$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9F00/0BB1E4B02C2511F18F7125819B833773/pNgA2xjHwseXEbNfyLfSF9x9TG4.mft File: pNgA2xjHwseXEbNfyLfSF9x9TG4.mft (raw, json) Hash identifier: oKqLbv8RHVq6g524Isc2aQfW3m7FA2voU35CAf/m7Jk= Subject key identifier: 84:65:BA:45:1C:2C:2E:34:66:EF:CE:07:3B:91:71:EC:95:42:B5:3F Authority key identifier: A4:D8:00:DB:18:C7:C2:C7:97:11:B3:5F:C8:B7:D2:17:DC:7D:4C:6E Certificate issuer: /CN=A91C9F00/serialNumber=A4D800DB18C7C2C79711B35FC8B7D217DC7D4C6E Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pNgA2xjHwseXEbNfyLfSF9x9TG4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9F00/0BB1E4B02C2511F18F7125819B833773/pNgA2xjHwseXEbNfyLfSF9x9TG4.mft Manifest number: 2A Signing time: Sat 13 Jun 2026 08:51:28 +0000 Manifest this update: Sat 13 Jun 2026 08:51:27 +0000 Manifest next update: Sat 20 Jun 2026 08:51:27 +0000 Files and hashes: 1: pNgA2xjHwseXEbNfyLfSF9x9TG4.crl (hash: f/bpZr0bVRO1DASDCsJMw4+uw8WiasJKFo4JsXa3YnY=) 2: B7E7EF7C2C2511F1AC709C159C833773.roa (hash: 22lcIVcWJJNQeedflM7ajUp8JwhpkgUi0gHeb905Grk=) 3: E1B6596E447211F188990C259B833773.roa (hash: BoVkQomFICNHToymCepXWBK1nByXGDPh9ZzxCYs1+HY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9F00/0BB1E4B02C2511F18F7125819B833773/pNgA2xjHwseXEbNfyLfSF9x9TG4.crl rsync://rpki.apnic.net/member_repository/A91C9F00/0BB1E4B02C2511F18F7125819B833773/pNgA2xjHwseXEbNfyLfSF9x9TG4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pNgA2xjHwseXEbNfyLfSF9x9TG4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 08:51:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9F00, serialNumber=A4D800DB18C7C2C79711B35FC8B7D217DC7D4C6E Validity Not Before: Jun 13 08:51:27 2026 GMT Not After : Jun 20 08:51:27 2026 GMT Subject: CN=6a2d1a0f-c15b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:63:d3:e8:48:55:69:eb:4b:5a:80:b1:90:08: 3f:fc:a0:fd:4f:21:8d:ea:1b:4b:72:ad:f8:85:0e: 52:80:dc:54:af:0c:48:e9:af:b4:04:fa:96:96:af: 5f:d9:c0:aa:8d:a5:78:fe:a6:73:52:f3:ed:2b:6a: 4a:86:2e:5f:c0:92:dc:1b:6f:84:64:e7:4f:b2:38: e3:c9:e8:92:2e:62:cf:7d:8e:7d:1c:5e:60:d1:4f: 21:7c:a0:28:a9:7a:52:54:6a:ae:1d:c9:1b:32:71: 46:87:68:3c:a9:8d:22:49:c9:70:57:d0:1a:9a:14: f7:8b:2e:e5:8f:eb:a0:51:62:94:83:36:20:36:b8: eb:6c:76:41:43:e5:58:60:6a:ee:02:38:bd:ad:fb: 5c:6b:00:2b:1c:3b:b3:a7:35:dd:bc:9c:a6:d1:76: 62:31:da:0d:91:3e:28:f5:10:bb:d7:49:eb:e0:37: e0:72:48:a0:a2:88:1e:e0:91:ce:b0:26:21:85:dd: 7f:02:30:a3:65:d1:95:b1:b4:ad:ed:40:b4:93:6c: 2f:85:1f:14:bd:31:d6:03:00:93:82:fb:62:4e:13: 91:b8:ac:dc:bc:b4:85:f8:8a:be:ff:f1:52:36:06: ba:9b:e6:53:1a:51:4d:7e:a3:48:8c:5c:4e:cc:64: c8:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:65:BA:45:1C:2C:2E:34:66:EF:CE:07:3B:91:71:EC:95:42:B5:3F X509v3 Authority Key Identifier: