$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDB11/D84C3FE04E0611F1A64B629AC9833773/XEH4EDozCnVMPG44dNzKXcSOGwA.mft File: XEH4EDozCnVMPG44dNzKXcSOGwA.mft (raw, json) Hash identifier: 9f1UT7MjIxSdRBJPWeRkhjWh+LdjAL8NudW1r2wGc18= Subject key identifier: BD:02:D4:6B:CD:EC:19:E9:F2:40:49:06:BD:9B:B3:47:95:5B:07:21 Authority key identifier: 5C:41:F8:10:3A:33:0A:75:4C:3C:6E:38:74:DC:CA:5D:C4:8E:1B:00 Certificate issuer: /CN=A91DDB11/serialNumber=5C41F8103A330A754C3C6E3874DCCA5DC48E1B00 Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XEH4EDozCnVMPG44dNzKXcSOGwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDB11/D84C3FE04E0611F1A64B629AC9833773/XEH4EDozCnVMPG44dNzKXcSOGwA.mft Manifest number: 13 Signing time: Mon 15 Jun 2026 09:09:04 +0000 Manifest this update: Mon 15 Jun 2026 09:09:04 +0000 Manifest next update: Mon 22 Jun 2026 09:09:04 +0000 Files and hashes: 1: XEH4EDozCnVMPG44dNzKXcSOGwA.crl (hash: It8XJuz1/ch6XY/Cgoyl0KfVxWT8rJCAfvrD/wLts0g=) 2: 055A1AFA4E0911F188B16820CA833773.roa (hash: aSvFINVvPGG0gnxFG3kmdfj7WoAkgDA4x7vxEipsK0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDB11/D84C3FE04E0611F1A64B629AC9833773/XEH4EDozCnVMPG44dNzKXcSOGwA.crl rsync://rpki.apnic.net/member_repository/A91DDB11/D84C3FE04E0611F1A64B629AC9833773/XEH4EDozCnVMPG44dNzKXcSOGwA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XEH4EDozCnVMPG44dNzKXcSOGwA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Jun 2026 01:32:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDB11, serialNumber=5C41F8103A330A754C3C6E3874DCCA5DC48E1B00 Validity Not Before: Jun 15 09:09:04 2026 GMT Not After : Jun 22 09:09:04 2026 GMT Subject: CN=6a2fc130-a26a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a2:cf:4a:03:7a:0b:a5:c9:01:00:0d:a2:90: ec:e8:3d:41:2a:0d:d6:04:36:24:ea:f0:cc:3b:b2: fa:56:67:98:cc:f4:32:07:74:9d:cb:f2:2d:f7:88: 12:3b:2f:02:5e:c6:4e:2f:6c:83:38:f1:21:e4:fc: 6e:da:b8:a5:fa:2f:dc:9f:20:4d:1b:c7:b1:5d:a3: 8b:07:bc:6e:28:48:ad:74:c9:e1:a4:7f:6c:ff:f9: 76:77:9e:11:8b:2a:70:2b:e5:35:f7:d5:19:cf:9f: 4b:32:8c:6b:5f:8d:0b:74:3f:ef:dc:51:9c:d8:4a: 95:cb:57:28:7d:8c:78:ee:8c:b0:72:19:bd:50:ba: fd:6f:df:88:40:21:49:9c:c4:ff:fd:56:4c:00:ed: 96:eb:86:f7:8e:1e:30:db:d6:15:b9:2d:dc:45:2e: 51:ce:b5:87:62:0b:f9:4b:47:ea:63:d8:89:c4:d8: a5:a6:80:75:53:26:d4:2b:a5:8d:c5:c5:bd:e3:c1: ee:24:39:f3:51:8b:a8:ae:05:00:3a:95:1a:35:1f: 2d:db:d8:2a:98:d6:66:9e:c7:5c:c6:f8:8b:33:00: 84:f4:9d:52:0f:48:f7:e8:be:c4:a5:0a:f0:90:3e: 8f:dd:54:53:c0:db:87:70:23:5a:5b:2b:ec:7f:ea: 1b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:02:D4:6B:CD:EC:19:E9:F2:40:49:06:BD:9B:B3:47:95:5B:07:21 X509v3 Authority Key Identifier: keyid:5C:41:F8:10:3A:33:0A:75:4C:3C:6E:38:74:DC:CA:5D:C4:8E:1B:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDB11/D84C3FE04E0611F1A64B629AC9833773/XEH4EDozCnVMPG44dNzKXcSOGwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XEH4EDozCnVMPG44dNzKXcSOGwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDB11/D84C3FE04E0611F1A64B629AC9833773/XEH4EDozCnVMPG44dNzKXcSOGwA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:78:7c:d9:29:7a:fb:eb:bc:0a:c3:83:ca:7b:a1:01:cb:35: 93:e5:f3:9c:0b:93:ef:4c:fe:8b:b6:19:9e:bc:63:6e:7b:c6: 92:28:10:0f:f6:df:e9:81:d7:66:15:40:7c:05:a3:ed:06:64: a3:6b:fa:53:79:6e:6f:79:0d:71:fe:99:80:f5:05:d8:6b:53: 23:47:7e:99:66:b1:6b:83:c3:0b:76:4a:0f:00:12:30:81:15: 0e:20:65:c9:d3:1d:51:52:c1:d2:29:97:47:f1:61:4a:6c:3c: 62:8d:1d:87:f0:38:37:07:d6:e4:2f:11:25:95:c5:7a:53:e8: 93:de:a3:5a:f2:a7:2d:12:3e:10:d1:e4:3f:15:60:5e:2a:62: 93:49:98:73:5b:3b:7b:5d:47:c6:79:72:2e:f3:4a:39:fc:f9: 6a:5b:11:22:23:8a:0c:a7:79:b8:df:b5:1f:6d:50:1d:f8:b3: 59:00:a9:36:5c:70:ba:17:b1:80:10:85:91:7d:6e:80:7c:d2: db:35:38:91:e7:b7:6c:0a:42:94:c5:db:48:7b:ce:df:07:83: c0:fc:8c:4c:91:02:99:b2:98:c8:21:20:a8:81:e3:95:93:a9: dd:22:19:c7:1c:81:ca:9c:2b:ab:00:e3:de:23:3a:d1:3a:f8: a0:5c:6a:4f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE REIxMTExMC8GA1UEBRMoNUM0MUY4MTAzQTMzMEE3NTRDM0M2RTM4NzREQ0NBNURD NDhFMUIwMDAeFw0yNjA2MTUwOTA5MDRaFw0yNjA2MjIwOTA5MDRaMBgxFjAUBgNV BAMTDTZhMmZjMTMwLWEyNmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzos9KA3oLpckBAA2ikOzoPUEqDdYENiTq8Mw7svpWZ5jM9DIHdJ3L8i33iBI7 LwJexk4vbIM48SHk/G7auKX6L9yfIE0bx7Fdo4sHvG4oSK10yeGkf2z/+XZ3nhGL KnAr5TX31RnPn0syjGtfjQt0P+/cUZzYSpXLVyh9jHjujLByGb1Quv1v34hAIUmc xP/9VkwA7ZbrhveOHjDb1hW5LdxFLlHOtYdiC/lLR+pj2InE2KWmgHVTJtQrpY3F xb3jwe4kOfNRi6iuBQA6lRo1Hy3b2CqY1maex1zG+IszAIT0nVIPSPfovsSlCvCQ Po/dVFPA24dwI1pbK+x/6hu1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUvQLUa83s GenyQEkGvZuzR5VbByEwHwYDVR0jBBgwFoAUXEH4EDozCnVMPG44dNzKXcSOGwAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREQjExL0Q4NEMzRkUwNEUw NjExRjFBNjRCNjI5QUM5ODMzNzczL1hFSDRFRG96Q25WTVBHNDRkTnpLWGNTT0d3 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvWEVINEVEb3pDblZNUEc0NGROektYY1NPR3dBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE QjExL0Q4NEMzRkUwNEUwNjExRjFBNjRCNjI5QUM5ODMzNzczL1hFSDRFRG96Q25W TVBHNDRkTnpLWGNTT0d3QS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAQeHzZKXr767wKw4PKe6EByzWT5fOcC5PvTP6LthmevGNue8aSKBAP9t/pgddm FUB8BaPtBmSja/pTeW5veQ1x/pmA9QXYa1MjR36ZZrFrg8MLdkoPABIwgRUOIGXJ 0x1RUsHSKZdH8WFKbDxijR2H8Dg3B9bkLxEllcV6U+iT3qNa8qctEj4Q0eQ/FWBe KmKTSZhzWzt7XUfGeXIu80o5/PlqWxEiI4oMp3m437UfbVAd+LNZAKk2XHC6F7GA EIWRfW6AfNLbNTiR57dsCkKUxdtIe87fB4PA/IxMkQKZspjIISCogeOVk6ndIhnH HIHKnCurAOPeIzrROvigXGpP -----END CERTIFICATE-----Generated at Wed Jun 17 09:28:57 2026 by rpki-client