$ rpki-client -vvf rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft File: aAYK77v8wH1z211yeLyPJJxX9RU.mft (raw, json) Hash identifier: oQMJfqqYBpkNuLogdzwqRfoW8ufnhuAbFO6eBbL1jJo= Subject key identifier: 5E:F7:5A:74:C3:F9:DE:9D:E2:6C:87:F6:73:15:CB:3B:23:C2:58:29 Authority key identifier: 68:06:0A:EF:BB:FC:C0:7D:73:DB:5D:72:78:BC:8F:24:9C:57:F5:15 Certificate issuer: /CN=A912859A/serialNumber=68060AEFBBFCC07D73DB5D7278BC8F249C57F515 Certificate serial: 0474 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft Manifest number: 0463 Signing time: Tue 23 Jun 2026 00:13:39 +0000 Manifest this update: Tue 23 Jun 2026 00:13:39 +0000 Manifest next update: Tue 30 Jun 2026 00:13:39 +0000 Files and hashes: 1: aAYK77v8wH1z211yeLyPJJxX9RU.crl (hash: FEOjclWR7ZxdFXZIL2CrnWF0aaD5HXRVHmsJDguNTVg=) 2: ADBB651E043411ED9F02B325C4F9AE02.roa (hash: cVYpcEpLmW3gYRT3SsW9LPnpjNMLZz8OsKdq5PALSk0=) 3: 5B639C667CEB11EDA3D10364C4F9AE02.roa (hash: Yp8vQRRn+1isdhS7HH7fMBWq8BHFrYVDOBpfy5O1p3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.crl rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jun 2026 00:13:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1140 (0x474) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912859A, serialNumber=68060AEFBBFCC07D73DB5D7278BC8F249C57F515 Validity Not Before: Jun 23 00:13:39 2026 GMT Not After : Jun 30 00:13:39 2026 GMT Subject: CN=6a39cfb3-9766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:96:f2:e4:a1:42:41:42:b8:03:f2:c3:05:06: 80:1f:33:dd:a6:24:24:c3:bd:8d:29:1b:09:a5:82: 63:3a:40:14:7f:65:c9:6d:ea:0b:52:6b:18:3d:4d: 28:1a:59:e8:de:b2:b2:97:af:26:49:56:c5:54:a5: d1:9a:88:57:5b:9f:fc:86:24:12:3e:18:5c:c4:63: 81:c3:4f:94:48:e8:fa:19:e7:2f:43:91:84:35:9f: c8:15:d2:95:ba:ce:ae:c7:c0:a5:2f:5b:72:44:af: 1b:ed:61:de:94:cb:37:00:dc:62:c3:e3:b6:f1:8c: 13:6c:8d:92:0b:16:57:d4:ff:34:ba:35:19:f3:11: 4d:9a:9a:6e:61:32:11:aa:67:a6:03:f3:c0:29:0e: e7:be:e8:56:b8:3d:d6:e5:b3:38:28:2b:a5:4e:30: b8:cd:6d:b0:bd:7d:3a:2b:16:f1:2d:34:4e:0e:d9: 3c:aa:60:b9:a9:e2:34:15:a7:e8:99:2f:cf:31:6b: b1:0d:63:e6:d6:d0:23:88:e6:55:6b:0b:4f:84:01: 39:b6:e6:97:04:4a:40:94:f5:3b:da:e7:2d:86:71: b2:37:d0:ea:2e:fc:44:0c:21:38:3d:cb:13:24:03: 68:69:61:f6:44:b8:9c:70:13:46:0c:b9:0d:85:7e: 85:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:F7:5A:74:C3:F9:DE:9D:E2:6C:87:F6:73:15:CB:3B:23:C2:58:29 X509v3 Authority Key Identifier: keyid:68:06:0A:EF:BB:FC:C0:7D:73:DB:5D:72:78:BC:8F:24:9C:57:F5:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:45:3c:07:51:1a:5d:9f:0f:e2:a0:b9:ef:e0:0e:b6:7b:08: fe:a1:31:31:b1:64:9a:47:16:78:fb:e8:ff:0d:26:4b:92:76: d1:ac:d5:5e:17:61:e6:08:49:73:e0:9b:c5:48:c1:94:fe:42: 21:9f:6f:8a:15:85:f7:7f:00:a9:e3:ef:41:44:c5:7c:55:05: 58:f8:14:84:1d:11:cc:8f:51:01:2f:78:3c:e5:14:6c:b3:ae: 55:06:e7:19:00:35:e1:45:d8:2b:a0:04:a1:c1:cd:5d:05:0b: ac:1c:dc:c0:3b:46:c7:92:50:83:72:88:57:8d:2e:cd:cc:68: 14:57:f0:b1:2e:37:a3:45:da:b2:f7:b3:48:db:5f:ef:b5:d8: 1c:b3:c1:c8:93:4d:c2:d9:1f:f9:38:c9:70:fc:52:57:8a:ec: 37:a4:b5:e4:44:07:da:80:b6:2a:db:5b:f5:79:57:0a:79:0f: 88:95:b5:87:7a:63:e3:f0:71:87:83:e4:22:34:28:27:be:d2: 3d:22:f1:88:99:27:70:7f:9d:6a:c4:2f:9e:8d:a1:30:a6:f7: 37:b4:a2:f7:74:1f:46:96:29:22:04:78:7c:da:05:db:22:e7: 95:13:47:e7:7f:f6:b9:be:e2:f2:5c:d7:80:2e:d5:05:d2:85: 74:73:b3:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBHQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg1OUExMTAvBgNVBAUTKDY4MDYwQUVGQkJGQ0MwN0Q3M0RCNUQ3Mjc4QkM4RjI0 OUM1N0Y1MTUwHhcNMjYwNjIzMDAxMzM5WhcNMjYwNjMwMDAxMzM5WjAYMRYwFAYD VQQDEw02YTM5Y2ZiMy05NzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZby5KFCQUK4A/LDBQaAHzPdpiQkw72NKRsJpYJjOkAUf2XJbeoLUmsYPU0o Glno3rKyl68mSVbFVKXRmohXW5/8hiQSPhhcxGOBw0+USOj6GecvQ5GENZ/IFdKV us6ux8ClL1tyRK8b7WHelMs3ANxiw+O28YwTbI2SCxZX1P80ujUZ8xFNmppuYTIR qmemA/PAKQ7nvuhWuD3W5bM4KCulTjC4zW2wvX06KxbxLTRODtk8qmC5qeI0Fafo mS/PMWuxDWPm1tAjiOZVawtPhAE5tuaXBEpAlPU72ucthnGyN9DqLvxEDCE4PcsT JANoaWH2RLiccBNGDLkNhX6FfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF73WnTD +d6d4myH9nMVyzsjwlgpMB8GA1UdIwQYMBaAFGgGCu+7/MB9c9tdcni8jyScV/UV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODU5QS9CQUNBQjdFQzlE RkUxMUVDQjg3RjUxNDdDNEY5QUUwMi9hQVlLNzd2OHdIMXoyMTF5ZUx5UEpKeFg5 UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FBWUs3N3Y4d0gxejIxMXllTHlQSkp4WDlSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODU5QS9CQUNBQjdFQzlERkUxMUVDQjg3RjUxNDdDNEY5QUUwMi9hQVlLNzd2OHdI MXoyMTF5ZUx5UEpKeFg5UlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF0U8B1EaXZ8P4qC57+AOtnsI/qExMbFkmkcWePvo/w0mS5J20azVXhdh5ghJ c+CbxUjBlP5CIZ9vihWF938AqePvQUTFfFUFWPgUhB0RzI9RAS94POUUbLOuVQbn GQA14UXYK6AEocHNXQULrBzcwDtGx5JQg3KIV40uzcxoFFfwsS43o0XasvezSNtf 77XYHLPByJNNwtkf+TjJcPxSV4rsN6S15EQH2oC2Kttb9XlXCnkPiJW1h3pj4/Bx h4PkIjQoJ77SPSLxiJkncH+dasQvno2hMKb3N7Si93QfRpYpIgR4fNoF2yLnlRNH 53/2ub7i8lzXgC7VBdKFdHOz5g== -----END CERTIFICATE-----Generated at Wed Jun 24 01:29:54 2026 by rpki-client