$ rpki-client -vvf rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft File: h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft (raw, json) Hash identifier: fU1CsV7M0d4qLOMy4ftD43ZnxsRQDWvXeYmnEpTO06k= Subject key identifier: BC:25:7B:A4:4D:56:C1:D2:BD:F9:45:CD:B4:A7:AE:13:D7:8F:D5:7E Authority key identifier: 87:B5:D8:53:F6:42:52:15:AD:A7:82:2F:02:A5:74:83:EE:26:7C:04 Certificate issuer: /CN=A912A294/serialNumber=87B5D853F6425215ADA7822F02A57483EE267C04 Certificate serial: 0242 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft Manifest number: 0224 Signing time: Mon 01 Jun 2026 03:49:42 +0000 Manifest this update: Mon 01 Jun 2026 03:49:42 +0000 Manifest next update: Mon 08 Jun 2026 03:49:42 +0000 Files and hashes: 1: h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl (hash: HjbIO9jW10hQJhfMDIOUVCKkIZZE+UsSvOIFYKZ3rl4=) 2: 64B5B49A052C11F0AFEC0478C4F9AE02.roa (hash: o3DLj0A49CBn+DQBy0PkQcbscmEcGxRHaVNwUFP538g=) 3: 60C72042052911F0A2361C50C4F9AE02.roa (hash: Mi+iRYH8oLuQ7nVmsO2NAf7yTqeWaOmHLkb8IkLkMI4=) 4: 24661146FA7311EFB58C366CC4F9AE02.roa (hash: GDl5mVu/aHI+hBuO6VNjgfJXS25xVSRkSRDDKqvvcrI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 03:49:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 578 (0x242) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A294, serialNumber=87B5D853F6425215ADA7822F02A57483EE267C04 Validity Not Before: Jun 1 03:49:42 2026 GMT Not After : Jun 8 03:49:42 2026 GMT Subject: CN=6a1d0156-a340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:87:d0:f6:92:bb:b5:75:56:09:6d:e4:9f:52: bc:83:00:7b:5e:85:89:47:06:0c:4f:9e:b4:26:43: fa:de:7e:05:a2:38:5e:e1:a9:63:0e:60:f6:53:c4: 26:88:62:ad:ba:0f:d3:1c:d0:50:cf:0e:99:2b:ea: c9:d0:49:be:94:dd:63:35:76:3c:c3:e0:72:47:aa: 57:30:72:5f:a4:41:85:1c:6f:34:12:e8:83:85:5c: a3:9a:d5:39:a4:ea:96:a3:f6:54:9d:5c:1d:73:f0: 42:07:59:44:7a:74:3a:92:27:29:c0:f8:85:46:9c: 2c:8f:4f:0f:d0:9c:97:d1:82:72:b4:6d:c9:bb:04: 89:ac:a7:f7:c5:31:4d:e5:48:b7:a1:60:e9:47:06: 61:a8:b8:5e:73:76:ac:d4:69:59:aa:55:c2:49:d1: 6a:4d:dc:9f:77:a4:7b:66:b5:3d:aa:a0:50:8a:b2: 27:de:fb:46:5d:ba:b1:6d:bd:11:1f:da:91:6c:c1: d7:4b:cd:15:fc:35:17:5e:48:9e:06:18:44:51:24: 1d:e1:bd:3d:6b:ac:63:2f:38:f3:34:eb:f8:74:6e: 76:94:1a:73:b4:43:6b:ed:b7:6f:19:e2:0f:90:f3: 39:d7:bb:0a:ef:12:55:85:74:d8:45:22:a4:fc:fd: 85:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:25:7B:A4:4D:56:C1:D2:BD:F9:45:CD:B4:A7:AE:13:D7:8F:D5:7E X509v3 Authority Key Identifier: keyid:87:B5:D8:53:F6:42:52:15:AD:A7:82:2F:02:A5:74:83:EE:26:7C:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:52:d4:27:9b:60:a5:45:c9:58:80:c2:f9:f5:cf:33:06:27: 88:9b:3e:6b:13:95:cc:37:49:1b:3b:94:97:a2:f0:92:b4:5a: 5e:68:0d:f8:e0:5e:af:6b:aa:a1:44:ec:01:59:d5:36:b1:25: eb:61:7f:77:34:cb:06:73:01:6d:7d:38:57:06:b7:83:a0:49: c2:01:da:ff:80:11:ef:02:38:71:4b:8a:8b:d6:f4:f6:51:b8: b9:d0:d1:ad:61:9f:7e:ca:b3:74:95:aa:51:cd:00:15:ea:69: 37:9f:81:b3:0d:6d:c2:fd:4b:a1:c0:37:03:ba:d7:99:2a:2b: 9f:5a:46:7d:18:4c:a4:d6:21:08:61:53:cc:91:7b:01:ec:fb: 85:04:ef:2e:5a:03:27:6a:86:46:e6:9e:4e:2c:b8:a1:85:ea: e9:ba:26:d0:84:44:db:8b:6c:b4:2f:f3:16:61:39:ec:39:fe: a6:e5:d1:e6:d5:d1:c7:63:b9:ca:f5:07:87:a8:f7:b7:d0:59: cd:e1:07:a5:8a:74:ca:07:54:d4:7c:8d:39:6a:72:af:d5:06: 2a:bc:e6:20:3c:eb:16:96:08:6a:76:be:97:db:89:34:97:52: db:39:39:22:27:34:b5:cf:f2:97:c7:6c:fe:cb:9f:40:00:cd: 33:f3:7f:bc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEyOTQxMTAvBgNVBAUTKDg3QjVEODUzRjY0MjUyMTVBREE3ODIyRjAyQTU3NDgz RUUyNjdDMDQwHhcNMjYwNjAxMDM0OTQyWhcNMjYwNjA4MDM0OTQyWjAYMRYwFAYD VQQDEw02YTFkMDE1Ni1hMzQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuYfQ9pK7tXVWCW3kn1K8gwB7XoWJRwYMT560JkP63n4Fojhe4aljDmD2U8Qm iGKtug/THNBQzw6ZK+rJ0Em+lN1jNXY8w+ByR6pXMHJfpEGFHG80EuiDhVyjmtU5 pOqWo/ZUnVwdc/BCB1lEenQ6kicpwPiFRpwsj08P0JyX0YJytG3JuwSJrKf3xTFN 5Ui3oWDpRwZhqLhec3as1GlZqlXCSdFqTdyfd6R7ZrU9qqBQirIn3vtGXbqxbb0R H9qRbMHXS80V/DUXXkieBhhEUSQd4b09a6xjLzjzNOv4dG52lBpztENr7bdvGeIP kPM517sK7xJVhXTYRSKk/P2FowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLwle6RN VsHSvflFzbSnrhPXj9V+MB8GA1UdIwQYMBaAFIe12FP2QlIVraeCLwKldIPuJnwE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTI5NC85OTJGMUQwRTRB RDYxMUVFOTdCNTNGNzJDNEY5QUUwMi9oN1hZVV9aQ1VoV3RwNEl2QXFWMGctNG1m QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g3WFlVX1pDVWhXdHA0SXZBcVYwZy00bWZBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTI5NC85OTJGMUQwRTRBRDYxMUVFOTdCNTNGNzJDNEY5QUUwMi9oN1hZVV9aQ1Vo V3RwNEl2QXFWMGctNG1mQVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABlLUJ5tgpUXJWIDC+fXPMwYniJs+axOVzDdJGzuUl6LwkrRaXmgN+OBer2uq oUTsAVnVNrEl62F/dzTLBnMBbX04Vwa3g6BJwgHa/4AR7wI4cUuKi9b09lG4udDR rWGffsqzdJWqUc0AFeppN5+Bsw1twv1LocA3A7rXmSorn1pGfRhMpNYhCGFTzJF7 Aez7hQTvLloDJ2qGRuaeTiy4oYXq6bom0IRE24tstC/zFmE57Dn+puXR5tXRx2O5 yvUHh6j3t9BZzeEHpYp0ygdU1HyNOWpyr9UGKrzmIDzrFpYIana+l9uJNJdS2zk5 Iic0tc/yl8ds/sufQADNM/N/vA== -----END CERTIFICATE-----Generated at Wed Jun 3 04:06:25 2026 by rpki-client