$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft File: _oJu6bwS2q07GXRxsEE_HrIIJjU.mft (raw, json) Hash identifier: bsH5GpZovcXLvbLz8MHDcLG2RzqKETCOJaNnhs1t61w= Subject key identifier: 8B:2F:7B:B8:14:76:50:0C:EA:0E:3B:15:3B:27:4A:6F:68:66:4E:EC Authority key identifier: FE:82:6E:E9:BC:12:DA:AD:3B:19:74:71:B0:41:3F:1E:B2:08:26:35 Certificate issuer: /CN=A91CEBCA/serialNumber=FE826EE9BC12DAAD3B197471B0413F1EB2082635 Certificate serial: 3590 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft Manifest number: 3570 Signing time: Fri 12 Jun 2026 14:30:31 +0000 Manifest this update: Fri 12 Jun 2026 14:30:30 +0000 Manifest next update: Fri 19 Jun 2026 14:30:30 +0000 Files and hashes: 1: _oJu6bwS2q07GXRxsEE_HrIIJjU.crl (hash: F0ZurHKtrct2CJjMk1zsgx+u+1QZpuQfm2uWpMwwIhA=) 2: 9954B962F02D11EFBA26B94FC4F9AE02.roa (hash: vc754wKZ9fTuYsd5eWhSpeKuauP2yCgdWc//OMaJAOo=) 3: BFABA2D6BECE11F0B218C045C4F9AE02.roa (hash: /QkgzfATlH/sUZdlcC1kixai5w0E/QTcB6zQhhCEKdA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.crl rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 14:30:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13712 (0x3590) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEBCA, serialNumber=FE826EE9BC12DAAD3B197471B0413F1EB2082635 Validity Not Before: Jun 12 14:30:30 2026 GMT Not After : Jun 19 14:30:30 2026 GMT Subject: CN=6a2c1807-1aaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:54:7c:83:e1:b9:95:dc:86:d8:92:fc:da:3b: 46:ee:54:0a:51:5f:2c:16:13:0a:73:49:3a:7c:a8: 78:f6:d8:44:96:98:48:63:6f:ca:f2:17:d6:2c:de: 3f:6f:30:bf:21:10:7b:9c:9e:86:36:af:07:c6:1b: 23:ff:91:b5:b2:71:08:3f:f2:0c:3c:db:30:65:f2: d2:1c:f5:04:77:73:35:db:f3:50:76:c4:d2:fe:92: 87:7a:59:71:5a:01:5d:d3:f4:48:3f:a6:b1:9e:1f: 86:58:84:ae:9f:30:20:44:71:b4:35:a1:a2:37:9b: d4:27:01:cf:9b:90:f7:6f:dd:5e:ff:ab:d9:57:0e: 17:59:02:19:7c:83:23:a0:bb:54:11:cb:fb:8e:70: 20:1e:62:a8:10:f4:12:8d:4b:5d:3d:95:f6:56:1f: 34:10:16:c1:9d:8d:e8:4c:1f:bc:f9:4d:5d:64:e3: 2d:37:f4:9c:3e:23:d0:ca:8e:f1:16:7a:45:99:7a: a2:8f:df:28:e4:45:59:24:6b:d0:1b:4d:97:4b:e7: b3:a6:27:fc:d5:13:75:35:1a:23:38:cc:75:d4:45: 48:a2:d0:50:61:d9:1d:85:1f:de:48:df:f7:77:ed: 29:ef:b6:30:68:80:42:31:7b:18:40:fc:de:9e:90: 1a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:2F:7B:B8:14:76:50:0C:EA:0E:3B:15:3B:27:4A:6F:68:66:4E:EC X509v3 Authority Key Identifier: keyid:FE:82:6E:E9:BC:12:DA:AD:3B:19:74:71:B0:41:3F:1E:B2:08:26:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:60:07:b1:ca:36:60:2a:f0:49:c7:20:67:92:7a:77:cb:97: da:25:5c:fc:d1:62:3b:f7:f4:2f:a1:42:5b:b8:5c:5e:3b:23: 4c:e8:4e:06:45:ef:9b:6d:28:4a:c9:db:0d:fc:5a:47:2a:93: fc:4e:90:9b:31:48:1a:d7:b8:cb:bf:6d:5d:c2:41:75:9a:d1: ae:79:ae:5a:a5:8b:ec:c1:c4:f0:67:61:6a:0c:31:d9:58:72: 2d:0f:03:2e:ed:2a:5e:6d:db:67:f9:34:5a:bd:f7:d3:2c:8e: 52:97:99:6f:c3:29:c6:5a:54:45:b3:1c:aa:9a:1b:c8:b4:23: ed:ff:bd:49:33:2c:9b:e1:c6:45:42:53:cd:cc:b4:70:83:a4: 29:bc:af:59:03:7b:ee:63:fb:28:80:c9:32:61:87:8c:2f:31: a0:af:e5:f7:74:96:ce:43:8d:35:74:05:12:e8:d8:32:c3:ca: 2d:20:16:84:e0:02:fd:6b:f9:bc:af:b0:17:f7:4c:6b:ac:e3: f5:ee:4e:59:11:ec:44:d0:c4:df:ae:40:da:b5:c5:7d:c9:58: 76:d8:14:eb:34:3d:d1:56:a1:75:ff:a1:f7:43:ae:2b:d3:20: 7f:21:47:77:7a:d1:80:c1:27:8d:ef:f6:39:42:16:13:38:78: 24:6b:37:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VCQ0ExMTAvBgNVBAUTKEZFODI2RUU5QkMxMkRBQUQzQjE5NzQ3MUIwNDEzRjFF QjIwODI2MzUwHhcNMjYwNjEyMTQzMDMwWhcNMjYwNjE5MTQzMDMwWjAYMRYwFAYD VQQDEw02YTJjMTgwNy0xYWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVR8g+G5ldyG2JL82jtG7lQKUV8sFhMKc0k6fKh49thElphIY2/K8hfWLN4/ bzC/IRB7nJ6GNq8Hxhsj/5G1snEIP/IMPNswZfLSHPUEd3M12/NQdsTS/pKHellx WgFd0/RIP6axnh+GWISunzAgRHG0NaGiN5vUJwHPm5D3b91e/6vZVw4XWQIZfIMj oLtUEcv7jnAgHmKoEPQSjUtdPZX2Vh80EBbBnY3oTB+8+U1dZOMtN/ScPiPQyo7x FnpFmXqij98o5EVZJGvQG02XS+ezpif81RN1NRojOMx11EVIotBQYdkdhR/eSN/3 d+0p77YwaIBCMXsYQPzenpAa1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIsve7gU dlAM6g47FTsnSm9oZk7sMB8GA1UdIwQYMBaAFP6Cbum8EtqtOxl0cbBBPx6yCCY1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUJDQS9CNTg4QjRBNjFE ODgxMUUyOENBRThGRTEwOEIwMkNEMi9fb0p1NmJ3UzJxMDdHWFJ4c0VFX0hySUlK alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19vSnU2YndTMnEwN0dYUnhzRUVfSHJJSUpqVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUJDQS9CNTg4QjRBNjFEODgxMUUyOENBRThGRTEwOEIwMkNEMi9fb0p1NmJ3UzJx MDdHWFJ4c0VFX0hySUlKalUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAWAHsco2YCrwSccgZ5J6d8uX2iVc/NFiO/f0L6FCW7hcXjsjTOhOBkXvm20o SsnbDfxaRyqT/E6QmzFIGte4y79tXcJBdZrRrnmuWqWL7MHE8Gdhagwx2VhyLQ8D Lu0qXm3bZ/k0Wr330yyOUpeZb8MpxlpURbMcqpobyLQj7f+9STMsm+HGRUJTzcy0 cIOkKbyvWQN77mP7KIDJMmGHjC8xoK/l93SWzkONNXQFEujYMsPKLSAWhOAC/Wv5 vK+wF/dMa6zj9e5OWRHsRNDE365A2rXFfclYdtgU6zQ90Vahdf+h90OuK9MgfyFH d3rRgMEnje/2OUIWEzh4JGs3pA== -----END CERTIFICATE-----Generated at Sat Jun 13 19:28:08 2026 by rpki-client