$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft File: IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft (raw, json) Hash identifier: +xFvUAu8KSwQ3AUR0C1zZ8bpftenNUCGQCaLQi5EKb0= Subject key identifier: 1B:F4:68:09:CF:AF:B6:50:F3:FE:FA:84:5B:84:05:25:1B:49:25:D3 Authority key identifier: 22:24:29:44:16:B8:46:57:06:55:4B:52:CB:C5:6F:44:9B:C4:6C:89 Certificate issuer: /CN=A91CFFCB/serialNumber=2224294416B8465706554B52CBC56F449BC46C89 Certificate serial: C9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiQpRBa4RlcGVUtSy8VvRJvEbIk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft Manifest number: C5 Signing time: Sat 13 Jun 2026 07:00:59 +0000 Manifest this update: Sat 13 Jun 2026 07:00:58 +0000 Manifest next update: Sat 20 Jun 2026 07:00:58 +0000 Files and hashes: 1: IiQpRBa4RlcGVUtSy8VvRJvEbIk.crl (hash: j2VGC2uqHQRpth05v1lBkC44gZtiFzyPgzdaQBd2yRA=) 2: BAEA3A3C497B11F096DCA14EC4F9AE02.roa (hash: +lH463qDPAwERrsUQl45+mVf4irW7NMTQzUVhbxqY6A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.crl rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiQpRBa4RlcGVUtSy8VvRJvEbIk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 07:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 201 (0xc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFCB, serialNumber=2224294416B8465706554B52CBC56F449BC46C89 Validity Not Before: Jun 13 07:00:58 2026 GMT Not After : Jun 20 07:00:58 2026 GMT Subject: CN=6a2d002a-3e2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:fa:f8:90:25:f3:6a:f8:c5:01:1f:9c:09:92: 3b:f3:90:60:60:ee:2e:84:b8:e3:3b:c8:8f:b1:8e: 3b:a6:d2:23:cf:23:c1:38:e0:ea:3c:22:e9:c0:e9: 28:9d:48:a8:96:e0:36:db:f4:5a:7c:c2:b6:f3:60: f1:88:1e:e4:3b:8e:cd:8f:5b:67:8b:71:5e:2a:02: c9:95:4c:be:df:50:af:e5:93:27:4a:b8:3a:25:cb: 80:64:6e:0e:fc:ba:46:1a:9c:1d:10:32:f4:9c:4b: bc:64:1e:91:32:8d:45:53:b7:00:95:dd:02:24:c4: aa:42:f4:9c:50:7c:a9:37:a6:82:f5:01:a1:68:35: d7:1a:ac:ef:80:b7:65:4a:50:a0:cc:b9:70:56:a4: e2:67:ad:b7:5e:20:35:87:bd:d1:66:e4:f3:d2:85: be:4d:8e:75:7e:19:60:d9:84:e6:c5:11:63:89:2d: 45:fe:10:1b:b9:55:dd:f5:60:26:a8:bc:3e:2f:ab: 8c:47:9e:2f:56:18:c1:19:8b:f7:9e:ed:5a:d7:d7: e8:78:13:ec:60:6c:0b:27:cf:5c:79:16:20:27:b1: 8a:f4:e9:3c:e3:e1:59:15:5e:09:3f:ef:39:d0:04: 5f:9e:1b:7a:a5:c2:4e:8a:48:e4:a3:2a:77:d1:6c: f7:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:F4:68:09:CF:AF:B6:50:F3:FE:FA:84:5B:84:05:25:1B:49:25:D3 X509v3 Authority Key Identifier: keyid:22:24:29:44:16:B8:46:57:06:55:4B:52:CB:C5:6F:44:9B:C4:6C:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiQpRBa4RlcGVUtSy8VvRJvEbIk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:ce:9c:a8:79:47:d8:d0:ed:df:d1:70:b9:64:e3:fa:44:f7: 90:3d:17:94:0d:0e:c8:19:35:32:17:0a:2a:2b:cb:44:1a:bd: c2:ce:b2:ca:73:f9:61:b3:b6:56:81:7e:ba:5d:44:7c:72:47: 3d:97:d4:da:d0:b3:b8:c6:d3:a9:64:ad:e3:ae:40:8b:a9:45: 29:04:b2:fb:00:a2:68:2c:b7:fe:6d:35:35:63:63:36:95:87: 3c:f9:98:23:3f:96:fa:42:06:7e:8d:99:ff:68:3e:cf:6c:07: 2d:a0:43:1d:e8:71:3b:97:cd:1a:00:4f:d6:84:ee:0d:2e:4e: 9d:94:68:95:81:9d:6c:d4:dc:b7:a8:24:0a:bb:02:72:fa:33: 0a:a3:80:d6:1e:86:43:ee:a8:26:86:b2:f3:bb:74:39:61:ff: e0:c5:14:86:d9:58:65:bb:b9:8e:a6:bf:25:87:a7:7a:4d:dd: c9:3a:ba:2f:1c:a2:ba:0d:1a:cd:a7:ed:03:ee:de:7c:db:23: 08:e5:43:14:0e:98:ce:e6:ac:77:5e:41:58:c7:4c:f7:a2:07: 30:a8:86:0b:76:7f:aa:2b:31:df:f9:ef:22:02:f2:c3:45:55: ba:80:9a:50:c4:07:f6:e8:db:15:6a:05:e3:00:85:79:aa:c4: 46:ef:5b:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGQ0IxMTAvBgNVBAUTKDIyMjQyOTQ0MTZCODQ2NTcwNjU1NEI1MkNCQzU2RjQ0 OUJDNDZDODkwHhcNMjYwNjEzMDcwMDU4WhcNMjYwNjIwMDcwMDU4WjAYMRYwFAYD VQQDEw02YTJkMDAyYS0zZTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmvr4kCXzavjFAR+cCZI785BgYO4uhLjjO8iPsY47ptIjzyPBOODqPCLpwOko nUioluA22/RafMK282DxiB7kO47Nj1tni3FeKgLJlUy+31Cv5ZMnSrg6JcuAZG4O /LpGGpwdEDL0nEu8ZB6RMo1FU7cAld0CJMSqQvScUHypN6aC9QGhaDXXGqzvgLdl SlCgzLlwVqTiZ623XiA1h73RZuTz0oW+TY51fhlg2YTmxRFjiS1F/hAbuVXd9WAm qLw+L6uMR54vVhjBGYv3nu1a19foeBPsYGwLJ89ceRYgJ7GK9Ok84+FZFV4JP+85 0ARfnht6pcJOikjkoyp30Wz3owIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBv0aAnP r7ZQ8/76hFuEBSUbSSXTMB8GA1UdIwQYMBaAFCIkKUQWuEZXBlVLUsvFb0SbxGyJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZDQi9FRDBGMTFGNDQy MDUxMUYwQkY3QTg3MTFDNEY5QUUwMi9JaVFwUkJhNFJsY0dWVXRTeThWdlJKdkVi SWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lpUXBSQmE0UmxjR1ZVdFN5OFZ2Ukp2RWJJay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkZDQi9FRDBGMTFGNDQyMDUxMUYwQkY3QTg3MTFDNEY5QUUwMi9JaVFwUkJhNFJs Y0dWVXRTeThWdlJKdkViSWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzs6cqHlH2NDt39FwuWTj+kT3kD0XlA0OyBk1MhcKKivLRBq9ws6yynP5YbO2 VoF+ul1EfHJHPZfU2tCzuMbTqWSt465Ai6lFKQSy+wCiaCy3/m01NWNjNpWHPPmY Iz+W+kIGfo2Z/2g+z2wHLaBDHehxO5fNGgBP1oTuDS5OnZRolYGdbNTct6gkCrsC cvozCqOA1h6GQ+6oJoay87t0OWH/4MUUhtlYZbu5jqa/JYenek3dyTq6Lxyiug0a zaftA+7efNsjCOVDFA6Yzuasd15BWMdM96IHMKiGC3Z/qisx3/nvIgLyw0VVuoCa UMQH9ujbFWoF4wCFearERu9b1A== -----END CERTIFICATE-----Generated at Sat Jun 13 17:06:43 2026 by rpki-client