$ rpki-client -vvf rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft File: RoxqeSq7PkX-7iIo0o54AxNytFU.mft (raw, json) Hash identifier: AU5gjp28T8m71i0XB0RE+ZEnDPKQSJ8ka2QbUUaFmDM= Subject key identifier: 8E:4E:DD:1B:92:C8:DF:36:4D:00:12:1A:C6:D3:79:C7:7C:79:F1:E5 Authority key identifier: 46:8C:6A:79:2A:BB:3E:45:FE:EE:22:28:D2:8E:78:03:13:72:B4:55 Certificate issuer: /CN=A912DD15/serialNumber=468C6A792ABB3E45FEEE2228D28E78031372B455 Certificate serial: 0266 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RoxqeSq7PkX-7iIo0o54AxNytFU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft Manifest number: 025D Signing time: Mon 01 Jun 2026 03:01:17 +0000 Manifest this update: Mon 01 Jun 2026 03:01:17 +0000 Manifest next update: Mon 08 Jun 2026 03:01:17 +0000 Files and hashes: 1: RoxqeSq7PkX-7iIo0o54AxNytFU.crl (hash: pW6zlRl2ixF0BPxkfjYQCshMfcsFfruGqPO+NWyg0Bk=) 2: 43CE5D5A236911EEAC33285DC4F9AE02.roa (hash: DI/eG9DXOFb9EKRR2bPnL0OAziLMqCbunU7psCFOUsk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.crl rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RoxqeSq7PkX-7iIo0o54AxNytFU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 03:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 614 (0x266) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DD15, serialNumber=468C6A792ABB3E45FEEE2228D28E78031372B455 Validity Not Before: Jun 1 03:01:17 2026 GMT Not After : Jun 8 03:01:17 2026 GMT Subject: CN=6a1cf5fd-7df9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a0:52:8b:da:40:1a:39:3d:60:6d:c7:da:26: 57:6e:84:3b:b2:91:1f:38:be:ad:3c:a3:21:51:cd: a3:46:e9:69:db:46:ef:ad:48:e0:cc:bd:13:20:93: 96:90:36:7e:c7:25:74:29:51:04:15:51:75:83:ab: 9f:92:60:04:25:f0:a8:f1:e1:e9:35:70:ee:15:ff: 50:3d:b8:38:70:92:47:0e:cb:05:61:1c:76:df:ea: e8:cb:c8:db:e3:0d:09:28:a5:c9:f8:1b:8a:ef:a6: d8:08:e6:5e:73:16:60:b6:e8:39:8e:0b:82:de:5d: 3d:59:c2:d6:a2:80:45:d1:bc:25:86:e1:4f:8f:9f: cd:f7:4e:7f:a2:24:d2:2e:65:a4:fd:7b:ad:0c:de: b1:37:e9:30:f0:f0:64:5a:f4:4c:74:34:81:5d:51: 23:62:11:bf:76:a8:87:fb:f2:4e:26:6c:88:7a:79: 40:1b:7c:b7:45:0b:27:fa:cf:dc:6b:18:cb:31:35: 97:0d:40:08:4f:29:78:cc:08:38:a1:1f:43:a5:dc: cd:cc:0c:fa:5e:27:a6:e1:78:e5:58:11:44:e8:dd: 17:48:d3:84:e1:15:7a:5f:53:a7:2f:9f:fb:9b:de: 16:35:c1:d6:6f:60:d9:7a:95:e0:36:36:85:72:60: 65:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:4E:DD:1B:92:C8:DF:36:4D:00:12:1A:C6:D3:79:C7:7C:79:F1:E5 X509v3 Authority Key Identifier: keyid:46:8C:6A:79:2A:BB:3E:45:FE:EE:22:28:D2:8E:78:03:13:72:B4:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RoxqeSq7PkX-7iIo0o54AxNytFU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:9a:10:95:b5:4d:21:9c:19:a2:00:63:90:8a:21:15:f5:31: 76:ae:5b:2c:d8:ff:db:68:3b:ae:0e:0f:a6:4b:00:c8:32:9a: dc:82:55:34:fe:99:14:be:07:70:a3:39:27:d5:f4:2c:d0:d8: be:2f:ec:16:5a:c3:d0:7e:b2:38:e0:f5:b3:04:b2:96:13:8d: 04:89:21:22:ee:a2:da:78:0f:fb:45:e9:de:87:63:4b:89:b3: 64:dd:8c:e4:0d:95:4c:e6:a5:ec:f3:57:07:3c:e3:b1:66:f0: 1f:89:a8:57:7b:ad:b9:9b:5d:37:b1:b5:b1:7f:b8:6b:2f:65: 3d:bf:86:e3:38:8e:ba:2e:7a:5f:02:bb:03:b3:44:99:ff:56: f1:35:4b:fc:62:51:97:21:5a:96:3c:88:f9:30:f7:85:bc:2d: 29:4c:09:1c:06:ed:3c:ce:68:23:06:d6:91:f6:f0:e4:c8:4d: 8a:a3:ba:1d:f1:b6:ac:85:c3:c8:c7:19:9f:43:93:f3:4a:ea: 92:15:b4:95:76:8d:26:3d:b2:f3:f1:87:ef:64:57:b9:74:33: 3b:0e:03:b6:5d:cd:cc:07:e7:3e:df:7c:5b:2a:9b:29:78:db: 1d:bd:a8:0c:a9:8e:f9:fa:da:a4:36:b6:36:c9:c5:1c:c9:e5: 8e:c1:89:13 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkREMTUxMTAvBgNVBAUTKDQ2OEM2QTc5MkFCQjNFNDVGRUVFMjIyOEQyOEU3ODAz MTM3MkI0NTUwHhcNMjYwNjAxMDMwMTE3WhcNMjYwNjA4MDMwMTE3WjAYMRYwFAYD VQQDEw02YTFjZjVmZC03ZGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy6BSi9pAGjk9YG3H2iZXboQ7spEfOL6tPKMhUc2jRulp20bvrUjgzL0TIJOW kDZ+xyV0KVEEFVF1g6ufkmAEJfCo8eHpNXDuFf9QPbg4cJJHDssFYRx23+roy8jb 4w0JKKXJ+BuK76bYCOZecxZgtug5jguC3l09WcLWooBF0bwlhuFPj5/N905/oiTS LmWk/XutDN6xN+kw8PBkWvRMdDSBXVEjYhG/dqiH+/JOJmyIenlAG3y3RQsn+s/c axjLMTWXDUAITyl4zAg4oR9DpdzNzAz6Xiem4XjlWBFE6N0XSNOE4RV6X1OnL5/7 m94WNcHWb2DZepXgNjaFcmBlOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI5O3RuS yN82TQASGsbTecd8efHlMB8GA1UdIwQYMBaAFEaMankquz5F/u4iKNKOeAMTcrRV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREQxNS9CREFEQTg2MEND NTIxMUVEQTgyOTFEMTBDNEY5QUUwMi9Sb3hxZVNxN1BrWC03aUlvMG81NEF4Tnl0 RlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JveHFlU3E3UGtYLTdpSW8wbzU0QXhOeXRGVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REQxNS9CREFEQTg2MENDNTIxMUVEQTgyOTFEMTBDNEY5QUUwMi9Sb3hxZVNxN1Br WC03aUlvMG81NEF4Tnl0RlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA15oQlbVNIZwZogBjkIohFfUxdq5bLNj/22g7rg4PpksAyDKa3IJVNP6ZFL4H cKM5J9X0LNDYvi/sFlrD0H6yOOD1swSylhONBIkhIu6i2ngP+0Xp3odjS4mzZN2M 5A2VTOal7PNXBzzjsWbwH4moV3utuZtdN7G1sX+4ay9lPb+G4ziOui56XwK7A7NE mf9W8TVL/GJRlyFaljyI+TD3hbwtKUwJHAbtPM5oIwbWkfbw5MhNiqO6HfG2rIXD yMcZn0OT80rqkhW0lXaNJj2y8/GH72RXuXQzOw4Dtl3NzAfnPt98WyqbKXjbHb2o DKmO+frapDa2NsnFHMnljsGJEw== -----END CERTIFICATE-----Generated at Tue Jun 2 21:20:06 2026 by rpki-client