$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft File: MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft (raw, json) Hash identifier: QanNi9uH2tHKsO7tY2+Sw6saOnR0jWCoAOZwgbhiHEY= Subject key identifier: BD:AE:54:7E:73:09:F3:5B:08:A3:B1:D5:7F:7C:9D:29:BD:23:F1:8E Authority key identifier: 31:D2:1D:5C:EE:5F:AC:DE:F3:C8:C1:C8:7D:0D:73:91:F9:F7:3A:FF Certificate issuer: /CN=A91C8203/serialNumber=31D21D5CEE5FACDEF3C8C1C87D0D7391F9F73AFF Certificate serial: 0144 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft Manifest number: 0134 Signing time: Sat 13 Jun 2026 05:31:58 +0000 Manifest this update: Sat 13 Jun 2026 05:31:57 +0000 Manifest next update: Sat 20 Jun 2026 05:31:57 +0000 Files and hashes: 1: MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl (hash: B4jUmo01QYxT+CjLO9nR0V2WShJ+Kr5quUqn/fSX2X8=) 2: D9BE56E2927D11EFB83ACB5CC4F9AE02.roa (hash: nelUbxnLDLGVDrJHYxOmJHcdHhK23+JstFe8bl+1cNY=) 3: BE48D4AA927D11EF9651FC4AC4F9AE02.roa (hash: MMlCyL0Z5gXZRhtwZCT1rQU/h+kkk4XV7uk2akYMz9M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 324 (0x144) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8203, serialNumber=31D21D5CEE5FACDEF3C8C1C87D0D7391F9F73AFF Validity Not Before: Jun 13 05:31:57 2026 GMT Not After : Jun 20 05:31:57 2026 GMT Subject: CN=6a2ceb4d-a6c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:09:d0:e6:3a:ab:61:2a:0a:39:4f:24:fd:3e: 17:8b:3d:6a:7b:98:c5:a3:70:7a:7b:34:a4:63:23: 87:a0:88:5d:67:c2:8b:f7:fd:6f:34:8b:7c:e7:9d: e7:07:5a:df:60:77:e0:66:fd:4c:ea:0e:27:a6:6e: c2:3a:8a:c5:90:40:c3:e6:6c:c4:c7:7a:95:90:40: 8a:5e:d1:ab:4f:0d:56:b9:6b:b6:c8:f7:5b:37:19: fb:42:5c:7a:43:49:7a:2e:1f:ec:ed:e1:20:3d:27: e3:17:d8:45:d5:bf:43:00:e7:56:48:4f:3b:a0:2b: 69:98:5c:ea:96:92:94:81:55:e0:06:2e:84:7d:88: fd:f6:92:a7:fd:17:f2:e0:45:25:31:2b:a2:d6:bc: 8d:6a:d2:8c:59:de:75:11:fc:08:ce:50:af:05:90: 2b:f5:20:13:0f:1b:6b:b0:71:dd:19:16:45:b5:cf: 92:98:20:dd:d8:d6:e7:78:46:33:1f:d5:b2:a6:f5: ca:a3:5e:46:79:71:94:1b:83:75:07:4d:dc:cf:90: ef:4a:61:fb:4a:d2:e0:33:bc:e6:f0:17:b7:06:96: 2b:e5:a1:b3:a0:9f:f4:52:3c:a8:a5:bd:39:02:58: dd:89:fd:e0:66:51:59:95:32:f8:0b:84:14:88:ee: 95:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:AE:54:7E:73:09:F3:5B:08:A3:B1:D5:7F:7C:9D:29:BD:23:F1:8E X509v3 Authority Key Identifier: keyid:31:D2:1D:5C:EE:5F:AC:DE:F3:C8:C1:C8:7D:0D:73:91:F9:F7:3A:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:50:26:05:70:bc:68:42:8b:42:1c:1c:e5:2c:fa:9e:da:2f: 