$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft File: d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft (raw, json) Hash identifier: AVSynTDGPaaagt8bMVdBgyh3pMBTWxyPPb2bOMJeCtw= Subject key identifier: 5D:82:A9:A0:BF:AB:D5:4B:BF:17:54:CF:8E:9D:52:73:23:55:6A:1D Authority key identifier: 77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92 Certificate issuer: /CN=A91DEB81/serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892 Certificate serial: 053C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft Manifest number: 04F4 Signing time: Fri 12 Jun 2026 23:51:43 +0000 Manifest this update: Fri 12 Jun 2026 23:51:43 +0000 Manifest next update: Fri 19 Jun 2026 23:51:43 +0000 Files and hashes: 1: d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl (hash: oEsvIq7lumx11teZW69GBd2uzV/YbvcaCxlPVM5Csgk=) 2: EEECC55A8C3611EFA07E612DC4F9AE02.roa (hash: D21a7LlMu8RnxWZ8YgRZ6sV/m0f2ZXrJTQlAZBy166E=) 3: 1FBEA1EEDE9711EC9289256FC4F9AE02.roa (hash: GS31bTdPfKVJ1J6UCJ9YLKFQUEEmZi77Y2aiEp3HKVY=) 4: E184C6F48F2C11EEA361B22FC4F9AE02.roa (hash: kXgZNQ9cWIHfXiEIAxnhKXY51BGRFvcRzJmJYDyHg78=) 5: 204E25DADE9711EC9289256FC4F9AE02.roa (hash: xijaZu6pAwwNLd6WONxWQ6mZqU3GdiHzZC1uaLYBENo=) 6: E0C5B7148F2C11EEA361B22FC4F9AE02.roa (hash: a2Eak+r8Eojdu+clly0gi9Nawkq6TirHUh3AZGHAXRg=) 7: E84DD6FAC9C311F0ACE5A118C4F9AE02.roa (hash: u2rzRUism7xTPxp63V3W7DOQwUN/ky3ASLXGx242uU8=) 8: 216DB034DE9711EC9289256FC4F9AE02.roa (hash: w1LkgMGS8oqwPRuQKx3FjuBZt3rf+t0hZFmWkXtaaSY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 23:51:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1340 (0x53c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEB81, serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892 Validity Not Before: Jun 12 23:51:43 2026 GMT Not After : Jun 19 23:51:43 2026 GMT Subject: CN=6a2c9b8f-8fb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0d:f6:46:81:45:58:5f:c4:62:c2:9f:b0:e9: a8:60:f0:81:8e:cb:ae:d1:48:b7:d0:f5:00:67:c9: e1:7e:93:ce:a5:56:f2:f3:1f:a4:44:e5:7d:5a:94: 2e:e4:a8:ab:11:93:ba:28:da:c5:10:fc:03:05:ac: 72:ce:5c:08:39:e9:c9:bb:5c:af:47:73:82:50:f3: ed:26:b6:4c:63:ef:4e:dc:fb:98:b0:08:e5:1f:99: ba:98:00:8d:d0:76:dd:fa:8d:3a:65:3f:c0:94:6d: e4:8b:93:45:5a:0f:45:e9:d2:15:b9:3d:d9:e9:39: 5e:3e:69:b9:69:87:22:15:f2:02:d5:93:c2:3d:c1: 93:d3:df:cb:16:be:e9:0c:e2:29:af:14:9d:ab:e8: d5:fa:2c:53:d1:2e:e2:1a:1f:cf:b8:68:c3:8d:d7: 23:bb:37:09:0d:46:c7:9a:4d:39:91:f4:05:57:11: 5f:cf:37:df:b8:0c:28:ef:1e:1d:0d:d8:da:9a:75: bc:5c:f5:57:d7:10:e0:a7:d7:48:1c:7c:50:fd:ca: d6:83:d5:42:19:75:56:8e:a3:f1:f5:5f:16:4d:95: 41:d4:12:75:c7:c9:7c:7b:b8:dc:a2:2a:a8:a9:7e: e7:8e:e5:b8:b0:4f:92:01:ac:00:6f:e1:8c:06:4f: f1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:82:A9:A0:BF:AB:D5:4B:BF:17:54:CF:8E:9D:52:73:23:55:6A:1D X509v3 Authority Key Identifier: keyid:77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:f6:42:4e:ca:7f:5f:5f:c3:9a:48:9d:86:8b:e8:17:92:c6: 47:b6:51:ef:8d:5f:d5:46:9a:96:ff:6a:8f:2f:3a:8f:72:aa: c0:59:17:d0:bd:82:70:c9:b8:3d:7c:77:52:ff:f1:56:49:7f: 5d:9b:c6:60:44:c9:a9:6b:cd:0f:30:aa:a0:0a:b0:fc:a5:fd: 8b:0e:7a:ed:f1:87:bd:01:9f:ea:0e:45:d4:fe:4b:55:82:d0: 70:91:37:86:14:2a:45:27:8f:ec:33:a3:a0:21:74:d6:03:b0: 44:41:6c:24:d2:41:35:51:4b:ae:be:d9:64:ff:f0:6a:1e:73: 04:e7:da:76:9e:9f:69:dc:fc:e0:76:a5:0d:1b:8b:94:16:70: e8:24:33:a9:51:43:e9:15:78:e3:3e:ea:f8:5d:31:64:13:32: 43:b1:ac:f4:a2:7b:c0:48:8f:a1:65:fc:42:94:7e:ea:47:b5: 6c:6a:aa:71:05:63:95:d4:d1:d4:0d:08:13:de:6f:d1:4a:df: a0:1a:eb:9e:9b:8a:b2:18:f8:bc:32:1b:4b:82:9b:fa:3c:3e: 1e:1b:4c:77:5b:f2:44:cb:c3:3c:72:d4:7b:6d:6a:be:f4:3f: 55:69:05:c0:14:76:54:20:05:b6:ec:3a:ae:8d:f7:f8:0b:71: 0d:9c:41:02 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBTwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVCODExMTAvBgNVBAUTKDc3NzY2MTJBNDNDMjJEMEE2NkI4RjEzNjgwQjMwNThC RUQ1RDk4OTIwHhcNMjYwNjEyMjM1MTQzWhcNMjYwNjE5MjM1MTQzWjAYMRYwFAYD VQQDEw02YTJjOWI4Zi04ZmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwg32RoFFWF/EYsKfsOmoYPCBjsuu0Ui30PUAZ8nhfpPOpVby8x+kROV9WpQu 5KirEZO6KNrFEPwDBaxyzlwIOenJu1yvR3OCUPPtJrZMY+9O3PuYsAjlH5m6mACN 0Hbd+o06ZT/AlG3ki5NFWg9F6dIVuT3Z6TlePmm5aYciFfIC1ZPCPcGT09/LFr7p DOIprxSdq+jV+ixT0S7iGh/PuGjDjdcjuzcJDUbHmk05kfQFVxFfzzffuAwo7x4d DdjamnW8XPVX1xDgp9dIHHxQ/crWg9VCGXVWjqPx9V8WTZVB1BJ1x8l8e7jcoiqo qX7njuW4sE+SAawAb+GMBk/x4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF2CqaC/ q9VLvxdUz46dUnMjVWodMB8GA1UdIwQYMBaAFHd2YSpDwi0KZrjxNoCzBYvtXZiS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUI4MS9DRjk2NjNDNjcw RjcxMUVDQjMxOEU0M0FDNEY5QUUwMi9kM1poS2tQQ0xRcG11UEUyZ0xNRmktMWRt SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QzWmhLa1BDTFFwbXVQRTJnTE1GaS0xZG1KSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUI4MS9DRjk2NjNDNjcwRjcxMUVDQjMxOEU0M0FDNEY5QUUwMi9kM1poS2tQQ0xR cG11UEUyZ0xNRmktMWRtSkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYPZCTsp/X1/DmkidhovoF5LGR7ZR741f1Uaalv9qjy86j3KqwFkX0L2CcMm4 PXx3Uv/xVkl/XZvGYETJqWvNDzCqoAqw/KX9iw567fGHvQGf6g5F1P5LVYLQcJE3 hhQqRSeP7DOjoCF01gOwREFsJNJBNVFLrr7ZZP/wah5zBOfadp6fadz84HalDRuL lBZw6CQzqVFD6RV44z7q+F0xZBMyQ7Gs9KJ7wEiPoWX8QpR+6ke1bGqqcQVjldTR 1A0IE95v0UrfoBrrnpuKshj4vDIbS4Kb+jw+HhtMd1vyRMvDPHLUe21qvvQ/VWkF wBR2VCAFtuw6ro33+AtxDZxBAg== -----END CERTIFICATE-----Generated at Sat Jun 13 13:30:26 2026 by rpki-client