$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/raiu0ysVuH5hElLSnR4dW95YFkY.mft File: raiu0ysVuH5hElLSnR4dW95YFkY.mft (raw, json) Hash identifier: M43DIwywHd4bDn3yYKWbMR5ykGAAnrqe3bF5OxkkNY0= Subject key identifier: B9:87:11:F2:4F:38:E7:23:6B:88:E6:9B:D2:B3:4A:DB:39:11:16:A8 Authority key identifier: AD:A8:AE:D3:2B:15:B8:7E:61:12:52:D2:9D:1E:1D:5B:DE:58:16:46 Certificate issuer: /CN=A91DC5BE/serialNumber=ADA8AED32B15B87E611252D29D1E1D5BDE581646 Certificate serial: 3649 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raiu0ysVuH5hElLSnR4dW95YFkY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/raiu0ysVuH5hElLSnR4dW95YFkY.mft Manifest number: 35BB Signing time: Fri 12 Jun 2026 14:16:26 +0000 Manifest this update: Fri 12 Jun 2026 14:16:26 +0000 Manifest next update: Fri 19 Jun 2026 14:16:26 +0000 Files and hashes: 1: raiu0ysVuH5hElLSnR4dW95YFkY.crl (hash: wP/c8BEAm7LQjyV7x8P3JZdMyvjaCVnrwoIfp3BNJZg=) 2: FC72B9529F0311EAB6B8EA87C4F9AE02.roa (hash: US7l9IRW6KnysaR3hgfIHQKP61jxpaRsUq+BQajlvlE=) 3: 7C836BA46C8E11EEA38B9554C4F9AE02.roa (hash: 13OCzHbeP84SVts3fLFM8ezvX9wYG+xk9oztS8IQ/oo=) 4: DB3F9CA4817B11F0BDC51985C4F9AE02.roa (hash: Zl7CL1hILK98z1K1OQnmQBFBX3AF5k+q1EWP8nnTBiE=) 5: DCD41E8E98D511F0B3824663C4F9AE02.roa (hash: 46CC9LcyzFfBkRedCj8zONrcqyJIMjuxJScGt32qKqY=) 6: 662A2F2286B411E6BAEB2614C4F9AE02.roa (hash: y6ZiKIpbO8nVe1RhgWjLdE8kQETpbK+AjZQf/Ewa3Fk=) 7: E2446DD228AA11E79582F36BC4F9AE02.roa (hash: oS/2Yr0f0AX3IY6Qw0kprzC/haS0V2Vl/e9gsEC9t0o=) 8: C9B8A270483411ECA6C7C085C4F9AE02.roa (hash: 0TLVORl6wSPXD4zN0o2eNo/c7mH0Sa6LVUUSVrU3gGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/raiu0ysVuH5hElLSnR4dW95YFkY.crl rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/raiu0ysVuH5hElLSnR4dW95YFkY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raiu0ysVuH5hElLSnR4dW95YFkY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 14:16:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13897 (0x3649) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC5BE, serialNumber=ADA8AED32B15B87E611252D29D1E1D5BDE581646 Validity Not Before: Jun 12 14:16:26 2026 GMT Not After : Jun 19 14:16:26 2026 GMT Subject: CN=6a2c14ba-c443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:db:0a:33:c8:66:1e:57:28:ca:57:2f:54:d7: d9:79:6f:05:c9:38:0c:6b:9b:7a:ea:1c:d4:54:02: 5e:77:bc:8a:98:ed:fd:7e:cc:1a:f2:30:85:9b:20: f7:5e:2c:76:1a:1e:9a:67:a6:38:9f:02:83:a6:c1: 9c:78:fd:d4:ed:60:44:dd:25:17:f3:d2:8f:08:9f: 42:cd:65:a3:88:71:25:12:0e:70:03:b6:62:58:fb: 2a:9d:3b:87:13:78:5f:e5:21:46:82:76:5f:35:81: 7c:a5:7b:08:13:eb:fd:a6:02:cf:a4:d2:a7:00:98: fd:c5:ab:ac:88:04:55:8f:46:a0:17:d3:ae:69:a6: a1:44:4e:b6:a0:bc:96:96:f3:7e:77:f3:29:73:28: ff:33:c7:49:4b:c9:4b:d5:5a:6e:2c:c8:4a:e5:e2: f0:a9:a0:fb:8e:2d:35:5f:3f:c4:b3:a0:2d:67:18: 6c:0d:95:c1:44:8d:2d:32:ac:bc:99:57:b1:7c:2e: 0f:52:88:7d:bb:da:c9:c9:18:0b:72:b7:11:00:cf: 7b:29:d1:5a:f7:cd:a7:0d:47:fa:06:32:7d:b2:a7: 