$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft File: 4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft (raw, json) Hash identifier: NMOg/mBggT8o9+2OoaIw0XDZnnErI7yn1G3SooQcwTg= Subject key identifier: 46:60:D9:49:9F:E1:1A:24:2C:77:90:4C:45:F8:1E:E0:6D:C8:12:F3 Authority key identifier: E2:5F:CD:9B:77:25:85:39:42:79:1A:62:D4:75:EC:FE:D7:C0:3F:64 Certificate issuer: /CN=A91F59A6/serialNumber=E25FCD9B7725853942791A62D475ECFED7C03F64 Certificate serial: 0952 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft Manifest number: 0926 Signing time: Fri 12 Jun 2026 17:54:23 +0000 Manifest this update: Fri 12 Jun 2026 17:54:23 +0000 Manifest next update: Fri 19 Jun 2026 17:54:23 +0000 Files and hashes: 1: 4l_Nm3clhTlCeRpi1HXs_tfAP2Q.crl (hash: tIRnRO60toAnfYvXDEzRmiBl4MTZwD/DXRrHKIIIpm8=) 2: D385E420314711EBA579873DC4F9AE02.roa (hash: OXpsFXQnHysc6JgYoLG/ywf9w/jV3FpEntMMj1+ecpM=) 3: 18B1B5361CE611EBB543881CC4F9AE02.roa (hash: BoTL56JNkoT8zZTebPvc7QbRsS4FGOp32MGJ/vJjCqw=) 4: 19B0BAAE1CE611EBB543881CC4F9AE02.roa (hash: x1jD2hg6E8urDPutIfNWsExPrrmq8yEETqPUKu1cNM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.crl rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 17:54:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2386 (0x952) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F59A6, serialNumber=E25FCD9B7725853942791A62D475ECFED7C03F64 Validity Not Before: Jun 12 17:54:23 2026 GMT Not After : Jun 19 17:54:23 2026 GMT Subject: CN=6a2c47cf-5d0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c3:b2:c8:59:b0:c4:48:cc:b9:0d:7b:63:43: e2:a0:1f:f7:29:97:32:8d:9e:c6:5c:c4:b1:de:e7: 31:46:19:6b:5e:71:89:28:82:2f:27:2e:9a:ba:c5: 4c:ec:15:ec:70:5c:12:20:67:a9:80:c5:19:ea:29: 7f:ab:85:f7:a0:cf:98:8b:d0:35:31:69:9a:2b:41: e3:b7:85:7d:7f:e3:14:1f:7b:6d:96:18:4f:47:f5: 6a:98:5d:59:54:ec:0a:48:3d:08:4a:1a:80:32:14: ef:fc:10:c1:88:f4:b4:75:25:e7:d8:ac:d4:de:ee: 8e:54:9e:4c:6c:5c:35:d9:95:8f:7f:2f:42:6a:c1: 5a:b1:1f:af:0e:cf:76:3b:e2:bb:ef:1f:e9:b9:95: 74:70:f0:29:78:06:6e:5e:ac:c0:bf:4c:e4:39:67: 3a:85:bb:ca:17:da:f3:a6:2e:58:db:d2:a3:21:61: 5d:c5:6a:e1:a3:23:3e:88:c3:21:8f:ec:20:a2:f1: 9c:b0:91:7f:eb:2f:e4:57:42:38:01:08:31:ac:4f: f9:dc:dc:0a:42:16:84:5d:4d:a2:d1:ac:51:51:b9: 5a:fe:03:56:b1:8a:a4:33:d3:46:eb:36:5e:73:89: 14:2d:bf:84:e5:b5:1d:81:ad:a6:3b:ae:69:a1:7b: eb:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:60:D9:49:9F:E1:1A:24:2C:77:90:4C:45:F8:1E:E0:6D:C8:12:F3 X509v3 Authority Key Identifier: