$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft File: tIGYczHh7UCLUcuf2O9KZQrIZpo.mft (raw, json) Hash identifier: Get+i+US4wL13+qsIVY3RfLONCMviOaegldZsRF7cDc= Subject key identifier: 35:62:E6:13:04:9A:D4:AD:4E:22:7E:67:D7:C6:5A:A8:89:F9:30:10 Authority key identifier: B4:81:98:73:31:E1:ED:40:8B:51:CB:9F:D8:EF:4A:65:0A:C8:66:9A Certificate issuer: /CN=A91E28E2/serialNumber=B481987331E1ED408B51CB9FD8EF4A650AC8669A Certificate serial: 0286 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft Manifest number: 026C Signing time: Sat 13 Jun 2026 02:18:03 +0000 Manifest this update: Sat 13 Jun 2026 02:18:02 +0000 Manifest next update: Sat 20 Jun 2026 02:18:02 +0000 Files and hashes: 1: tIGYczHh7UCLUcuf2O9KZQrIZpo.crl (hash: +9DFkvL9dBTh5HxHjGNl0bbyg6dxjkxNq3g+YE1I5GU=) 2: 9C6F02C6249D11EF9532356DC4F9AE02.roa (hash: rqdiCtjrx/nRHSFBDJET2Hy4bfU3/bkdX125W59d+co=) 3: B4B581DEDFDB11F0B149F2E3536F56BC.roa (hash: xl+ZGGMMsQzXdRoVvAevwVbibKiAjAP36zHm8LVE2Zw=) 4: 42D4386CDFDB11F0A18E0FE3536F56BC.roa (hash: eUh3+0eNlTLz/GijzP1F9VFF/VuE/2wjuZ3Eqz98/Ac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.crl rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 02:18:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 646 (0x286) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E28E2, serialNumber=B481987331E1ED408B51CB9FD8EF4A650AC8669A Validity Not Before: Jun 13 02:18:02 2026 GMT Not After : Jun 20 02:18:02 2026 GMT Subject: CN=6a2cbdda-1bfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fa:7e:10:a2:8e:c5:e7:15:2e:95:ac:a5:f8: 1c:72:4f:7f:6b:c9:1e:12:5d:61:b4:a4:e8:1e:d3: b7:67:5f:0d:0e:5b:6c:e9:7b:88:46:ee:4a:8c:dd: a4:b6:f2:11:82:38:3d:4f:25:2a:32:fb:3b:01:e3: a9:8d:4b:f3:85:a5:e4:9c:52:f5:f4:5a:b8:7e:25: 5a:78:c2:1a:6d:76:e4:a9:ef:cd:12:25:1f:b3:e8: 25:46:90:e7:d1:a3:1f:a2:b4:8c:bb:ef:7d:11:d2: d4:94:b7:74:5a:a3:cd:b2:eb:8f:02:ff:de:b6:10: 1a:c2:7e:60:c4:a2:d1:29:fd:d3:e9:d5:cc:dd:67: 48:14:36:ca:c4:de:51:fc:fc:ca:a7:ab:a4:6e:d1: 89:4d:4e:5e:49:24:95:60:0f:5a:a7:77:cd:55:c6: d4:6d:f5:28:2b:a3:dc:9b:4f:d8:26:87:42:38:61: 05:da:d3:76:c0:ec:3d:45:c2:78:8f:cf:1b:66:6e: 94:a7:ee:95:5a:a9:ff:3f:1e:02:46:4c:a9:75:07: 5b:ae:cb:22:13:dd:fd:4f:b3:ce:be:fe:40:26:89: b7:1d:f7:1f:e1:b5:7b:41:99:54:9f:f8:1d:72:ad: f7:c5:64:3a:bc:16:f0:1d:61:be:af:db:7e:4c:0b: 20:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:62:E6:13:04:9A:D4:AD:4E:22:7E:67:D7:C6:5A:A8:89:F9:30:10 X509v3 Authority Key Identifier: keyid:B4:81:98:73:31:E1:ED:40:8B:51:CB:9F:D8:EF:4A:65:0A:C8:66:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:8a:f5:00:73:da:78:4f:d1:d2:dd:a6:4b:a0:b1:8a:19:a9: 61:a1:9b:34:2d:06:64:c4:29:d0:c1:f8:09:ce:37:96:f7:8f: 0d:37:5d:71:87:a4:bd:e7:e5:a3:f7:91:82:74:de:ca:e7:52: 48:8e:ae:86:f7:85:1c:08:9f:f7:f1:0b:60:50:15:ea:4c:ce: 45:d6:a5:1f:03:eb:ac:78:e2:c9:71:99:1d:c6:1c:3a:65:24: 4d:91:0c:04:65:3b:f3:13:17:e1:49:f4:a9:20:bf:b8:4b:49: d9:09:41:71:04:b2:85:50:06:63:40:c1:80:82:d7:a3:f6:a4: 5f:9f:3d:79:9f:c9:95:3a:5b:50:d1:74:06:9a:01:59:c6:83: 87:ac:51:11:71:4a:96:32:07:1f:e9:a3:3b:3e:23:38:48:32: ae:fa:db:a5:3c:6e:f8:82:7a:eb:15:0e:80:e0:ee:22:04:86: 4e:fc:ab:4d:da:01:27:fc:60:d6:e9:96:84:05:45:60:e5:58: 2c:04:fe:87:df:8f:16:6f:29:b3:03:6a:b0:8e:9d:e4:cc:9e: 01:54:2d:15:30:98:92:c2:79:df:4e:86:e9:8e:67:c8:40:a7: bd:17:dc:49:70:e9:f4:d2:9f:0e:8d:89:b3:0d:e7:74:4a:96: ae:89:23:6f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI4RTIxMTAvBgNVBAUTKEI0ODE5ODczMzFFMUVENDA4QjUxQ0I5RkQ4RUY0QTY1 MEFDODY2OUEwHhcNMjYwNjEzMDIxODAyWhcNMjYwNjIwMDIxODAyWjAYMRYwFAYD VQQDEw02YTJjYmRkYS0xYmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyvp+EKKOxecVLpWspfgcck9/a8keEl1htKToHtO3Z18NDlts6XuIRu5KjN2k tvIRgjg9TyUqMvs7AeOpjUvzhaXknFL19Fq4fiVaeMIabXbkqe/NEiUfs+glRpDn 0aMforSMu+99EdLUlLd0WqPNsuuPAv/ethAawn5gxKLRKf3T6dXM3WdIFDbKxN5R /PzKp6ukbtGJTU5eSSSVYA9ap3fNVcbUbfUoK6Pcm0/YJodCOGEF2tN2wOw9RcJ4 j88bZm6Up+6VWqn/Px4CRkypdQdbrssiE939T7POvv5AJom3Hfcf4bV7QZlUn/gd cq33xWQ6vBbwHWG+r9t+TAsgIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDVi5hME mtStTiJ+Z9fGWqiJ+TAQMB8GA1UdIwQYMBaAFLSBmHMx4e1Ai1HLn9jvSmUKyGaa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjhFMi85NTJGQTYzMkQy RTYxMUVEOUE1MkQ1NUFDNEY5QUUwMi90SUdZY3pIaDdVQ0xVY3VmMk85S1pRckla cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RJR1ljekhoN1VDTFVjdWYyTzlLWlFySVpwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjhFMi85NTJGQTYzMkQyRTYxMUVEOUE1MkQ1NUFDNEY5QUUwMi90SUdZY3pIaDdV Q0xVY3VmMk85S1pRcklacG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAY4r1AHPaeE/R0t2mS6CxihmpYaGbNC0GZMQp0MH4Cc43lvePDTddcYekvefl o/eRgnTeyudSSI6uhveFHAif9/ELYFAV6kzORdalHwPrrHjiyXGZHcYcOmUkTZEM BGU78xMX4Un0qSC/uEtJ2QlBcQSyhVAGY0DBgILXo/akX589eZ/JlTpbUNF0BpoB WcaDh6xREXFKljIHH+mjOz4jOEgyrvrbpTxu+IJ66xUOgODuIgSGTvyrTdoBJ/xg 1umWhAVFYOVYLAT+h9+PFm8pswNqsI6d5MyeAVQtFTCYksJ5306G6Y5nyECnvRfc SXDp9NKfDo2Jsw3ndEqWrokjbw== -----END CERTIFICATE-----Generated at Sat Jun 13 21:29:22 2026 by rpki-client