$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2A10/F256CC16232C11F193A4D832A3833773/lNLPRKNppCI0T3ZXg78B6YKpxAE.mft File: lNLPRKNppCI0T3ZXg78B6YKpxAE.mft (raw, json) Hash identifier: cg8PwWdzvkHEleWn43xOz9/U9ZVF84FezastcK6MF6A= Subject key identifier: B8:00:75:90:E3:60:6E:BE:0A:C1:4F:47:95:FA:92:F6:A0:E5:D8:FD Authority key identifier: 94:D2:CF:44:A3:69:A4:22:34:4F:76:57:83:BF:01:E9:82:A9:C4:01 Certificate issuer: /CN=A91D2A10/serialNumber=94D2CF44A369A422344F765783BF01E982A9C401 Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lNLPRKNppCI0T3ZXg78B6YKpxAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2A10/F256CC16232C11F193A4D832A3833773/lNLPRKNppCI0T3ZXg78B6YKpxAE.mft Manifest number: 2E Signing time: Thu 11 Jun 2026 11:02:54 +0000 Manifest this update: Thu 11 Jun 2026 11:02:54 +0000 Manifest next update: Thu 18 Jun 2026 11:02:54 +0000 Files and hashes: 1: lNLPRKNppCI0T3ZXg78B6YKpxAE.crl (hash: QZIcH4ArYBcmUvafoOfrlG0BMVt6S91Uj7ZaGPh0QSc=) 2: A1E11254233211F193BBD607A5833773.roa (hash: yATqUA3STQ8R5PmkT2WcIp8HtIqcDGU6lhFcb0afmd4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2A10/F256CC16232C11F193A4D832A3833773/lNLPRKNppCI0T3ZXg78B6YKpxAE.crl rsync://rpki.apnic.net/member_repository/A91D2A10/F256CC16232C11F193A4D832A3833773/lNLPRKNppCI0T3ZXg78B6YKpxAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lNLPRKNppCI0T3ZXg78B6YKpxAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 11:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2A10, serialNumber=94D2CF44A369A422344F765783BF01E982A9C401 Validity Not Before: Jun 11 11:02:54 2026 GMT Not After : Jun 18 11:02:54 2026 GMT Subject: CN=6a2a95de-f35d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8d:2a:88:e8:11:b4:88:bf:e4:b7:1b:aa:69: 91:bb:ae:c7:e1:45:88:59:76:6a:da:6b:fc:58:35: 60:6a:88:08:14:30:5b:f0:21:16:a2:d9:8e:b9:ae: 4f:61:85:2f:4a:ab:9c:b4:33:88:78:e5:87:e9:79: 0f:4f:b8:65:d1:7b:20:db:1a:c5:ac:45:4e:61:2e: cd:e2:f2:36:26:bc:c7:ec:43:ef:39:a0:a3:a0:54: b6:43:66:ae:2a:05:d1:ec:ca:de:0b:39:e9:8c:49: 3e:da:51:2f:b7:54:47:1a:87:35:ec:d7:e9:4e:ce: 99:30:ba:70:68:ef:99:19:0c:d1:f5:8e:ee:4c:6a: 2f:9a:6c:b5:65:20:de:0b:7e:01:3b:db:12:8a:84: 9d:e5:26:19:d8:da:01:67:ab:16:dd:a9:f9:a8:25: 04:4d:6a:48:79:c8:c8:f0:7f:50:ff:87:fd:9b:e3: 79:e3:0b:d2:7c:3e:70:3a:f7:48:32:44:61:c6:7b: ce:ac:8c:65:22:69:e7:c5:bc:63:1e:4b:a9:92:29: 75:22:54:e9:03:7f:e0:4c:a9:44:d8:67:f7:4b:dc: 91:21:e9:78:29:ae:fc:e9:e7:bf:20:59:67:ba:dd: a3:e5:6a:5b:3a:55:da:bd:f4:76:a4:a3:55:86:4f: 4a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:00:75:90:E3:60:6E:BE:0A:C1:4F:47:95:FA:92:F6:A0:E5:D8:FD X509v3 Authority Key Identifier: keyid:94:D2:CF:44:A3:69:A4:22:34:4F:76:57:83:BF:01:E9:82:A9:C4:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2A10/F256CC16232C11F193A4D832A3833773/lNLPRKNppCI0T3ZXg78B6YKpxAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lNLPRKNppCI0T3ZXg78B6YKpxAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2A10/F256CC16232C11F193A4D832A3833773/lNLPRKNppCI0T3ZXg78B6YKpxAE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:af:2b:64:e8:71:74:c4:07:6b:ba:4a:b6:9c:fe:a4:21:b1: 9a:90:4b:87:7d:be:35:25:cc:b7:5f:3e:9d:95:b5:22:a1:48: bb:c8:d2:69:09:75:aa:f8:60:bc:d0:ac:74:6b:db:7f:db:75: 6e:2c:41:7a:7b:64:d0:a8:be:a4:1a:94:f8:25:e0:50:dc:c3: ad:08:df:a6:2b:30:4f:16:6a:b4:df:d8:0c:07:a2:77:95:fc: da:f5:69:52:95:91:66:7f:da:c1:51:ed:b0:78:00:f7:6c:ba: 2b:74:ad:34:69:d6:80:20:ce:ab:1d:22:ab:02:53:1d:b1:e6: 4f:dd:b9:a6:0d:5c:a8:61:4b:4f:0c:b7:3f:aa:75:5b:b6:8d: 62:fa:77:01:23:9e:f7:91:e6:3a:f7:af:db:84:09:20:67:8e: ce:a5:92:5f:aa:ab:6f:98:31:7d:7b:0f:1c:54:5c:be:ff:5e: 47:0c:a6:54:72:f5:98:e2:86:54:9c:3c:02:6f:5e:40:34:81: bf:f0:32:c2:3a:ab:e2:41:0d:42:ad:a0:1c:1b:9f:19:b9:c4: 01:56:ca:ff:c0:58:d9:07:0e:3c:12:ee:ef:45:2c:97:28:d0: 53:4c:89:95:73:88:82:c7:97:7d:48:fd:7f:16:4d:33:ab:4a: ac:eb:4e:17 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MkExMDExMC8GA1UEBRMoOTREMkNGNDRBMzY5QTQyMjM0NEY3NjU3ODNCRjAxRTk4 MkE5QzQwMTAeFw0yNjA2MTExMTAyNTRaFw0yNjA2MTgxMTAyNTRaMBgxFjAUBgNV BAMTDTZhMmE5NWRlLWYzNWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGjSqI6BG0iL/ktxuqaZG7rsfhRYhZdmraa/xYNWBqiAgUMFvwIRai2Y65rk9h hS9Kq5y0M4h45YfpeQ9PuGXReyDbGsWsRU5hLs3i8jYmvMfsQ+85oKOgVLZDZq4q BdHsyt4LOemMST7aUS+3VEcahzXs1+lOzpkwunBo75kZDNH1ju5Mai+abLVlIN4L fgE72xKKhJ3lJhnY2gFnqxbdqfmoJQRNakh5yMjwf1D/h/2b43njC9J8PnA690gy RGHGe86sjGUiaefFvGMeS6mSKXUiVOkDf+BMqUTYZ/dL3JEh6Xgprvzp578gWWe6 3aPlals6Vdq99Hako1WGT0oDAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUuAB1kONg br4KwU9HlfqS9qDl2P0wHwYDVR0jBBgwFoAUlNLPRKNppCI0T3ZXg78B6YKpxAEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyQTEwL0YyNTZDQzE2MjMy QzExRjE5M0E0RDgzMkEzODMzNzczL2xOTFBSS05wcENJMFQzWlhnNzhCNllLcHhB RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbE5MUFJLTnBwQ0kwVDNaWGc3OEI2WUtweEFFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy QTEwL0YyNTZDQzE2MjMyQzExRjE5M0E0RDgzMkEzODMzNzczL2xOTFBSS05wcENJ MFQzWlhnNzhCNllLcHhBRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBCrytk6HF0xAdrukq2nP6kIbGakEuHfb41Jcy3Xz6dlbUioUi7yNJpCXWq+GC8 0Kx0a9t/23VuLEF6e2TQqL6kGpT4JeBQ3MOtCN+mKzBPFmq039gMB6J3lfza9WlS lZFmf9rBUe2weAD3bLordK00adaAIM6rHSKrAlMdseZP3bmmDVyoYUtPDLc/qnVb to1i+ncBI573keY696/bhAkgZ47OpZJfqqtvmDF9ew8cVFy+/15HDKZUcvWY4oZU nDwCb15ANIG/8DLCOqviQQ1CraAcG58ZucQBVsr/wFjZBw48Eu7vRSyXKNBTTImV c4iCx5d9SP1/Fk0zq0qs604X -----END CERTIFICATE-----Generated at Sat Jun 13 08:22:50 2026 by rpki-client