$ rpki-client -vvf rpki.apnic.net/member_repository/A913B243/A9A753A0BB9911F0B5FB696AC4F9AE02/aH-6IOL3iRfg-wO5ErjIVjfFNz0.mft File: aH-6IOL3iRfg-wO5ErjIVjfFNz0.mft (raw, json) Hash identifier: NJUepU+bZLrkbQIZicMNFAjvCudAArWW/Wgnh1/XnZs= Subject key identifier: C3:6E:12:6A:58:81:8A:77:B8:0F:05:E9:AC:C1:EF:F1:FC:2E:A5:2B Authority key identifier: 68:7F:BA:20:E2:F7:89:17:E0:FB:03:B9:12:B8:C8:56:37:C5:37:3D Certificate issuer: /CN=A913B243/serialNumber=687FBA20E2F78917E0FB03B912B8C85637C5373D Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aH-6IOL3iRfg-wO5ErjIVjfFNz0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B243/A9A753A0BB9911F0B5FB696AC4F9AE02/aH-6IOL3iRfg-wO5ErjIVjfFNz0.mft Manifest number: 69 Signing time: Thu 21 May 2026 08:03:14 +0000 Manifest this update: Thu 21 May 2026 08:03:13 +0000 Manifest next update: Thu 28 May 2026 08:03:13 +0000 Files and hashes: 1: aH-6IOL3iRfg-wO5ErjIVjfFNz0.crl (hash: EhQv5LENLSMMTPGeB5rMTcqjSavVAwtluk51O8BV1Ww=) 2: F800618EBBA511F0B0EA597FC4F9AE02.roa (hash: SKL3oSLnK/OGS9FsL+y9x7HH2AFOMsHaA5PqrntVpi4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B243/A9A753A0BB9911F0B5FB696AC4F9AE02/aH-6IOL3iRfg-wO5ErjIVjfFNz0.crl rsync://rpki.apnic.net/member_repository/A913B243/A9A753A0BB9911F0B5FB696AC4F9AE02/aH-6IOL3iRfg-wO5ErjIVjfFNz0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aH-6IOL3iRfg-wO5ErjIVjfFNz0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 04:46:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B243, serialNumber=687FBA20E2F78917E0FB03B912B8C85637C5373D Validity Not Before: May 21 08:03:13 2026 GMT Not After : May 28 08:03:13 2026 GMT Subject: CN=6a0ebc41-772a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:66:f7:e3:b2:e6:3b:50:5f:14:8a:80:d8:7a: 1e:1f:42:bc:9e:47:28:cf:b9:85:83:83:54:fe:3a: fb:84:34:ef:63:3a:66:7e:c4:d1:b1:ca:92:78:a0: 8c:86:d9:ba:89:8c:4e:81:62:7e:73:f0:e8:98:83: 0f:0d:94:9f:50:fa:c7:d1:59:d5:d2:ff:65:15:5c: bc:57:f5:64:75:fe:f1:35:80:a7:ff:31:41:46:4b: 53:f9:b0:01:a4:45:ed:bc:1f:96:94:32:3f:51:80: c8:13:8a:5c:4c:e4:ad:cc:2a:49:69:ee:c1:16:72: 23:a5:a8:39:c9:48:ff:2b:49:9a:51:c9:19:dd:30: 6a:ae:05:84:94:a7:e4:ce:81:f4:81:4f:e5:05:35: 75:36:75:79:31:eb:c8:f8:62:c2:a0:8d:50:e1:81: f4:56:ec:57:1b:4d:f9:3f:05:5c:39:52:44:fb:1a: a5:b4:69:ca:32:21:66:88:fb:17:b3:5c:ec:c2:dc: 78:e8:f2:34:56:ff:c6:78:55:0d:b9:53:44:05:e5: 2a:44:54:44:d7:7c:dd:53:46:53:ca:93:34:46:8d: d1:fc:c5:1f:75:2b:30:16:80:4e:94:7f:be:34:3d: ae:48:c0:b5:a9:38:3c:c8:c6:45:35:6f:8d:8f:40: f7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:6E:12:6A:58:81:8A:77:B8:0F:05:E9:AC:C1:EF:F1:FC:2E:A5:2B X509v3 Authority Key Identifier: