$ rpki-client -vvf rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft File: 5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft (raw, json) Hash identifier: if8ADD+W+JfYzlU0kW8Lavzl30ztsfvTMRbiW0Uw3hY= Subject key identifier: 06:78:14:8B:A5:EA:11:AB:38:4B:02:EF:F7:4B:30:F1:95:08:90:8B Authority key identifier: E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2 Certificate issuer: /CN=A912DA1D/serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2 Certificate serial: 0437 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft Manifest number: 0421 Signing time: Fri 03 Jul 2026 00:47:15 +0000 Manifest this update: Fri 03 Jul 2026 00:47:14 +0000 Manifest next update: Fri 10 Jul 2026 00:47:14 +0000 Files and hashes: 1: 5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl (hash: k0KNucFm2qE1JO2KQPV/gwrzQt4S/FbLHsLVHz2yS+k=) 2: 44B90434DFA011ED8C895F7CC4F9AE02.roa (hash: fOCLl/2VKdNa0vhoLYzfZhLV3T1IotJ/iZtFzsPrmrk=) 3: 36B1CD340A6D11ED89FD3F13C4F9AE02.roa (hash: YL8hbnsNwgCnn/NcUCv0iY/57aut2UGD2Ataw87mmvw=) 4: 0589A4B8DF9511EDAAA7E22AC4F9AE02.roa (hash: 8QW6SQzpdf8WqjCw4pnkX0HYCGVvI59bpneK0fchnuE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 Jul 2026 00:47:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1079 (0x437) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DA1D, serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2 Validity Not Before: Jul 3 00:47:14 2026 GMT Not After : Jul 10 00:47:14 2026 GMT Subject: CN=6a470693-d352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:53:cd:99:02:05:bd:f5:59:b7:2d:fc:ac:86: db:0d:2b:c9:08:75:91:ae:8e:ed:14:fe:9b:9b:16: b7:f1:2c:3d:23:a0:43:e8:25:f9:ed:cf:95:47:c2: c6:6e:37:cb:5a:52:48:f4:dd:ee:dc:d9:c6:85:f9: 55:00:d0:3f:3f:29:e0:ae:db:df:3b:84:e1:1f:d1: 5d:8c:55:07:e9:3f:33:23:79:46:ab:07:b6:08:ca: 42:b3:6f:2c:ac:d1:82:72:d7:c3:29:1a:38:a0:79: 31:7b:f6:04:84:57:f7:22:82:32:0f:fd:6f:1d:4c: 3f:fb:e0:83:93:e1:fd:48:66:a5:56:7c:db:56:7b: f4:4c:79:7d:99:91:fa:2f:a7:5f:47:de:31:13:7a: 20:3a:dd:0d:d1:86:ff:ed:c3:af:44:41:33:2a:64: 72:d5:42:33:a5:3c:e0:59:17:52:09:d4:5d:ce:12: 45:89:1c:cb:6d:69:f7:ef:42:a7:ed:e4:be:d5:e2: a3:c1:01:26:b4:5d:3f:a1:a2:53:4c:91:ff:22:e4: 4d:15:93:e0:57:80:71:77:b4:9f:25:88:8e:9a:f3: b5:db:64:24:a4:b0:5c:1c:0b:9d:6e:84:3d:01:60: 62:ad:0e:c4:18:3b:24:6e:7d:c2:25:ce:53:7c:53: 92:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:78:14:8B:A5:EA:11:AB:38:4B:02:EF:F7:4B:30:F1:95:08:90:8B X509v3 