$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft File: xUK94Lg0fDed4d4dgkOpLLlMh00.mft (raw, json) Hash identifier: wtrLV7xryB2voW4uhTZsDyMCMfn52cvRvE7IO5PCVcI= Subject key identifier: FD:F7:2D:87:C9:DE:43:A5:4C:0D:6C:35:C8:2F:81:F4:B7:67:1C:13 Authority key identifier: C5:42:BD:E0:B8:34:7C:37:9D:E1:DE:1D:82:43:A9:2C:B9:4C:87:4D Certificate issuer: /CN=A91FB297/serialNumber=C542BDE0B8347C379DE1DE1D8243A92CB94C874D Certificate serial: 01CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft Manifest number: 01C8 Signing time: Sat 13 Jun 2026 03:49:17 +0000 Manifest this update: Sat 13 Jun 2026 03:49:16 +0000 Manifest next update: Sat 20 Jun 2026 03:49:16 +0000 Files and hashes: 1: xUK94Lg0fDed4d4dgkOpLLlMh00.crl (hash: EXiq08qmO1eoQq07+1etJXxjdD6FMabUji0Ws+8Eh9Q=) 2: FE9EA8D4B67A11EEB24FA643C4F9AE02.roa (hash: nyjMQ4Y7DB/tIj8XNqvBhuvlZj0Lq52QsaNMK9E+R5Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.crl rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 461 (0x1cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB297, serialNumber=C542BDE0B8347C379DE1DE1D8243A92CB94C874D Validity Not Before: Jun 13 03:49:16 2026 GMT Not After : Jun 20 03:49:16 2026 GMT Subject: CN=6a2cd33c-c185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:2b:1e:e4:45:f9:cd:e3:bc:ea:b1:46:08:0a: 7d:cd:a3:bf:3f:8e:ae:c6:39:b1:85:26:6f:b2:d4: d9:64:65:94:1c:ff:bc:28:52:67:af:c2:8d:99:68: c6:01:3d:68:c4:f0:19:fa:f3:d9:8f:68:fb:fe:b5: 4c:24:45:70:d1:48:4a:dd:8f:31:ba:07:2d:8e:37: 44:5d:f5:e4:52:a6:9e:c7:af:ab:65:35:ba:e4:81: 93:83:59:79:8b:4c:84:ef:c8:76:82:b2:15:ea:46: 24:01:9f:d5:f8:44:00:3b:05:85:54:3b:3e:3f:ab: c0:58:f9:de:4c:0a:a9:c8:c1:40:ca:37:3b:c5:a0: d3:b3:9f:11:a7:60:31:00:1c:db:f6:8f:b5:2e:7f: dd:f6:bd:9e:59:b9:29:c5:71:98:d9:03:30:31:57: b3:78:22:72:42:2b:4b:ff:b3:17:8e:21:8d:b0:e2: f0:83:99:f3:f8:94:6e:58:a7:f7:43:88:32:f9:21: 00:46:28:11:d0:ba:a9:81:7e:2e:15:2e:7b:c3:5d: 6b:2f:48:94:e9:d6:22:d5:02:bb:98:c0:ae:61:e9: 73:23:71:87:22:d3:07:43:c2:62:fc:8f:a6:d7:c7: 2a:e8:c8:87:32:76:eb:10:48:f5:d7:49:56:5c:9c: 40:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:F7:2D:87:C9:DE:43:A5:4C:0D:6C:35:C8:2F:81:F4:B7:67:1C:13 X509v3 Authority Key Identifier: keyid:C5:42:BD:E0:B8:34:7C:37:9D:E1:DE:1D:82:43:A9:2C:B9:4C:87:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:9d:05:87:b0:5e:58:67:98:07:27:3f:43:1a:19:ac:f7:c0: cc:d6:00:9d:f0:bf:a7:a5:3e:57:a8:85:8e:33:da:06:f4:f7: c4:81:b8:6a:cb:36:86:ef:49:d3:78:00:ec:0c:95:b9:24:c2: 8a:f4:e2:48:f5:ef:08:eb:14:30:7b:d3:72:53:9f:b4:19:f4: 61:6b:fc:18:d5:3d:14:6d:83:b6:bd:2f:22:8c:e6:b6:59:f3: 7f:42:a8:e2:64:66:fc:e5:f3:ab:94:61:a6:d3:bc:4e:14:13: d9:1d:95:92:d5:f6:bf:42:88:1a:c7:21:1f:60:54:29:eb:82: f8:cb:d5:59:13:38:88:57:3b:2a:b3:91:db:c3:75:51:df:3d: 41:2b:4c:f9:0d:14:e1:88:a4:48:7a:e8:81:cb:fc:8e:51:da: 22:15:9b:4a:0a:a1:bf:86:28:1e:c9:80:c9:f6:72:cd:a3:2f: a2:a7:1e:3f:7b:91:31:d9:97:21:9f:1c:3d:56:9e:04:72:bf: c6:76:ce:fb:e9:1f:5e:7e:a9:95:36:4f:11:06:8b:e6:86:10: 13:7f:09:e0:c4:6b:f8:f0:2a:36:14:99:e5:a0:46:2f:18:fc: bf:2f:83:8d:5d:9b:6d:60:06:25:03:bc:0d:dd:38:0c:2f:1c: 65:6d:0f:b2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkIyOTcxMTAvBgNVBAUTKEM1NDJCREUwQjgzNDdDMzc5REUxREUxRDgyNDNBOTJD Qjk0Qzg3NEQwHhcNMjYwNjEzMDM0OTE2WhcNMjYwNjIwMDM0OTE2WjAYMRYwFAYD VQQDEw02YTJjZDMzYy1jMTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8Cse5EX5zeO86rFGCAp9zaO/P46uxjmxhSZvstTZZGWUHP+8KFJnr8KNmWjG AT1oxPAZ+vPZj2j7/rVMJEVw0UhK3Y8xugctjjdEXfXkUqaex6+rZTW65IGTg1l5 i0yE78h2grIV6kYkAZ/V+EQAOwWFVDs+P6vAWPneTAqpyMFAyjc7xaDTs58Rp2Ax ABzb9o+1Ln/d9r2eWbkpxXGY2QMwMVezeCJyQitL/7MXjiGNsOLwg5nz+JRuWKf3 Q4gy+SEARigR0LqpgX4uFS57w11rL0iU6dYi1QK7mMCuYelzI3GHItMHQ8Ji/I+m 18cq6MiHMnbrEEj110lWXJxAYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP33LYfJ 3kOlTA1sNcgvgfS3ZxwTMB8GA1UdIwQYMBaAFMVCveC4NHw3neHeHYJDqSy5TIdN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjI5Ny85QTg5MEU2RUI1 RTExMUVFQTBBNjE3NkRDNEY5QUUwMi94VUs5NExnMGZEZWQ0ZDRkZ2tPcExMbE1o MDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hVSzk0TGcwZkRlZDRkNGRna09wTExsTWgwMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjI5Ny85QTg5MEU2RUI1RTExMUVFQTBBNjE3NkRDNEY5QUUwMi94VUs5NExnMGZE ZWQ0ZDRkZ2tPcExMbE1oMDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXJ0Fh7BeWGeYByc/QxoZrPfAzNYAnfC/p6U+V6iFjjPaBvT3xIG4ass2hu9J 03gA7AyVuSTCivTiSPXvCOsUMHvTclOftBn0YWv8GNU9FG2Dtr0vIozmtlnzf0Ko 4mRm/OXzq5RhptO8ThQT2R2VktX2v0KIGschH2BUKeuC+MvVWRM4iFc7KrOR28N1 Ud89QStM+Q0U4YikSHrogcv8jlHaIhWbSgqhv4YoHsmAyfZyzaMvoqceP3uRMdmX IZ8cPVaeBHK/xnbO++kfXn6plTZPEQaL5oYQE38J4MRr+PAqNhSZ5aBGLxj8vy+D jV2bbWAGJQO8Dd04DC8cZW0Psg== -----END CERTIFICATE-----Generated at Sat Jun 13 07:18:22 2026 by rpki-client