1e:9b:69:8a:32:d8:8c:d2:2c:c5: 51:14:11:99:d2:4f:31:00:5f:2b:f5:69:f2:11:02:2b:92:a9: 33:9f:92:11:e8:7a:75:60:15:2f:c8:b2:15:0a:a2:9c:0d:b7: d5:a5:f9:78 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVCRTkxMTAvBgNVBAUTKDBGQUI0RUY5ODI4RjRBRjI2N0MxNkQ4QUQ0NzEwQThF RUM5QkJCQUUwHhcNMjYwNjEzMDIzMDM3WhcNMjYwNjIwMDIzMDM3WjAYMRYwFAYD VQQDEw02YTJjYzBjZC0wMDMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsBiQ2FR5253vZV1zPQRuVnhk+gTuBOvvD3iyLXYz0/R0m/i4E6FzwD+ckmEu XJ4iWwFZ+2/tiiivaWHuBJIOmPhxFuAzxrJehI00iUmXosKzIYXws73Zz8DFCar0 aMwo5hVQZFLMJbw9Or+uRXNZU0GEXe2ZjHRCBrPWenNRXCCqzdDWBdICkIFKRjTw +SXnA83sSEVKoR9tHu6Q6pLQ2sEXk4uD2lL5DHsUZ5geSDL2ovPCJFWUxEE0bXK8 bAip+nAEw46zyxM8msQol5cgNiFccwoi00c0VDX7SFFEQaxAkwgg5iLxPUzfThu1 6s9FYMX0Wo5K0Ha6HCsdLxaYIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO7QWMMP UFCfIG9+ubEsHuf9L6StMB8GA1UdIwQYMBaAFA+rTvmCj0ryZ8FtitRxCo7sm7uu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUJFOS85NEM5Qjg3ODAw NUQxMUVFQkU3QTkyNDFDNEY5QUUwMi9ENnRPLVlLUFN2Sm53VzJLMUhFS2p1eWJ1 NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0Q2dE8tWUtQU3ZKbndXMksxSEVLanV5YnU2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUJFOS85NEM5Qjg3ODAwNUQxMUVFQkU3QTkyNDFDNEY5QUUwMi9ENnRPLVlLUFN2 Sm53VzJLMUhFS2p1eWJ1NjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtG9ucAxC41tSYqVbWPlvmAjid+0uUHsBLvVZlZupVxDh92+KhiOr+IfUbQcg 3FE5F7uwktfnfujIhvh76BgomiC4WofG5cpp77cFM9UBp7rgfZAEDhOqNCrso59t KVveITq32+As3k0n2FGFHx3M6wuyvztTG7uQKl5eKUBfdwmgBReohtRCauxjQQDO RyMMPH0d962I/L2tNcvOx+3xq/HQwtkDCFNXTBvx5F111cRZe3DQznHFQAmDl/Dw NzSbFUBuKPxp9MYwXXJr7pwem2mKMtiM0izFURQRmdJPMQBfK/Vp8hECK5KpM5+S Eeh6dWAVL8iyFQqinA231aX5eA== -----END CERTIFICATE-----Generated at Sat Jun 13 20:52:19 2026 by rpki-client