6b:37:bb:e0:55:da:42:6b:18:77:1c:c3:c2:54:cf: 38:af:39:1f:d7:4a:5e:bc:93:a9:db:d8:92:e6:2f: d1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:87:11:F2:4F:38:E7:23:6B:88:E6:9B:D2:B3:4A:DB:39:11:16:A8 X509v3 Authority Key Identifier: keyid:AD:A8:AE:D3:2B:15:B8:7E:61:12:52:D2:9D:1E:1D:5B:DE:58:16:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/raiu0ysVuH5hElLSnR4dW95YFkY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raiu0ysVuH5hElLSnR4dW95YFkY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/raiu0ysVuH5hElLSnR4dW95YFkY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:be:fc:38:e4:b3:5e:63:e5:f6:16:63:28:fd:38:26:d8:36: ac:31:2b:94:db:69:b6:4c:23:33:cb:16:66:e7:60:d5:d9:a5: ff:33:c6:6f:db:43:cf:8a:9b:bd:d1:b4:84:24:93:9a:6b:50: 2a:1c:d9:7a:62:c6:3d:73:d0:d5:e3:6f:62:63:cb:0a:cd:44: fc:2c:23:58:8c:7e:ec:25:ae:4f:5e:f4:fd:13:1c:b5:e4:d5: a5:63:f4:1c:e9:49:16:93:18:d2:0d:f0:cb:3a:0a:c2:9d:c9: 04:a5:19:51:2a:5a:b1:44:79:9a:7c:ea:d8:f0:8c:a3:57:af: ca:0a:15:20:77:51:d0:f8:51:bc:c0:84:3f:45:8a:8b:78:95: 3a:8b:9a:a5:d6:ec:12:d6:05:8d:79:30:78:ca:5f:81:ee:36: 97:ef:6c:da:06:0d:36:b7:0e:b8:71:4e:35:78:d2:eb:18:cd: a2:b8:1c:45:29:56:7f:5d:9a:aa:5d:c5:26:6e:89:86:47:02: d5:66:ef:5d:9f:d9:7e:cb:4c:68:f4:72:bb:e2:3b:cd:f9:e0: bc:68:45:ff:80:28:7d:35:04:f6:da:0b:9d:43:cd:39:49:b7: cb:9a:78:4f:4a:43:4a:1e:bb:b5:5b:11:9b:c6:92:60:8b:f7: 00:24:0b:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM1QkUxMTAvBgNVBAUTKEFEQThBRUQzMkIxNUI4N0U2MTEyNTJEMjlEMUUxRDVC REU1ODE2NDYwHhcNMjYwNjEyMTQxNjI2WhcNMjYwNjE5MTQxNjI2WjAYMRYwFAYD VQQDEw02YTJjMTRiYS1jNDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt9sKM8hmHlcoylcvVNfZeW8FyTgMa5t66hzUVAJed7yKmO39fswa8jCFmyD3 Xix2Gh6aZ6Y4nwKDpsGceP3U7WBE3SUX89KPCJ9CzWWjiHElEg5wA7ZiWPsqnTuH E3hf5SFGgnZfNYF8pXsIE+v9pgLPpNKnAJj9xausiARVj0agF9OuaaahRE62oLyW lvN+d/Mpcyj/M8dJS8lL1VpuLMhK5eLwqaD7ji01Xz/Es6AtZxhsDZXBRI0tMqy8 mVexfC4PUoh9u9rJyRgLcrcRAM97KdFa982nDUf6BjJ9sqdrN7vgVdpCaxh3HMPC VM84rzkf10pevJOp29iS5i/R7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLmHEfJP OOcja4jmm9KzSts5ERaoMB8GA1UdIwQYMBaAFK2ortMrFbh+YRJS0p0eHVveWBZG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzVCRS9ENDAxNjE5QTFE NjkxMUUyQUZCNjRFQTcwOEIwMkNEMi9yYWl1MHlzVnVINWhFbExTblI0ZFc5NVlG a1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JhaXUweXNWdUg1aEVsTFNuUjRkVzk1WUZrWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzVCRS9ENDAxNjE5QTFENjkxMUUyQUZCNjRFQTcwOEIwMkNEMi9yYWl1MHlzVnVI NWhFbExTblI0ZFc5NVlGa1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF778OOSzXmPl9hZjKP04Jtg2rDErlNtptkwjM8sWZudg1dml/zPGb9tDz4qb vdG0hCSTmmtQKhzZemLGPXPQ1eNvYmPLCs1E/CwjWIx+7CWuT170/RMcteTVpWP0 HOlJFpMY0g3wyzoKwp3JBKUZUSpasUR5mnzq2PCMo1evygoVIHdR0PhRvMCEP0WK i3iVOouapdbsEtYFjXkweMpfge42l+9s2gYNNrcOuHFONXjS6xjNorgcRSlWf12a ql3FJm6JhkcC1WbvXZ/ZfstMaPRyu+I7zfngvGhF/4AofTUE9toLnUPNOUm3y5p4 T0pDSh67tVsRm8aSYIv3ACQLdw== -----END CERTIFICATE-----Generated at Sat Jun 13 08:22:32 2026 by rpki-client