$ rpki-client -vvf rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft File: KxUe1JZstlaQzZqoJiuKau0G5EM.mft (raw, json) Hash identifier: Ldu92Bq2GyhQpcWyv7WGnk/9qwWA57+ljwP8OWaHvj0= Subject key identifier: 55:D6:61:2E:F1:87:90:9B:86:49:D3:37:BC:7B:80:1D:83:76:CC:A1 Authority key identifier: 2B:15:1E:D4:96:6C:B6:56:90:CD:9A:A8:26:2B:8A:6A:ED:06:E4:43 Certificate issuer: /CN=A911B871/serialNumber=2B151ED4966CB65690CD9AA8262B8A6AED06E443 Certificate serial: 0858 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft Manifest number: 0833 Signing time: Sat 20 Jun 2026 21:02:44 +0000 Manifest this update: Sat 20 Jun 2026 21:02:44 +0000 Manifest next update: Sat 27 Jun 2026 21:02:44 +0000 Files and hashes: 1: KxUe1JZstlaQzZqoJiuKau0G5EM.crl (hash: 39nzVQcdGhTFJROE4AG/7VQBoForD+DoIO9O+lNyoJA=) 2: 6FA255F0CF9511F0BB07FA4DC4F9AE02.roa (hash: 4mHBI72RpqtbTIqATD0m8H0efW8dPxbcgwFw+GoOGKY=) 3: 440FC47687C211EEA6A0667BC4F9AE02.roa (hash: OuNbUML34/9s/CXrZPGm/r79NOrwg5tKWUZilkojMKg=) 4: C4EEE8EE24E011EBA4C87F7DC4F9AE02.roa (hash: mlM1LcCow/OwFUOHCekedTzL1znm7NAJ6YdDLrO7EAA=) 5: 6F3FE776CF9511F09003FA4DC4F9AE02.roa (hash: QMfdlVqqG7b7DNLEI3s6n/xVYtcpjR63MA+xJ2kfQVA=) 6: EE2BD31C64D011F1BE18E4E96947A888.roa (hash: OhuM84ltUspKHkQbXefrgZ3TkNQ2XBw3NffUArldnvU=) 7: 8A01BCDC1DA811EBAFA5B44FC4F9AE02.roa (hash: azpIitGefSlvlMwJupckHpHUM74PuPNEm5zYnaQUVWk=) 8: FF7010DCAE9811F081180758C4F9AE02.roa (hash: qpMk4y0602U3X2w4CmvfK35aoL6m9wVB631uaMX4Chc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.crl rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Jun 2026 21:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2136 (0x858) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B871, serialNumber=2B151ED4966CB65690CD9AA8262B8A6AED06E443 Validity Not Before: Jun 20 21:02:44 2026 GMT Not After : Jun 27 21:02:44 2026 GMT Subject: CN=6a36fff4-7dca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d1:1b:0d:db:0e:d2:93:1a:0c:25:54:49:58: 70:23:61:f3:a2:b8:2c:92:2c:4c:39:3f:dd:53:0e: b5:6e:79:ff:51:fc:4c:3d:96:69:28:59:1b:95:2b: 42:fb:9e:d4:59:69:4e:fa:b9:d7:d4:ac:f7:a8:55: 9e:85:be:fa:27:42:10:0e:94:5e:a5:af:9c:80:f9: 47:45:cc:6a:a4:d8:95:fb:5e:e0:f1:0a:7b:05:75: 4a:99:b3:a7:e3:17:06:17:71:3a:de:9e:bd:1f:c4: 22:e6:b6:0f:5e:28:86:75:27:87:1d:d3:19:b8:89: 8e:f3:5b:99:92:0d:9a:d3:89:fb:c9:f3:5b:a3:49: b4:42:54:cc:c3:4b:e6:0f:5b:7d:86:43:58:63:f2: a7:f4:c9:dc:6d:7a:d5:ef:77:27:2c:70:13:79:10: 7d:bb:f6:a9:09:db:89:f5:89:bb:c5:4c:76:61:92: c7:36:7a:85:27:99:c9:f6:d0:6f:30:61:52:d7:23: c5:ad:a2:a7:81:04:10:1e:0e:e0:db:e2:51:fa:8c: de:84:9a:10:09:91:73:88:c6:e3:be:a4:66:64:93: 42:9e:2a:94:a4:e2:21:7e:39:47:7f:dd:10:ee:0a: 65:84:61:f7:d7:25:18:54:96:68:2d:86:db:b0:ec: 