$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft File: NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft (raw, json) Hash identifier: kosMlXr4ZyWxhkedtXgU6OS034Oj+5K34pnGZpzd2Zo= Subject key identifier: 47:75:A5:E4:B9:84:C1:9B:CD:01:2A:66:05:55:5C:53:12:DE:CA:4B Authority key identifier: 36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54 Certificate issuer: /CN=A91CFC1C/serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454 Certificate serial: 020C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft Manifest number: 0201 Signing time: Sat 13 Jun 2026 03:08:28 +0000 Manifest this update: Sat 13 Jun 2026 03:08:28 +0000 Manifest next update: Sat 20 Jun 2026 03:08:28 +0000 Files and hashes: 1: NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl (hash: EPjMba3o0KuxKjacJ10dw7Vvv14JyUL+b9gPB1dHAu4=) 2: E69E92582C4A11EF91F6202DC4F9AE02.roa (hash: zqESw+IWbG5U3Oh2cbA+9ioqV8DZZkTNSVndFvkCcIc=) 3: B390F78E5CB611EE97D70B78C4F9AE02.roa (hash: 2Pvyl2Pg+rvxhHMBAknVnfhicVn7ercKKujcqDRSopc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 524 (0x20c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFC1C, serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454 Validity Not Before: Jun 13 03:08:28 2026 GMT Not After : Jun 20 03:08:28 2026 GMT Subject: CN=6a2cc9ac-a6c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:25:21:1c:6d:66:5c:d2:12:26:a8:40:60:f7: f9:6c:7d:4b:57:b1:01:03:45:64:d0:38:58:ae:6f: a2:91:d4:77:e3:cd:3f:a2:da:b2:e8:b3:0d:b3:08: f6:81:b1:fe:88:69:e4:70:d7:57:d2:44:f4:3a:51: b4:5f:af:07:3c:5f:3b:49:be:fe:f5:24:ac:98:ae: bf:db:56:65:da:28:80:68:f5:9a:3d:66:d5:7c:b6: 85:a6:5d:12:2c:25:63:93:fd:f3:ae:0a:5d:ad:d0: b1:0a:89:15:fe:c7:52:2d:be:d5:17:07:6c:c5:02: 58:46:5b:6b:41:95:32:0b:f1:41:a9:e1:21:78:4c: bc:93:5d:3b:1e:f4:ab:30:1c:71:7f:eb:38:1f:9b: a2:81:6a:a2:b0:a8:4f:a9:6a:6a:57:bf:f0:9f:95: 08:3d:46:06:5c:f1:23:a2:9f:40:b3:33:f6:9d:dd: 18:43:3e:52:98:cd:ab:10:4b:6b:c2:74:6e:38:74: cf:1a:f1:89:37:87:80:29:bb:ed:98:4d:0b:31:d4: 6b:f2:4a:be:76:19:dc:87:be:69:06:a5:7d:83:29: 22:7a:81:2c:4b:04:cc:c7:5b:ad:8a:a8:92:65:08: 92:b3:6b:d3:3b:53:dd:48:0d:28:06:13:3b:f7:fd: e3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:75:A5:E4:B9:84:C1:9B:CD:01:2A:66:05:55:5C:53:12:DE:CA:4B X509v3 Authority Key Identifier: keyid:36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:47:ff:a8:a2:73:39:8e:00:ae:84:18:0e:b5:1f:99:d0:5e: 