keyid:E2:5F:CD:9B:77:25:85:39:42:79:1A:62:D4:75:EC:FE:D7:C0:3F:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:76:ab:a3:61:fe:9e:55:5f:0d:de:95:98:c0:41:9b:a2:09: 32:b1:0e:2b:ca:ed:96:2d:23:db:64:db:76:ea:8a:51:c0:60: 44:97:7e:28:ad:9f:58:e9:a6:7e:aa:56:6d:ad:a4:1b:27:d2: 8e:ed:ed:16:3c:dd:25:58:d4:6b:8c:ad:1d:b5:8d:aa:87:58: 79:14:11:54:3a:b2:4c:3a:84:8c:94:29:ad:4b:51:3a:69:0f: 50:d7:ff:8f:96:28:d9:0b:e8:6d:d3:5f:3a:da:fe:83:19:8e: 0c:83:df:6f:e5:41:79:88:d7:37:bc:fe:56:87:cb:7a:bc:1e: 49:f3:24:e5:cc:3e:6c:a9:a7:9d:8a:2b:2e:22:b7:e2:00:fe: 9a:13:38:45:ad:21:95:57:5d:49:83:d5:17:60:a5:77:35:ed: 5b:4e:85:2a:b8:bb:b2:56:e8:e6:c4:fb:84:e0:09:41:e7:1c: 2a:a5:62:62:16:b7:63:50:b3:54:60:e7:c8:6e:c4:ba:d5:d6: a4:32:ce:5f:2a:ce:8e:a0:79:53:f1:37:96:0d:03:23:55:5a: 6f:11:79:a6:4a:02:30:1a:35:b9:95:d2:14:28:36:d6:42:76: 4f:c8:c4:51:1a:fe:76:3a:2d:b6:75:31:93:38:dd:16:43:bb: 94:d6:e8:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU5QTYxMTAvBgNVBAUTKEUyNUZDRDlCNzcyNTg1Mzk0Mjc5MUE2MkQ0NzVFQ0ZF RDdDMDNGNjQwHhcNMjYwNjEyMTc1NDIzWhcNMjYwNjE5MTc1NDIzWjAYMRYwFAYD VQQDEw02YTJjNDdjZi01ZDBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2MOyyFmwxEjMuQ17Y0PioB/3KZcyjZ7GXMSx3ucxRhlrXnGJKIIvJy6ausVM 7BXscFwSIGepgMUZ6il/q4X3oM+Yi9A1MWmaK0Hjt4V9f+MUH3ttlhhPR/VqmF1Z VOwKSD0IShqAMhTv/BDBiPS0dSXn2KzU3u6OVJ5MbFw12ZWPfy9CasFasR+vDs92 O+K77x/puZV0cPApeAZuXqzAv0zkOWc6hbvKF9rzpi5Y29KjIWFdxWrhoyM+iMMh j+wgovGcsJF/6y/kV0I4AQgxrE/53NwKQhaEXU2i0axRUbla/gNWsYqkM9NG6zZe c4kULb+E5bUdga2mO65poXvrbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEZg2Umf 4RokLHeQTEX4HuBtyBLzMB8GA1UdIwQYMBaAFOJfzZt3JYU5QnkaYtR17P7XwD9k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTlBNi9FNEVEQUMxOENC MUExMUVBODdDRDU1NDRDNEY5QUUwMi80bF9ObTNjbGhUbENlUnBpMUhYc190ZkFQ MlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRsX05tM2NsaFRsQ2VScGkxSFhzX3RmQVAyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTlBNi9FNEVEQUMxOENCMUExMUVBODdDRDU1NDRDNEY5QUUwMi80bF9ObTNjbGhU bENlUnBpMUhYc190ZkFQMlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYHaro2H+nlVfDd6VmMBBm6IJMrEOK8rtli0j22TbduqKUcBgRJd+KK2fWOmm fqpWba2kGyfSju3tFjzdJVjUa4ytHbWNqodYeRQRVDqyTDqEjJQprUtROmkPUNf/ j5Yo2QvobdNfOtr+gxmODIPfb+VBeYjXN7z+VofLerweSfMk5cw+bKmnnYorLiK3 4gD+mhM4Ra0hlVddSYPVF2CldzXtW06FKri7slbo5sT7hOAJQeccKqViYha3Y1Cz VGDnyG7EutXWpDLOXyrOjqB5U/E3lg0DI1VabxF5pkoCMBo1uZXSFCg21kJ2T8jE URr+djottnUxkzjdFkO7lNbopg== -----END CERTIFICATE-----Generated at Sat Jun 13 20:45:23 2026 by rpki-client