keyid:A4:D8:00:DB:18:C7:C2:C7:97:11:B3:5F:C8:B7:D2:17:DC:7D:4C:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9F00/0BB1E4B02C2511F18F7125819B833773/pNgA2xjHwseXEbNfyLfSF9x9TG4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pNgA2xjHwseXEbNfyLfSF9x9TG4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9F00/0BB1E4B02C2511F18F7125819B833773/pNgA2xjHwseXEbNfyLfSF9x9TG4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:31:09:8e:f4:c4:a5:84:d6:33:5e:88:5e:ae:9d:81:a6:3d: 4d:de:4c:9e:bb:67:0e:ee:18:30:cc:fa:04:fc:98:47:2f:ad: 36:fe:0f:c0:cd:82:3b:0b:4f:af:81:aa:8a:38:eb:49:b8:18: 49:9a:c9:3d:ee:49:96:aa:6e:43:9e:68:47:54:d8:bf:6a:12: 39:87:64:5d:0b:0b:91:20:be:6c:2c:2a:43:32:92:1b:34:56: 1a:10:e3:44:1e:0c:be:93:19:32:72:c2:a8:49:46:fa:04:be: 2b:48:ab:d4:ad:76:78:b5:7c:22:41:17:a2:6a:9a:ef:8d:d6: 72:8c:99:91:7c:1c:69:8f:93:99:8c:4f:4f:f6:91:00:58:74: 18:c2:4e:a9:a6:6f:05:ef:0d:7a:aa:15:3d:9f:f2:96:a4:94: 74:80:ef:62:a5:f6:4e:53:44:e8:87:51:82:1f:49:73:95:98: 0b:c7:c7:24:8d:11:75:f2:44:6d:8c:74:79:01:2b:7d:76:29: 05:a1:ee:fd:aa:a8:fe:07:96:95:32:71:c5:68:d9:01:1b:1b: 85:37:ca:9e:a6:a6:bb:e5:23:96:48:b5:3d:6c:ef:49:99:09: 75:78:0e:f5:4f:c1:3c:6e:6d:6a:c5:a0:6d:51:0e:73:e9:88: 87:4a:eb:cd -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OUYwMDExMC8GA1UEBRMoQTREODAwREIxOEM3QzJDNzk3MTFCMzVGQzhCN0QyMTdE QzdENEM2RTAeFw0yNjA2MTMwODUxMjdaFw0yNjA2MjAwODUxMjdaMBgxFjAUBgNV BAMTDTZhMmQxYTBmLWMxNWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBY9PoSFVp60tagLGQCD/8oP1PIY3qG0tyrfiFDlKA3FSvDEjpr7QE+paWr1/Z wKqNpXj+pnNS8+0rakqGLl/Aktwbb4Rk50+yOOPJ6JIuYs99jn0cXmDRTyF8oCip elJUaq4dyRsycUaHaDypjSJJyXBX0BqaFPeLLuWP66BRYpSDNiA2uOtsdkFD5Vhg au4COL2t+1xrACscO7OnNd28nKbRdmIx2g2RPij1ELvXSevgN+BySKCiiB7gkc6w JiGF3X8CMKNl0ZWxtK3tQLSTbC+FHxS9MdYDAJOC+2JOE5G4rNy8tIX4ir7/8VI2 Brqb5lMaUU1+o0iMXE7MZMg/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUhGW6RRws LjRm784HO5Fx7JVCtT8wHwYDVR0jBBgwFoAUpNgA2xjHwseXEbNfyLfSF9x9TG4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5RjAwLzBCQjFFNEIwMkMy NTExRjE4RjcxMjU4MTlCODMzNzczL3BOZ0EyeGpId3NlWEViTmZ5TGZTRjl4OVRH NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcE5nQTJ4akh3c2VYRWJOZnlMZlNGOXg5VEc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5 RjAwLzBCQjFFNEIwMkMyNTExRjE4RjcxMjU4MTlCODMzNzczL3BOZ0EyeGpId3Nl WEViTmZ5TGZTRjl4OVRHNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCQMQmO9MSlhNYzXoherp2Bpj1N3kyeu2cO7hgwzPoE/JhHL602/g/AzYI7C0+v gaqKOOtJuBhJmsk97kmWqm5DnmhHVNi/ahI5h2RdCwuRIL5sLCpDMpIbNFYaEONE Hgy+kxkycsKoSUb6BL4rSKvUrXZ4tXwiQReiaprvjdZyjJmRfBxpj5OZjE9P9pEA WHQYwk6ppm8F7w16qhU9n/KWpJR0gO9ipfZOU0Toh1GCH0lzlZgLx8ckjRF18kRt jHR5ASt9dikFoe79qqj+B5aVMnHFaNkBGxuFN8qepqa75SOWSLU9bO9JmQl1eA71 T8E8bm1qxaBtUQ5z6YiHSuvN -----END CERTIFICATE-----Generated at Sun Jun 14 00:53:44 2026 by rpki-client