$ rpki-client -vvf rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft File: -bspsKvoSef-GA4znkscKCNoxSE.mft (raw, json) Hash identifier: Frh7rgoKNu981xdlgtWuSInZh+iMtJVqaBI3QOeuHVA= Subject key identifier: E5:84:E5:F0:63:82:68:6B:09:F7:0A:9E:A7:83:60:D2:F2:AE:42:E6 Authority key identifier: F9:BB:29:B0:AB:E8:49:E7:FE:18:0E:33:9E:4B:1C:28:23:68:C5:21 Certificate issuer: /CN=A913E8F3/serialNumber=F9BB29B0ABE849E7FE180E339E4B1C282368C521 Certificate serial: 10CA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-bspsKvoSef-GA4znkscKCNoxSE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft Manifest number: 10AD Signing time: Tue 02 Jun 2026 17:21:53 +0000 Manifest this update: Tue 02 Jun 2026 17:21:52 +0000 Manifest next update: Tue 09 Jun 2026 17:21:52 +0000 Files and hashes: 1: -bspsKvoSef-GA4znkscKCNoxSE.crl (hash: mEgVDSxAQOvqOkyUndAyV5R1KLn6zUdg4QiAd7LDhfY=) 2: 06093D68DC1311F09341A9F45E6F56BC.roa (hash: 38iP1UDZ5HIVswjKfNaAplI7jivkq9C797QFF0+FNg8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.crl rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-bspsKvoSef-GA4znkscKCNoxSE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Jun 2026 15:18:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4298 (0x10ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E8F3, serialNumber=F9BB29B0ABE849E7FE180E339E4B1C282368C521 Validity Not Before: Jun 2 17:21:52 2026 GMT Not After : Jun 9 17:21:52 2026 GMT Subject: CN=6a1f1131-8bd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f8:e2:05:a7:f2:e1:a8:ca:41:ac:11:f2:f0: 9e:32:f7:d2:69:d8:cc:84:d1:e0:15:a0:51:d1:6e: 6d:74:48:e2:77:70:8a:56:9b:58:df:74:d8:fb:ea: f8:78:fd:66:42:85:11:d7:bf:33:d3:2f:b8:21:d1: ae:dd:15:cc:f3:04:8e:4f:53:d5:c8:be:81:a5:8c: 16:22:bf:0d:b7:b4:e4:e0:1b:48:da:6d:d9:ec:76: 2d:33:f2:18:40:fa:2f:a5:11:0c:17:3f:4e:ea:15: 73:1a:1b:b3:77:2d:d3:2d:dd:80:84:c5:f7:73:84: bb:51:c9:c7:3b:9b:4f:e2:c0:7a:ee:92:20:c7:13: 25:6c:f3:1d:ce:c5:5d:4f:ef:17:e6:89:50:63:7a: ef:bc:95:c7:5f:15:b5:0d:e0:39:ad:31:60:d4:f8: e3:56:9d:b2:69:01:aa:f4:52:6c:3e:8c:46:0c:0b: 8c:34:e8:aa:2c:ce:93:66:c4:b8:a1:99:99:fc:b3: db:53:ce:97:fe:a3:72:8a:04:21:bb:d7:c2:0a:8e: d0:91:ef:c8:fb:5e:70:86:d3:ac:a8:1a:45:9d:e9: b5:74:d1:f1:55:f3:ea:c3:38:30:f3:42:e3:89:3d: e0:3c:4a:a3:fd:f3:df:49:81:95:03:c8:0a:b9:5e: 81:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:84:E5:F0:63:82:68:6B:09:F7:0A:9E:A7:83:60:D2:F2:AE:42:E6 X509v3 Authority Key Identifier: keyid:F9:BB:29:B0:AB:E8:49:E7:FE:18:0E:33:9E:4B:1C:28:23:68:C5:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-bspsKvoSef-GA4znkscKCNoxSE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:0b:38:ec:44:38:f3:f5:f4:a3:52:8d:e3:2c:3c:2d:8b:71: 8b:3d:06:8b:36:97:21:39:af:ba:f8:46:92:3e:a4:88:55:d7: 67:f0:cc:f8:78:82:93:73:18:4c:bc:04:b5:f1:83:0b:ca:66: b5:2b:61:d0:03:b2:dd:6d:f5:dd:46:5c:e1:24:df:f6:a7:2e: 41:ab:75:9d:12:6c:88:08:b3:0b:38:ac:cd:c9:f3:20:05:78: 0e:71:aa:02:bb:fe:88:6c:d5:d4:da:27:3f:cb:6c:59:e4:43: 40:d3:8d:a0:19:29:c4:6e:11:cc:a2:bf:7c:75:2a:06:90:da: 03:73:0b:73:4e:25:f0:42:2e:45:09:e2:48:9f:fc:52:22:2f: 9d:2f:a1:93:c7:e9:66:bb:58:a1:93:0b:3a:3c:07:d5:5e:b6: 3e:54:f8:37:f9:78:84:7f:09:28:65:95:74:d4:32:90:c9:1a: 82:9d:3d:dd:96:d4:d1:b0:fd:d7:78:41:6a:d3:a3:e7:2b:50: 44:db:47:29:c4:f4:26:5f:f0:00:7d:af:dd:87:30:91:40:1e: a3:96:7f:54:ba:e5:76:87:26:4b:aa:c2:14:98:d7:07:28:92: 43:7c:7d:a3:ef:32:5b:5f:c7:3a:33:de:5c:45:93:9b:d5:f9: a0:0d:53:fe -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U4RjMxMTAvBgNVBAUTKEY5QkIyOUIwQUJFODQ5RTdGRTE4MEUzMzlFNEIxQzI4 MjM2OEM1MjEwHhcNMjYwNjAyMTcyMTUyWhcNMjYwNjA5MTcyMTUyWjAYMRYwFAYD VQQDEw02YTFmMTEzMS04YmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwPjiBafy4ajKQawR8vCeMvfSadjMhNHgFaBR0W5tdEjid3CKVptY33TY++r4 eP1mQoUR178z0y+4IdGu3RXM8wSOT1PVyL6BpYwWIr8Nt7Tk4BtI2m3Z7HYtM/IY QPovpREMFz9O6hVzGhuzdy3TLd2AhMX3c4S7UcnHO5tP4sB67pIgxxMlbPMdzsVd T+8X5olQY3rvvJXHXxW1DeA5rTFg1PjjVp2yaQGq9FJsPoxGDAuMNOiqLM6TZsS4 oZmZ/LPbU86X/qNyigQhu9fCCo7Qke/I+15whtOsqBpFnem1dNHxVfPqwzgw80Lj iT3gPEqj/fPfSYGVA8gKuV6BCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOWE5fBj gmhrCfcKnqeDYNLyrkLmMB8GA1UdIwQYMBaAFPm7KbCr6Enn/hgOM55LHCgjaMUh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRThGMy8wQTA0RjRFMjU0 OTQxMUU5QjU5N0U1NzFDNEY5QUUwMi8tYnNwc0t2b1NlZi1HQTR6bmtzY0tDTm94 U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1ic3BzS3ZvU2VmLUdBNHpua3NjS0NOb3hTRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RThGMy8wQTA0RjRFMjU0OTQxMUU5QjU5N0U1NzFDNEY5QUUwMi8tYnNwc0t2b1Nl Zi1HQTR6bmtzY0tDTm94U0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYQs47EQ48/X0o1KN4yw8LYtxiz0GizaXITmvuvhGkj6kiFXXZ/DM+HiCk3MY TLwEtfGDC8pmtSth0AOy3W313UZc4STf9qcuQat1nRJsiAizCziszcnzIAV4DnGq Arv+iGzV1NonP8tsWeRDQNONoBkpxG4RzKK/fHUqBpDaA3MLc04l8EIuRQniSJ/8 UiIvnS+hk8fpZrtYoZMLOjwH1V62PlT4N/l4hH8JKGWVdNQykMkagp093ZbU0bD9 13hBatOj5ytQRNtHKcT0Jl/wAH2v3YcwkUAeo5Z/VLrldocmS6rCFJjXByiSQ3x9 o+8yW1/HOjPeXEWTm9X5oA1T/g== -----END CERTIFICATE-----Generated at Tue Jun 2 21:34:15 2026 by rpki-client