$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft File: 4z23k7vv5Gy8912zTnCUJ6cu8PM.mft (raw, json) Hash identifier: Mv517XcZsmUdEPGLgxd5DR8zooC0Mlg2KwvJ4T6vT94= Subject key identifier: 64:ED:2E:A2:43:1B:FA:E9:02:0D:F3:7F:3F:10:C5:A1:F5:1E:E0:77 Authority key identifier: E3:3D:B7:93:BB:EF:E4:6C:BC:F7:5D:B3:4E:70:94:27:A7:2E:F0:F3 Certificate issuer: /CN=A91C7F6A/serialNumber=E33DB793BBEFE46CBCF75DB34E709427A72EF0F3 Certificate serial: 0294 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4z23k7vv5Gy8912zTnCUJ6cu8PM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft Manifest number: 028D Signing time: Sat 13 Jun 2026 01:48:14 +0000 Manifest this update: Sat 13 Jun 2026 01:48:13 +0000 Manifest next update: Sat 20 Jun 2026 01:48:13 +0000 Files and hashes: 1: 4z23k7vv5Gy8912zTnCUJ6cu8PM.crl (hash: ZWQht5PhhcrNyWmVQ/xEQBz0Iq+nFogZpbBPxmxLKnI=) 2: 81D5DEE47F5D11EDB4309B54C4F9AE02.roa (hash: mGLrUqchoRUjle/BuvUxiJtXqbGGvFSdYgwJHN85mfw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.crl rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4z23k7vv5Gy8912zTnCUJ6cu8PM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 01:48:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 660 (0x294) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7F6A, serialNumber=E33DB793BBEFE46CBCF75DB34E709427A72EF0F3 Validity Not Before: Jun 13 01:48:13 2026 GMT Not After : Jun 20 01:48:13 2026 GMT Subject: CN=6a2cb6dd-6c94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:37:44:4d:8a:0e:d2:86:18:4d:c1:59:f1:a7: 3c:a8:b3:45:74:96:90:58:52:be:fe:72:5a:04:cd: 82:92:93:e0:b4:22:80:da:c7:b5:4c:ca:97:ba:a2: e9:83:87:f8:bc:8a:66:f8:d9:f1:f3:dd:78:fe:af: 8c:ac:55:4d:6a:27:bd:e2:05:82:47:51:2a:a9:b0: ce:2a:b0:be:a4:f2:8a:6d:f1:7e:b9:0d:c6:dc:11: 2c:7e:ce:89:2b:fe:d1:41:0f:3c:ce:d6:83:ba:6f: 65:79:4f:c6:a4:38:44:80:3d:c2:75:f1:d7:04:f7: a8:86:eb:94:5e:ac:a0:c9:59:ca:f1:8a:a0:0c:9b: 46:1c:09:2e:32:ff:e5:9c:ac:43:8e:e7:c7:80:0e: 46:55:2d:40:81:e9:c6:56:25:48:94:2a:b7:bb:25: 84:3e:de:d1:a1:02:64:b8:68:8d:b5:1e:1a:25:04: fa:b7:7d:96:27:cd:8b:ce:06:bb:36:63:de:72:18: f5:90:4b:93:5f:1d:a3:40:c8:1d:3f:e8:84:54:ce: 0a:b0:4e:2c:0f:a0:a3:53:58:dc:6d:30:2f:c7:9e: 28:14:a4:65:2c:79:17:88:ab:a9:da:9b:95:57:df: af:b8:ee:1e:00:04:8b:29:e2:9e:0b:22:e5:58:c9: 95:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:ED:2E:A2:43:1B:FA:E9:02:0D:F3:7F:3F:10:C5:A1:F5:1E:E0:77 X509v3 Authority Key Identifier: keyid:E3:3D:B7:93:BB:EF:E4:6C:BC:F7:5D:B3:4E:70:94:27:A7:2E:F0:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4z23k7vv5Gy8912zTnCUJ6cu8PM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:91:99:a4:13:f9:e6:cb:d1:00:6d:16:a1:75:d1:95:36:69: 55:6d:a2:61:63:e4:22:d4:59:f1:3c:00:50:e9:83:de:86:90: 6a:3c:8b:67:2f:a2:9b:5a:bf:24:09:fe:64:2b:2f:5b:97:da: 20:6b:01:56:82:e4:a3:71:66:d6:8c:4c:55:90:c0:cc:35:03: 25:1b:07:f4:cf:3a:ba:f9:be:60:d6:2b:5b:94:1d:6a:9a:1e: 48:62:8a:7f:6f:3b:69:e8:97:a1:3a:1b:23:17:f8:27:68:b4: 92:5f:a4:76:57:c9:df:b6:06:a3:83:20:d8:18:f6:92:dd:2b: 13:82:2b:e4:3c:9b:d9:d1:d6:c5:99:8f:a4:2e:d3:ca:f4:4d: d4:28:f1:ef:3b:07:d1:c4:f2:1d:3f:94:e8:c7:7d:ab:c8:49: 7e:97:14:52:3d:c5:9b:de:bc:2d:3b:25:3a:79:8f:34:fd:b6: 6e:01:da:5c:ee:db:4c:32:24:60:3b:b4:5d:02:3c:e0:68:95: 3d:77:e4:59:77:3f:67:b2:8f:5e:43:43:82:d4:3f:36:0b:aa: bf:0c:e3:0b:34:e5:e0:e7:e5:cc:14:e5:36:9a:d4:40:80:1d: cd:fc:0c:c3:bf:e2:7a:91:ce:c1:4a:97:e7:77:a1:a3:00:ed: 42:fd:05:1d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdGNkExMTAvBgNVBAUTKEUzM0RCNzkzQkJFRkU0NkNCQ0Y3NURCMzRFNzA5NDI3 QTcyRUYwRjMwHhcNMjYwNjEzMDE0ODEzWhcNMjYwNjIwMDE0ODEzWjAYMRYwFAYD VQQDEw02YTJjYjZkZC02Yzk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5zdETYoO0oYYTcFZ8ac8qLNFdJaQWFK+/nJaBM2CkpPgtCKA2se1TMqXuqLp g4f4vIpm+Nnx8914/q+MrFVNaie94gWCR1EqqbDOKrC+pPKKbfF+uQ3G3BEsfs6J K/7RQQ88ztaDum9leU/GpDhEgD3CdfHXBPeohuuUXqygyVnK8YqgDJtGHAkuMv/l nKxDjufHgA5GVS1AgenGViVIlCq3uyWEPt7RoQJkuGiNtR4aJQT6t32WJ82Lzga7 NmPechj1kEuTXx2jQMgdP+iEVM4KsE4sD6CjU1jcbTAvx54oFKRlLHkXiKup2puV V9+vuO4eAASLKeKeCyLlWMmVmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGTtLqJD G/rpAg3zfz8QxaH1HuB3MB8GA1UdIwQYMBaAFOM9t5O77+RsvPdds05wlCenLvDz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0Y2QS8wNjc5MjUwMDdG NDIxMUVEQjRFNzhDODZDNEY5QUUwMi80ejIzazd2djVHeTg5MTJ6VG5DVUo2Y3U4 UE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzR6MjNrN3Z2NUd5ODkxMnpUbkNVSjZjdThQTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0Y2QS8wNjc5MjUwMDdGNDIxMUVEQjRFNzhDODZDNEY5QUUwMi80ejIzazd2djVH eTg5MTJ6VG5DVUo2Y3U4UE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzpGZpBP55svRAG0WoXXRlTZpVW2iYWPkItRZ8TwAUOmD3oaQajyLZy+im1q/ JAn+ZCsvW5faIGsBVoLko3Fm1oxMVZDAzDUDJRsH9M86uvm+YNYrW5QdapoeSGKK f287aeiXoTobIxf4J2i0kl+kdlfJ37YGo4Mg2Bj2kt0rE4Ir5Dyb2dHWxZmPpC7T yvRN1Cjx7zsH0cTyHT+U6Md9q8hJfpcUUj3Fm968LTslOnmPNP22bgHaXO7bTDIk YDu0XQI84GiVPXfkWXc/Z7KPXkNDgtQ/NguqvwzjCzTl4OflzBTlNprUQIAdzfwM w7/iepHOwUqX53ehowDtQv0FHQ== -----END CERTIFICATE-----Generated at Sat Jun 13 16:01:49 2026 by rpki-client