$ rpki-client -vvf rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft File: nLXKgHLiac4FVaYAsheSDrnhrE8.mft (raw, json) Hash identifier: gf1xfWbltRF+glH97UtJwPCIgySdrMyeyAa9tv7Ybl8= Subject key identifier: 14:26:B8:FD:35:50:83:78:37:29:4E:47:97:DD:12:1E:F4:9F:47:5E Authority key identifier: 9C:B5:CA:80:72:E2:69:CE:05:55:A6:00:B2:17:92:0E:B9:E1:AC:4F Certificate issuer: /CN=A91F38FD/serialNumber=9CB5CA8072E269CE0555A600B217920EB9E1AC4F Certificate serial: 020E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft Manifest number: 0201 Signing time: Sat 13 Jun 2026 03:12:23 +0000 Manifest this update: Sat 13 Jun 2026 03:12:22 +0000 Manifest next update: Sat 20 Jun 2026 03:12:22 +0000 Files and hashes: 1: nLXKgHLiac4FVaYAsheSDrnhrE8.crl (hash: HfyfKQwhgJlRaMmpTiJ/oqeLsmWiIqrsL55iX148CMk=) 2: 36020660DD2411EF9F4FB925C4F9AE02.roa (hash: i1Pu+9UVIaU6wY+KGS3N0zfxP0rOfpHG8M6EeBicwr4=) 3: 0B421064DD2411EFA5DECA6CC4F9AE02.roa (hash: +S1F0zYbzMvWkIw6OtTYzr4kRvSGMZIIi7dYMQVKPYc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.crl rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 526 (0x20e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F38FD, serialNumber=9CB5CA8072E269CE0555A600B217920EB9E1AC4F Validity Not Before: Jun 13 03:12:22 2026 GMT Not After : Jun 20 03:12:22 2026 GMT Subject: CN=6a2cca96-e977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2f:15:fa:44:9d:4d:eb:7f:2a:73:aa:73:f9: 8f:fb:ea:54:f6:0f:07:ea:eb:d4:23:85:94:2c:59: e4:36:fc:b5:2f:52:b7:3d:c8:57:f4:12:04:c9:c2: 8f:e8:59:00:7e:d4:2c:27:dc:b1:02:31:1b:6c:93: 09:bc:b7:5f:01:41:4e:fc:c0:d4:c8:14:d4:44:2f: 8d:03:36:af:d9:4a:97:ee:24:f3:de:3a:50:d1:73: 6a:38:c5:fc:20:33:18:c8:ac:9e:94:f3:23:83:d8: 07:dd:ac:28:0a:f3:4e:66:4f:87:e0:ea:de:a5:e9: b8:ba:14:98:88:6a:ba:71:a2:06:a4:5d:2f:3d:11: 16:5d:e1:f5:0c:62:a0:6e:e0:e8:5c:01:17:8f:33: 02:94:9c:b9:d4:fa:fd:a2:30:1d:22:d1:10:69:1c: b3:53:d0:f9:19:c4:81:6c:57:20:63:e9:3f:8d:8d: f6:b2:60:f4:e3:21:cb:5c:3e:fc:78:ff:32:4d:bf: 9d:a5:02:64:76:b4:da:45:4a:2c:47:b3:38:b2:be: cb:a5:ba:24:6a:e6:b3:14:3a:4f:a1:a4:3b:e6:96: ee:eb:04:34:80:05:67:81:fc:04:ce:bf:81:1c:f0: b5:01:b1:32:a2:90:8e:7c:fe:d0:2c:56:55:08:89: 8f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:26:B8:FD:35:50:83:78:37:29:4E:47:97:DD:12:1E:F4:9F:47:5E X509v3 Authority Key Identifier: keyid:9C:B5:CA:80:72:E2:69:CE:05:55:A6:00:B2:17:92:0E:B9:E1:AC:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:57:e5:26:9b:34:1c:24:f7:00:5a:5d:1e:8d:85:2d:73:51: 46:8b:8b:47:1f:14:49:9a:c2:08:0b:20:0b:af:5d:72:67:fb: 03:ef:7d:26:ef:3f:ac:52:80:2d:40:bf:54:83:8f:3e:06:a6: 5f:e0:b2:7a:5a:a7:7f:d7:43:32:da:a2:dc:28:5e:6d:ea:da: e9:1e:ca:b1:8d:b4:23:7c:7a:f8:1d:f8:14:d6:86:44:81:b4: 04:22:ba:ca:4d:87:70:09:02:41:14:e3:76:e0:03:3b:74:ac: f1:f4:07:3d:63:8d:a4:50:11:66:bd:11:4c:f0:ce:29:b1:3c: e7:8b:a3:e4:7b:db:6a:86:bb:e4:e3:c2:e0:7c:c1:f7:55:6c: 50:0b:b4:7e:f8:ea:7e:9e:47:35:88:03:dc:08:ea:d1:d6:5c: bc:f6:d6:50:94:af:7c:83:21:ce:8c:b4:2b:f5:f1:83:71:a5: b4:c3:e8:31:0e:f2:f0:5a:40:d6:5a:87:aa:a8:e5:c6:32:5d: ee:57:d7:90:66:c9:b2:5e:69:bc:32:76:30:fc:ad:77:4d:9e: b3:cd:a5:80:08:69:96:9d:a1:30:b6:75:95:a5:aa:51:11:4e: 8a:12:13:1f:8e:a9:46:01:18:f7:3d:0d:c4:14:10:e6:0c:a7: 59:38:0a:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM4RkQxMTAvBgNVBAUTKDlDQjVDQTgwNzJFMjY5Q0UwNTU1QTYwMEIyMTc5MjBF QjlFMUFDNEYwHhcNMjYwNjEzMDMxMjIyWhcNMjYwNjIwMDMxMjIyWjAYMRYwFAYD VQQDEw02YTJjY2E5Ni1lOTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsi8V+kSdTet/KnOqc/mP++pU9g8H6uvUI4WULFnkNvy1L1K3PchX9BIEycKP 6FkAftQsJ9yxAjEbbJMJvLdfAUFO/MDUyBTURC+NAzav2UqX7iTz3jpQ0XNqOMX8 IDMYyKyelPMjg9gH3awoCvNOZk+H4Orepem4uhSYiGq6caIGpF0vPREWXeH1DGKg buDoXAEXjzMClJy51Pr9ojAdItEQaRyzU9D5GcSBbFcgY+k/jY32smD04yHLXD78 eP8yTb+dpQJkdrTaRUosR7M4sr7LpbokauazFDpPoaQ75pbu6wQ0gAVngfwEzr+B HPC1AbEyopCOfP7QLFZVCImP0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBQmuP01 UIN4NylOR5fdEh70n0deMB8GA1UdIwQYMBaAFJy1yoBy4mnOBVWmALIXkg654axP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzhGRC9BNUE2RjM3QTYx RjgxMUVFOUY3OTQwMUFDNEY5QUUwMi9uTFhLZ0hMaWFjNEZWYVlBc2hlU0Rybmhy RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MWEtnSExpYWM0RlZhWUFzaGVTRHJuaHJFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzhGRC9BNUE2RjM3QTYxRjgxMUVFOUY3OTQwMUFDNEY5QUUwMi9uTFhLZ0hMaWFj NEZWYVlBc2hlU0RybmhyRTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG1flJps0HCT3AFpdHo2FLXNRRouLRx8USZrCCAsgC69dcmf7A+99Ju8/rFKA LUC/VIOPPgamX+Cyelqnf9dDMtqi3Chebera6R7KsY20I3x6+B34FNaGRIG0BCK6 yk2HcAkCQRTjduADO3Ss8fQHPWONpFARZr0RTPDOKbE854uj5Hvbaoa75OPC4HzB 91VsUAu0fvjqfp5HNYgD3Ajq0dZcvPbWUJSvfIMhzoy0K/Xxg3GltMPoMQ7y8FpA 1lqHqqjlxjJd7lfXkGbJsl5pvDJ2MPytd02es82lgAhplp2hMLZ1laWqURFOihIT H46pRgEY9z0NxBQQ5gynWTgKVQ== -----END CERTIFICATE-----Generated at Sat Jun 13 10:13:13 2026 by rpki-client