$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft File: vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft (raw, json) Hash identifier: jxkrGMxLHtEeALwEJGdOJwVjzBjtfcyqSL9vCI43SFc= Subject key identifier: 09:A7:7B:EB:12:2F:F3:3A:E3:E9:81:B4:97:CA:28:6F:AB:07:63:D8 Authority key identifier: BC:E9:FA:6C:37:7C:94:34:B1:2C:77:BE:FC:DD:42:A5:B7:03:4F:F2 Certificate issuer: /CN=A91EC3C9/serialNumber=BCE9FA6C377C9434B12C77BEFCDD42A5B7034FF2 Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOn6bDd8lDSxLHe-_N1CpbcDT_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft Manifest number: CA Signing time: Thu 11 Jun 2026 09:08:04 +0000 Manifest this update: Thu 11 Jun 2026 09:08:03 +0000 Manifest next update: Thu 18 Jun 2026 09:08:03 +0000 Files and hashes: 1: vOn6bDd8lDSxLHe-_N1CpbcDT_I.crl (hash: VwwqSA1EWw+x5a4LnX3hQGPj5rqIfvqL2F3Zlv/VviE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.crl rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOn6bDd8lDSxLHe-_N1CpbcDT_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 09:08:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC3C9, serialNumber=BCE9FA6C377C9434B12C77BEFCDD42A5B7034FF2 Validity Not Before: Jun 11 09:08:03 2026 GMT Not After : Jun 18 09:08:03 2026 GMT Subject: CN=6a2a7af3-7158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:02:11:b4:ed:d9:d4:9e:a7:83:0e:a1:dd:a6: 71:87:ef:6e:55:6d:f1:b7:60:d6:1b:47:05:1d:e1: df:d4:95:e8:46:7a:a0:e9:c3:f6:e4:02:b6:bb:a7: 00:8c:ba:94:50:85:bb:60:a6:09:29:03:75:a0:a4: 51:fd:79:0a:9e:52:94:b0:15:15:62:45:7c:71:7e: 7a:b5:dd:cf:e2:cb:a8:cf:07:d9:c9:70:6e:d1:e5: 26:09:e0:60:5f:1b:5c:96:df:31:d1:3b:ec:bf:59: 38:d7:30:f7:2c:70:a9:51:54:9b:2b:d4:54:de:80: 81:b7:fb:52:5f:a8:b7:ad:4c:ff:0c:08:6e:57:c2: 14:16:67:54:e7:41:ac:ec:2d:da:7b:97:af:79:bb: 9c:5f:89:43:01:2e:7c:5f:e0:33:76:94:24:a2:7b: 29:1e:67:95:69:0a:67:d8:f5:96:36:27:c0:1d:9a: 6e:77:e2:1b:71:fc:6f:12:49:c2:70:12:98:01:d8: ca:c9:8c:2e:1f:95:e4:ae:51:30:f9:6f:31:a2:69: 21:06:06:b6:d7:95:b0:d1:09:f6:02:8e:58:5e:d1: 0e:c4:0a:5d:20:3f:f0:0f:81:3b:27:97:38:63:6f: 36:63:2c:e0:49:83:bf:c6:b7:27:5d:3e:02:45:91: 6d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:A7:7B:EB:12:2F:F3:3A:E3:E9:81:B4:97:CA:28:6F:AB:07:63:D8 X509v3 Authority Key Identifier: keyid:BC:E9:FA:6C:37:7C:94:34:B1:2C:77:BE:FC:DD:42:A5:B7:03:4F:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOn6bDd8lDSxLHe-_N1CpbcDT_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e4:bd:c9:3d:1f:36:e7:fc:2f:c1:fb:55:ad:d6:3d:65:5f:16: 