$ rpki-client -vvf rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft File: 33nDugFSYeOshDI5zkcDWQHWapQ.mft (raw, json) Hash identifier: HVrAt4kL8ndLWz/yNp/xssJKgypZhlzwClmMzNRsmvM= Subject key identifier: F6:D5:E3:09:52:96:1E:CE:97:FE:1E:EF:BC:53:CF:82:12:85:7C:AF Authority key identifier: DF:79:C3:BA:01:52:61:E3:AC:84:32:39:CE:47:03:59:01:D6:6A:94 Certificate issuer: /CN=A91C572B/serialNumber=DF79C3BA015261E3AC843239CE47035901D66A94 Certificate serial: 0242 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft Manifest number: 0234 Signing time: Sat 13 Jun 2026 02:38:52 +0000 Manifest this update: Sat 13 Jun 2026 02:38:52 +0000 Manifest next update: Sat 20 Jun 2026 02:38:52 +0000 Files and hashes: 1: 33nDugFSYeOshDI5zkcDWQHWapQ.crl (hash: o0nDLrBiI0OSmwnRSpR9kLeT4oLZtHdrvWSKGlVq72o=) 2: 17C68D301C0311EE9B0F2938C4F9AE02.roa (hash: PPUG38GrYc1pSvAs42aCMPByXIt0IlvrGE9mP2N9xD4=) 3: 18DC0A381C0311EE9B0F2938C4F9AE02.roa (hash: ZuQdvo3O3mwgbl46FNxheRRrkq5c13FZ1QLKqfjZUX8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.crl rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 02:38:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 578 (0x242) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C572B, serialNumber=DF79C3BA015261E3AC843239CE47035901D66A94 Validity Not Before: Jun 13 02:38:52 2026 GMT Not After : Jun 20 02:38:52 2026 GMT Subject: CN=6a2cc2bc-58bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ec:15:6e:da:10:0a:47:0f:13:f8:40:61:6e: da:69:b3:4b:ce:ec:57:3c:d1:eb:da:b7:4c:ae:93: 16:4f:53:d8:0d:47:e8:8b:e0:ec:f4:ab:cf:82:06: 62:e2:3a:8a:64:6c:6c:e9:f1:60:3d:00:d1:76:d0: c8:44:b3:83:4e:9b:6e:5a:6e:0d:96:c7:26:f0:41: a3:57:16:86:1d:ff:a5:a7:60:60:76:8f:d1:1f:8b: 29:27:e9:fc:96:b4:ee:36:db:e7:36:13:c2:5d:3d: c2:f5:8b:cd:c3:6c:8c:68:25:97:9e:e3:e9:2b:d3: 49:b0:a7:78:08:86:2d:73:f5:d2:7d:c6:9d:f9:4e: 7b:71:db:5c:d0:c3:ae:92:f4:73:02:53:7a:8d:1a: 18:8e:bd:8c:b0:4f:2a:17:95:14:4b:87:8e:03:82: 9b:2a:55:e8:10:9f:46:bc:66:b0:fc:a8:ea:89:a0: 93:c4:fb:3a:25:d8:83:78:4e:42:09:64:3a:a4:c4: db:e3:5f:42:7f:33:ab:1f:61:a9:65:e0:e8:05:78: bf:f9:50:d3:15:38:02:b5:44:a8:98:d4:4b:60:42: 70:90:fe:88:d8:71:ac:14:16:e8:af:e5:6a:fb:c7: 75:78:b7:95:e7:a3:73:63:5e:af:92:c1:37:68:37: c7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:D5:E3:09:52:96:1E:CE:97:FE:1E:EF:BC:53:CF:82:12:85:7C:AF X509v3 Authority Key Identifier: keyid:DF:79:C3:BA:01:52:61:E3:AC:84:32:39:CE:47:03:59:01:D6:6A:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:d0:50:35:8d:3e:98:08:e2:7c:3e:c1:6e:47:7c:22:e3:66: b8:34:ee:fe:37:79:e4:47:ff:7f:14:20:ea:21:2e:04:cc:55: 73:84:ac:f4:6f:d4:1b:ae:8e:3e:a5:33:22:bd:fe:a1:ba:ae: 21:72:29:03:19:0b:3d:7b:39:7e:bb:a1:2d:36:2b:9e:3d:b1: 45:97:73:c8:8b:6f:c1:95:21:79:57:d5:04:08:60:17:63:12: 19:43:4f:eb:b3:ae:43:28:49:c6:98:a9:f9:0c:11:a5:24:ca: ed:03:a0:7a:a9:ae:58:a3:9a:84:ed:ed:4a:b7:d4:bb:17:2b: 5a:4b:05:e8:8f:69:36:a7:39:fd:a0:75:b4:e3:3d:e7:3a:d4: 45:5b:bb:66:b4:2b:61:e0:93:fd:6b:33:93:59:b0:7d:86:fa: d8:62:45:fd:a4:d8:f1:d5:e0:c2:13:a4:03:3a:99:3a:62:68: d1:1f:01:36:b3:79:83:6b:a9:ed:b4:72:b6:be:85:45:91:45: 94:87:8b:59:a6:af:87:bd:a1:f4:4f:24:f5:01:9a:bf:e9:24: 76:68:97:d2:c9:43:db:c2:bc:54:cf:2e:e5:65:fd:fb:0d:45: 87:4a:b1:99:49:57:17:3e:55:e7:b4:42:ac:85:bc:b4:df:f4: 16:81:bc:fa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU3MkIxMTAvBgNVBAUTKERGNzlDM0JBMDE1MjYxRTNBQzg0MzIzOUNFNDcwMzU5 MDFENjZBOTQwHhcNMjYwNjEzMDIzODUyWhcNMjYwNjIwMDIzODUyWjAYMRYwFAYD VQQDEw02YTJjYzJiYy01OGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuewVbtoQCkcPE/hAYW7aabNLzuxXPNHr2rdMrpMWT1PYDUfoi+Ds9KvPggZi 4jqKZGxs6fFgPQDRdtDIRLODTptuWm4Nlscm8EGjVxaGHf+lp2Bgdo/RH4spJ+n8 lrTuNtvnNhPCXT3C9YvNw2yMaCWXnuPpK9NJsKd4CIYtc/XSfcad+U57cdtc0MOu kvRzAlN6jRoYjr2MsE8qF5UUS4eOA4KbKlXoEJ9GvGaw/KjqiaCTxPs6JdiDeE5C CWQ6pMTb419CfzOrH2GpZeDoBXi/+VDTFTgCtUSomNRLYEJwkP6I2HGsFBbor+Vq +8d1eLeV56NzY16vksE3aDfHmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPbV4wlS lh7Ol/4e77xTz4IShXyvMB8GA1UdIwQYMBaAFN95w7oBUmHjrIQyOc5HA1kB1mqU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTcyQi9GN0U1QzE2ODBF OUExMUVFQTY0NDlFNzFDNEY5QUUwMi8zM25EdWdGU1llT3NoREk1emtjRFdRSFdh cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMzbkR1Z0ZTWWVPc2hESTV6a2NEV1FIV2FwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTcyQi9GN0U1QzE2ODBFOUExMUVFQTY0NDlFNzFDNEY5QUUwMi8zM25EdWdGU1ll T3NoREk1emtjRFdRSFdhcFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAk9BQNY0+mAjifD7Bbkd8IuNmuDTu/jd55Ef/fxQg6iEuBMxVc4Ss9G/UG66O PqUzIr3+obquIXIpAxkLPXs5fruhLTYrnj2xRZdzyItvwZUheVfVBAhgF2MSGUNP 67OuQyhJxpip+QwRpSTK7QOgeqmuWKOahO3tSrfUuxcrWksF6I9pNqc5/aB1tOM9 5zrURVu7ZrQrYeCT/Wszk1mwfYb62GJF/aTY8dXgwhOkAzqZOmJo0R8BNrN5g2up 7bRytr6FRZFFlIeLWaavh72h9E8k9QGav+kkdmiX0slD28K8VM8u5WX9+w1Fh0qx mUlXFz5V57RCrIW8tN/0FoG8+g== -----END CERTIFICATE-----Generated at Sat Jun 13 08:41:39 2026 by rpki-client