$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft File: s2uXFySjur2JC3VFmJM3IPly_q8.mft (raw, json) Hash identifier: 6KXp3pgx3A0vysAZSGFDk3NZEOfgQ3Up5DILmMXOzLg= Subject key identifier: B5:E6:81:40:67:38:74:5C:00:82:17:85:A7:CC:CE:9F:A9:0A:ED:DD Authority key identifier: B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF Certificate issuer: /CN=A91CE558/serialNumber=B36B971724A3BABD890B754598933720F972FEAF Certificate serial: 0C39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft Manifest number: 0BCC Signing time: Fri 12 Jun 2026 19:11:16 +0000 Manifest this update: Fri 12 Jun 2026 19:11:15 +0000 Manifest next update: Fri 19 Jun 2026 19:11:15 +0000 Files and hashes: 1: s2uXFySjur2JC3VFmJM3IPly_q8.crl (hash: ImWgGw7f/I0jSkQOTxSG4JlObwvnd5kKPkqd/Asiaxs=) 2: F1EB46D2717F11EEB3FA0A5EC4F9AE02.roa (hash: a5ETmaqpNy6qeOL+PmbuFg5Hvj7coJZt0e2vYVREM4A=) 3: C1ACB1E819EF11EC84DBF462C4F9AE02.roa (hash: /IKxncGwcVAUWd16lVeAqQuGXRqTtvt9Ll/KgYku0+M=) 4: A7470BFC33A711EBA4313B36C4F9AE02.roa (hash: ZCVyWhNkXCNm36AW8HvL8obBGE1kXtO5k/l1MbGslew=) 5: D992FDD49B4811EFA17EB17FC4F9AE02.roa (hash: FIe/ZxZ/czs73Iv9mGeR+sUl8NFbSaTBZOQUejuclqo=) 6: 966FD4648D2411EF9914EF63C4F9AE02.roa (hash: w7eYnxJy/ErX8uBHC7lb97b71ahe13DgTz190X2OvQU=) 7: 466891560ADA11ECBFAECB29C4F9AE02.roa (hash: uv7rdnmyI+gc1dDgRNGKvt12no6t8v6+Sh+LAKmYBS0=) 8: B66F0C58817111EFB121970CC4F9AE02.roa (hash: vY3JgYrHf50LIMon2cQ4xi3ayVXFANYUAF1HUUmukAc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 19:11:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3129 (0xc39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE558, serialNumber=B36B971724A3BABD890B754598933720F972FEAF Validity Not Before: Jun 12 19:11:15 2026 GMT Not After : Jun 19 19:11:15 2026 GMT Subject: CN=6a2c59d3-a89c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:96:e4:43:d0:83:a1:c8:87:7f:ee:28:44:47: 56:80:a2:ab:fd:9b:db:0d:2b:26:82:c1:3f:a1:40: 63:d6:d9:a4:c7:3a:3e:c9:9a:7d:c9:9f:84:15:c6: cf:6d:c0:fb:9f:24:f6:ee:e0:e2:e2:a8:59:6f:e1: 25:c2:0d:86:5e:82:a7:70:47:73:b9:e9:b1:14:49: a7:32:ac:dd:73:c4:ca:17:06:3e:79:ae:ea:f7:51: 17:9b:6b:91:59:30:f1:38:c6:21:34:82:ff:47:70: 6f:61:a0:29:f6:43:46:5f:b0:a1:f9:1a:ec:fe:67: 50:74:21:bd:d8:3c:07:b7:97:d2:15:2a:95:23:f6: f5:b1:95:bb:d0:e0:78:84:81:cd:5a:a6:25:bf:1f: c4:d7:e4:bf:4d:f5:d3:d7:9f:bf:25:0c:0f:19:f2: 1b:bc:9b:ea:dc:72:94:fc:d6:24:63:0b:aa:c6:16: 5e:6d:87:fe:ef:67:12:77:2a:52:f6:b2:89:29:52: f6:8c:0e:1e:9d:98:33:3b:69:6e:b4:05:6b:47:04: 05:73:78:7c:37:e9:50:e2:42:eb:64:3e:85:9a:70: fa:2a:be:2e:63:33:a4:c9:ab:f8:20:87:5c:ea:53: f3:d8:d1:11:11:dc:45:c9:ff:5f:e4:6d:4d:11:be: 83:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:E6:81:40:67:38:74:5C:00:82:17:85:A7:CC:CE:9F:A9:0A:ED:DD X509v3 Authority Key Identifier: keyid:B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:6e:ce:73:63:ed:5b:3e:a8:bb:f9:62:be:af:fb:ac:6f:c0: cf:78:f1:f8:d8:d1:7b:2f:3e:a4:3e:ad:6b:76:f8:00:80:e6: 5b:03:1f:a5:a0:1e:91:cf:44:ee:89:12:d4:d1:d8:90:17:3b: c4:50:42:fb:ce:07:5c:06:c2:12:94:62:a8:8a:05:e8:af:c9: 61:c9:e0:c3:17:42:89:ae:65:cf:55:24:8f:39:6b:f3:e9:2b: 52:f2:05:ea:39:6d:41:fa:bf:28:0f:e3:05:7f:d6:7e:d7:ab: c5:8c:c6:de:cf:5b:a2:94:c7:3a:ca:66:94:be:01:d0:34:2a: 41:4c:5d:01:63:40:b2:c7:d6:0c:14:1e:06:5b:a1:2e:f9:ca: 79:34:b7:75:69:c1:29:1a:cd:9b:f5:bf:e7:ad:d3:54:bf:8d: 92:b9:cb:80:84:ba:66:43:84:15:84:b8:82:0f:ea:83:5d:26: b2:8a:59:45:2f:a7:f5:96:d2:e3:ea:ca:d9:8f:4e:98:45:b3: 00:85:96:f3:c2:31:a4:be:cf:85:d0:a2:c8:88:d1:fb:fd:9a: 6e:b2:f3:3f:a7:53:5c:f9:76:49:0f:63:88:74:66:61:32:2c: 87:5c:ff:7f:26:f9:17:5e:8e:3f:c1:3f:2c:1f:bf:2e:8f:2f: 24:72:52:8e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1NTgxMTAvBgNVBAUTKEIzNkI5NzE3MjRBM0JBQkQ4OTBCNzU0NTk4OTMzNzIw Rjk3MkZFQUYwHhcNMjYwNjEyMTkxMTE1WhcNMjYwNjE5MTkxMTE1WjAYMRYwFAYD VQQDEw02YTJjNTlkMy1hODljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn5bkQ9CDociHf+4oREdWgKKr/ZvbDSsmgsE/oUBj1tmkxzo+yZp9yZ+EFcbP bcD7nyT27uDi4qhZb+Elwg2GXoKncEdzuemxFEmnMqzdc8TKFwY+ea7q91EXm2uR WTDxOMYhNIL/R3BvYaAp9kNGX7Ch+Rrs/mdQdCG92DwHt5fSFSqVI/b1sZW70OB4 hIHNWqYlvx/E1+S/TfXT15+/JQwPGfIbvJvq3HKU/NYkYwuqxhZebYf+72cSdypS 9rKJKVL2jA4enZgzO2lutAVrRwQFc3h8N+lQ4kLrZD6FmnD6Kr4uYzOkyav4IIdc 6lPz2NEREdxFyf9f5G1NEb6DLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLXmgUBn OHRcAIIXhafMzp+pCu3dMB8GA1UdIwQYMBaAFLNrlxcko7q9iQt1RZiTNyD5cv6v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTU1OC8zREYxNEYwODUz OTQxMUVBQkY2QjRGNUZDNEY5QUUwMi9zMnVYRnlTanVyMkpDM1ZGbUpNM0lQbHlf cTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MydVhGeVNqdXIySkMzVkZtSk0zSVBseV9xOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTU1OC8zREYxNEYwODUzOTQxMUVBQkY2QjRGNUZDNEY5QUUwMi9zMnVYRnlTanVy MkpDM1ZGbUpNM0lQbHlfcTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPG7Oc2PtWz6ou/livq/7rG/Az3jx+NjRey8+pD6ta3b4AIDmWwMfpaAekc9E 7okS1NHYkBc7xFBC+84HXAbCEpRiqIoF6K/JYcngwxdCia5lz1Ukjzlr8+krUvIF 6jltQfq/KA/jBX/WfterxYzG3s9bopTHOspmlL4B0DQqQUxdAWNAssfWDBQeBluh LvnKeTS3dWnBKRrNm/W/563TVL+NkrnLgIS6ZkOEFYS4gg/qg10msopZRS+n9ZbS 4+rK2Y9OmEWzAIWW88IxpL7PhdCiyIjR+/2abrLzP6dTXPl2SQ9jiHRmYTIsh1z/ fyb5F16OP8E/LB+/Lo8vJHJSjg== -----END CERTIFICATE-----Generated at Sat Jun 13 10:47:32 2026 by rpki-client