$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft File: iP8qX1-BdhNDU35LVLXmoW8gfqk.mft (raw, json) Hash identifier: FgaQKR7mA+/g9tqUe0cWtYLPdvijR+HEj4L0IVGfYmg= Subject key identifier: 85:92:88:B3:C6:38:42:42:BC:D9:B4:99:AA:0D:BD:0B:A8:7E:7A:F7 Authority key identifier: 88:FF:2A:5F:5F:81:76:13:43:53:7E:4B:54:B5:E6:A1:6F:20:7E:A9 Certificate issuer: /CN=A91CF1E7/serialNumber=88FF2A5F5F81761343537E4B54B5E6A16F207EA9 Certificate serial: 020A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iP8qX1-BdhNDU35LVLXmoW8gfqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft Manifest number: 020A Signing time: Sat 13 Jun 2026 03:01:02 +0000 Manifest this update: Sat 13 Jun 2026 03:01:02 +0000 Manifest next update: Sat 20 Jun 2026 03:01:02 +0000 Files and hashes: 1: iP8qX1-BdhNDU35LVLXmoW8gfqk.crl (hash: Ex3Flb9Sgz+Sef/TlHzBEeQYVpKavgw+drgRJVfVGxk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.crl rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iP8qX1-BdhNDU35LVLXmoW8gfqk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 522 (0x20a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF1E7, serialNumber=88FF2A5F5F81761343537E4B54B5E6A16F207EA9 Validity Not Before: Jun 13 03:01:02 2026 GMT Not After : Jun 20 03:01:02 2026 GMT Subject: CN=6a2cc7ee-66d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5a:66:b3:da:90:1a:d4:69:d8:d6:47:da:3f: 93:83:aa:a8:92:6d:8d:11:42:a0:52:42:4d:f9:a1: e7:32:f5:a1:a4:02:de:91:29:5a:d2:f1:7a:43:83: bc:da:94:3b:36:18:43:61:5b:69:93:a7:33:dc:33: 26:12:1f:2f:e4:85:7a:5b:70:b6:f6:4f:70:2e:2a: 89:fe:7f:3a:e3:b9:9d:a1:3d:69:76:cb:1c:56:a1: c5:41:d1:16:67:ae:a3:69:88:19:38:ac:ad:95:af: b9:54:9f:40:1d:a3:49:c9:50:66:2f:05:5d:b8:11: 41:01:cb:a5:b9:79:48:30:77:fb:7a:2a:df:39:93: f2:f6:14:ad:6c:4b:76:bb:c7:79:1c:ea:8f:0d:34: ad:bd:bb:29:90:65:69:2f:8d:f4:da:32:d0:af:25: 41:80:ca:4f:c7:b2:b9:97:f6:2b:3d:fd:70:49:02: b7:84:8b:e7:eb:26:73:68:05:58:62:ee:bf:4f:ba: 9c:f5:55:6a:5a:a5:4a:19:44:8d:5c:1d:e0:30:02: 5e:7c:81:2d:38:6a:7c:34:53:17:59:30:26:97:d5: 57:6c:9b:66:f1:13:79:8a:47:46:d3:84:be:52:0f: 49:e6:06:64:36:0f:77:38:e3:c7:ef:e2:e3:46:c2: 5d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:92:88:B3:C6:38:42:42:BC:D9:B4:99:AA:0D:BD:0B:A8:7E:7A:F7 X509v3 Authority Key Identifier: keyid:88:FF:2A:5F:5F:81:76:13:43:53:7E:4B:54:B5:E6:A1:6F:20:7E:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iP8qX1-BdhNDU35LVLXmoW8gfqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:b5:b9:be:34:aa:c1:c8:eb:3d:03:ab:87:c8:e5:93:46:77: