$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft File: J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft (raw, json) Hash identifier: eF9QSdr8jmfh8o27Opn2E5RobuhJ9vNfZNo2KC1Hzpk= Subject key identifier: 42:93:18:B8:3C:7A:93:40:5D:50:C7:62:6F:EE:F8:C3:DD:AF:D3:A1 Authority key identifier: 27:B8:72:2C:85:9C:A4:F6:F0:3E:C1:E0:61:FD:D4:C3:B9:B4:97:E5 Certificate issuer: /CN=A91E4696/serialNumber=27B8722C859CA4F6F03EC1E061FDD4C3B9B497E5 Certificate serial: 0297 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft Manifest number: 0289 Signing time: Wed 17 Jun 2026 01:59:00 +0000 Manifest this update: Wed 17 Jun 2026 01:59:00 +0000 Manifest next update: Wed 24 Jun 2026 01:59:00 +0000 Files and hashes: 1: J7hyLIWcpPbwPsHgYf3Uw7m0l-U.crl (hash: GYdbzDEZcSdlxIehkkG4qvujM0D4TEzNjvbkMoXZ9uw=) 2: 63CC2AA80FEE11EEBCC6AE50C4F9AE02.roa (hash: hJnEJ9xJtcK65uU+a2lYLQG493yZ6VM20lGCXAUnZKA=) 3: F04A74EC90C511EDA07C3025C4F9AE02.roa (hash: ll1SbuQqvTvXz+W/3qaivS8wQz00+kN4RdwzaNK6/rU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.crl rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Jun 2026 01:32:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 663 (0x297) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4696, serialNumber=27B8722C859CA4F6F03EC1E061FDD4C3B9B497E5 Validity Not Before: Jun 17 01:59:00 2026 GMT Not After : Jun 24 01:59:00 2026 GMT Subject: CN=6a31ff64-dd9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3a:d1:91:31:a2:7a:30:10:bb:a8:d8:ee:12: 8c:51:1e:69:e4:2f:b4:f6:77:b7:8b:94:ab:d8:98: bf:c9:e8:99:b5:e3:b4:2d:12:5b:06:2c:38:ab:28: 0b:cc:e8:1d:6a:4b:5a:c6:67:0d:6b:48:5c:46:dd: 84:6b:26:b7:24:b1:b5:a7:b6:be:eb:09:fe:60:01: 64:93:3c:c4:1d:8b:ed:37:5c:cd:95:9a:74:23:50: 69:9f:81:86:a2:bd:e1:97:5f:0c:74:3b:db:72:19: 8d:ae:6c:f4:da:8a:b8:54:a3:64:ef:1a:ec:6d:a6: 53:d5:ea:b9:aa:e1:20:d2:aa:97:29:44:a4:2f:81: 04:6c:cb:43:3a:7b:a1:91:72:10:69:1d:38:cb:bd: 31:15:4e:ef:89:21:2f:5c:68:cb:4c:43:c8:ea:34: 08:4a:c2:f5:79:d8:98:aa:30:c5:1e:6e:04:e5:d2: 4a:62:0d:27:5a:58:2b:9a:18:b5:7b:a0:7e:da:aa: 2d:a9:ae:b9:c5:32:11:b1:0e:30:17:74:3e:d7:25: 10:54:85:37:07:83:96:71:d0:cf:81:5d:49:6c:5f: 9d:a9:21:26:5b:5e:f9:b5:a9:19:7d:3b:97:08:58: d4:6d:c5:86:b8:22:45:a8:8d:24:21:ba:d7:ef:68: 14:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:93:18:B8:3C:7A:93:40:5D:50:C7:62:6F:EE:F8:C3:DD:AF:D3:A1 X509v3 Authority Key Identifier: keyid:27:B8:72:2C:85:9C:A4:F6:F0:3E:C1:E0:61:FD:D4:C3:B9:B4:97:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:75:3d:c9:20:8e:6f:24:36:11:f5:3e:17:ad:83:97:2b:cf: 22:09:0d:1e:f4:b0:24:9f:04:bc:fa:42:a3:50:c1:e7:8f:d4: 73:b4:9b:61:cf:02:d1:77:cc:0f:11:70:65:5a:8c:20:cd:16: a9:b5:dc:46:88:6b:d1:72:18:07:53:ca:8f:a0:0e:66:c1:1d: b6:dd:dd:99:99:81:fe:88:78:3f:b9:46:22:a3:f2:1b:00:f2: 64:34:45:75:e2:fa:52:e0:36:f6:9f:ea:4d:11:ed:7b:80:0f: 38:03:19:a3:57:76:ea:02:72:f7:ad:e6:3f:84:65:30:05:55: ae:d8:d4:3c:6c:35:ad:8a:f9:63:ec:23:b4:fb:54:59:88:89: a2:00:b3:c8:6f:cd:2d:ed:b8:0a:ed:c2:8e:4e:e4:b5:c6:75: c7:9c:55:45:90:55:f2:28:0e:b0:59:75:69:58:4a:7e:97:a8: 2c:aa:40:be:c3:70:c0:84:da:24:87:5a:fa:7e:01:08:0b:be: 2c:6d:ea:6f:fa:f6:6d:05:fb:6e:18:e3:e7:7b:08:37:7d:13: 81:a0:f1:dc:0f:51:c3:52:61:f9:fe:52:5a:0f:96:57:94:e9: 66:22:7a:c9:cd:5c:da:13:d2:ed:18:94:15:08:ab:0d:41:ad: 3d:f0:ee:de -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2OTYxMTAvBgNVBAUTKDI3Qjg3MjJDODU5Q0E0RjZGMDNFQzFFMDYxRkRENEMz QjlCNDk3RTUwHhcNMjYwNjE3MDE1OTAwWhcNMjYwNjI0MDE1OTAwWjAYMRYwFAYD VQQDEw02YTMxZmY2NC1kZDlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwTrRkTGiejAQu6jY7hKMUR5p5C+09ne3i5Sr2Ji/yeiZteO0LRJbBiw4qygL zOgdaktaxmcNa0hcRt2Eaya3JLG1p7a+6wn+YAFkkzzEHYvtN1zNlZp0I1Bpn4GG or3hl18MdDvbchmNrmz02oq4VKNk7xrsbaZT1eq5quEg0qqXKUSkL4EEbMtDOnuh kXIQaR04y70xFU7viSEvXGjLTEPI6jQISsL1ediYqjDFHm4E5dJKYg0nWlgrmhi1 e6B+2qotqa65xTIRsQ4wF3Q+1yUQVIU3B4OWcdDPgV1JbF+dqSEmW175takZfTuX CFjUbcWGuCJFqI0kIbrX72gUeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEKTGLg8 epNAXVDHYm/u+MPdr9OhMB8GA1UdIwQYMBaAFCe4ciyFnKT28D7B4GH91MO5tJfl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDY5Ni9ENkExMUM0QTkw QkYxMUVEOENDMUU3ODNDNEY5QUUwMi9KN2h5TElXY3BQYndQc0hnWWYzVXc3bTBs LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o3aHlMSVdjcFBid1BzSGdZZjNVdzdtMGwtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDY5Ni9ENkExMUM0QTkwQkYxMUVEOENDMUU3ODNDNEY5QUUwMi9KN2h5TElXY3BQ YndQc0hnWWYzVXc3bTBsLVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAB3U9ySCObyQ2EfU+F62DlyvPIgkNHvSwJJ8EvPpCo1DB54/Uc7SbYc8C0XfM DxFwZVqMIM0WqbXcRohr0XIYB1PKj6AOZsEdtt3dmZmB/oh4P7lGIqPyGwDyZDRF deL6UuA29p/qTRHte4APOAMZo1d26gJy963mP4RlMAVVrtjUPGw1rYr5Y+wjtPtU WYiJogCzyG/NLe24Cu3Cjk7ktcZ1x5xVRZBV8igOsFl1aVhKfpeoLKpAvsNwwITa JIda+n4BCAu+LG3qb/r2bQX7bhjj53sIN30TgaDx3A9Rw1Jh+f5SWg+WV5TpZiJ6 yc1c2hPS7RiUFQirDUGtPfDu3g== -----END CERTIFICATE-----Generated at Wed Jun 17 11:55:23 2026 by rpki-client