02:e5:d9:d3:bb:0e:8c:a5:2f:08:89:10:14:20:a2:5c:d2:9b: cb:e5:35:0a:7e:f5:36:2f:f9:a0:00:3d:6f:ef:2d:bf:8d:22: a2:47:df:e4:06:52:ba:fc:b4:28:ed:5b:1a:79:34:e2:21:73: 4b:0f:50:50:24:3a:81:7d:d1:ec:65:5f:79:35:1a:34:8d:5e: 58:30:0f:fb:f2:d5:27:1d:13:bf:e0:a0:41:c7:1d:7e:88:13: cb:23:79:61:74:d1:24:b3:69:e2:57:e8:77:5a:8e:bd:07:11: 2c:ec:39:94:be:94:e0:ee:25:4b:b9:ab:5c:27:44:ee:fc:0f: 6a:13:11:63:79:25:d2:59:9e:c6:c8:89:0e:41:b8:78:d1:92: 4b:53:72:3f:af:51:b7:de:05:55:e7:85:47:81:f4:24:4a:10: 28:1d:cb:b2:3f:85:f9:3c:d3:ad:3e:ce:45:7a:b6:bd:b8:06: 26:af:d3:5d:60:6d:58:74:d5:8e:31:49:09:dc:c2:6c:ce:53: 55:e7:ef:6f:cc:8e:e5:8f:b0:1f:cc:10:67:2d:18:72:84:6f: a7:2b:3c:06:d6:f5:9f:d2:ee:48:91:20:07:96:3f:0d:5e:0f: 9e:35:6a:4e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgyMDMxMTAvBgNVBAUTKDMxRDIxRDVDRUU1RkFDREVGM0M4QzFDODdEMEQ3Mzkx RjlGNzNBRkYwHhcNMjYwNjEzMDUzMTU3WhcNMjYwNjIwMDUzMTU3WjAYMRYwFAYD VQQDEw02YTJjZWI0ZC1hNmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlQnQ5jqrYSoKOU8k/T4Xiz1qe5jFo3B6ezSkYyOHoIhdZ8KL9/1vNIt8553n B1rfYHfgZv1M6g4npm7COorFkEDD5mzEx3qVkECKXtGrTw1WuWu2yPdbNxn7Qlx6 Q0l6Lh/s7eEgPSfjF9hF1b9DAOdWSE87oCtpmFzqlpKUgVXgBi6EfYj99pKn/Rfy 4EUlMSui1ryNatKMWd51EfwIzlCvBZAr9SATDxtrsHHdGRZFtc+SmCDd2NbneEYz H9WypvXKo15GeXGUG4N1B03cz5DvSmH7StLgM7zm8Be3BpYr5aGzoJ/0Ujyopb05 Aljdif3gZlFZlTL4C4QUiO6V3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL2uVH5z CfNbCKOx1X98nSm9I/GOMB8GA1UdIwQYMBaAFDHSHVzuX6ze88jByH0Nc5H59zr/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODIwMy9CQzUxNURBQTky N0ExMUVGQjU2NDNDNEVDNEY5QUUwMi9NZElkWE81ZnJON3p5TUhJZlExemtmbjNP djguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01kSWRYTzVmck43enlNSElmUTF6a2ZuM092OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODIwMy9CQzUxNURBQTkyN0ExMUVGQjU2NDNDNEVDNEY5QUUwMi9NZElkWE81ZnJO N3p5TUhJZlExemtmbjNPdjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASVAmBXC8aEKLQhwc5Sz6ntovAuXZ07sOjKUvCIkQFCCiXNKby+U1Cn71Ni/5 oAA9b+8tv40iokff5AZSuvy0KO1bGnk04iFzSw9QUCQ6gX3R7GVfeTUaNI1eWDAP +/LVJx0Tv+CgQccdfogTyyN5YXTRJLNp4lfod1qOvQcRLOw5lL6U4O4lS7mrXCdE 7vwPahMRY3kl0lmexsiJDkG4eNGSS1NyP69Rt94FVeeFR4H0JEoQKB3Lsj+F+TzT rT7ORXq2vbgGJq/TXWBtWHTVjjFJCdzCbM5TVefvb8yO5Y+wH8wQZy0YcoRvpys8 Btb1n9LuSJEgB5Y/DV4PnjVqTg== -----END CERTIFICATE-----Generated at Sat Jun 13 07:26:43 2026 by rpki-client