Authority Key Identifier: keyid:E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:7d:55:85:17:bc:0b:1b:93:3c:4e:0e:8d:be:d4:84:be:cd: ae:ea:5a:b5:fe:90:48:75:e2:a1:82:00:ed:19:d5:97:c1:9e: d9:b4:96:46:fb:f8:cf:8d:3a:c0:8d:db:bf:c2:0e:32:6a:ab: 6e:0d:ff:9b:a5:ea:87:a2:5b:65:3e:f9:de:da:95:3e:87:06: 51:e5:9c:2b:7e:c1:20:09:fb:87:07:d3:1e:e4:9e:0b:9a:6b: 41:97:fe:86:b6:50:a9:ad:6c:f2:2f:16:fb:06:b7:8d:1e:db: 3d:2e:1e:2c:6d:d5:74:78:f7:29:24:61:7a:31:17:c1:fd:54: a1:bb:c9:10:b5:d7:c4:cd:5f:40:5b:f7:ad:8a:d9:17:56:98: ab:59:97:50:04:4d:f3:18:ba:c9:cc:e7:ad:1a:ef:45:13:22: 35:ff:de:7e:dc:9c:fa:f8:32:30:f1:86:be:ec:8e:25:7c:dc: 79:c1:b7:bc:e9:a0:a6:59:e6:40:1c:18:18:c1:fe:a1:0c:a3: cb:50:71:0b:dd:b9:a5:c0:46:6b:5c:7f:51:e8:73:2e:ab:cc: bd:1c:cf:c2:e5:f0:ca:53:b1:bc:3d:9b:3f:26:41:05:4d:1f: 02:93:4b:66:31:88:9c:55:a1:50:00:43:da:06:70:a6:c0:07: 8b:a0:fc:13 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRBMUQxMTAvBgNVBAUTKEU0MjE0MkUzRTU4NDU3NjJEMEU4RDY4QjAyRkIxMEU4 NzVCQzZCRjIwHhcNMjYwNzAzMDA0NzE0WhcNMjYwNzEwMDA0NzE0WjAYMRYwFAYD VQQDEw02YTQ3MDY5My1kMzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAslPNmQIFvfVZty38rIbbDSvJCHWRro7tFP6bmxa38Sw9I6BD6CX57c+VR8LG bjfLWlJI9N3u3NnGhflVANA/PyngrtvfO4ThH9FdjFUH6T8zI3lGqwe2CMpCs28s rNGCctfDKRo4oHkxe/YEhFf3IoIyD/1vHUw/++CDk+H9SGalVnzbVnv0THl9mZH6 L6dfR94xE3ogOt0N0Yb/7cOvREEzKmRy1UIzpTzgWRdSCdRdzhJFiRzLbWn370Kn 7eS+1eKjwQEmtF0/oaJTTJH/IuRNFZPgV4Bxd7SfJYiOmvO122QkpLBcHAudboQ9 AWBirQ7EGDskbn3CJc5TfFOSfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAZ4FIul 6hGrOEsC7/dLMPGVCJCLMB8GA1UdIwQYMBaAFOQhQuPlhFdi0OjWiwL7EOh1vGvy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREExRC9CNDZFNDJEQUJC MUIxMUVDQjBBQzBGMTRDNEY5QUUwMi81Q0ZDNC1XRVYyTFE2TmFMQXZzUTZIVzhh X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVDRkM0LVdFVjJMUTZOYUxBdnNRNkhXOGFfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REExRC9CNDZFNDJEQUJCMUIxMUVDQjBBQzBGMTRDNEY5QUUwMi81Q0ZDNC1XRVYy TFE2TmFMQXZzUTZIVzhhX0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANX1VhRe8CxuTPE4Ojb7UhL7Nrupatf6QSHXioYIA7RnVl8Ge2bSWRvv4z406 wI3bv8IOMmqrbg3/m6Xqh6JbZT753tqVPocGUeWcK37BIAn7hwfTHuSeC5prQZf+ hrZQqa1s8i8W+wa3jR7bPS4eLG3VdHj3KSRhejEXwf1UobvJELXXxM1fQFv3rYrZ F1aYq1mXUARN8xi6ycznrRrvRRMiNf/eftyc+vgyMPGGvuyOJXzcecG3vOmgplnm QBwYGMH+oQyjy1BxC925pcBGa1x/UehzLqvMvRzPwuXwylOxvD2bPyZBBU0fApNL ZjGInFWhUABD2gZwpsAHi6D8Ew== -----END CERTIFICATE-----Generated at Sat Jul 4 01:17:42 2026 by rpki-client