$ rpki-client -vvf rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.mft File: xOTw2gEK9YY3zFlihHHpmLckPFI.mft (raw, json) Hash identifier: 22HJCjC+E0hW/2cgA6sbcEz+x0MGTiJ37sn+ZasX0TI= Subject key identifier: C7:7E:07:5A:8A:E5:19:E0:DE:84:25:0C:C8:D6:A8:95:1A:31:5A:EB Authority key identifier: C4:E4:F0:DA:01:0A:F5:86:37:CC:59:62:84:71:E9:98:B7:24:3C:52 Certificate issuer: /CN=A91D83D0/serialNumber=C4E4F0DA010AF58637CC59628471E998B7243C52 Certificate serial: 09DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xOTw2gEK9YY3zFlihHHpmLckPFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.mft Manifest number: 09B2 Signing time: Fri 12 Jun 2026 20:00:34 +0000 Manifest this update: Fri 12 Jun 2026 20:00:34 +0000 Manifest next update: Fri 19 Jun 2026 20:00:34 +0000 Files and hashes: 1: xOTw2gEK9YY3zFlihHHpmLckPFI.crl (hash: mn7yyjeu8naI1JwExHT2QUJoU13zQK3ZKYbPfn/yVQQ=) 2: 5353EA28781F11EEBA05B17FC4F9AE02.roa (hash: 95lSl7vVPRfDQ24xYlePTZRf3aCd1VmR4GdHAdsIHtU=) 3: 863670328FD011EEB6FFC636C4F9AE02.roa (hash: soe5Moz4gQVVes64vfH27mxJAWxDV9xSP3vrYYcdBj8=) 4: 7B3252CC014911F1B56055C9516F56BC.roa (hash: Q4zhbv5IYafCWF+cKZ+N5EqVvhygYSFdunW/fgxR9Ms=) 5: 6A6E4770A10F11EF840C2548C4F9AE02.roa (hash: +RYGeu7uX4uBBcHWusqQhkXqLpcB4R1AKfIKops3PNA=) 6: 2BFE357EF06211F08763644E5C6F56BC.roa (hash: 7NcbnhD/HJ8NBFUu7bu5fda+cHjTW1crabfldM6QJwo=) 7: 03706138786411EC8624EB12C4F9AE02.roa (hash: BrG7Q3Tkykmo9xilseoxsNjwLBVZ7ijytYCkK61f/ms=) 8: F4E74AA8B99911EF9A0C3B63C4F9AE02.roa (hash: rC7/cLhAbtNiKypXkgnC2P4P5so5I+YnfNchz84YMA0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.crl rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xOTw2gEK9YY3zFlihHHpmLckPFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 20:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2525 (0x9dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D83D0, serialNumber=C4E4F0DA010AF58637CC59628471E998B7243C52 Validity Not Before: Jun 12 20:00:34 2026 GMT Not After : Jun 19 20:00:34 2026 GMT Subject: CN=6a2c6562-3fe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:59:05:4b:df:25:13:ac:46:ac:c0:06:d8:0e: 1b:0d:a2:b2:31:ab:b3:6a:68:9e:1c:3e:f7:86:03: 1a:eb:ec:8c:b9:8f:3c:55:b7:75:03:28:5d:d6:80: f1:6a:9a:2a:84:c8:b7:22:25:0a:57:c3:98:8d:4e: 3f:96:f6:c9:6c:e9:5a:bd:e7:36:4b:ca:6e:9b:0d: b9:f0:c0:d1:74:c8:13:53:13:5c:ca:df:36:f5:3f: 3c:02:d9:01:4b:2f:53:50:a7:af:04:6f:10:39:cc: d5:fd:49:06:25:56:41:25:03:92:82:9b:7b:52:33: cb:20:f0:e1:cd:8d:04:0e:f8:d8:8d:07:b4:91:5a: e2:fa:c1:06:26:89:9f:d0:4e:8b:44:75:e2:2e:69: cb:40:68:bc:8c:84:d2:d8:a9:8e:e5:b2:40:79:a9: 13:d4:bd:fe:8d:45:69:85:47:0a:cd:5b:8d:28:f7: b1:65:2e:62:ad:5b:e5:be:f2:9e:f1:6e:18:41:70: 40:35:2e:99:30:a7:9c:a0:a5:87:4d:d0:43:50:78: 35:14:75:ac:f1:f4:0d:c3:0f:9c:1e:66:96:09:e5: d7:79:5b:25:fe:96:ec:32:c8:cb:ad:f5:b5:91:ee: 3a:ca:28:47:bc:a6:1c:4c:77:6d:f8:d1:5a:42:d5: 3b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:7E:07:5A:8A:E5:19:E0:DE:84:25:0C:C8:D6:A8:95:1A:31:5A:EB X509v3 Authority Key Identifier: keyid:C4:E4:F0:DA:01:0A:F5:86:37:CC:59:62:84:71:E9:98:B7:24:3C:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xOTw2gEK9YY3zFlihHHpmLckPFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:41:08:b8:04:66:88:71:41:22:0d:8f:b3:ea:6e:24:41:5e: 13:cb:9a:8b:ad:95:23:77:6c:67:78:83:2c:1a:c8:38:ce:b0: c5:bf:77:a1:35:6b:73:7f:a8:f1:a7:35:14:96:47:6b:3c:17: 21:24:61:f9:4b:4b:d3:32:81:e6:dd:e3:7e:c4:47:06:fa:83: ba:c7:5f:76:c3:45:67:0d:04:d9:81:69:d2:1f:0d:63:a8:a4: 53:80:4d:66:59:5e:f9:59:3c:ea:c7:ad:96:f9:02:07:c0:a0: 63:57:af:3d:90:f1:29:c7:b0:0c:82:b8:6e:ba:a6:a0:54:72: 5e:1c:31:4c:0d:05:d3:dd:bf:68:18:6a:ad:23:03:91:1c:5a: b2:26:9a:04:40:5a:97:97:97:d3:18:2f:fc:58:50:e9:82:ff: 7a:84:81:84:8a:9e:58:a2:2e:c4:13:69:c3:6a:93:41:cb:7d: e1:8d:f4:2a:26:5d:cf:1a:d9:39:71:5a:08:f8:3b:e0:bf:a8: 84:6a:24:57:0d:6d:d1:7a:41:31:0a:bf:40:45:56:0d:bc:1d: 58:f0:ea:9c:99:65:aa:f6:87:05:4e:05:e5:fd:9a:64:12:a9: 90:31:70:b8:70:bf:dd:ca:70:49:65:82:06:57:65:54:88:0e: 3f:09:69:e0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgzRDAxMTAvBgNVBAUTKEM0RTRGMERBMDEwQUY1ODYzN0NDNTk2Mjg0NzFFOTk4 QjcyNDNDNTIwHhcNMjYwNjEyMjAwMDM0WhcNMjYwNjE5MjAwMDM0WjAYMRYwFAYD VQQDEw02YTJjNjU2Mi0zZmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjlkFS98lE6xGrMAG2A4bDaKyMauzamieHD73hgMa6+yMuY88Vbd1Ayhd1oDx apoqhMi3IiUKV8OYjU4/lvbJbOlavec2S8pumw258MDRdMgTUxNcyt829T88AtkB Sy9TUKevBG8QOczV/UkGJVZBJQOSgpt7UjPLIPDhzY0EDvjYjQe0kVri+sEGJomf 0E6LRHXiLmnLQGi8jITS2KmO5bJAeakT1L3+jUVphUcKzVuNKPexZS5irVvlvvKe 8W4YQXBANS6ZMKecoKWHTdBDUHg1FHWs8fQNww+cHmaWCeXXeVsl/pbsMsjLrfW1 ke46yihHvKYcTHdt+NFaQtU7iwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMd+B1qK 5Rng3oQlDMjWqJUaMVrrMB8GA1UdIwQYMBaAFMTk8NoBCvWGN8xZYoRx6Zi3JDxS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODNEMC8wQTE2MjA4QUFG QkMxMUVBQTk2MUNCODZDNEY5QUUwMi94T1R3MmdFSzlZWTN6RmxpaEhIcG1MY2tQ RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hPVHcyZ0VLOVlZM3pGbGloSEhwbUxja1BGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODNEMC8wQTE2MjA4QUFGQkMxMUVBQTk2MUNCODZDNEY5QUUwMi94T1R3MmdFSzlZ WTN6RmxpaEhIcG1MY2tQRkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ0EIuARmiHFBIg2Ps+puJEFeE8uai62VI3dsZ3iDLBrIOM6wxb93oTVrc3+o 8ac1FJZHazwXISRh+UtL0zKB5t3jfsRHBvqDusdfdsNFZw0E2YFp0h8NY6ikU4BN Zlle+Vk86setlvkCB8CgY1evPZDxKcewDIK4brqmoFRyXhwxTA0F092/aBhqrSMD kRxasiaaBEBal5eX0xgv/FhQ6YL/eoSBhIqeWKIuxBNpw2qTQct94Y30KiZdzxrZ OXFaCPg74L+ohGokVw1t0XpBMQq/QEVWDbwdWPDqnJllqvaHBU4F5f2aZBKpkDFw uHC/3cpwSWWCBldlVIgOPwlp4A== -----END CERTIFICATE-----Generated at Sat Jun 13 21:51:48 2026 by rpki-client