$ rpki-client -vvf rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft File: z3rG54U-SVgocAZDAHZYRlfgyVA.mft (raw, json) Hash identifier: 6iBWunmKPDi6g8VOQ3NUPByOut0pexWFlKivk1cNA4A= Subject key identifier: B4:BF:48:B8:59:BB:A8:8E:EE:C0:77:C6:E3:EB:76:5C:2C:D5:0D:FB Authority key identifier: CF:7A:C6:E7:85:3E:49:58:28:70:06:43:00:76:58:46:57:E0:C9:50 Certificate issuer: /CN=A91F916A/serialNumber=CF7AC6E7853E4958287006430076584657E0C950 Certificate serial: 2570 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft Manifest number: 2550 Signing time: Fri 12 Jun 2026 15:43:43 +0000 Manifest this update: Fri 12 Jun 2026 15:43:43 +0000 Manifest next update: Fri 19 Jun 2026 15:43:43 +0000 Files and hashes: 1: z3rG54U-SVgocAZDAHZYRlfgyVA.crl (hash: gKuNjwgirJG+L0QodOipHenF9dK7VAUedAwgt16TcZc=) 2: 54040CE414F111F08814732CC4F9AE02.roa (hash: 5R5PyJeyYhErp1HguNQ/WySNIlpzY/MFdVpl7sNAifM=) 3: 81C0C29CB0F311E5AB30F151C4F9AE02.roa (hash: 7bvxWWKxdudrEG3VLjxzRBWxm9dGLRepmUJeS7hFSrM=) 4: 93957C3A25B211ECB5356475C4F9AE02.roa (hash: zjvOB7IYcWX+u9sgyuLHr3NjWHNslBwt7oZG0S7MoWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.crl rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 15:43:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9584 (0x2570) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F916A, serialNumber=CF7AC6E7853E4958287006430076584657E0C950 Validity Not Before: Jun 12 15:43:43 2026 GMT Not After : Jun 19 15:43:43 2026 GMT Subject: CN=6a2c292f-294c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:19:6b:90:5f:ce:38:79:2d:91:59:f2:d5:bc: 61:ee:61:5f:46:c7:34:a9:e3:d1:70:d4:82:93:b0: 36:11:d4:5a:b0:76:c7:16:dd:d9:ac:b7:6d:77:90: af:6a:72:b9:93:25:3c:40:85:48:92:7b:76:7f:65: 69:5c:9e:d6:64:b8:ed:7e:90:86:49:3f:41:ef:92: ee:5f:ae:90:c1:66:4b:3a:8e:af:38:82:89:4c:08: f4:8c:3a:00:38:8f:c0:4e:06:2a:9f:8b:5c:26:b6: b1:b8:39:89:7d:29:8a:9e:e9:62:39:0d:b0:66:a4: cc:26:f4:88:5f:73:1b:31:3e:9a:1a:bf:e9:02:5e: 14:a8:cc:ab:2d:5b:69:bc:f3:ac:c9:59:1f:3e:43: 2f:37:45:e3:30:f9:28:59:b8:69:82:2f:fa:d1:65: 3e:ba:ce:9e:d9:d6:79:ef:ea:9b:26:57:3e:4c:cc: c6:a7:a5:6a:3d:e5:03:e3:62:c5:c7:31:a8:7e:7f: 5b:72:56:e2:59:f9:f6:a9:0b:3d:92:fd:af:dc:11: 25:d9:09:f8:89:f2:d5:c6:39:ae:0f:b1:34:4f:70: af:1b:0e:40:20:11:7a:b2:c0:08:ff:86:80:c4:04: 35:0d:c9:48:80:b7:05:f8:bc:db:b6:4e:fe:08:d3: 14:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:BF:48:B8:59:BB:A8:8E:EE:C0:77:C6:E3:EB:76:5C:2C:D5:0D:FB X509v3 Authority Key Identifier: keyid:CF:7A:C6:E7:85:3E:49:58:28:70:06:43:00:76:58:46:57:E0:C9:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:4d:6e:8d:84:19:99:7a:66:da:0d:a2:3f:2c:2f:a3:dc:7f: 24:c9:20:5b:43:36:b1:f6:ae:fe:c1:17:4e:39:d5:75:bc:68: 6d:a3:69:e4:41:d8:1d:e5:b7:ec:fd:d8:37:f1:cd:d5:ff:15: 10:35:05:f9:74:00:97:7b:ae:04:9e:47:cc:8d:66:b1:5c:c7: be:c1:8e:ee:3b:b6:e8:4f:30:2d:d0:51:aa:3c:8f:73:c4:46: 58:19:20:34:3e:16:ff:63:4e:f6:15:57:f6:57:a2:55:5d:8d: bb:02:d2:a9:e0:74:e9:79:70:23:46:30:6b:68:e1:57:ef:28: 2e:59:aa:f6:26:36:29:74:a7:4a:5c:05:72:b4:b9:9c:90:49: c9:ac:dc:6a:c1:90:90:6a:1b:15:22:15:59:96:fe:f5:d9:96: a0:b3:e5:c6:ab:ea:6b:97:b4:a9:15:d1:78:5b:d4:06:8d:8f: 95:9d:d3:07:04:35:cb:1e:24:87:a6:22:50:1f:36:b5:cc:a2: 48:21:1a:33:d6:82:d4:41:fc:02:14:cf:1f:8e:84:05:66:0e: a7:df:45:c5:6b:2f:b8:1f:ed:48:53:8e:c2:34:b4:76:3e:8c: 32:44:19:31:6e:a3:6b:af:d2:88:61:f2:ff:ae:e4:72:b1:04: 0e:00:d6:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjkxNkExMTAvBgNVBAUTKENGN0FDNkU3ODUzRTQ5NTgyODcwMDY0MzAwNzY1ODQ2 NTdFMEM5NTAwHhcNMjYwNjEyMTU0MzQzWhcNMjYwNjE5MTU0MzQzWjAYMRYwFAYD VQQDEw02YTJjMjkyZi0yOTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlBlrkF/OOHktkVny1bxh7mFfRsc0qePRcNSCk7A2EdRasHbHFt3ZrLdtd5Cv anK5kyU8QIVIknt2f2VpXJ7WZLjtfpCGST9B75LuX66QwWZLOo6vOIKJTAj0jDoA OI/ATgYqn4tcJraxuDmJfSmKnuliOQ2wZqTMJvSIX3MbMT6aGr/pAl4UqMyrLVtp vPOsyVkfPkMvN0XjMPkoWbhpgi/60WU+us6e2dZ57+qbJlc+TMzGp6VqPeUD42LF xzGofn9bclbiWfn2qQs9kv2v3BEl2Qn4ifLVxjmuD7E0T3CvGw5AIBF6ssAI/4aA xAQ1DclIgLcF+Lzbtk7+CNMUdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLS/SLhZ u6iO7sB3xuPrdlws1Q37MB8GA1UdIwQYMBaAFM96xueFPklYKHAGQwB2WEZX4MlQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTE2QS8xRDdBRDBCQTQ1 OEQxMUU1QjM5NTdBNzlDNEY5QUUwMi96M3JHNTRVLVNWZ29jQVpEQUhaWVJsZmd5 VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozckc1NFUtU1Znb2NBWkRBSFpZUmxmZ3lWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTE2QS8xRDdBRDBCQTQ1OEQxMUU1QjM5NTdBNzlDNEY5QUUwMi96M3JHNTRVLVNW Z29jQVpEQUhaWVJsZmd5VkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACU1ujYQZmXpm2g2iPywvo9x/JMkgW0M2sfau/sEXTjnVdbxobaNp5EHYHeW3 7P3YN/HN1f8VEDUF+XQAl3uuBJ5HzI1msVzHvsGO7ju26E8wLdBRqjyPc8RGWBkg ND4W/2NO9hVX9leiVV2NuwLSqeB06XlwI0Ywa2jhV+8oLlmq9iY2KXSnSlwFcrS5 nJBJyazcasGQkGobFSIVWZb+9dmWoLPlxqvqa5e0qRXReFvUBo2PlZ3TBwQ1yx4k h6YiUB82tcyiSCEaM9aC1EH8AhTPH46EBWYOp99FxWsvuB/tSFOOwjS0dj6MMkQZ MW6ja6/SiGHy/67kcrEEDgDW5g== -----END CERTIFICATE-----Generated at Sat Jun 13 23:11:24 2026 by rpki-client