$ rpki-client -vvf rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft File: d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft (raw, json) Hash identifier: QNgvs/N98gSP/O2HcwriCHWFeEvUgYVLLAwHcL79ZnA= Subject key identifier: 0E:28:D7:9C:F6:F3:2B:80:7E:E8:34:CC:E8:9F:4A:BF:70:59:F6:16 Authority key identifier: 77:EC:48:69:2D:04:27:02:97:8D:CD:0B:68:E9:40:B8:D7:72:3E:52 Certificate issuer: /CN=A9112320/serialNumber=77EC48692D042702978DCD0B68E940B8D7723E52 Certificate serial: 01D6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft Manifest number: 01CB Signing time: Sun 31 May 2026 23:38:22 +0000 Manifest this update: Sun 31 May 2026 23:38:21 +0000 Manifest next update: Sun 07 Jun 2026 23:38:21 +0000 Files and hashes: 1: d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl (hash: GxDSqU6Xl0IfaeamVrK81AAHQc6qSKeR9KWCJoY6WUU=) 2: 7EE26732EB2411EEBDA7715FC4F9AE02.roa (hash: Yv6bUlsD/jxVLpyWhyU1eut2obLAQwxoOOHmIUOMRcg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Jun 2026 23:38:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 470 (0x1d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112320, serialNumber=77EC48692D042702978DCD0B68E940B8D7723E52 Validity Not Before: May 31 23:38:21 2026 GMT Not After : Jun 7 23:38:21 2026 GMT Subject: CN=6a1cc66d-1549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:c1:37:d1:5e:be:44:90:b6:9a:05:b1:0c:2d: 19:f9:e8:38:f1:23:2b:58:bb:61:26:bf:2f:7c:e2: 90:0c:36:a5:81:f1:35:b7:91:a0:28:1a:a1:5f:a8: 61:c2:36:14:e5:6f:0d:94:f9:83:22:13:0c:03:bb: 82:dd:17:29:bf:2d:62:64:87:91:33:ea:42:de:86: 91:43:fd:ad:02:e5:00:7f:3e:31:e1:32:c7:77:f5: 75:e2:c5:17:8c:2d:86:78:bb:95:8c:60:52:49:c4: 4a:1c:36:e9:d1:c5:cc:26:4e:d8:4b:13:31:11:ac: ab:49:50:14:ea:25:c6:35:9b:f5:20:3a:86:e9:66: 04:00:30:fe:a9:d8:26:b4:59:d4:5f:a8:6d:7e:72: f8:5c:a4:4c:7f:90:27:12:94:ea:0d:de:72:51:bc: 63:a4:d7:2e:1b:db:f1:d0:07:c8:12:54:9a:c6:c0: 40:23:eb:df:e1:15:66:24:8e:0e:de:75:11:d6:59: 28:a7:e9:15:91:9c:79:5b:70:70:37:3f:34:8c:61: 65:5d:6c:d4:93:8c:9e:d3:4b:3e:9e:31:74:a8:0c: 63:6f:3e:06:6d:46:85:75:88:b4:0a:8a:cd:11:a4: 0d:59:f2:2f:31:8b:d7:7b:a5:8e:b9:2c:81:10:e9: 7c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:28:D7:9C:F6:F3:2B:80:7E:E8:34:CC:E8:9F:4A:BF:70:59:F6:16 X509v3 Authority Key Identifier: keyid:77:EC:48:69:2D:04:27:02:97:8D:CD:0B:68:E9:40:B8:D7:72:3E:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:fa:4c:d5:2b:83:de:e3:15:f6:e8:24:37:da:3b:92:1a:95: 