$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft File: gDB5urLx9rO5qsQR30qCw_BqZXE.mft (raw, json) Hash identifier: tlmHF1wiwsyqUYCC546optjEJMk3Gmj1mnJ7sxuHIEA= Subject key identifier: EC:B0:5E:4B:E3:8F:7B:28:EE:EB:06:83:62:05:C2:E3:CA:52:AF:FD Authority key identifier: 80:30:79:BA:B2:F1:F6:B3:B9:AA:C4:11:DF:4A:82:C3:F0:6A:65:71 Certificate issuer: /CN=A91E5642/serialNumber=803079BAB2F1F6B3B9AAC411DF4A82C3F06A6571 Certificate serial: 0A7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDB5urLx9rO5qsQR30qCw_BqZXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft Manifest number: 0A68 Signing time: Fri 12 Jun 2026 19:41:36 +0000 Manifest this update: Fri 12 Jun 2026 19:41:36 +0000 Manifest next update: Fri 19 Jun 2026 19:41:36 +0000 Files and hashes: 1: gDB5urLx9rO5qsQR30qCw_BqZXE.crl (hash: 6LYxTMkf3XPJ19FHwZT/op7sC3TgGDXAVEepA92/GOA=) 2: 49484A22DDBE11F0A59AB1524A6F56BC.roa (hash: EUoTZeexjkbb7zufCQtahAm8AEeFMiE7APDK7et0hJY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.crl rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDB5urLx9rO5qsQR30qCw_BqZXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 19:41:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2684 (0xa7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5642, serialNumber=803079BAB2F1F6B3B9AAC411DF4A82C3F06A6571 Validity Not Before: Jun 12 19:41:36 2026 GMT Not After : Jun 19 19:41:36 2026 GMT Subject: CN=6a2c60f0-5651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:02:76:00:be:3b:5b:60:0d:9b:22:8a:63:0b: 71:b8:74:c6:44:c7:91:1e:98:bc:f1:c8:24:e0:4f: d2:72:8b:ea:c9:fa:27:80:64:fc:2f:39:c7:ff:8a: b9:2c:06:8a:eb:56:af:b8:d6:71:0a:7c:69:4e:40: 29:c3:bb:74:0d:12:75:56:7b:28:be:30:51:09:79: 13:f3:54:f3:bd:5d:e5:00:07:20:57:36:6f:3f:78: 9a:91:c1:0b:29:ec:65:96:a5:ab:53:67:bb:89:33: 00:be:73:ce:cf:9c:0d:1e:ec:30:37:eb:a7:e0:71: 65:a6:0d:e1:04:d3:5b:bd:0f:de:9c:9d:0d:6e:62: 7f:d5:6a:40:9b:f9:1e:31:26:d5:36:9e:20:a8:01: a9:97:b7:b3:2f:ea:28:1f:45:8b:07:c8:f0:93:1c: 3d:44:b9:af:5d:50:bd:35:c3:a1:22:9f:e4:f7:6a: 1c:53:ef:49:cf:69:92:2e:40:4c:b6:d4:a8:d6:f5: 8d:b9:73:87:b1:74:d2:fd:95:b9:fb:a5:fd:55:39: 4d:9e:04:1d:e1:21:65:5a:e3:f2:f4:17:3d:1c:2c: dc:7d:44:e2:a3:f8:de:67:75:66:1b:65:67:8f:40: b7:64:88:fd:2e:30:e3:d6:4e:ae:8f:57:3d:84:35: 76:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:B0:5E:4B:E3:8F:7B:28:EE:EB:06:83:62:05:C2:E3:CA:52:AF:FD X509v3 Authority Key Identifier: