$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft File: IWrR11qT4DeulPbJGJbS1YLY_1Q.mft (raw, json) Hash identifier: 6wbvOgNoi8xSoz99FVk4QfKnFgfa9DGW1K2fyP25kmU= Subject key identifier: F2:9E:8E:8A:9C:DD:C5:E1:7B:02:E2:C3:C0:F2:70:7E:8E:B3:C9:43 Authority key identifier: 21:6A:D1:D7:5A:93:E0:37:AE:94:F6:C9:18:96:D2:D5:82:D8:FF:54 Certificate issuer: /CN=A91FDDD1/serialNumber=216AD1D75A93E037AE94F6C91896D2D582D8FF54 Certificate serial: 0230 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft Manifest number: 0219 Signing time: Sat 13 Jun 2026 02:56:02 +0000 Manifest this update: Sat 13 Jun 2026 02:56:02 +0000 Manifest next update: Sat 20 Jun 2026 02:56:02 +0000 Files and hashes: 1: IWrR11qT4DeulPbJGJbS1YLY_1Q.crl (hash: A9SlShjfcBBTuTmahXS8NxxlfoutGkSafQFYeuJnll4=) 2: 82C54A1E3BD311EE84056461C4F9AE02.roa (hash: p66IPaewmPaRtnsQS2xZgpPBnKkLdaVzEfPus9nU9is=) 3: 838096CA3BD311EE84056461C4F9AE02.roa (hash: cQLsMYqSdIJcG0uBESraAoEm5/hK8Y0/eizzGvwT5QU=) 4: 27DB37683BD211EE8094355FC4F9AE02.roa (hash: jNN3fj+EEW25PsG0U4HYziuBqb6momTUfcic3hWWRvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.crl rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 02:56:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 560 (0x230) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDDD1, serialNumber=216AD1D75A93E037AE94F6C91896D2D582D8FF54 Validity Not Before: Jun 13 02:56:02 2026 GMT Not After : Jun 20 02:56:02 2026 GMT Subject: CN=6a2cc6c2-4b7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b2:a5:05:17:70:9c:5e:01:25:05:b9:98:1b: 4d:db:19:15:bc:f8:55:d3:12:b5:fb:4c:75:9a:23: 63:13:d4:67:fb:ff:aa:09:2c:6b:6e:43:25:5b:be: ea:ac:ea:bb:d6:8a:83:44:07:24:7c:16:8c:86:64: bf:1a:b5:ea:e7:75:4e:6d:77:0c:d7:d0:55:98:80: 54:3e:21:ae:4b:ba:18:82:fa:61:d5:11:17:13:ea: ea:ed:a2:e6:4c:28:b8:d3:35:ae:76:d6:ee:d8:b0: d5:69:9d:8f:1f:f5:d3:b5:78:b9:1c:f0:cf:a1:7a: 7c:67:84:4b:39:6d:01:d0:d3:a4:b5:f0:98:2f:d4: ea:08:8c:b4:f9:74:ad:5e:33:e5:78:ff:5d:cf:2f: 71:7f:fa:ea:ee:04:2c:ad:6f:bd:c0:9d:c4:e9:38: c8:83:2f:00:0a:e6:01:35:b4:47:61:66:2b:07:62: 36:69:dd:e8:4e:f5:b3:d1:81:87:a0:af:57:54:d4: cc:c3:81:39:9f:8c:43:d1:7c:d7:7f:2f:b5:81:11: 49:f3:d9:e0:7e:da:36:de:e6:f9:98:e3:1c:45:98: 94:ce:ba:a4:f3:47:ec:8c:cc:e0:1e:c6:75:fc:ed: be:41:91:ad:ee:fd:27:ec:6d:0b:d5:b5:e9:35:b1: e2:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:9E:8E:8A:9C:DD:C5:E1:7B:02:E2:C3:C0:F2:70:7E:8E:B3:C9:43 X509v3 Authority Key Identifier: keyid:21:6A:D1:D7:5A:93:E0:37:AE:94:F6:C9:18:96:D2:D5:82:D8:FF:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:19:5b:da:05:d5:a2:7b:f0:40:06:fe:55:4e:7f:6a:b2:d5: 00:a9:b0:36:ee:b8:a9:26:00:58:59:74:45:90:10:f9:f5:eb: 44:95:83:89:df:1d:7b:23:1d:32:ca:ee:cb:4c:5f:a4:30:95: c0:78:be:8d:3c:52:d0:f1:44:8c:5e:c5:c9:4e:eb:0e:1b:d8: 1d:35:3a:5b:13:02:85:2a:b9:43:8c:00:2f:48:57:32:30:50: 8b:31:0c:08:f7:dd:5c:60:76:96:99:14:f9:f6:4f:f9:48:e0: 24:8e:a2:c6:52:6f:87:8b:f4:6f:08:dd:6e:de:f2:57:51:89: 8a:c0:65:ea:09:3f:ea:e1:53:35:8c:3e:4e:6b:ec:7c:9a:34: d8:01:b7:6f:20:4a:c6:72:2c:51:60:9c:18:03:39:69:5d:f6: 9e:c7:40:14:fd:70:9d:d5:2e:99:c7:74:75:36:a2:de:81:79: 8b:10:9b:52:ac:94:73:f0:30:1f:e4:ee:16:89:e3:50:89:f6: 69:57:21:85:07:f0:83:0d:0f:5f:de:dc:fb:18:d0:2c:48:8a: 07:77:c3:c3:61:1f:07:61:f2:82:b0:8b:2d:ed:a3:d9:25:54: f8:cc:c4:9c:53:3c:e7:95:27:f3:73:59:f9:af:96:4c:f1:c4: b1:4d:d4:ee -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRERDExMTAvBgNVBAUTKDIxNkFEMUQ3NUE5M0UwMzdBRTk0RjZDOTE4OTZEMkQ1 ODJEOEZGNTQwHhcNMjYwNjEzMDI1NjAyWhcNMjYwNjIwMDI1NjAyWjAYMRYwFAYD VQQDEw02YTJjYzZjMi00YjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAybKlBRdwnF4BJQW5mBtN2xkVvPhV0xK1+0x1miNjE9Rn+/+qCSxrbkMlW77q rOq71oqDRAckfBaMhmS/GrXq53VObXcM19BVmIBUPiGuS7oYgvph1REXE+rq7aLm TCi40zWudtbu2LDVaZ2PH/XTtXi5HPDPoXp8Z4RLOW0B0NOktfCYL9TqCIy0+XSt XjPleP9dzy9xf/rq7gQsrW+9wJ3E6TjIgy8ACuYBNbRHYWYrB2I2ad3oTvWz0YGH oK9XVNTMw4E5n4xD0XzXfy+1gRFJ89ngfto23ub5mOMcRZiUzrqk80fsjMzgHsZ1 /O2+QZGt7v0n7G0L1bXpNbHi1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPKejoqc 3cXhewLiw8DycH6Os8lDMB8GA1UdIwQYMBaAFCFq0ddak+A3rpT2yRiW0tWC2P9U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREREMS82OEMxRDQ5NjNC RDAxMUVFOEJBQzM1MUFDNEY5QUUwMi9JV3JSMTFxVDREZXVsUGJKR0piUzFZTFlf MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lXclIxMXFUNERldWxQYkpHSmJTMVlMWV8xUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REREMS82OEMxRDQ5NjNCRDAxMUVFOEJBQzM1MUFDNEY5QUUwMi9JV3JSMTFxVDRE ZXVsUGJKR0piUzFZTFlfMVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASxlb2gXVonvwQAb+VU5/arLVAKmwNu64qSYAWFl0RZAQ+fXrRJWDid8deyMd Msruy0xfpDCVwHi+jTxS0PFEjF7FyU7rDhvYHTU6WxMChSq5Q4wAL0hXMjBQizEM CPfdXGB2lpkU+fZP+UjgJI6ixlJvh4v0bwjdbt7yV1GJisBl6gk/6uFTNYw+Tmvs fJo02AG3byBKxnIsUWCcGAM5aV32nsdAFP1wndUumcd0dTai3oF5ixCbUqyUc/Aw H+TuFonjUIn2aVchhQfwgw0PX97c+xjQLEiKB3fDw2EfB2HygrCLLe2j2SVU+MzE nFM855Un83NZ+a+WTPHEsU3U7g== -----END CERTIFICATE-----Generated at Sat Jun 13 19:32:17 2026 by rpki-client