$ rpki-client -vvf rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft File: kSlbu3W_quuVMbObNux1Id3jDWM.mft (raw, json) Hash identifier: C5w2GrBL99XS3ycX6txv8261cQnzEWaYKRWvhzX6nag= Subject key identifier: 2A:1A:A4:54:33:DF:4E:F2:BA:1F:D9:DE:86:09:D0:24:0E:A4:99:71 Authority key identifier: 91:29:5B:BB:75:BF:AA:EB:95:31:B3:9B:36:EC:75:21:DD:E3:0D:63 Certificate issuer: /CN=A911D9B2/serialNumber=91295BBB75BFAAEB9531B39B36EC7521DDE30D63 Certificate serial: 021C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft Manifest number: 0201 Signing time: Tue 23 Jun 2026 03:40:10 +0000 Manifest this update: Tue 23 Jun 2026 03:40:09 +0000 Manifest next update: Tue 30 Jun 2026 03:40:09 +0000 Files and hashes: 1: kSlbu3W_quuVMbObNux1Id3jDWM.crl (hash: yp5NOPu/9OWdvYECmjH9FA8ocWA8GpIHvemCrpzGurc=) 2: 48B227F4E8D111F089B2D8B5616F56BC.roa (hash: WkyL76qiMF9RZhUkNMb3RMO30+J1U+zYYA70lfRZGcY=) 3: 11A28878915611EE83F61C41C4F9AE02.roa (hash: RMJ3MtQdHxz76LVbzxDYjdiseR/569W+/vsBpB/W5j4=) 4: 59962840D01911EE96596B16C4F9AE02.roa (hash: y1hStzic/YZJ1I+8JzXAyWcd1KU9dmVU0MUq2vt+Xgs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.crl rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jun 2026 03:40:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 540 (0x21c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D9B2, serialNumber=91295BBB75BFAAEB9531B39B36EC7521DDE30D63 Validity Not Before: Jun 23 03:40:09 2026 GMT Not After : Jun 30 03:40:09 2026 GMT Subject: CN=6a3a001a-5c2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4e:cf:8e:11:38:12:8a:9f:f9:09:27:12:68: b5:22:15:ba:a0:bc:ec:c4:a8:62:1e:6d:b1:8a:4f: d3:39:38:72:18:95:7d:2f:09:e0:02:38:af:21:24: 5f:22:00:99:18:f1:d6:82:b6:63:36:f6:b1:b3:50: c4:05:76:8d:c5:db:09:11:b6:a9:be:39:7a:0b:34: 68:13:e0:a2:61:eb:d6:c2:c3:07:ed:0f:da:67:5a: 1b:73:58:b5:6a:67:3e:b0:6d:6a:88:e3:55:67:10: cd:f9:a4:74:7b:11:f2:e0:1c:5b:1e:7e:70:6f:b5: d9:f8:69:33:dd:87:a7:45:3c:64:7b:d8:33:88:20: 57:1d:ac:0a:e0:78:01:1f:7e:61:fb:bd:7f:0a:6b: f8:45:56:86:62:b4:ef:c1:21:34:ab:1f:40:e7:b3: 05:d1:07:48:23:41:7d:9a:27:b1:b6:99:59:03:78: 36:9a:27:68:95:4b:a0:53:18:ba:65:2b:28:9d:cd: 75:87:48:b2:3a:7e:d9:d3:99:36:8b:d1:15:09:c0: 00:d9:97:b7:3d:bf:89:af:c4:eb:51:fb:13:0c:9c: a3:86:8b:3c:88:05:28:32:cb:11:2c:e0:23:b3:04: 0f:27:e6:3c:f5:71:61:53:a8:cb:72:57:d7:a5:77: fa:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:1A:A4:54:33:DF:4E:F2:BA:1F:D9:DE:86:09:D0:24:0E:A4:99:71 X509v3 Authority Key Identifier: keyid:91:29:5B:BB:75:BF:AA:EB:95:31:B3:9B:36:EC:75:21:DD:E3:0D:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:51:f8:7b:60:2a:fc:eb:4f:32:15:3a:90:0d:91:f2:17:2a: 6a:ae:39:47:7e:50:80:19:c5:02:8a:bf:a4:16:16:50:04:0d: ab:06:2c:e5:91:b6:b7:d6:62:e8:ff:8a:5b:ce:e8:1e:f5:c6: bd:45:11:52:fd:dd:9c:25:8d:9d:27:9b:51:50:dc:c4:92:51: a3:77:3e:bd:cc:d0:ae:86:34:ec:8d:18:b0:f6:3a:41:57:cf: b5:d4:8f:b2:21:d2:a4:63:47:e4:4a:f9:c5:20:39:eb:61:b2: bd:6e:96:08:12:5b:6e:0f:36:21:7e:d4:53:97:62:eb:be:82: b0:d0:00:72:c7:4c:24:33:ab:1e:91:4c:fb:3b:4e:0b:b7:62: 44:f9:60:44:93:20:69:72:f5:85:0a:78:11:0c:2e:87:25:26: ee:cd:4a:42:01:e8:e4:26:bc:81:fe:79:12:bf:8e:d1:bc:d7: aa:27:40:0e:ad:b2:4e:43:aa:e7:75:06:dd:03:2a:8c:73:65: d8:68:e3:b4:64:e3:e0:ea:aa:b9:1e:b2:b5:08:3a:83:f0:5d: cb:3f:79:a3:eb:20:0a:db:53:4d:54:4a:c3:bf:fb:7a:40:e5: 7d:90:29:cd:4a:7c:55:a4:ae:53:bd:4f:a9:a1:78:94:76:ca: d5:ff:95:34 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ5QjIxMTAvBgNVBAUTKDkxMjk1QkJCNzVCRkFBRUI5NTMxQjM5QjM2RUM3NTIx RERFMzBENjMwHhcNMjYwNjIzMDM0MDA5WhcNMjYwNjMwMDM0MDA5WjAYMRYwFAYD VQQDEw02YTNhMDAxYS01YzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt07PjhE4Eoqf+QknEmi1IhW6oLzsxKhiHm2xik/TOThyGJV9LwngAjivISRf IgCZGPHWgrZjNvaxs1DEBXaNxdsJEbapvjl6CzRoE+CiYevWwsMH7Q/aZ1obc1i1 amc+sG1qiONVZxDN+aR0exHy4BxbHn5wb7XZ+Gkz3YenRTxke9gziCBXHawK4HgB H35h+71/Cmv4RVaGYrTvwSE0qx9A57MF0QdII0F9miextplZA3g2midolUugUxi6 ZSsonc11h0iyOn7Z05k2i9EVCcAA2Ze3Pb+Jr8TrUfsTDJyjhos8iAUoMssRLOAj swQPJ+Y89XFhU6jLclfXpXf6ZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCoapFQz 307yuh/Z3oYJ0CQOpJlxMB8GA1UdIwQYMBaAFJEpW7t1v6rrlTGzmzbsdSHd4w1j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDlCMi8wQTZGM0I0Mjkx NTUxMUVFQTRDMEY2NjhDNEY5QUUwMi9rU2xidTNXX3F1dVZNYk9iTnV4MUlkM2pE V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tTbGJ1M1dfcXV1Vk1iT2JOdXgxSWQzakRXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDlCMi8wQTZGM0I0MjkxNTUxMUVFQTRDMEY2NjhDNEY5QUUwMi9rU2xidTNXX3F1 dVZNYk9iTnV4MUlkM2pEV00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgFH4e2Aq/OtPMhU6kA2R8hcqaq45R35QgBnFAoq/pBYWUAQNqwYs5ZG2t9Zi 6P+KW87oHvXGvUURUv3dnCWNnSebUVDcxJJRo3c+vczQroY07I0YsPY6QVfPtdSP siHSpGNH5Er5xSA562GyvW6WCBJbbg82IX7UU5di676CsNAAcsdMJDOrHpFM+ztO C7diRPlgRJMgaXL1hQp4EQwuhyUm7s1KQgHo5Ca8gf55Er+O0bzXqidADq2yTkOq 53UG3QMqjHNl2GjjtGTj4OqquR6ytQg6g/Bdyz95o+sgCttTTVRKw7/7ekDlfZAp zUp8VaSuU71PqaF4lHbK1f+VNA== -----END CERTIFICATE-----Generated at Wed Jun 24 11:15:46 2026 by rpki-client