6b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:D6:61:2E:F1:87:90:9B:86:49:D3:37:BC:7B:80:1D:83:76:CC:A1 X509v3 Authority Key Identifier: keyid:2B:15:1E:D4:96:6C:B6:56:90:CD:9A:A8:26:2B:8A:6A:ED:06:E4:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:19:6f:3d:0f:2c:d9:c5:4e:20:e3:09:23:f2:00:59:49:b9: 01:70:3e:49:d2:67:9c:d8:4c:86:0f:b0:f9:72:9a:01:64:24: 47:05:f8:53:37:7d:77:1d:d8:92:95:98:7b:45:e8:bc:7e:cb: a8:b1:76:cc:ef:b1:ed:56:48:b9:75:bc:17:7f:e4:4e:40:b5: bf:2a:02:64:c9:72:b7:a3:e6:31:10:37:9f:d6:d6:f8:33:f3: 7a:db:b7:c4:62:bc:71:8e:e4:6d:fb:e2:39:f5:45:ff:29:ac: a8:89:cd:32:ce:dd:1d:03:18:4e:55:1f:ab:41:d2:2f:19:59: de:55:48:58:e1:20:2a:bc:0d:8d:0e:1c:d5:a4:ba:2b:c5:46: ef:61:76:69:bb:26:83:c6:88:46:d3:28:73:9b:15:9e:02:07: ad:16:59:16:1d:4f:8a:88:4b:69:dc:ed:be:ab:12:62:02:ac: 72:1a:53:50:dc:b6:3f:37:1f:f5:dc:c5:48:15:20:b1:22:5c: 03:66:9e:c9:36:f7:b3:c1:3e:0b:cb:68:dd:ba:5a:41:d2:5f: 75:76:05:5a:c0:45:b8:c0:9f:5c:7a:6d:9b:fa:fd:7a:34:8f: b6:d7:87:69:ea:6b:ba:08:fb:88:c6:b1:6a:a7:8d:8c:0f:4f: b4:31:9d:c4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCFgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI4NzExMTAvBgNVBAUTKDJCMTUxRUQ0OTY2Q0I2NTY5MENEOUFBODI2MkI4QTZB RUQwNkU0NDMwHhcNMjYwNjIwMjEwMjQ0WhcNMjYwNjI3MjEwMjQ0WjAYMRYwFAYD VQQDEw02YTM2ZmZmNC03ZGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApdEbDdsO0pMaDCVUSVhwI2HzorgskixMOT/dUw61bnn/UfxMPZZpKFkblStC +57UWWlO+rnX1Kz3qFWehb76J0IQDpRepa+cgPlHRcxqpNiV+17g8Qp7BXVKmbOn 4xcGF3E63p69H8Qi5rYPXiiGdSeHHdMZuImO81uZkg2a04n7yfNbo0m0QlTMw0vm D1t9hkNYY/Kn9MncbXrV73cnLHATeRB9u/apCduJ9Ym7xUx2YZLHNnqFJ5nJ9tBv MGFS1yPFraKngQQQHg7g2+JR+ozehJoQCZFziMbjvqRmZJNCniqUpOIhfjlHf90Q 7gplhGH31yUYVJZoLYbbsOxrWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFXWYS7x h5CbhknTN7x7gB2DdsyhMB8GA1UdIwQYMBaAFCsVHtSWbLZWkM2aqCYrimrtBuRD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjg3MS84QTJEQUJFMDFE QTcxMUVCODA3MTJBNEZDNEY5QUUwMi9LeFVlMUpac3RsYVF6WnFvSml1S2F1MEc1 RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t4VWUxSlpzdGxhUXpacW9KaXVLYXUwRzVFTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Qjg3MS84QTJEQUJFMDFEQTcxMUVCODA3MTJBNEZDNEY5QUUwMi9LeFVlMUpac3Rs YVF6WnFvSml1S2F1MEc1RU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAORlvPQ8s2cVOIOMJI/IAWUm5AXA+SdJnnNhMhg+w+XKaAWQkRwX4Uzd9dx3Y kpWYe0XovH7LqLF2zO+x7VZIuXW8F3/kTkC1vyoCZMlyt6PmMRA3n9bW+DPzetu3 xGK8cY7kbfviOfVF/ymsqInNMs7dHQMYTlUfq0HSLxlZ3lVIWOEgKrwNjQ4c1aS6 K8VG72F2absmg8aIRtMoc5sVngIHrRZZFh1PiohLadztvqsSYgKschpTUNy2Pzcf 9dzFSBUgsSJcA2aeyTb3s8E+C8to3bpaQdJfdXYFWsBFuMCfXHptm/r9ejSPtteH aeprugj7iMaxaqeNjA9PtDGdxA== -----END CERTIFICATE-----Generated at Mon Jun 22 07:07:48 2026 by rpki-client