$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.mft File: Z38M1kpd4sGwKO0APFaHS0j6LiE.mft (raw, json) Hash identifier: V5/FvR9MuwgeNzb57CFQtAO6eRyoOjtS4hvR77K9lSQ= Subject key identifier: A7:14:9B:05:D4:DA:84:C6:46:58:CA:AA:AB:82:7C:3A:32:99:13:7C Authority key identifier: 67:7F:0C:D6:4A:5D:E2:C1:B0:28:ED:00:3C:56:87:4B:48:FA:2E:21 Certificate issuer: /CN=A91F17B3/serialNumber=677F0CD64A5DE2C1B028ED003C56874B48FA2E21 Certificate serial: B3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Z38M1kpd4sGwKO0APFaHS0j6LiE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.mft Manifest number: A2 Signing time: Sat 13 Jun 2026 07:25:33 +0000 Manifest this update: Sat 13 Jun 2026 07:25:33 +0000 Manifest next update: Sat 20 Jun 2026 07:25:33 +0000 Files and hashes: 1: Z38M1kpd4sGwKO0APFaHS0j6LiE.crl (hash: 6MPxY7VV9LRxNUg7jHdp9cDhVGxHUb6+qpWGK3oLC7M=) 2: AD46933EB65011F0B751DB86C4F9AE02.roa (hash: BQkbdtjI99mxWqdYu14uU0wWLwTO/VUnPRItrckeDrg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.crl rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Z38M1kpd4sGwKO0APFaHS0j6LiE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 07:25:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 179 (0xb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F17B3, serialNumber=677F0CD64A5DE2C1B028ED003C56874B48FA2E21 Validity Not Before: Jun 13 07:25:33 2026 GMT Not After : Jun 20 07:25:33 2026 GMT Subject: CN=6a2d05ed-0eb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:04:92:3a:7d:32:69:ca:90:3d:e4:57:f7:00: 0b:9c:50:03:b0:fb:d4:cc:85:f2:28:01:25:35:60: 2a:b9:16:c4:ce:40:c4:64:d2:54:7f:2e:e3:99:2c: 05:13:70:80:86:d8:61:f7:32:f1:17:28:33:66:19: b6:aa:4d:4d:db:88:db:87:dc:85:02:7c:c6:57:ab: fc:4a:ae:b6:51:ef:4b:be:54:34:9a:75:94:97:34: fd:16:b7:5f:f7:9e:75:c8:9e:9a:f4:9a:24:d3:67: 01:8c:91:55:d2:27:dc:15:73:25:5e:05:b7:a9:c8: ab:fa:9a:75:fc:e0:fc:10:66:62:5a:56:2c:65:68: 36:61:b8:20:e2:be:89:e3:bc:ac:48:cb:0f:d9:dd: 9a:6f:0d:19:4b:55:1a:4f:3a:cf:36:e5:bc:4e:b0: 81:56:28:eb:2d:14:5b:c5:4a:1d:16:48:51:12:ee: ef:c7:fe:84:0a:01:2a:27:69:14:2b:68:22:ce:d2: 0b:f9:09:77:b9:24:5f:61:b7:2c:2c:21:f1:a0:2d: 6c:17:91:83:de:4b:e1:94:fb:6d:eb:85:9d:d3:c7: f5:8b:30:85:52:8a:04:bb:8f:ba:93:33:eb:0c:fe: 96:eb:ab:3a:eb:a3:94:a4:86:c8:d3:80:10:17:5e: 0a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:14:9B:05:D4:DA:84:C6:46:58:CA:AA:AB:82:7C:3A:32:99:13:7C X509v3 Authority Key Identifier: keyid:67:7F:0C:D6:4A:5D:E2:C1:B0:28:ED:00:3C:56:87:4B:48:FA:2E:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Z38M1kpd4sGwKO0APFaHS0j6LiE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:17:9d:56:d5:ef:4e:17:3e:cb:59:85:16:a6:61:63:5a:46: 9b:a7:d0:6e:44:f0:dd:52:a8:f1:e8:bf:1d:cf:78:01:a5:63: af:3c:99:52:df:c4:1f:94:b0:e7:74:b6:46:cd:99:fd:6e:3d: 69:3a:74:a1:ca:1e:74:7e:af:06:67:e6:76:20:eb:d7:69:34: ef:17:1b:f2:20:b2:6e:ba:b5:cf:d8:dd:bd:ed:5b:bf:c6:87: f6:6e:cd:ad:d6:e4:2a:1c:b1:63:dd:16:e6:13:a1:1f:72:9a: ee:fa:6d:f0:22:22:bd:50:be:04:60:3c:e1:45:69:de:3e:7f: ec:ca:44:5f:e6:34:f2:ef:57:5d:3a:a9:80:0c:3d:58:64:cc: dd:9a:69:47:43:f6:65:b8:f0:59:3b:04:91:34:ce:47:cc:59: 07:ba:23:b0:73:84:6a:e8:5c:de:3a:dc:74:4d:1f:86:99:3b: 5d:55:f4:97:e4:2a:7f:d8:eb:be:72:63:57:13:d9:5c:62:05: 63:86:f0:cb:0e:00:ce:51:5e:b3:4c:bd:e0:52:8a:f2:d7:d1: ae:06:d2:76:e5:6d:de:30:ca:6a:49:18:df:52:b4:3a:63:ef: a7:45:ed:55:b5:29:b4:5b:39:b7:90:02:e0:bc:65:80:e0:1b: d2:38:54:09 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE3QjMxMTAvBgNVBAUTKDY3N0YwQ0Q2NEE1REUyQzFCMDI4RUQwMDNDNTY4NzRC NDhGQTJFMjEwHhcNMjYwNjEzMDcyNTMzWhcNMjYwNjIwMDcyNTMzWjAYMRYwFAYD VQQDEw02YTJkMDVlZC0wZWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmgSSOn0yacqQPeRX9wALnFADsPvUzIXyKAElNWAquRbEzkDEZNJUfy7jmSwF E3CAhthh9zLxFygzZhm2qk1N24jbh9yFAnzGV6v8Sq62Ue9LvlQ0mnWUlzT9Frdf 9551yJ6a9Jok02cBjJFV0ifcFXMlXgW3qcir+pp1/OD8EGZiWlYsZWg2Ybgg4r6J 47ysSMsP2d2abw0ZS1UaTzrPNuW8TrCBVijrLRRbxUodFkhREu7vx/6ECgEqJ2kU K2giztIL+Ql3uSRfYbcsLCHxoC1sF5GD3kvhlPtt64Wd08f1izCFUooEu4+6kzPr DP6W66s666OUpIbI04AQF14KUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKcUmwXU 2oTGRljKqquCfDoymRN8MB8GA1UdIwQYMBaAFGd/DNZKXeLBsCjtADxWh0tI+i4h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTdCMy81NThDNjA5ODc5 Q0QxMUYwQTlCOTAzMjFDNEY5QUUwMi9aMzhNMWtwZDRzR3dLTzBBUEZhSFMwajZM aUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1ozOE0xa3BkNHNHd0tPMEFQRmFIUzBqNkxpRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTdCMy81NThDNjA5ODc5Q0QxMUYwQTlCOTAzMjFDNEY5QUUwMi9aMzhNMWtwZDRz R3dLTzBBUEZhSFMwajZMaUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANBedVtXvThc+y1mFFqZhY1pGm6fQbkTw3VKo8ei/Hc94AaVjrzyZUt/EH5Sw 53S2Rs2Z/W49aTp0ocoedH6vBmfmdiDr12k07xcb8iCybrq1z9jdve1bv8aH9m7N rdbkKhyxY90W5hOhH3Ka7vpt8CIivVC+BGA84UVp3j5/7MpEX+Y08u9XXTqpgAw9 WGTM3ZppR0P2ZbjwWTsEkTTOR8xZB7ojsHOEauhc3jrcdE0fhpk7XVX0l+Qqf9jr vnJjVxPZXGIFY4bwyw4AzlFes0y94FKK8tfRrgbSduVt3jDKakkY31K0OmPvp0Xt VbUptFs5t5AC4LxlgOAb0jhUCQ== -----END CERTIFICATE-----Generated at Sat Jun 13 16:55:04 2026 by rpki-client