$ rpki-client -vvf rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft File: I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft (raw, json) Hash identifier: joM0qN8Qfq2RdJ7jcxiaRbzdjTuxu5xxRgvsXmkB+6I= Subject key identifier: 3F:FA:B3:52:BC:2E:EA:55:15:BA:3C:BE:75:96:DA:5F:96:A6:29:CB Authority key identifier: 23:B9:60:37:AB:8A:D2:37:E6:32:6F:7E:D0:F8:1E:31:8E:8A:14:AB Certificate issuer: /CN=A91E892A/serialNumber=23B96037AB8AD237E6326F7ED0F81E318E8A14AB Certificate serial: 19C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft Manifest number: 19B2 Signing time: Fri 12 Jun 2026 16:21:28 +0000 Manifest this update: Fri 12 Jun 2026 16:21:27 +0000 Manifest next update: Fri 19 Jun 2026 16:21:27 +0000 Files and hashes: 1: I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl (hash: cCfCIu5cfHNHGpkBsKExUL6vLAYGPyalqndaH6ynudM=) 2: D57C98A88C0311EFAA53FF12C4F9AE02.roa (hash: sk/aWgMAKHJV+S5wciXhAIcHYQF2Px3Gvke4ka59rbI=) 3: D421D958881611E78B9B0850C4F9AE02.roa (hash: 8Nuoull25KblVQ1PNDvmoNwHbwhuQ64gaT6vwAXGPpc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 16:21:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6594 (0x19c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E892A, serialNumber=23B96037AB8AD237E6326F7ED0F81E318E8A14AB Validity Not Before: Jun 12 16:21:27 2026 GMT Not After : Jun 19 16:21:27 2026 GMT Subject: CN=6a2c3208-80ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:82:17:db:7f:7a:31:9c:e0:4d:74:f0:51:c1: e0:ea:f4:e1:d4:91:80:ba:8a:a2:99:cc:5d:fc:af: d8:b2:3a:25:8b:94:3b:6a:4d:e0:98:5e:1d:03:e7: 53:02:fd:de:18:22:4c:c5:05:71:e8:cd:8e:fd:9f: d0:0b:c8:1a:51:d1:45:c2:63:a2:69:e6:6f:ca:7b: d8:62:1f:a9:14:67:12:b1:39:27:9b:28:b4:7d:fd: 74:24:30:d0:67:bf:e9:29:2e:81:a4:9c:3e:fa:31: 79:3e:bb:79:33:66:70:28:84:59:da:51:91:8a:76: 24:7a:3b:41:b5:b5:68:4f:58:04:df:62:de:8c:0b: 3c:0a:a1:a1:b9:62:6c:cb:34:8e:71:5c:8c:db:92: 50:10:d7:75:df:b2:9a:fa:f8:62:fe:cb:e8:a6:71: aa:33:e5:ec:62:08:78:9e:bf:75:82:f9:84:6a:d8: d5:92:c1:88:81:ba:19:06:f8:50:90:de:f9:58:2d: 8c:05:38:74:70:9f:42:fe:f0:39:11:6c:1d:a8:d0: c5:cd:f4:0b:c5:83:3d:49:f5:e0:b2:cb:a8:dd:85: 34:08:8f:59:5d:cf:eb:e6:0d:19:28:af:24:39:1a: c3:e1:91:22:dc:61:87:b4:a2:69:09:fe:d5:33:a0: 61:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:FA:B3:52:BC:2E:EA:55:15:BA:3C:BE:75:96:DA:5F:96:A6:29:CB X509v3 Authority Key Identifier: keyid:23:B9:60:37:AB:8A:D2:37:E6:32:6F:7E:D0:F8:1E:31:8E:8A:14:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:74:81:bd:b8:16:f7:65:da:cd:df:b7:e2:f6:3e:91:e7:af: 18:4d:81:e0:51:6d:08:65:7f:01:28:da:e6:59:f6:22:cf:cf: 15:bc:90:f6:e1:79:41:60:bb:17:77:51:9d:33:91:8d:78:66: 93:26:86:c3:e1:c3:9c:61:49:d5:ce:dd:66:df:25:f7:f0:a0: 78:21:b9:13:6d:ba:18:86:35:7c:ba:8f:23:df:4e:76:6c:ea: d1:a1:29:42:b1:20:98:17:41:aa:ba:80:f4:89:a6:c8:99:3c: 00:56:45:64:43:14:ac:bc:c2:a3:25:c1:ec:00:30:f6:1b:5d: 21:4a:ce:38:6f:67:5a:5b:62:1c:e8:e4:b0:e0:90:62:13:d7: cd:dd:51:40:ae:a8:04:0d:18:59:76:2a:35:04:26:de:90:24: 69:47:e1:fb:c4:61:99:7c:37:18:93:42:a9:c3:ac:8f:6a:57: df:6d:0e:47:15:7e:32:b1:c1:d3:3b:a3:37:ad:ca:8f:95:19: 6c:83:62:18:a4:90:ed:27:05:bc:e3:99:9d:ab:c8:a4:b8:9a: 74:4e:47:72:f6:5c:ed:77:79:ce:1c:9a:6e:b1:df:d5:22:73: 9c:3c:bb:dc:11:60:ce:29:43:87:97:56:d5:b5:c1:66:2f:52: b5:74:ac:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg5MkExMTAvBgNVBAUTKDIzQjk2MDM3QUI4QUQyMzdFNjMyNkY3RUQwRjgxRTMx OEU4QTE0QUIwHhcNMjYwNjEyMTYyMTI3WhcNMjYwNjE5MTYyMTI3WjAYMRYwFAYD VQQDEw02YTJjMzIwOC04MGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuYIX2396MZzgTXTwUcHg6vTh1JGAuoqimcxd/K/Ysjoli5Q7ak3gmF4dA+dT Av3eGCJMxQVx6M2O/Z/QC8gaUdFFwmOiaeZvynvYYh+pFGcSsTknmyi0ff10JDDQ Z7/pKS6BpJw++jF5Prt5M2ZwKIRZ2lGRinYkejtBtbVoT1gE32LejAs8CqGhuWJs yzSOcVyM25JQENd137Ka+vhi/svopnGqM+XsYgh4nr91gvmEatjVksGIgboZBvhQ kN75WC2MBTh0cJ9C/vA5EWwdqNDFzfQLxYM9SfXgssuo3YU0CI9ZXc/r5g0ZKK8k ORrD4ZEi3GGHtKJpCf7VM6BhGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD/6s1K8 LupVFbo8vnWW2l+WpinLMB8GA1UdIwQYMBaAFCO5YDeritI35jJvftD4HjGOihSr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODkyQS9GODEwRTlBNDg4 MTUxMUU3OEJGN0QxNEVDNEY5QUUwMi9JN2xnTjZ1SzBqZm1NbTktMFBnZU1ZNktG S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k3bGdONnVLMGpmbU1tOS0wUGdlTVk2S0ZLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODkyQS9GODEwRTlBNDg4MTUxMUU3OEJGN0QxNEVDNEY5QUUwMi9JN2xnTjZ1SzBq Zm1NbTktMFBnZU1ZNktGS3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL3SBvbgW92Xazd+34vY+keevGE2B4FFtCGV/ASja5ln2Is/PFbyQ9uF5QWC7 F3dRnTORjXhmkyaGw+HDnGFJ1c7dZt8l9/CgeCG5E226GIY1fLqPI99Odmzq0aEp QrEgmBdBqrqA9ImmyJk8AFZFZEMUrLzCoyXB7AAw9htdIUrOOG9nWltiHOjksOCQ YhPXzd1RQK6oBA0YWXYqNQQm3pAkaUfh+8RhmXw3GJNCqcOsj2pX320ORxV+MrHB 0zujN63Kj5UZbINiGKSQ7ScFvOOZnavIpLiadE5HcvZc7Xd5zhyabrHf1SJznDy7 3BFgzilDh5dW1bXBZi9StXSsgg== -----END CERTIFICATE-----Generated at Sun Jun 14 11:11:37 2026 by rpki-client