$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA23A/8D59A2E4582311F18D7F2C9EA7833773/CiXR8yHlCgvKx8HQfzGTl6ORAT8.mft File: CiXR8yHlCgvKx8HQfzGTl6ORAT8.mft (raw, json) Hash identifier: 0qHMee1EKT3IInT5EX0QqAB9DrvG48kT1kgQfbg5/NA= Subject key identifier: 2F:65:AA:22:AE:8A:BD:77:76:5C:34:17:80:36:9B:D4:A6:F0:36:24 Authority key identifier: 0A:25:D1:F3:21:E5:0A:0B:CA:C7:C1:D0:7F:31:93:97:A3:91:01:3F Certificate issuer: /CN=A91EA23A/serialNumber=0A25D1F321E50A0BCAC7C1D07F319397A391013F Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiXR8yHlCgvKx8HQfzGTl6ORAT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA23A/8D59A2E4582311F18D7F2C9EA7833773/CiXR8yHlCgvKx8HQfzGTl6ORAT8.mft Manifest number: 10 Signing time: Thu 11 Jun 2026 11:29:44 +0000 Manifest this update: Thu 11 Jun 2026 11:29:43 +0000 Manifest next update: Thu 18 Jun 2026 11:29:43 +0000 Files and hashes: 1: CiXR8yHlCgvKx8HQfzGTl6ORAT8.crl (hash: Y+nSiH90j/d5NeYKgEhoEAXWI/dPhDgYE0PBWFK2k2Q=) 2: A08CACAC631411F19BD88A887D47A888.roa (hash: cui5kt/ao4ZSMnSmpM+vFQ/6IaNn7ud21wvDYaj2E2c=) 3: 65735378631411F1A1ABE5607D47A888.roa (hash: mA7bAbno8eCxBFSHk2mZ7wRMpGBwQ5uNOFxGCcgIxe4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA23A/8D59A2E4582311F18D7F2C9EA7833773/CiXR8yHlCgvKx8HQfzGTl6ORAT8.crl rsync://rpki.apnic.net/member_repository/A91EA23A/8D59A2E4582311F18D7F2C9EA7833773/CiXR8yHlCgvKx8HQfzGTl6ORAT8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiXR8yHlCgvKx8HQfzGTl6ORAT8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 11:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA23A, serialNumber=0A25D1F321E50A0BCAC7C1D07F319397A391013F Validity Not Before: Jun 11 11:29:43 2026 GMT Not After : Jun 18 11:29:43 2026 GMT Subject: CN=6a2a9c27-e9af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:54:20:57:de:ae:b5:68:08:65:00:ef:7d:fe: 87:5f:39:ee:ad:e8:41:af:63:1f:3e:16:d6:ff:c0: 36:be:76:34:63:a8:19:b1:71:64:b1:3d:d8:b8:8a: f8:62:ed:d6:c8:10:01:1b:6b:bc:68:5f:bd:8b:68: 9f:2f:04:88:05:df:75:21:f6:5e:20:06:c7:63:52: 95:01:b8:92:03:83:18:d3:7e:d3:d5:86:de:93:3c: 75:1c:03:f0:43:fc:bb:3b:21:d6:69:1b:ff:66:7b: 6f:89:9a:e9:d3:1d:73:a8:e1:1e:5a:b6:50:f9:1e: e3:db:b3:a7:1a:57:69:77:d5:ab:84:67:c3:bc:db: ce:c6:9a:40:06:02:16:24:fb:e2:08:15:cc:d4:86: 64:7e:12:74:8c:6f:b3:b6:7c:5c:25:85:cf:33:a2: bc:b2:bd:0c:cf:f2:dc:a6:4d:30:aa:b3:a8:7c:55: 16:c7:14:c6:2d:93:f8:09:3d:e2:0a:0c:c2:b2:9b: a9:17:12:86:ca:91:15:fc:ef:26:4a:c6:83:d0:aa: 38:38:3a:e7:15:c1:ed:2d:1a:e3:f9:4e:d6:4b:1d: 33:1f:54:55:34:f6:1b:e9:85:b4:eb:d6:f3:aa:1d: d5:85:86:54:85:e4:44:b7:d8:e8:46:76:f0:9e:cb: b5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:65:AA:22:AE:8A:BD:77:76:5C:34:17:80:36:9B:D4:A6:F0:36:24 X509v3 Authority Key Identifier: keyid:0A:25:D1:F3:21:E5:0A:0B:CA:C7:C1:D0:7F:31:93:97:A3:91:01:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA23A/8D59A2E4582311F18D7F2C9EA7833773/CiXR8yHlCgvKx8HQfzGTl6ORAT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiXR8yHlCgvKx8HQfzGTl6ORAT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA23A/8D59A2E4582311F18D7F2C9EA7833773/CiXR8yHlCgvKx8HQfzGTl6ORAT8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:d5:a3:63:4d:51:bc:a1:53:1e:4c:00:37:ca:3c:c4:1f:25: 77:23:32:95:83:6b:79:03:ac:39:df:ba:fe:46:fa:10:fa:ea: df:14:81:99:38:09:09:47:77:31:e9:fd:28:5e:68:ee:13:96: 28:43:90:36:4a:e7:6c:9d:dc:34:d8:80:d3:30:4d:9f:49:a2: 44:d0:66:52:15:27:58:99:f6:fc:82:3b:a2:96:70:6f:6d:76: 24:2e:af:1d:52:bb:cc:fc:86:48:74:9b:28:e0:17:2a:7d:af: 82:5a:9a:ae:fa:8c:85:da:a3:53:94:cf:ec:f0:e2:d8:62:be: 6d:c7:02:89:28:c0:fd:f9:b8:c4:96:88:6a:0b:04:41:bd:32: ec:6e:78:54:c0:bc:6a:49:12:ad:ea:c7:22:12:bb:7e:31:0c: 54:04:85:9a:9d:45:15:61:12:d5:2a:02:44:f5:e1:e9:de:97: cd:5c:7c:d9:c6:bd:7a:ce:2d:dc:8c:f5:ef:66:5c:09:dc:90: 68:32:f0:ba:5f:06:4b:f1:83:0f:d2:3b:c7:b2:81:c3:c0:ce: 08:e5:f5:1d:c4:94:17:ed:5b:09:ea:7b:8d:7c:d0:a5:ef:02: 4e:24:f8:82:75:b5:5d:b1:0d:90:fa:87:de:a4:6f:a3:2d:33: c6:7a:c7:37 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QTIzQTExMC8GA1UEBRMoMEEyNUQxRjMyMUU1MEEwQkNBQzdDMUQwN0YzMTkzOTdB MzkxMDEzRjAeFw0yNjA2MTExMTI5NDNaFw0yNjA2MTgxMTI5NDNaMBgxFjAUBgNV BAMTDTZhMmE5YzI3LWU5YWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0VCBX3q61aAhlAO99/odfOe6t6EGvYx8+Ftb/wDa+djRjqBmxcWSxPdi4ivhi 7dbIEAEba7xoX72LaJ8vBIgF33Uh9l4gBsdjUpUBuJIDgxjTftPVht6TPHUcA/BD /Ls7IdZpG/9me2+JmunTHXOo4R5atlD5HuPbs6caV2l31auEZ8O8287GmkAGAhYk ++IIFczUhmR+EnSMb7O2fFwlhc8zoryyvQzP8tymTTCqs6h8VRbHFMYtk/gJPeIK DMKym6kXEobKkRX87yZKxoPQqjg4OucVwe0tGuP5TtZLHTMfVFU09hvphbTr1vOq HdWFhlSF5ES32OhGdvCey7VdAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUL2WqIq6K vXd2XDQXgDab1KbwNiQwHwYDVR0jBBgwFoAUCiXR8yHlCgvKx8HQfzGTl6ORAT8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBMjNBLzhENTlBMkU0NTgy MzExRjE4RDdGMkM5RUE3ODMzNzczL0NpWFI4eUhsQ2d2S3g4SFFmekdUbDZPUkFU OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ2lYUjh5SGxDZ3ZLeDhIUWZ6R1RsNk9SQVQ4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB MjNBLzhENTlBMkU0NTgyMzExRjE4RDdGMkM5RUE3ODMzNzczL0NpWFI4eUhsQ2d2 S3g4SFFmekdUbDZPUkFUOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA91aNjTVG8oVMeTAA3yjzEHyV3IzKVg2t5A6w537r+RvoQ+urfFIGZOAkJR3cx 6f0oXmjuE5YoQ5A2Sudsndw02IDTME2fSaJE0GZSFSdYmfb8gjuilnBvbXYkLq8d UrvM/IZIdJso4Bcqfa+CWpqu+oyF2qNTlM/s8OLYYr5txwKJKMD9+bjElohqCwRB vTLsbnhUwLxqSRKt6sciErt+MQxUBIWanUUVYRLVKgJE9eHp3pfNXHzZxr16zi3c jPXvZlwJ3JBoMvC6XwZL8YMP0jvHsoHDwM4I5fUdxJQX7VsJ6nuNfNCl7wJOJPiC dbVdsQ2Q+ofepG+jLTPGesc3 -----END CERTIFICATE-----Generated at Sat Jun 13 07:13:07 2026 by rpki-client