b5:5b:ef:8b:76:ec:f7:06:bc:07:15:18:d1:27:e9:ee:0e:e3: ac:5d:68:c0:88:94:b5:6c:df:f8:fe:5b:52:ee:62:d3:04:ec: 51:26:23:37:4f:04:63:a4:41:03:1d:cd:28:f2:d9:a6:95:46: 9d:49:8b:2c:54:fe:78:ba:10:8d:4d:02:ba:b3:0f:16:ef:bd: 3c:dd:b7:2b:99:ad:48:d6:89:7d:bd:de:2f:df:1e:90:e3:c3: 42:42:68:48:28:fc:ab:9f:e1:1a:68:6a:27:94:6b:f0:34:c0: 45:28:75:8c:02:52:c5:09:47:77:ff:a8:3e:3a:68:3a:01:8b: 21:a3:a7:00:73:b1:bb:3a:8b:da:76:b0:5c:1e:e0:ef:fd:d3: c0:65:b4:8a:44:1e:3a:87:64:b6:ad:82:0c:44:75:21:0a:77: e4:86:5b:d9:65:49:08:bf:99:f7:82:2b:f7:0a:06:56:44:f9: ce:e2:3b:8a:0b:d3:53:8e:23:0e:e6:6a:ef:b9:b0:91:b9:23: ab:ca:b6:a1:46:0f:9d:60:ec:60:ff:76:22:48:44:40:06:22: a0:4a:8f:94:c3:b6:b2:63:0d:09:fb:57:17:6e:d1:3a:09:1f: 78:79:34:e4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YxRTcxMTAvBgNVBAUTKDg4RkYyQTVGNUY4MTc2MTM0MzUzN0U0QjU0QjVFNkEx NkYyMDdFQTkwHhcNMjYwNjEzMDMwMTAyWhcNMjYwNjIwMDMwMTAyWjAYMRYwFAYD VQQDEw02YTJjYzdlZS02NmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzFpms9qQGtRp2NZH2j+Tg6qokm2NEUKgUkJN+aHnMvWhpALekSla0vF6Q4O8 2pQ7NhhDYVtpk6cz3DMmEh8v5IV6W3C29k9wLiqJ/n8647mdoT1pdsscVqHFQdEW Z66jaYgZOKytla+5VJ9AHaNJyVBmLwVduBFBAculuXlIMHf7eirfOZPy9hStbEt2 u8d5HOqPDTStvbspkGVpL4302jLQryVBgMpPx7K5l/YrPf1wSQK3hIvn6yZzaAVY Yu6/T7qc9VVqWqVKGUSNXB3gMAJefIEtOGp8NFMXWTAml9VXbJtm8RN5ikdG04S+ Ug9J5gZkNg93OOPH7+LjRsJdvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIWSiLPG OEJCvNm0maoNvQuofnr3MB8GA1UdIwQYMBaAFIj/Kl9fgXYTQ1N+S1S15qFvIH6p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjFFNy8xREJFMUEzMjQ3 QjkxMUVFQUFEM0RCNEFDNEY5QUUwMi9pUDhxWDEtQmRoTkRVMzVMVkxYbW9XOGdm cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lQOHFYMS1CZGhORFUzNUxWTFhtb1c4Z2Zxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjFFNy8xREJFMUEzMjQ3QjkxMUVFQUFEM0RCNEFDNEY5QUUwMi9pUDhxWDEtQmRo TkRVMzVMVkxYbW9XOGdmcWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArrW5vjSqwcjrPQOrh8jlk0Z3tVvvi3bs9wa8BxUY0Sfp7g7jrF1owIiUtWzf +P5bUu5i0wTsUSYjN08EY6RBAx3NKPLZppVGnUmLLFT+eLoQjU0CurMPFu+9PN23 K5mtSNaJfb3eL98ekOPDQkJoSCj8q5/hGmhqJ5Rr8DTARSh1jAJSxQlHd/+oPjpo OgGLIaOnAHOxuzqL2nawXB7g7/3TwGW0ikQeOodktq2CDER1IQp35IZb2WVJCL+Z 94Ir9woGVkT5zuI7igvTU44jDuZq77mwkbkjq8q2oUYPnWDsYP92IkhEQAYioEqP lMO2smMNCftXF27ROgkfeHk05A== -----END CERTIFICATE-----Generated at Sat Jun 13 08:17:14 2026 by rpki-client