$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.mft File: hrHxHRgdpsydsDI95DvJbFkJZeE.mft (raw, json) Hash identifier: 8cyXydSmbD4+Xor5m67/lvXzXqUtZYC3feNDN7VVGys= Subject key identifier: 82:F5:C0:8C:B9:1F:75:C9:36:77:CE:77:8E:02:5D:01:DE:65:ED:40 Authority key identifier: 86:B1:F1:1D:18:1D:A6:CC:9D:B0:32:3D:E4:3B:C9:6C:59:09:65:E1 Certificate issuer: /CN=A91CBFCF/serialNumber=86B1F11D181DA6CC9DB0323DE43BC96C590965E1 Certificate serial: 0C8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrHxHRgdpsydsDI95DvJbFkJZeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.mft Manifest number: 0C76 Signing time: Fri 12 Jun 2026 18:41:38 +0000 Manifest this update: Fri 12 Jun 2026 18:41:38 +0000 Manifest next update: Fri 19 Jun 2026 18:41:38 +0000 Files and hashes: 1: hrHxHRgdpsydsDI95DvJbFkJZeE.crl (hash: EoY7lqCYOIynaWYTmT+EcuWDl5TGOBen3ppMoSeieec=) 2: B4E988F2FCFB11F092E222F9366F56BC.roa (hash: V71zoGKhD0nD0XhT5mIn0o19zRnPhSQ5QYxo5yVpxak=) 3: FD765464FCFC11F0AF0D3BB7376F56BC.roa (hash: eJofnUMCGktsGrjmk9qmZtR4EvsLnOuTHY31f/qnkIQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.crl rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrHxHRgdpsydsDI95DvJbFkJZeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 18:41:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3213 (0xc8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBFCF, serialNumber=86B1F11D181DA6CC9DB0323DE43BC96C590965E1 Validity Not Before: Jun 12 18:41:38 2026 GMT Not After : Jun 19 18:41:38 2026 GMT Subject: CN=6a2c52e2-07dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:5d:ce:ed:34:5b:b4:fe:e8:d5:d7:6b:c9:11: 82:e4:e2:ea:8e:a1:8a:ad:2c:33:e6:f8:a9:c2:34: 71:67:3f:aa:8d:83:c3:16:20:63:68:8c:98:bf:27: dc:45:07:92:b0:78:9a:b3:a5:b4:99:72:41:fa:0d: 1e:d7:15:46:02:f0:b0:99:34:ca:29:fe:4c:b9:40: 98:6f:99:18:33:23:82:b0:24:3d:87:f1:f9:81:e9: 83:6e:2f:c5:a1:af:39:f7:d8:c9:43:4a:6a:98:bb: ef:ac:cb:55:99:e3:06:f8:2e:f6:d4:b4:c3:ee:34: fd:c5:93:d3:4e:47:9a:67:03:bf:b7:45:55:5f:8f: 71:57:7f:df:0c:8b:22:66:73:e8:ec:b9:4f:86:5d: 95:c0:44:c5:10:46:4f:4c:ba:4d:8f:bc:05:65:ba: 84:94:ec:cf:86:34:f7:59:ec:76:f7:4a:99:c9:21: 24:5f:6e:23:9a:a4:c2:26:81:19:4e:48:33:02:ac: f2:54:34:1d:20:7d:f6:d4:ef:b0:ff:8f:77:3c:3e: 76:f7:56:0f:65:59:92:5e:fb:76:3e:0e:1c:c2:73: ec:28:d6:80:30:58:27:54:bd:21:69:43:57:ec:2e: 67:ca:fc:45:03:bb:4b:8b:85:07:83:94:32:a0:5b: b8:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:F5:C0:8C:B9:1F:75:C9:36:77:CE:77:8E:02:5D:01:DE:65:ED:40 X509v3 Authority Key Identifier: