$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.mft File: 2QDd8konYiv5ZDdX7byv-u4yHDc.mft (raw, json) Hash identifier: RwxSilbLsKYu4dwbqQju+ZnXjZMc68H2Ah7mD5fVrJI= Subject key identifier: 8B:DC:12:95:D8:55:75:23:75:D2:4D:D6:75:4D:97:5B:50:89:62:3C Authority key identifier: D9:00:DD:F2:4A:27:62:2B:F9:64:37:57:ED:BC:AF:FA:EE:32:1C:37 Certificate issuer: /CN=A91C7773/serialNumber=D900DDF24A27622BF9643757EDBCAFFAEE321C37 Certificate serial: 0F2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QDd8konYiv5ZDdX7byv-u4yHDc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.mft Manifest number: 0F10 Signing time: Fri 12 Jun 2026 17:35:39 +0000 Manifest this update: Fri 12 Jun 2026 17:35:38 +0000 Manifest next update: Fri 19 Jun 2026 17:35:38 +0000 Files and hashes: 1: 2QDd8konYiv5ZDdX7byv-u4yHDc.crl (hash: IsJuezB4Fti/HKxrcmLhtP2C/rxl4CvIqW1EJg6+ZCU=) 2: A47D2EC84C1E11EEBA8CDB4BC4F9AE02.roa (hash: CNBlKRGQG6AMZt4K1SNsAWQxw9T+WIEHof1S1C1ZbKE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.crl rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QDd8konYiv5ZDdX7byv-u4yHDc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 17:35:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3886 (0xf2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7773, serialNumber=D900DDF24A27622BF9643757EDBCAFFAEE321C37 Validity Not Before: Jun 12 17:35:38 2026 GMT Not After : Jun 19 17:35:38 2026 GMT Subject: CN=6a2c436a-beba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b7:16:67:ab:78:37:f0:85:8f:63:ba:8a:0f: ed:d2:08:c6:03:1f:81:b0:72:8f:be:64:52:d5:75: 03:2e:84:e8:16:d9:93:41:6f:23:99:17:dd:f6:3c: 3a:9e:b1:b5:ef:7a:42:84:31:b1:54:d9:70:c9:0b: 93:d9:7c:f5:57:ca:e4:54:45:75:36:37:a5:57:55: 7b:ed:29:71:ef:f0:b2:ec:21:44:cf:c9:6a:42:b3: d5:7c:05:34:24:ea:58:29:d3:6f:0e:da:e7:38:7e: 06:18:94:5c:10:26:f5:80:ee:bf:ea:37:cf:0c:88: 10:fe:f8:07:64:97:4f:5c:6d:d0:77:9f:b6:4c:5d: de:1e:bf:7a:39:bd:fa:72:df:ba:2c:12:3a:d5:2d: 6b:18:49:16:8b:a5:20:12:00:5f:c8:18:07:c5:0f: 93:39:42:71:7b:c9:91:4b:9e:e5:5e:66:9f:3f:45: f9:85:fd:4b:ee:3d:b4:3b:56:d1:7b:b7:4a:28:68: e7:ef:bc:22:d7:35:64:9e:13:e5:d8:51:20:68:6c: d7:f7:c0:2c:02:74:f0:b7:8c:75:a9:e5:da:ff:6b: 6e:4d:55:a6:7a:0d:79:14:ef:82:b0:34:68:3f:a2: 87:0d:96:ae:12:5a:8e:f5:88:86:50:2a:14:d7:ed: 83:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:DC:12:95:D8:55:75:23:75:D2:4D:D6:75:4D:97:5B:50:89:62:3C X509v3 Authority Key Identifier: keyid:D9:00:DD:F2:4A:27:62:2B:F9:64:37:57:ED:BC:AF:FA:EE:32:1C:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QDd8konYiv5ZDdX7byv-u4yHDc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:8c:0f:14:fa:eb:b4:a6:d1:f4:fe:27:2a:75:26:d7:80:82: a1:f6:20:51:be:13:f7:2a:e7:1e:a6:12:00:53:43:d9:f8:23: 59:02:bc:64:b8:fb:81:f5:bf:0c:53:36:cb:bf:5d:c7:7a:f9: 58:b8:b1:6c:77:2e:d3:1e:38:87:52:08:7a:7e:71:73:5b:f9: a2:95:41:53:00:86:fd:d0:47:c4:91:4d:3b:c9:2a:19:15:d1: 86:8c:f5:fb:66:3a:65:61:9b:79:0a:97:1a:4b:b6:65:c9:ca: 27:11:c3:ca:66:81:4e:98:55:2e:0a:62:51:22:f9:4e:c4:47: b3:3f:1d:b1:09:44:75:3d:ff:8b:3e:1f:f0:ff:fb:7b:ad:43: e0:d8:c2:29:d6:c3:a2:db:5f:5f:eb:d3:2a:71:94:25:af:a7: 6e:21:41:4a:7a:c8:ff:13:e1:e7:c4:a7:35:eb:60:e9:65:a5: 2b:48:66:b0:b7:5e:c3:65:33:8e:eb:0b:79:ea:64:94:40:13: 86:f5:9e:4b:44:df:db:08:0a:fd:0c:60:47:40:89:e3:57:97: d6:c6:5c:62:80:df:6e:04:72:6a:31:3a:2a:31:54:71:ba:8d: 17:82:fd:bd:9d:6b:1a:9c:bc:a6:e0:dd:8e:3d:f7:69:7a:1c: d2:cd:7d:b1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDy4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc3NzMxMTAvBgNVBAUTKEQ5MDBEREYyNEEyNzYyMkJGOTY0Mzc1N0VEQkNBRkZB RUUzMjFDMzcwHhcNMjYwNjEyMTczNTM4WhcNMjYwNjE5MTczNTM4WjAYMRYwFAYD VQQDEw02YTJjNDM2YS1iZWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnLcWZ6t4N/CFj2O6ig/t0gjGAx+BsHKPvmRS1XUDLoToFtmTQW8jmRfd9jw6 nrG173pChDGxVNlwyQuT2Xz1V8rkVEV1NjelV1V77Slx7/Cy7CFEz8lqQrPVfAU0 JOpYKdNvDtrnOH4GGJRcECb1gO6/6jfPDIgQ/vgHZJdPXG3Qd5+2TF3eHr96Ob36 ct+6LBI61S1rGEkWi6UgEgBfyBgHxQ+TOUJxe8mRS57lXmafP0X5hf1L7j20O1bR e7dKKGjn77wi1zVknhPl2FEgaGzX98AsAnTwt4x1qeXa/2tuTVWmeg15FO+CsDRo P6KHDZauElqO9YiGUCoU1+2DLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIvcEpXY VXUjddJN1nVNl1tQiWI8MB8GA1UdIwQYMBaAFNkA3fJKJ2Ir+WQ3V+28r/ruMhw3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzc3My9BRDMyMjM3Q0Ey RTgxMUU5QkFFNzhENDdDNEY5QUUwMi8yUURkOGtvbllpdjVaRGRYN2J5di11NHlI RGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJRRGQ4a29uWWl2NVpEZFg3Ynl2LXU0eUhEYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Nzc3My9BRDMyMjM3Q0EyRTgxMUU5QkFFNzhENDdDNEY5QUUwMi8yUURkOGtvbllp djVaRGRYN2J5di11NHlIRGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcowPFPrrtKbR9P4nKnUm14CCofYgUb4T9yrnHqYSAFND2fgjWQK8ZLj7gfW/ DFM2y79dx3r5WLixbHcu0x44h1IIen5xc1v5opVBUwCG/dBHxJFNO8kqGRXRhoz1 +2Y6ZWGbeQqXGku2ZcnKJxHDymaBTphVLgpiUSL5TsRHsz8dsQlEdT3/iz4f8P/7 e61D4NjCKdbDottfX+vTKnGUJa+nbiFBSnrI/xPh58SnNetg6WWlK0hmsLdew2Uz jusLeepklEAThvWeS0Tf2wgK/QxgR0CJ41eX1sZcYoDfbgRyajE6KjFUcbqNF4L9 vZ1rGpy8puDdjj33aXoc0s19sQ== -----END CERTIFICATE-----Generated at Sat Jun 13 07:15:49 2026 by rpki-client