54:ce:43:00:b8:a1:d8:cc:8b:46:ad:33:f4:3f:4d:da:bf:ee: b1:23:f5:ad:e7:c0:e2:0e:40:43:87:a8:17:7f:e6:f4:1e:e2: f7:3d:68:4f:fc:50:30:c7:43:63:3f:73:67:7e:23:75:28:c0: 7c:04:d1:1d:b5:6a:a2:e8:02:9c:4f:05:c5:2b:b8:d7:5b:85: 2a:b9:7a:24:ed:2c:21:5f:e9:70:65:02:8c:89:c9:22:d9:1d: 55:aa:17:db:d4:b1:a2:a6:1a:d7:28:2a:53:8b:0c:30:2f:da: b4:a9:9e:e2:73:61:8a:f8:55:3c:d6:f0:e8:e9:67:88:66:6b: fc:c6:35:7d:6f:3c:a6:74:98:fe:18:39:c4:19:ce:9c:82:e0: c4:27:0a:d4:c3:73:82:59:65:bd:ab:54:1d:bf:94:8f:42:40: fa:c5:53:03:c6:56:14:c6:e9:8f:72:4f:04:aa:8a:b7:a2:f2: d3:89:ae:e6:91:65:1e:8c:5a:aa:62:54:e5:e5:62:d9:c7:7a: cc:7f:bf:20:ec:7d:83:f7:b1:74:f7:20:d2:02:2d:0f:9a:6c: ef:34:0c:91:45:35:0c:7f:12:d2:5c:9a:20:cb:0d:46:ea:6e: 1d:bb:1d:8e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUMzQzkxMTAvBgNVBAUTKEJDRTlGQTZDMzc3Qzk0MzRCMTJDNzdCRUZDREQ0MkE1 QjcwMzRGRjIwHhcNMjYwNjExMDkwODAzWhcNMjYwNjE4MDkwODAzWjAYMRYwFAYD VQQDEw02YTJhN2FmMy03MTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQIRtO3Z1J6ngw6h3aZxh+9uVW3xt2DWG0cFHeHf1JXoRnqg6cP25AK2u6cA jLqUUIW7YKYJKQN1oKRR/XkKnlKUsBUVYkV8cX56td3P4suozwfZyXBu0eUmCeBg Xxtclt8x0Tvsv1k41zD3LHCpUVSbK9RU3oCBt/tSX6i3rUz/DAhuV8IUFmdU50Gs 7C3ae5evebucX4lDAS58X+AzdpQkonspHmeVaQpn2PWWNifAHZpud+IbcfxvEknC cBKYAdjKyYwuH5XkrlEw+W8xomkhBga215Ww0Qn2Ao5YXtEOxApdID/wD4E7J5c4 Y282YyzgSYO/xrcnXT4CRZFt7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAmne+sS L/M64+mBtJfKKG+rB2PYMB8GA1UdIwQYMBaAFLzp+mw3fJQ0sSx3vvzdQqW3A0/y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzNDOS9DMTJDREFFNDMx OEUxMUYwOUMzNkRBN0JDNEY5QUUwMi92T242YkRkOGxEU3hMSGUtX04xQ3BiY0RU X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZPbjZiRGQ4bERTeExIZS1fTjFDcGJjRFRfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzNDOS9DMTJDREFFNDMxOEUxMUYwOUMzNkRBN0JDNEY5QUUwMi92T242YkRkOGxE U3hMSGUtX04xQ3BiY0RUX0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA5L3JPR825/wvwftVrdY9ZV8WVM5DALih2MyLRq0z9D9N2r/usSP1refA4g5A Q4eoF3/m9B7i9z1oT/xQMMdDYz9zZ34jdSjAfATRHbVqougCnE8FxSu411uFKrl6 JO0sIV/pcGUCjInJItkdVaoX29SxoqYa1ygqU4sMMC/atKme4nNhivhVPNbw6Oln iGZr/MY1fW88pnSY/hg5xBnOnILgxCcK1MNzglllvatUHb+Uj0JA+sVTA8ZWFMbp j3JPBKqKt6Ly04mu5pFlHoxaqmJU5eVi2cd6zH+/IOx9g/exdPcg0gItD5ps7zQM kUU1DH8S0lyaIMsNRupuHbsdjg== -----END CERTIFICATE-----Generated at Sat Jun 13 08:17:26 2026 by rpki-client