$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.mft File: s0it0HgdstIdxNM510-HoDk4ycc.mft (raw, json) Hash identifier: Soarqr/NovwisUs/zyOp6hB+h/o2hi/wdPJmlfthc6M= Subject key identifier: A0:9D:6E:B4:1A:6B:6B:FA:08:EC:80:90:C2:2D:6F:E1:5B:28:0C:2C Authority key identifier: B3:48:AD:D0:78:1D:B2:D2:1D:C4:D3:39:D7:4F:87:A0:39:38:C9:C7 Certificate issuer: /CN=A91C7C44/serialNumber=B348ADD0781DB2D21DC4D339D74F87A03938C9C7 Certificate serial: 02B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s0it0HgdstIdxNM510-HoDk4ycc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.mft Manifest number: 02A8 Signing time: Sat 13 Jun 2026 01:35:36 +0000 Manifest this update: Sat 13 Jun 2026 01:35:36 +0000 Manifest next update: Sat 20 Jun 2026 01:35:36 +0000 Files and hashes: 1: s0it0HgdstIdxNM510-HoDk4ycc.crl (hash: 9pSwT0q02V5+VkMgLGeeHDXvInvtw/RGybgCnAC6Or8=) 2: 945D844463E311EDAD1B0B3FC4F9AE02.roa (hash: eqDK5JxYlPrD2YI5tre8evg6C6tiJ/GL+g0KzbaQtNU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.crl rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s0it0HgdstIdxNM510-HoDk4ycc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 01:35:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 689 (0x2b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7C44, serialNumber=B348ADD0781DB2D21DC4D339D74F87A03938C9C7 Validity Not Before: Jun 13 01:35:36 2026 GMT Not After : Jun 20 01:35:36 2026 GMT Subject: CN=6a2cb3e8-7015 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:20:bc:7f:bb:a4:74:26:2b:ad:bc:41:0c:ca: a5:69:dc:07:36:fa:b4:c9:66:84:55:21:98:26:f4: bb:60:04:ef:b0:4b:33:52:42:6e:0d:3a:8a:4b:7f: 31:cb:92:23:a9:23:e7:e8:58:1a:49:d6:be:a5:9e: bd:b6:33:c6:61:74:16:fc:68:10:6f:01:f1:4a:6c: c9:55:0f:fc:bf:d5:98:cd:ef:ee:46:2a:7a:21:2b: 96:a0:22:25:36:b8:4c:97:b9:1d:24:5f:51:0b:8d: d7:21:25:42:b9:88:a2:22:b1:4e:89:f3:ae:08:6e: 3e:b6:4d:16:a3:84:64:fb:af:77:98:6b:1b:9e:31: 26:7b:f4:f5:f8:81:6a:65:af:e0:30:dd:5c:63:fa: 86:8f:d2:cf:3c:29:26:bf:7e:65:18:42:2e:c2:e0: f4:10:cc:54:b3:c6:1a:e8:94:45:34:59:24:4a:a1: 77:28:83:a7:c7:59:84:49:9e:b2:68:64:f4:c8:98: 70:a0:79:9c:f7:51:c5:4b:36:e2:0c:fd:70:9c:ab: 6f:82:4c:f1:04:b1:53:f6:2b:97:1c:91:9a:e4:d4: 6f:a3:72:07:c7:5d:d4:95:ea:04:a4:d3:a4:4b:ee: 0a:94:99:09:85:96:29:ba:22:c4:e7:c4:c9:f9:10: fc:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:9D:6E:B4:1A:6B:6B:FA:08:EC:80:90:C2:2D:6F:E1:5B:28:0C:2C X509v3 Authority Key Identifier: keyid:B3:48:AD:D0:78:1D:B2:D2:1D:C4:D3:39:D7:4F:87:A0:39:38:C9:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s0it0HgdstIdxNM510-HoDk4ycc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:2e:0c:1c:49:5a:90:00:81:fc:4b:98:0c:bc:4a:ce:b5:b5: ef:f6:bf:f8:d1:41:eb:33:7f:36:1b:4c:c5:0a:15:37:3b:51: 32:c6:ba:b5:76:93:f9:84:79:ec:1e:f4:55:30:dc:56:84:01: ab:83:bb:fd:90:57:39:e1:ae:2d:be:47:35:86:70:34:72:1e: 65:56:af:f7:be:de:ae:86:4e:6e:6c:08:50:27:a1:8e:98:0d: fd:58:fc:81:ee:38:fc:82:f5:45:ee:6b:f4:5a:e7:b8:8f:66: 6b:3a:fa:0a:58:21:1f:83:16:f6:8d:e9:e2:f3:81:18:42:bd: 22:9f:bf:d2:46:01:f8:8f:c5:ae:21:6b:cd:de:e2:df:c7:e1: 43:78:f8:fa:d5:84:eb:f2:82:15:60:62:87:8e:70:a9:ee:c3: 98:9f:52:4b:5c:cf:5b:f1:c6:c7:ec:7e:94:15:22:2f:7a:3c: a0:d0:7e:57:be:c9:d5:f5:46:5f:39:1f:24:5d:33:a4:18:a7: fc:89:06:01:33:e0:12:a5:e0:5d:39:bf:c9:df:31:00:bb:87: 9b:fe:27:46:a0:d1:32:e7:40:c3:6d:6c:8c:d6:77:6f:b6:db: 60:f3:4f:47:8d:62:f5:45:4b:74:26:cb:41:7b:e5:68:06:ce: 17:ed:3f:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdDNDQxMTAvBgNVBAUTKEIzNDhBREQwNzgxREIyRDIxREM0RDMzOUQ3NEY4N0Ew MzkzOEM5QzcwHhcNMjYwNjEzMDEzNTM2WhcNMjYwNjIwMDEzNTM2WjAYMRYwFAYD VQQDEw02YTJjYjNlOC03MDE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5yC8f7ukdCYrrbxBDMqladwHNvq0yWaEVSGYJvS7YATvsEszUkJuDTqKS38x y5IjqSPn6FgaSda+pZ69tjPGYXQW/GgQbwHxSmzJVQ/8v9WYze/uRip6ISuWoCIl NrhMl7kdJF9RC43XISVCuYiiIrFOifOuCG4+tk0Wo4Rk+693mGsbnjEme/T1+IFq Za/gMN1cY/qGj9LPPCkmv35lGEIuwuD0EMxUs8Ya6JRFNFkkSqF3KIOnx1mESZ6y aGT0yJhwoHmc91HFSzbiDP1wnKtvgkzxBLFT9iuXHJGa5NRvo3IHx13UleoEpNOk S+4KlJkJhZYpuiLE58TJ+RD8PwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKCdbrQa a2v6COyAkMItb+FbKAwsMB8GA1UdIwQYMBaAFLNIrdB4HbLSHcTTOddPh6A5OMnH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0M0NC9ENTMzQTdCNDYz REUxMUVEODBCQ0QzMzdDNEY5QUUwMi9zMGl0MEhnZHN0SWR4Tk01MTAtSG9EazR5 Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MwaXQwSGdkc3RJZHhOTTUxMC1Ib0RrNHljYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0M0NC9ENTMzQTdCNDYzREUxMUVEODBCQ0QzMzdDNEY5QUUwMi9zMGl0MEhnZHN0 SWR4Tk01MTAtSG9EazR5Y2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEC4MHElakACB/EuYDLxKzrW17/a/+NFB6zN/NhtMxQoVNztRMsa6tXaT+YR5 7B70VTDcVoQBq4O7/ZBXOeGuLb5HNYZwNHIeZVav977eroZObmwIUCehjpgN/Vj8 ge44/IL1Re5r9FrnuI9mazr6ClghH4MW9o3p4vOBGEK9Ip+/0kYB+I/FriFrzd7i 38fhQ3j4+tWE6/KCFWBih45wqe7DmJ9SS1zPW/HGx+x+lBUiL3o8oNB+V77J1fVG XzkfJF0zpBin/IkGATPgEqXgXTm/yd8xALuHm/4nRqDRMudAw21sjNZ3b7bbYPNP R41i9UVLdCbLQXvlaAbOF+0/kw== -----END CERTIFICATE-----Generated at Sat Jun 13 16:27:56 2026 by rpki-client