9e:76:57:c3:4a:dd:69:c1:e8:bf:cc:9e:5c:b8:41:a7:a3:72: 17:57:6e:a0:c7:3f:fb:24:ab:58:21:06:d0:a5:c0:3d:ea:a4: df:e0:2c:6b:1b:78:5e:39:63:cb:15:89:15:6b:f0:c7:d1:fc: b5:57:4c:95:d0:ae:a7:6e:2a:df:28:1a:22:7d:04:af:70:59: 3b:74:88:b5:9e:c8:09:c1:20:83:2f:a3:bc:79:04:c6:47:0d: e1:fc:ab:62:96:14:15:09:52:7a:9f:83:c9:5d:a7:21:f9:70: d1:28:18:b0:ab:f3:dc:7c:2a:ff:5b:a6:5a:78:8e:43:97:e9: ce:bf:d9:6e:a8:59:e2:b9:db:c7:16:f2:4c:bc:1f:7b:4f:53: 1c:02:3c:4b:f7:a5:ee:84:28:ee:9d:38:79:3b:49:2d:ba:c7: a6:58:44:ec:b0:42:32:d8:a5:f4:33:0d:b8:a6:31:69:4b:01: a9:25:c0:fd:be:42:fb:62:01:e6:6e:4b:8f:62:d1:a0:e8:1d: f0:08:5d:f8:58:bc:68:bb:4f:a6:5d:b7:be:d2:7d:27:dd:d9: 12:26:ad:47:9b:0f:45:85:b4:12:2c:84:52:5d:10:3d:ce:a4: 8a:a4:8a:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTIzMjAxMTAvBgNVBAUTKDc3RUM0ODY5MkQwNDI3MDI5NzhEQ0QwQjY4RTk0MEI4 RDc3MjNFNTIwHhcNMjYwNTMxMjMzODIxWhcNMjYwNjA3MjMzODIxWjAYMRYwFAYD VQQDEw02YTFjYzY2ZC0xNTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8ME30V6+RJC2mgWxDC0Z+eg48SMrWLthJr8vfOKQDDalgfE1t5GgKBqhX6hh wjYU5W8NlPmDIhMMA7uC3Rcpvy1iZIeRM+pC3oaRQ/2tAuUAfz4x4TLHd/V14sUX jC2GeLuVjGBSScRKHDbp0cXMJk7YSxMxEayrSVAU6iXGNZv1IDqG6WYEADD+qdgm tFnUX6htfnL4XKRMf5AnEpTqDd5yUbxjpNcuG9vx0AfIElSaxsBAI+vf4RVmJI4O 3nUR1lkop+kVkZx5W3BwNz80jGFlXWzUk4ye00s+njF0qAxjbz4GbUaFdYi0CorN EaQNWfIvMYvXe6WOuSyBEOl85QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA4o15z2 8yuAfug0zOifSr9wWfYWMB8GA1UdIwQYMBaAFHfsSGktBCcCl43NC2jpQLjXcj5S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjMyMC8yOEM2Q0NFNkE5 RjAxMUVFOTMxNUVENkNDNEY5QUUwMi9kLXhJYVMwRUp3S1hqYzBMYU9sQXVOZHlQ bEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2QteElhUzBFSndLWGpjMExhT2xBdU5keVBsSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjMyMC8yOEM2Q0NFNkE5RjAxMUVFOTMxNUVENkNDNEY5QUUwMi9kLXhJYVMwRUp3 S1hqYzBMYU9sQXVOZHlQbEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWPpM1SuD3uMV9ugkN9o7khqVnnZXw0rdacHov8yeXLhBp6NyF1duoMc/+ySr WCEG0KXAPeqk3+Asaxt4XjljyxWJFWvwx9H8tVdMldCup24q3ygaIn0Er3BZO3SI tZ7ICcEggy+jvHkExkcN4fyrYpYUFQlSep+DyV2nIflw0SgYsKvz3Hwq/1umWniO Q5fpzr/ZbqhZ4rnbxxbyTLwfe09THAI8S/el7oQo7p04eTtJLbrHplhE7LBCMtil 9DMNuKYxaUsBqSXA/b5C+2IB5m5Lj2LRoOgd8Ahd+Fi8aLtPpl23vtJ9J93ZEiat R5sPRYW0EiyEUl0QPc6kiqSKAA== -----END CERTIFICATE-----Generated at Tue Jun 2 21:19:32 2026 by rpki-client