$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.mft File: F4SvaM922Ze5n3dAY3gNspm1SpM.mft (raw, json) Hash identifier: 2vEgSNJhXHP8NsAjN9VQ21blUteBmbpna1q+h8Fn5hE= Subject key identifier: 03:2E:E2:4C:CA:FD:BA:83:6A:AB:B6:5F:BA:60:4C:6B:3D:78:57:34 Authority key identifier: 17:84:AF:68:CF:76:D9:97:B9:9F:77:40:63:78:0D:B2:99:B5:4A:93 Certificate issuer: /CN=A91EC3C9/serialNumber=1784AF68CF76D997B99F774063780DB299B54A93 Certificate serial: CF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4SvaM922Ze5n3dAY3gNspm1SpM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.mft Manifest number: CA Signing time: Sat 13 Jun 2026 06:53:28 +0000 Manifest this update: Sat 13 Jun 2026 06:53:28 +0000 Manifest next update: Sat 20 Jun 2026 06:53:28 +0000 Files and hashes: 1: F4SvaM922Ze5n3dAY3gNspm1SpM.crl (hash: 3JK3Ciq2CkPEtMjPIWRJRQ9YCBgTkHwPxTfEQrAKH4Q=) 2: 7B6FCB36340B11F0B358096BC4F9AE02.roa (hash: 9rHElgQGkin/9e3Db5VLV3ihFuBVV27/iuFOrelwuPY=) 3: 00DDE7DA3AD311F09AB8AF3EC4F9AE02.roa (hash: VbbAYRDB1MrB+OHsle6cq0lEvb0Mg7dou4jfOd/d1WA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.crl rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4SvaM922Ze5n3dAY3gNspm1SpM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 06:53:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 207 (0xcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC3C9, serialNumber=1784AF68CF76D997B99F774063780DB299B54A93 Validity Not Before: Jun 13 06:53:28 2026 GMT Not After : Jun 20 06:53:28 2026 GMT Subject: CN=6a2cfe68-c7bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fd:f0:32:be:ba:7c:e0:90:90:cb:31:cb:4c: 39:35:2a:20:03:38:b3:dc:a7:7c:73:32:79:eb:88: d5:2e:3e:a6:a9:dc:90:0a:33:1f:cb:f2:c8:ad:5e: e6:af:aa:8e:fd:01:72:ae:74:4d:8c:93:3d:f9:51: 61:27:31:44:ff:21:a0:65:d3:6c:3c:da:06:3f:8b: 88:4d:24:9c:1e:39:7d:a4:d5:ac:07:31:a2:27:2f: 19:cc:9d:2f:d5:24:4c:5f:ea:f7:23:9a:36:fe:f6: 65:a0:61:dc:63:ac:f1:64:37:10:21:e0:d9:16:a5: d6:7b:20:34:fd:4b:be:c9:c1:e9:c2:40:12:93:2c: c0:f4:bf:dd:72:b5:bd:10:4a:b9:f9:10:cb:de:bb: 56:87:8c:53:44:2f:79:97:ff:af:a7:ed:63:11:3d: 02:a5:a3:a6:06:5e:80:6d:03:92:a9:d6:e9:bc:be: 00:dd:bd:82:53:27:4b:9c:ba:5f:6d:43:12:73:7d: cc:8b:39:8b:8d:06:18:0a:86:b7:62:c1:f5:5c:9f: bc:7f:91:21:1b:2d:1b:b5:30:4f:2a:d9:58:be:f3: a6:38:09:a3:a5:1c:62:39:87:c6:7c:48:16:4b:09: 76:33:59:c1:7a:4d:41:4e:2f:57:aa:da:16:cf:fe: 23:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:2E:E2:4C:CA:FD:BA:83:6A:AB:B6:5F:BA:60:4C:6B:3D:78:57:34 X509v3 Authority Key Identifier: keyid:17:84:AF:68:CF:76:D9:97:B9:9F:77:40:63:78:0D:B2:99:B5:4A:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4SvaM922Ze5n3dAY3gNspm1SpM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:da:d5:84:b1:7e:4f:50:c3:db:89:10:e4:45:5d:25:8f:eb: 36:02:c1:a0:f0:be:55:6e:15:f3:4c:c6:64:e4:cf:4b:06:73: 1c:fd:12:de:90:59:07:bb:70:96:17:bb:fa:e1:8d:ee:77:db: c7:c6:10:45:23:1c:29:3a:ea:a0:15:52:c0:e1:92:f5:07:01: 75:e0:ec:96:00:f9:e2:a2:dc:d0:3f:15:28:78:f6:dc:0e:39: d0:8e:54:ca:33:a7:86:47:ab:fb:34:03:ee:3e:1c:06:d6:a6: b1:a2:8e:83:5c:ae:38:7b:3f:72:46:6f:3d:12:ab:19:1f:e6: f0:75:23:7d:aa:33:79:aa:8b:40:37:2c:48:6a:65:e8:39:33: ed:55:08:af:d7:54:59:1f:06:b6:5f:77:bc:3e:ad:c5:8a:f2: 9c:46:b0:7c:56:1c:35:8d:95:26:22:81:db:ce:ae:6d:30:7b: 07:75:19:e2:c0:d4:af:01:e5:32:ea:7c:35:0f:81:06:2e:e7: dc:a1:1e:3a:e7:a3:00:0a:cb:dd:7e:08:0e:9e:34:ef:28:79: b1:4e:81:af:f3:2d:ac:13:f4:09:b5:e5:48:5c:92:4d:06:61: ff:a4:df:8f:44:65:65:cb:94:c4:21:69:dd:fe:27:e8:e0:6c: 91:bb:b5:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUMzQzkxMTAvBgNVBAUTKDE3ODRBRjY4Q0Y3NkQ5OTdCOTlGNzc0MDYzNzgwREIy OTlCNTRBOTMwHhcNMjYwNjEzMDY1MzI4WhcNMjYwNjIwMDY1MzI4WjAYMRYwFAYD VQQDEw02YTJjZmU2OC1jN2JmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu/3wMr66fOCQkMsxy0w5NSogAziz3Kd8czJ564jVLj6mqdyQCjMfy/LIrV7m r6qO/QFyrnRNjJM9+VFhJzFE/yGgZdNsPNoGP4uITSScHjl9pNWsBzGiJy8ZzJ0v 1SRMX+r3I5o2/vZloGHcY6zxZDcQIeDZFqXWeyA0/Uu+ycHpwkASkyzA9L/dcrW9 EEq5+RDL3rtWh4xTRC95l/+vp+1jET0CpaOmBl6AbQOSqdbpvL4A3b2CUydLnLpf bUMSc33MizmLjQYYCoa3YsH1XJ+8f5EhGy0btTBPKtlYvvOmOAmjpRxiOYfGfEgW Swl2M1nBek1BTi9XqtoWz/4jhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAMu4kzK /bqDaqu2X7pgTGs9eFc0MB8GA1UdIwQYMBaAFBeEr2jPdtmXuZ93QGN4DbKZtUqT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzNDOS8xNEE3QjI2MjMz RkYxMUYwOThBQjhGMjBDNEY5QUUwMi9GNFN2YU05MjJaZTVuM2RBWTNnTnNwbTFT cE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Y0U3ZhTTkyMlplNW4zZEFZM2dOc3BtMVNwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzNDOS8xNEE3QjI2MjMzRkYxMUYwOThBQjhGMjBDNEY5QUUwMi9GNFN2YU05MjJa ZTVuM2RBWTNnTnNwbTFTcE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKdrVhLF+T1DD24kQ5EVdJY/rNgLBoPC+VW4V80zGZOTPSwZzHP0S3pBZB7tw lhe7+uGN7nfbx8YQRSMcKTrqoBVSwOGS9QcBdeDslgD54qLc0D8VKHj23A450I5U yjOnhker+zQD7j4cBtamsaKOg1yuOHs/ckZvPRKrGR/m8HUjfaozeaqLQDcsSGpl 6Dkz7VUIr9dUWR8Gtl93vD6txYrynEawfFYcNY2VJiKB286ubTB7B3UZ4sDUrwHl Mup8NQ+BBi7n3KEeOuejAArL3X4IDp407yh5sU6Br/MtrBP0CbXlSFySTQZh/6Tf j0RlZcuUxCFp3f4n6OBskbu16Q== -----END CERTIFICATE-----Generated at Sat Jun 13 12:54:40 2026 by rpki-client