$ rpki-client -vvf rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft File: 28EoRfH6o1sy_s32oO1NFEKSyMw.mft (raw, json) Hash identifier: cAwCemlNHGgrcvs+eqqGCuiBEemBh6DUHmh4OewFnLI= Subject key identifier: 65:8C:57:0C:CA:3D:82:79:8F:1F:60:DB:A8:87:6D:DE:3F:77:C0:5D Authority key identifier: DB:C1:28:45:F1:FA:A3:5B:32:FE:CD:F6:A0:ED:4D:14:42:92:C8:CC Certificate issuer: /CN=A9134790/serialNumber=DBC12845F1FAA35B32FECDF6A0ED4D144292C8CC Certificate serial: BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28EoRfH6o1sy_s32oO1NFEKSyMw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft Manifest number: BA Signing time: Mon 01 Jun 2026 07:48:02 +0000 Manifest this update: Mon 01 Jun 2026 07:48:01 +0000 Manifest next update: Mon 08 Jun 2026 07:48:01 +0000 Files and hashes: 1: 28EoRfH6o1sy_s32oO1NFEKSyMw.crl (hash: EHNMuD1YYVPb19aLFfiJ/y9MS7q1XFBosrpdmDZsy5E=) 2: 078FA91C44EA11F09EB11858C4F9AE02.roa (hash: C/ZGqWc8u20kL8eL26pbZWd67Dk6EABUUd6GG9DsIEU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.crl rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28EoRfH6o1sy_s32oO1NFEKSyMw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 07:48:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134790, serialNumber=DBC12845F1FAA35B32FECDF6A0ED4D144292C8CC Validity Not Before: Jun 1 07:48:01 2026 GMT Not After : Jun 8 07:48:01 2026 GMT Subject: CN=6a1d3932-41ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4f:84:d4:16:56:e9:bb:f5:1e:91:fb:9f:66: ea:a9:79:9b:dd:26:29:1e:d3:17:26:ac:e4:39:c3: a6:4e:a2:d5:e0:ef:16:22:fc:d6:8d:73:c2:60:5e: a1:75:98:67:45:ad:fa:b4:91:60:ef:6c:ce:3e:4c: 70:76:67:09:52:49:ac:1a:1e:dd:0d:d4:1a:57:fa: fa:b8:87:d8:9a:d6:69:3a:16:d2:df:b9:2c:be:2c: 86:8f:d9:6a:ec:72:0e:32:34:f5:e9:21:89:29:8e: 7f:6a:ff:b8:67:7a:c5:6c:7c:e8:cf:6c:a6:e0:fd: 60:a0:2a:9a:09:81:73:40:f7:72:55:ad:17:bf:5f: 82:ee:4a:20:58:ba:a4:75:59:6b:fe:53:09:48:16: 68:bf:19:fd:39:dd:2d:b9:1b:bc:68:4e:c6:a7:7e: bf:5a:47:8a:2e:cc:e7:a1:ab:17:a9:ca:d8:f8:9d: 31:b3:5e:ec:c0:86:ef:72:15:79:37:54:bd:21:de: 78:aa:a0:34:95:2e:ef:48:3f:2d:da:22:e8:b8:2a: 48:65:e7:20:1d:1d:1e:d4:f9:88:31:f6:7b:dc:6d: 5d:43:e9:0d:c0:7a:9d:7c:b5:b7:b7:c2:54:44:80: 6e:5a:94:e0:74:6e:82:0b:ec:29:90:eb:87:89:26: 13:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:8C:57:0C:CA:3D:82:79:8F:1F:60:DB:A8:87:6D:DE:3F:77:C0:5D X509v3 Authority Key Identifier: keyid:DB:C1:28:45:F1:FA:A3:5B:32:FE:CD:F6:A0:ED:4D:14:42:92:C8:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28EoRfH6o1sy_s32oO1NFEKSyMw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:a4:59:cc:2d:aa:58:a7:50:aa:01:44:13:71:ee:cd:35:93: 19:76:05:b5:c6:95:55:d9:cb:5d:13:92:a4:bb:d9:5a:96:dd: ee:4f:3a:b4:72:25:a0:19:6d:5b:8a:97:3c:03:9a:29:20:25: 99:05:52:e8:db:d3:94:0a:be:cc:2e:f9:8b:4f:3e:75:ac:d1: b3:1e:32:53:ef:67:f2:36:42:02:d3:b8:02:ad:82:cc:11:40: de:3d:05:6c:98:15:e2:83:61:ba:bf:18:21:19:2a:a7:87:69: ab:ed:aa:fc:df:25:f5:4e:fb:25:bc:3d:dc:3a:73:23:57:44: 14:e2:47:d8:5f:81:f0:de:ad:77:14:f0:7b:4c:cd:b5:29:22: d0:79:e6:58:45:d8:73:1e:fe:26:73:ce:2e:e9:e7:a8:6f:86: d1:35:0d:83:1a:e8:bf:15:ec:34:3d:e2:82:93:d2:f6:11:91: f0:cb:f1:4d:41:11:c8:45:5e:03:ef:06:02:86:9c:b9:dd:f7: e5:1a:77:0a:cb:94:59:b5:f7:e2:10:68:f2:54:49:f0:f1:55: 90:24:0b:c1:a9:5f:31:74:98:71:67:e1:7a:29:9f:f3:03:12: 1b:03:e1:75:50:33:65:01:d4:ef:d6:0c:06:62:55:43:db:d0: 88:2a:7c:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQ3OTAxMTAvBgNVBAUTKERCQzEyODQ1RjFGQUEzNUIzMkZFQ0RGNkEwRUQ0RDE0 NDI5MkM4Q0MwHhcNMjYwNjAxMDc0ODAxWhcNMjYwNjA4MDc0ODAxWjAYMRYwFAYD VQQDEw02YTFkMzkzMi00MWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1U+E1BZW6bv1HpH7n2bqqXmb3SYpHtMXJqzkOcOmTqLV4O8WIvzWjXPCYF6h dZhnRa36tJFg72zOPkxwdmcJUkmsGh7dDdQaV/r6uIfYmtZpOhbS37ksviyGj9lq 7HIOMjT16SGJKY5/av+4Z3rFbHzoz2ym4P1goCqaCYFzQPdyVa0Xv1+C7kogWLqk dVlr/lMJSBZovxn9Od0tuRu8aE7Gp36/WkeKLsznoasXqcrY+J0xs17swIbvchV5 N1S9Id54qqA0lS7vSD8t2iLouCpIZecgHR0e1PmIMfZ73G1dQ+kNwHqdfLW3t8JU RIBuWpTgdG6CC+wpkOuHiSYTvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGWMVwzK PYJ5jx9g26iHbd4/d8BdMB8GA1UdIwQYMBaAFNvBKEXx+qNbMv7N9qDtTRRCksjM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDc5MC81MTMzRkVBQzQ0 RTkxMUYwOTFBOTZFNTNDNEY5QUUwMi8yOEVvUmZINm8xc3lfczMyb08xTkZFS1N5 TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI4RW9SZkg2bzFzeV9zMzJvTzFORkVLU3lNdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDc5MC81MTMzRkVBQzQ0RTkxMUYwOTFBOTZFNTNDNEY5QUUwMi8yOEVvUmZINm8x c3lfczMyb08xTkZFS1N5TXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHaRZzC2qWKdQqgFEE3HuzTWTGXYFtcaVVdnLXROSpLvZWpbd7k86tHIloBlt W4qXPAOaKSAlmQVS6NvTlAq+zC75i08+dazRsx4yU+9n8jZCAtO4Aq2CzBFA3j0F bJgV4oNhur8YIRkqp4dpq+2q/N8l9U77Jbw93DpzI1dEFOJH2F+B8N6tdxTwe0zN tSki0HnmWEXYcx7+JnPOLunnqG+G0TUNgxrovxXsND3igpPS9hGR8MvxTUERyEVe A+8GAoacud335Rp3CsuUWbX34hBo8lRJ8PFVkCQLwalfMXSYcWfheimf8wMSGwPh dVAzZQHU79YMBmJVQ9vQiCp8Nw== -----END CERTIFICATE-----Generated at Tue Jun 2 21:02:59 2026 by rpki-client