keyid:80:30:79:BA:B2:F1:F6:B3:B9:AA:C4:11:DF:4A:82:C3:F0:6A:65:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDB5urLx9rO5qsQR30qCw_BqZXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:23:6f:88:63:3d:33:0e:c9:50:2c:23:01:c4:f2:bf:9f:11: 91:0f:dc:50:0f:af:02:66:1e:be:b9:b1:51:fd:de:dc:74:d3: 61:25:00:a8:47:a7:7f:36:51:e1:5b:3f:82:8c:d0:1b:c2:59: 74:b8:53:b3:d4:94:7e:c9:85:d9:cc:3e:1b:53:7a:e5:e6:5c: 25:a0:41:91:38:4e:25:7b:c5:c6:c9:37:9f:f8:05:81:4a:87: b0:d5:59:52:14:b9:b2:6f:2f:4b:36:14:56:c0:f4:ce:0a:6f: 74:3d:73:b5:9f:1f:1b:ef:3c:43:57:bc:c1:7e:3e:77:c7:c9: c5:26:92:05:c7:26:eb:88:e9:1d:34:a4:69:ee:bc:11:83:41: 9e:17:b4:28:6c:a2:c6:ac:56:4e:78:ed:5a:44:0d:1d:0f:4d: ff:c9:15:05:44:21:c6:2e:35:07:f5:e8:f1:5e:65:46:01:37: 89:e0:9d:c0:20:91:ca:d2:95:b8:31:a0:d4:b5:d2:b6:da:0e: 0f:42:d5:ff:5c:ef:fc:8b:66:42:46:2e:11:c0:61:3f:f7:bb: bf:08:11:5f:57:17:a0:e3:d2:c2:3c:e7:36:96:95:c7:e1:31: 54:8f:1d:2b:2e:00:59:ad:79:34:85:ba:5a:d5:ba:04:c6:09: ee:b2:64:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU2NDIxMTAvBgNVBAUTKDgwMzA3OUJBQjJGMUY2QjNCOUFBQzQxMURGNEE4MkMz RjA2QTY1NzEwHhcNMjYwNjEyMTk0MTM2WhcNMjYwNjE5MTk0MTM2WjAYMRYwFAYD VQQDEw02YTJjNjBmMC01NjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAigJ2AL47W2ANmyKKYwtxuHTGRMeRHpi88cgk4E/ScovqyfongGT8LznH/4q5 LAaK61avuNZxCnxpTkApw7t0DRJ1VnsovjBRCXkT81TzvV3lAAcgVzZvP3iakcEL KexllqWrU2e7iTMAvnPOz5wNHuwwN+un4HFlpg3hBNNbvQ/enJ0NbmJ/1WpAm/ke MSbVNp4gqAGpl7ezL+ooH0WLB8jwkxw9RLmvXVC9NcOhIp/k92ocU+9Jz2mSLkBM ttSo1vWNuXOHsXTS/ZW5+6X9VTlNngQd4SFlWuPy9Bc9HCzcfUTio/jeZ3VmG2Vn j0C3ZIj9LjDj1k6uj1c9hDV2OQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOywXkvj j3so7usGg2IFwuPKUq/9MB8GA1UdIwQYMBaAFIAwebqy8fazuarEEd9KgsPwamVx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTY0Mi8xMDQwRjMyQzhB RkExMUVBOUIyOEE5MjlDNEY5QUUwMi9nREI1dXJMeDlyTzVxc1FSMzBxQ3dfQnFa WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dEQjV1ckx4OXJPNXFzUVIzMHFDd19CcVpYRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTY0Mi8xMDQwRjMyQzhBRkExMUVBOUIyOEE5MjlDNEY5QUUwMi9nREI1dXJMeDly TzVxc1FSMzBxQ3dfQnFaWEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhSNviGM9Mw7JUCwjAcTyv58RkQ/cUA+vAmYevrmxUf3e3HTTYSUAqEenfzZR 4Vs/gozQG8JZdLhTs9SUfsmF2cw+G1N65eZcJaBBkThOJXvFxsk3n/gFgUqHsNVZ UhS5sm8vSzYUVsD0zgpvdD1ztZ8fG+88Q1e8wX4+d8fJxSaSBccm64jpHTSkae68 EYNBnhe0KGyixqxWTnjtWkQNHQ9N/8kVBUQhxi41B/Xo8V5lRgE3ieCdwCCRytKV uDGg1LXSttoOD0LV/1zv/ItmQkYuEcBhP/e7vwgRX1cXoOPSwjznNpaVx+ExVI8d Ky4AWa15NIW6WtW6BMYJ7rJkyA== -----END CERTIFICATE-----Generated at Sun Jun 14 00:30:07 2026 by rpki-client