$ rpki-client -vvf rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft File: G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft (raw, json) Hash identifier: lN/aQ8V576eAeHOjBVYhFPC0rfjNlc64CyvdQWI0OkY= Subject key identifier: 01:85:7B:97:7F:99:8F:19:B6:8D:4D:BF:D1:85:C8:03:50:C0:75:9B Authority key identifier: 1B:F5:A8:D9:4C:E0:6C:E3:01:FC:35:D8:69:F7:0D:74:0D:70:97:52 Certificate issuer: /CN=A91F67BB/serialNumber=1BF5A8D94CE06CE301FC35D869F70D740D709752 Certificate serial: 122C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft Manifest number: 11FC Signing time: Fri 12 Jun 2026 17:07:03 +0000 Manifest this update: Fri 12 Jun 2026 17:07:03 +0000 Manifest next update: Fri 19 Jun 2026 17:07:03 +0000 Files and hashes: 1: G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl (hash: /NxI0elzcUlt0A0QvTcgNrdkiugPApjE1MsMLPNJm/8=) 2: FB675E140F0311E997412A4EC4F9AE02.roa (hash: WZDgNlhW0pwPMejNqxRBtwXZLqcsEeCsrEz1azRWYbQ=) 3: 294F19380E5111E988F3C34BC4F9AE02.roa (hash: 2Hp6M6BntVmhWo1ReGblit19qNRWTDvqJP9qHcur32s=) 4: FAC7FE320F0311E997412A4EC4F9AE02.roa (hash: ltuiI8TZuMv/G/t/Ztpq7bP81fIn8XtBMrkmf8/fbBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 17:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4652 (0x122c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F67BB, serialNumber=1BF5A8D94CE06CE301FC35D869F70D740D709752 Validity Not Before: Jun 12 17:07:03 2026 GMT Not After : Jun 19 17:07:03 2026 GMT Subject: CN=6a2c3cb7-cb02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ae:aa:31:71:e6:d1:1c:87:a9:9d:1b:b8:31: fa:3b:73:bd:62:92:a6:ac:50:05:75:58:77:47:5a: 18:5a:fd:47:6a:bc:0d:d8:9a:73:32:75:25:f1:2d: d8:fa:90:98:1b:b9:38:5a:31:7d:0e:d5:5a:c6:2c: 62:5f:6d:3e:21:94:b0:c6:5c:15:55:13:44:fd:c6: 3d:e3:a7:42:19:bd:41:5e:9c:5f:b1:b5:eb:ff:e1: 1e:33:05:e0:01:14:73:9c:07:2e:f7:99:35:58:d0: 61:12:42:5e:8a:99:a9:02:2f:f1:51:0d:08:db:c9: c4:e7:95:4d:90:37:6c:45:08:e8:11:9e:e2:51:e0: 83:58:34:d6:e9:bc:83:45:ad:67:25:ed:d2:a9:66: 5a:27:cd:f6:ae:42:f9:e4:2d:aa:93:87:63:06:b1: 94:d2:b0:3d:35:56:7a:d2:33:77:47:9d:27:7b:0a: bb:95:46:9a:22:69:f5:23:f0:4e:ed:cb:1a:9f:af: ef:4c:db:8f:1a:34:4a:ff:7c:c8:30:f6:04:84:33: 04:4d:f7:a7:fc:2a:19:ed:76:60:36:76:b7:8f:44: 59:95:a8:a3:aa:f0:14:fa:ec:d0:59:05:77:ec:c7: 0b:55:fe:0a:08:89:1a:97:87:fd:ec:e1:c9:4a:4e: 77:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:85:7B:97:7F:99:8F:19:B6:8D:4D:BF:D1:85:C8:03:50:C0:75:9B X509v3 Authority Key Identifier: keyid:1B:F5:A8:D9:4C:E0:6C:E3:01:FC:35:D8:69:F7:0D:74:0D:70:97:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:14:19:82:7a:af:fc:2c:65:32:87:52:b3:f3:8f:d9:f3:4e: 41:28:18:9d:12:51:95:d7:19:5b:0e:ef:14:cb:ba:e9:66:79: 9d:71:f9:53:c8:75:4b:fd:de:7a:ce:85:df:c0:5e:46:a3:64: 4e:a7:b6:96:a8:d0:b6:11:d8:5d:91:de:2f:82:7d:e1:3b:b8: 94:e9:f5:c0:b8:4e:e6:61:5d:d3:59:78:45:61:15:13:15:df: c5:4d:0c:78:c4:5b:b3:16:90:67:31:27:e4:6a:d3:1f:ee:61: f1:ed:a9:8a:a2:7e:5f:4c:55:cd:3e:bd:81:1a:18:81:58:e8: c9:fa:f3:5f:6d:06:b0:f4:e7:96:5e:bd:07:df:4c:75:eb:52: 8f:95:b7:1d:8d:5a:0c:54:6b:c6:5d:ea:db:fc:b2:6c:47:d8: 33:77:7a:f9:f0:bb:58:ab:49:fe:01:83:1a:44:7c:bc:e1:8e: f2:f3:d5:a3:cf:c1:0d:44:0f:63:b5:61:a3:7b:db:54:cd:5b: a5:e1:6c:d9:4d:3a:62:ed:46:0a:37:c8:04:1a:da:d2:1c:80: 10:a0:1e:70:59:f5:b7:e6:b4:56:e3:ba:16:41:48:0a:18:0f: f4:a5:19:34:7e:8d:ba:fc:58:a3:11:46:41:32:4b:37:8b:15: 77:f3:c9:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY3QkIxMTAvBgNVBAUTKDFCRjVBOEQ5NENFMDZDRTMwMUZDMzVEODY5RjcwRDc0 MEQ3MDk3NTIwHhcNMjYwNjEyMTcwNzAzWhcNMjYwNjE5MTcwNzAzWjAYMRYwFAYD VQQDEw02YTJjM2NiNy1jYjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo66qMXHm0RyHqZ0buDH6O3O9YpKmrFAFdVh3R1oYWv1HarwN2JpzMnUl8S3Y +pCYG7k4WjF9DtVaxixiX20+IZSwxlwVVRNE/cY946dCGb1BXpxfsbXr/+EeMwXg ARRznAcu95k1WNBhEkJeipmpAi/xUQ0I28nE55VNkDdsRQjoEZ7iUeCDWDTW6byD Ra1nJe3SqWZaJ832rkL55C2qk4djBrGU0rA9NVZ60jN3R50newq7lUaaImn1I/BO 7csan6/vTNuPGjRK/3zIMPYEhDMETfen/CoZ7XZgNna3j0RZlaijqvAU+uzQWQV3 7McLVf4KCIkal4f97OHJSk53cwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAGFe5d/ mY8Zto1Nv9GFyANQwHWbMB8GA1UdIwQYMBaAFBv1qNlM4GzjAfw12Gn3DXQNcJdS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjdCQi9DOURCODlFRTBF M0UxMUU5ODM2RjQwMTRDNEY5QUUwMi9HX1dvMlV6Z2JPTUJfRFhZYWZjTmRBMXds MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dfV28yVXpnYk9NQl9EWFlhZmNOZEExd2wxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjdCQi9DOURCODlFRTBFM0UxMUU5ODM2RjQwMTRDNEY5QUUwMi9HX1dvMlV6Z2JP TUJfRFhZYWZjTmRBMXdsMUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHxQZgnqv/CxlModSs/OP2fNOQSgYnRJRldcZWw7vFMu66WZ5nXH5U8h1S/3e es6F38BeRqNkTqe2lqjQthHYXZHeL4J94Tu4lOn1wLhO5mFd01l4RWEVExXfxU0M eMRbsxaQZzEn5GrTH+5h8e2piqJ+X0xVzT69gRoYgVjoyfrzX20GsPTnll69B99M detSj5W3HY1aDFRrxl3q2/yybEfYM3d6+fC7WKtJ/gGDGkR8vOGO8vPVo8/BDUQP Y7Vho3vbVM1bpeFs2U06Yu1GCjfIBBra0hyAEKAecFn1t+a0VuO6FkFIChgP9KUZ NH6NuvxYoxFGQTJLN4sVd/PJcw== -----END CERTIFICATE-----Generated at Sat Jun 13 16:59:50 2026 by rpki-client