keyid:86:B1:F1:1D:18:1D:A6:CC:9D:B0:32:3D:E4:3B:C9:6C:59:09:65:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrHxHRgdpsydsDI95DvJbFkJZeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:72:a2:36:66:6a:63:0d:bd:a7:98:2f:14:81:21:cc:ab:43: e0:2c:dc:75:a2:d7:aa:93:ac:10:7b:e4:14:a4:0c:c0:2f:49: 12:b9:f9:76:76:00:e2:f3:bd:f9:2b:85:c1:41:6b:9d:4e:1e: 27:b0:5a:a6:bd:f0:18:10:5d:73:ed:79:27:3e:10:f7:c1:d7: d6:d2:7f:3c:1f:64:85:46:8e:e8:c3:44:e9:81:60:5e:6e:d9: 00:20:56:f6:d5:d9:94:ad:58:ef:9c:4a:a9:9c:cc:53:fb:54: 60:13:f1:f9:ee:da:26:cc:73:53:b1:f8:de:3a:8e:57:0c:5e: 5d:a4:b9:b6:4a:7f:1e:e4:cb:07:f1:64:a9:f9:ef:a5:8b:c6: 12:4e:ea:74:30:ab:64:f4:11:ea:56:3e:01:74:be:22:65:4d: 1a:3c:ee:40:e2:2c:c3:ab:60:37:d6:70:c6:21:3b:8a:55:31: 22:c6:b6:5a:f4:c8:c4:4b:44:2e:f0:b9:1d:c2:c2:29:4e:dd: 7a:af:b0:80:7d:9b:5e:7f:1c:63:51:b0:0e:d5:bc:b6:fa:ba: 78:a8:5e:c1:be:9f:01:68:5d:aa:b3:78:25:c2:ef:3f:2d:d9: 7a:b5:25:96:b5:84:a9:f4:3a:5f:2a:cf:b9:35:55:83:31:a7: 46:e7:91:78 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JGQ0YxMTAvBgNVBAUTKDg2QjFGMTFEMTgxREE2Q0M5REIwMzIzREU0M0JDOTZD NTkwOTY1RTEwHhcNMjYwNjEyMTg0MTM4WhcNMjYwNjE5MTg0MTM4WjAYMRYwFAYD VQQDEw02YTJjNTJlMi0wN2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl13O7TRbtP7o1ddryRGC5OLqjqGKrSwz5vipwjRxZz+qjYPDFiBjaIyYvyfc RQeSsHias6W0mXJB+g0e1xVGAvCwmTTKKf5MuUCYb5kYMyOCsCQ9h/H5gemDbi/F oa8599jJQ0pqmLvvrMtVmeMG+C721LTD7jT9xZPTTkeaZwO/t0VVX49xV3/fDIsi ZnPo7LlPhl2VwETFEEZPTLpNj7wFZbqElOzPhjT3Wex290qZySEkX24jmqTCJoEZ TkgzAqzyVDQdIH321O+w/493PD5291YPZVmSXvt2Pg4cwnPsKNaAMFgnVL0haUNX 7C5nyvxFA7tLi4UHg5QyoFu4PwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIL1wIy5 H3XJNnfOd44CXQHeZe1AMB8GA1UdIwQYMBaAFIax8R0YHabMnbAyPeQ7yWxZCWXh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkZDRi85NTYzOUJGMDI0 OEQxMUVBQURBMjA1NEVDNEY5QUUwMi9ockh4SFJnZHBzeWRzREk5NUR2SmJGa0pa ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hySHhIUmdkcHN5ZHNESTk1RHZKYkZrSlplRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkZDRi85NTYzOUJGMDI0OEQxMUVBQURBMjA1NEVDNEY5QUUwMi9ockh4SFJnZHBz eWRzREk5NUR2SmJGa0paZUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlnKiNmZqYw29p5gvFIEhzKtD4CzcdaLXqpOsEHvkFKQMwC9JErn5dnYA4vO9 +SuFwUFrnU4eJ7Bapr3wGBBdc+15Jz4Q98HX1tJ/PB9khUaO6MNE6YFgXm7ZACBW 9tXZlK1Y75xKqZzMU/tUYBPx+e7aJsxzU7H43jqOVwxeXaS5tkp/HuTLB/Fkqfnv pYvGEk7qdDCrZPQR6lY+AXS+ImVNGjzuQOIsw6tgN9ZwxiE7ilUxIsa2WvTIxEtE LvC5HcLCKU7deq+wgH2bXn8cY1GwDtW8tvq6eKhewb6fAWhdqrN4JcLvPy3ZerUl lrWEqfQ6XyrPuTVVgzGnRueReA== -----END CERTIFICATE-----Generated at Sat Jun 13 16:58:01 2026 by rpki-client