$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft File: 0gZrYZNOd88mep3MOL9d7iHwe6M.mft (raw, json) Hash identifier: tc2AaUSTBv8rixY02CLVrPLQCRwHbYLNegVzbYWZoEs= Subject key identifier: DD:17:77:FF:A8:48:21:10:DF:84:41:F9:C4:38:B1:0A:D8:E7:D7:C5 Authority key identifier: D2:06:6B:61:93:4E:77:CF:26:7A:9D:CC:38:BF:5D:EE:21:F0:7B:A3 Certificate issuer: /CN=A91EBBAF/serialNumber=D2066B61934E77CF267A9DCC38BF5DEE21F07BA3 Certificate serial: D1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0gZrYZNOd88mep3MOL9d7iHwe6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft Manifest number: CB Signing time: Sat 13 Jun 2026 06:56:05 +0000 Manifest this update: Sat 13 Jun 2026 06:56:04 +0000 Manifest next update: Sat 20 Jun 2026 06:56:04 +0000 Files and hashes: 1: 0gZrYZNOd88mep3MOL9d7iHwe6M.crl (hash: wMEjbDQNxeK0lFonpHaZjgWsL3cfZHLoX7RYA6B1uAY=) 2: 68CDD7AA590511F1A0AA2ED1C0833773.roa (hash: 5AIwvSeV4wqjxoL+kcN3nI03XtL0ZSZv2Pa9ZnVQ0yk=) 3: CE1C73F63F8211F1AB237298B0833773.roa (hash: 0E3rcn/AMOWR95yzSBcRzzQYaugTtSGyakdzbiglBbk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.crl rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0gZrYZNOd88mep3MOL9d7iHwe6M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 06:56:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBBAF, serialNumber=D2066B61934E77CF267A9DCC38BF5DEE21F07BA3 Validity Not Before: Jun 13 06:56:04 2026 GMT Not After : Jun 20 06:56:04 2026 GMT Subject: CN=6a2cff05-3393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:82:62:f0:6f:28:19:5e:01:b8:79:9c:73:f3: fd:4e:0a:25:e7:64:a9:aa:c6:f1:b8:8c:2b:4b:53: c8:00:43:8c:a4:56:d9:6f:ac:fa:3e:38:66:ae:2c: 47:97:5e:a1:c3:49:59:93:3b:83:1d:67:55:d0:ca: 46:53:03:9c:40:b6:cd:6f:13:c3:4a:8a:dd:ed:b0: 6a:0a:a4:c8:ae:dc:38:32:cd:34:75:b1:70:e3:3e: 0c:91:1c:b0:59:fc:f9:4e:11:78:e1:03:22:4a:a2: 87:05:2d:3a:1f:c0:fc:1f:56:4d:2c:b3:56:63:92: 72:e8:b0:44:75:61:d8:75:7a:6e:22:94:88:dc:95: 25:63:6e:bf:af:42:30:aa:c4:e6:01:7c:ca:be:61: 37:71:90:75:47:e3:27:78:a4:13:1c:d0:26:f8:74: 96:a3:62:90:39:f4:be:b9:dc:c7:34:d1:50:20:b6: cf:0f:1a:d4:93:4d:33:89:92:0c:5d:9e:11:36:e0: 71:57:92:4d:e7:d1:4d:3c:a5:5b:76:f1:9a:72:d2: 73:13:dd:41:57:4a:23:1a:e8:82:da:85:51:44:03: a6:4b:00:54:5f:84:4c:dd:78:56:29:45:23:29:91: 74:21:bd:73:ba:a4:4a:03:25:15:9a:e3:22:5b:4e: d6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:17:77:FF:A8:48:21:10:DF:84:41:F9:C4:38:B1:0A:D8:E7:D7:C5 X509v3 Authority Key Identifier: keyid:D2:06:6B:61:93:4E:77:CF:26:7A:9D:CC:38:BF:5D:EE:21:F0:7B:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0gZrYZNOd88mep3MOL9d7iHwe6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:ae:ea:b2:65:9c:b7:3e:6f:b6:df:3b:71:26:be:5b:72:ba: 0d:11:bd:0b:04:9c:85:2e:ec:7d:2d:6d:c1:23:ec:1d:5a:00: 6b:87:55:e6:31:b3:48:f6:1e:dc:04:14:76:64:22:df:70:ab: e5:7a:f3:af:35:0d:66:8c:e4:aa:85:fb:8b:bf:8b:c7:4d:75: 80:da:b9:b1:eb:ea:50:c5:b3:0b:aa:ba:6f:04:97:65:4d:a5: 0c:c6:84:05:72:45:ab:ea:0a:47:f7:93:85:f5:f5:3d:9e:53: 86:d1:f8:be:4b:3f:d5:13:25:f1:80:13:6c:ba:6b:21:ac:0e: c5:20:2a:0a:66:01:da:3f:9e:17:15:84:01:d3:3b:53:d4:06: ca:a2:f5:67:7d:ae:c0:5d:22:5b:07:41:71:45:00:96:f4:da: 59:c7:ba:a0:98:31:b3:d0:2e:29:fd:76:9c:9c:96:43:d2:6f: 08:23:79:70:96:6e:26:a9:7d:92:2e:ba:c6:30:ad:de:80:0b: ac:99:b1:ea:8b:1e:c1:19:06:71:b1:7d:60:9b:14:e5:90:c8: 2b:72:3d:80:72:c6:57:48:c4:2a:4c:ff:39:b6:b2:94:bb:ef: ad:43:24:50:9b:77:97:d3:0e:20:6b:44:3b:06:e7:a6:d4:38: 66:bc:8d:01 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJCQUYxMTAvBgNVBAUTKEQyMDY2QjYxOTM0RTc3Q0YyNjdBOURDQzM4QkY1REVF MjFGMDdCQTMwHhcNMjYwNjEzMDY1NjA0WhcNMjYwNjIwMDY1NjA0WjAYMRYwFAYD VQQDEw02YTJjZmYwNS0zMzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyoJi8G8oGV4BuHmcc/P9Tgol52SpqsbxuIwrS1PIAEOMpFbZb6z6PjhmrixH l16hw0lZkzuDHWdV0MpGUwOcQLbNbxPDSord7bBqCqTIrtw4Ms00dbFw4z4MkRyw Wfz5ThF44QMiSqKHBS06H8D8H1ZNLLNWY5Jy6LBEdWHYdXpuIpSI3JUlY26/r0Iw qsTmAXzKvmE3cZB1R+MneKQTHNAm+HSWo2KQOfS+udzHNNFQILbPDxrUk00ziZIM XZ4RNuBxV5JN59FNPKVbdvGactJzE91BV0ojGuiC2oVRRAOmSwBUX4RM3XhWKUUj KZF0Ib1zuqRKAyUVmuMiW07WlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN0Xd/+o SCEQ34RB+cQ4sQrY59fFMB8GA1UdIwQYMBaAFNIGa2GTTnfPJnqdzDi/Xe4h8Huj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkJBRi8xMEMxOUQzMDM2 REQxMUYwOTY4NjIxNjZDNEY5QUUwMi8wZ1pyWVpOT2Q4OG1lcDNNT0w5ZDdpSHdl Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBnWnJZWk5PZDg4bWVwM01PTDlkN2lId2U2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkJBRi8xMEMxOUQzMDM2REQxMUYwOTY4NjIxNjZDNEY5QUUwMi8wZ1pyWVpOT2Q4 OG1lcDNNT0w5ZDdpSHdlNk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVK7qsmWctz5vtt87cSa+W3K6DRG9CwSchS7sfS1twSPsHVoAa4dV5jGzSPYe 3AQUdmQi33Cr5XrzrzUNZozkqoX7i7+Lx011gNq5sevqUMWzC6q6bwSXZU2lDMaE BXJFq+oKR/eThfX1PZ5ThtH4vks/1RMl8YATbLprIawOxSAqCmYB2j+eFxWEAdM7 U9QGyqL1Z32uwF0iWwdBcUUAlvTaWce6oJgxs9AuKf12nJyWQ9JvCCN5cJZuJql9 ki66xjCt3oALrJmx6osewRkGcbF9YJsU5ZDIK3I9gHLGV0jEKkz/ObaylLvvrUMk UJt3l9MOIGtEOwbnptQ4ZryNAQ== -----END CERTIFICATE-----Generated at Sat Jun 13 14:13:18 2026 by rpki-client