55:2a:5d:15:a3:f1:29:d0:04:14:5d:ee:64:bf:9c:fa:9f:5d: 83:5e:86:93:b4:74:27:07:7c:22:66:70:6f:3e:de:a5:f5:e5: 36:3f:05:3e:bf:c3:58:22:74:7a:08:d9:78:6f:2f:31:1b:ba: 3d:d3:57:05:95:73:34:6e:73:70:8b:9a:fa:b7:4a:51:20:e0: ec:e5:53:f5:1a:0a:5e:f2:d5:69:1c:c8:81:a9:85:53:42:cb: 60:78:c3:d6:55:18:30:b1:1b:83:19:7a:eb:e4:8e:6e:3b:86: f5:35:4f:64:d5:fd:5f:1e:50:a3:ea:26:ca:b5:0b:22:20:49: b1:45:25:4f:2a:49:03:99:33:41:01:e9:a0:3b:39:44:72:9f: db:24:8e:33:d5:d3:41:8b:2a:c6:26:14:a4:ca:8f:cc:d8:2e: 1b:e8:b7:ae:25:a8:25:f4:dd:ad:00:ba:65:11:c8:0a:ba:8d: 6a:a7:90:82:37:f2:fa:82:d4:e9:81:97:36:01:f2:7a:c3:a7: 90:ae:40:9b:dc:7e:e9:c4:7a:5b:a8:a3:d5:f0:f9:a2:f8:29: 09:48:8b:75:39:36:73:80:48:1a:89:4c:a0:fa:38:d6:79:a1: 4d:45:a5:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZDMUMxMTAvBgNVBAUTKDM2NDVDRDkwRTNGNDNDMDEyREFCM0JGMzk3MkU4NkJD OTREREQ0NTQwHhcNMjYwNjEzMDMwODI4WhcNMjYwNjIwMDMwODI4WjAYMRYwFAYD VQQDEw02YTJjYzlhYy1hNmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjSUhHG1mXNISJqhAYPf5bH1LV7EBA0Vk0DhYrm+ikdR3480/otqy6LMNswj2 gbH+iGnkcNdX0kT0OlG0X68HPF87Sb7+9SSsmK6/21Zl2iiAaPWaPWbVfLaFpl0S LCVjk/3zrgpdrdCxCokV/sdSLb7VFwdsxQJYRltrQZUyC/FBqeEheEy8k107HvSr MBxxf+s4H5uigWqisKhPqWpqV7/wn5UIPUYGXPEjop9AszP2nd0YQz5SmM2rEEtr wnRuOHTPGvGJN4eAKbvtmE0LMdRr8kq+dhnch75pBqV9gykieoEsSwTMx1utiqiS ZQiSs2vTO1PdSA0oBhM79/3jaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEd1peS5 hMGbzQEqZgVVXFMS3spLMB8GA1UdIwQYMBaAFDZFzZDj9DwBLas785cuhryU3dRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkMxQy8zQzE0MkIxNjU3 RkUxMUVFQUE1NTMwNjBDNEY5QUUwMi9Oa1hOa09QMFBBRXRxenZ6bHk2R3ZKVGQx RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05rWE5rT1AwUEFFdHF6dnpseTZHdkpUZDFGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkMxQy8zQzE0MkIxNjU3RkUxMUVFQUE1NTMwNjBDNEY5QUUwMi9Oa1hOa09QMFBB RXRxenZ6bHk2R3ZKVGQxRlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjkf/qKJzOY4AroQYDrUfmdBeVSpdFaPxKdAEFF3uZL+c+p9dg16Gk7R0Jwd8 ImZwbz7epfXlNj8FPr/DWCJ0egjZeG8vMRu6PdNXBZVzNG5zcIua+rdKUSDg7OVT 9RoKXvLVaRzIgamFU0LLYHjD1lUYMLEbgxl66+SObjuG9TVPZNX9Xx5Qo+omyrUL IiBJsUUlTypJA5kzQQHpoDs5RHKf2ySOM9XTQYsqxiYUpMqPzNguG+i3riWoJfTd rQC6ZRHICrqNaqeQgjfy+oLU6YGXNgHyesOnkK5Am9x+6cR6W6ij1fD5ovgpCUiL dTk2c4BIGolMoPo41nmhTUWl6A== -----END CERTIFICATE-----Generated at Sat Jun 13 07:26:42 2026 by rpki-client