keyid:68:7F:BA:20:E2:F7:89:17:E0:FB:03:B9:12:B8:C8:56:37:C5:37:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B243/A9A753A0BB9911F0B5FB696AC4F9AE02/aH-6IOL3iRfg-wO5ErjIVjfFNz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aH-6IOL3iRfg-wO5ErjIVjfFNz0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B243/A9A753A0BB9911F0B5FB696AC4F9AE02/aH-6IOL3iRfg-wO5ErjIVjfFNz0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:4f:d6:65:15:9f:1f:e5:b9:e4:72:c6:07:f5:c5:b9:d8:38: 03:12:48:1f:c4:43:96:f2:06:29:93:be:ff:0f:5f:91:dd:6d: 3f:95:58:6c:39:ca:02:fe:ed:f4:4a:07:e8:76:8c:33:70:45: 44:27:b8:46:50:d4:5e:19:90:e1:d3:8c:41:c2:c8:5e:93:f9: 2d:7c:32:12:10:2f:3e:77:d3:cc:88:25:24:9f:3f:e0:c3:41: 51:eb:e9:bf:a8:3c:88:a7:86:33:9e:92:16:2c:4a:47:71:42: 2e:e5:0e:6b:77:1f:16:05:98:e7:96:a0:46:16:6f:cd:82:43: 81:96:2d:53:55:e7:7d:92:9c:3d:9a:d5:e7:f4:46:59:f9:1b: 2b:b3:50:ea:b3:18:79:2d:14:49:fe:f1:a3:47:3c:d8:6e:41: 05:63:03:3d:8c:59:8a:73:c8:a6:37:9f:69:75:8f:69:6f:f1: 52:ee:31:67:04:06:db:0f:39:d6:e5:e4:e1:e0:70:a6:2f:74: b7:48:3b:69:ce:aa:19:62:e2:a4:fc:ef:c9:1f:d2:8e:c6:9d: e9:54:d8:7f:24:24:3c:72:35:37:d4:ef:fe:df:22:ee:b9:c9: 68:74:4d:8b:1d:be:49:4d:c0:36:65:51:4a:cb:de:12:9d:75: 01:94:e8:a9 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QjI0MzExMC8GA1UEBRMoNjg3RkJBMjBFMkY3ODkxN0UwRkIwM0I5MTJCOEM4NTYz N0M1MzczRDAeFw0yNjA1MjEwODAzMTNaFw0yNjA1MjgwODAzMTNaMBgxFjAUBgNV BAMTDTZhMGViYzQxLTc3MmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDrZvfjsuY7UF8UioDYeh4fQryeRyjPuYWDg1T+OvuENO9jOmZ+xNGxypJ4oIyG 2bqJjE6BYn5z8OiYgw8NlJ9Q+sfRWdXS/2UVXLxX9WR1/vE1gKf/MUFGS1P5sAGk Re28H5aUMj9RgMgTilxM5K3MKklp7sEWciOlqDnJSP8rSZpRyRndMGquBYSUp+TO gfSBT+UFNXU2dXkx68j4YsKgjVDhgfRW7FcbTfk/BVw5UkT7GqW0acoyIWaI+xez XOzC3Hjo8jRW/8Z4VQ25U0QF5SpEVETXfN1TRlPKkzRGjdH8xR91KzAWgE6Uf740 Pa5IwLWpODzIxkU1b42PQPdJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUw24SaliB ine4DwXprMHv8fwupSswHwYDVR0jBBgwFoAUaH+6IOL3iRfg+wO5ErjIVjfFNz0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNCMjQzL0E5QTc1M0EwQkI5 OTExRjBCNUZCNjk2QUM0RjlBRTAyL2FILTZJT0wzaVJmZy13TzVFcmpJVmpmRk56 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYUgtNklPTDNpUmZnLXdPNUVyaklWamZGTnowLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNC MjQzL0E5QTc1M0EwQkI5OTExRjBCNUZCNjk2QUM0RjlBRTAyL2FILTZJT0wzaVJm Zy13TzVFcmpJVmpmRk56MC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA0T9ZlFZ8f5bnkcsYH9cW52DgDEkgfxEOW8gYpk77/D1+R3W0/lVhsOcoC/u30 SgfodowzcEVEJ7hGUNReGZDh04xBwshek/ktfDISEC8+d9PMiCUknz/gw0FR6+m/ qDyIp4YznpIWLEpHcUIu5Q5rdx8WBZjnlqBGFm/NgkOBli1TVed9kpw9mtXn9EZZ +Rsrs1Dqsxh5LRRJ/vGjRzzYbkEFYwM9jFmKc8imN59pdY9pb/FS7jFnBAbbDznW 5eTh4HCmL3S3SDtpzqoZYuKk/O/JH9KOxp3pVNh/JCQ8cjU31O/+3yLuuclodE2L Hb5JTcA2ZVFKy94SnXUBlOip -----END CERTIFICATE-----Generated at Thu May 21 09:31:07 2026 by rpki-client