$ rpki-client -vvf rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft File: 4_FvnXPM7iaTkVokT0S1U6TbPcw.mft (raw, json) Hash identifier: 9k0aFt0DNLmBQmLTdW4DtjzrBwDnk1cVokkj4V842AE= Subject key identifier: 5D:D6:8E:4A:DB:4D:D3:9A:87:4A:DB:60:DD:D1:1E:34:D9:D1:65:6D Authority key identifier: E3:F1:6F:9D:73:CC:EE:26:93:91:5A:24:4F:44:B5:53:A4:DB:3D:CC Certificate issuer: /CN=A9145B13/serialNumber=E3F16F9D73CCEE2693915A244F44B553A4DB3DCC Certificate serial: 011E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4_FvnXPM7iaTkVokT0S1U6TbPcw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft Manifest number: 011A Signing time: Mon 01 Jun 2026 06:38:13 +0000 Manifest this update: Mon 01 Jun 2026 06:38:13 +0000 Manifest next update: Mon 08 Jun 2026 06:38:13 +0000 Files and hashes: 1: 4_FvnXPM7iaTkVokT0S1U6TbPcw.crl (hash: RShlfw6BPO5s57TcokK2IwAdRC9c+YAph7t358wh5sg=) 2: 05E4CBECB12911EF993BC12DC4F9AE02.roa (hash: UgNLpnpsPwAz2rvVqCqPMBi0JxC9elqJ20s+71NKi0w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.crl rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4_FvnXPM7iaTkVokT0S1U6TbPcw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 06:38:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 286 (0x11e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145B13, serialNumber=E3F16F9D73CCEE2693915A244F44B553A4DB3DCC Validity Not Before: Jun 1 06:38:13 2026 GMT Not After : Jun 8 06:38:13 2026 GMT Subject: CN=6a1d28d5-a7c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:df:af:3b:68:fe:68:c7:6f:32:81:a2:3b:ff: 80:e4:9d:0d:c5:67:88:80:ac:d0:69:b3:3a:00:4e: 4a:bc:f1:46:0b:43:dc:c9:66:a3:93:9d:76:b0:7b: b5:77:4e:81:dc:4a:81:93:47:3c:a0:48:62:6f:50: 22:4b:9c:3b:05:2a:dc:af:ad:d0:95:e1:d1:ae:e9: d7:31:2a:a1:38:fe:76:1c:06:3c:d4:36:8c:c8:bb: 90:0a:25:44:4e:e5:bc:2e:ba:e3:19:14:ac:c0:67: d2:d0:10:fb:32:e8:6d:19:86:a4:18:24:48:b5:51: 88:46:3f:ce:13:56:d2:ce:46:c7:32:f0:1c:3a:a3: 61:c7:60:02:00:41:d4:f7:4c:ae:3a:46:27:ea:b8: 29:5e:0d:48:42:6a:6c:21:da:bb:3c:16:98:a8:8c: 4b:99:0f:02:12:b9:4d:61:cc:8a:84:aa:fd:4d:08: 42:ee:53:19:94:4c:aa:6b:35:14:b8:74:7b:71:6f: b9:74:da:54:b3:89:d4:d8:6e:2c:2c:c3:f8:69:d0: 72:58:6f:98:79:cb:e3:76:aa:ab:82:ed:14:c3:6b: a5:aa:fc:e5:99:13:e0:86:cf:12:8a:5a:26:05:31: 81:a1:74:d0:63:2e:e5:24:7e:df:b0:5e:96:5b:02: 24:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D6:8E:4A:DB:4D:D3:9A:87:4A:DB:60:DD:D1:1E:34:D9:D1:65:6D X509v3 Authority Key Identifier: keyid:E3:F1:6F:9D:73:CC:EE:26:93:91:5A:24:4F:44:B5:53:A4:DB:3D:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4_FvnXPM7iaTkVokT0S1U6TbPcw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:83:0a:03:29:b9:65:88:0b:c7:cf:42:10:f4:ef:e4:b5:00: a3:4c:66:86:36:d2:73:0f:1f:34:52:bd:d2:8b:de:bc:ba:ce: 97:06:34:7f:a9:59:a0:a8:cc:bf:0f:43:cb:22:ea:7a:ea:ce: 12:57:96:5c:b1:d5:ae:d6:6e:46:33:47:ba:e5:a1:a1:64:4d: 8a:bd:ae:9f:a5:8b:ab:af:a8:ab:9a:a8:1d:3d:d4:73:9e:f5: a4:3f:9a:86:6a:6f:b8:3f:4a:74:96:9f:84:1f:f2:0f:42:d1: f8:77:00:6f:f0:0b:55:ba:00:b2:bd:69:ec:13:70:d4:29:b6: 54:fc:58:8d:45:d5:ed:79:62:34:eb:b9:a4:11:74:7c:59:72: 83:85:4c:bf:ca:a2:27:ea:39:3a:c5:e3:6e:de:54:3d:d0:ab: 00:b5:d9:3d:2d:79:4c:b2:0d:71:f4:d4:98:12:6a:a5:6c:e7: ae:4b:b3:ca:16:4e:01:60:96:5e:a0:80:0b:b6:6b:66:06:d7: d0:ec:b3:a1:bc:b6:54:a0:4f:bf:cb:c6:0d:15:79:6b:e2:b1: 7c:50:a9:68:7a:ed:9b:7b:95:41:69:18:0e:3d:e4:c9:8b:f7: 91:9b:a0:9c:51:ca:95:fe:fb:b4:a6:10:b7:b2:6b:dd:20:d9: a8:df:e8:2d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVCMTMxMTAvBgNVBAUTKEUzRjE2RjlENzNDQ0VFMjY5MzkxNUEyNDRGNDRCNTUz QTREQjNEQ0MwHhcNMjYwNjAxMDYzODEzWhcNMjYwNjA4MDYzODEzWjAYMRYwFAYD VQQDEw02YTFkMjhkNS1hN2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3N+vO2j+aMdvMoGiO/+A5J0NxWeIgKzQabM6AE5KvPFGC0PcyWajk512sHu1 d06B3EqBk0c8oEhib1AiS5w7BSrcr63QleHRrunXMSqhOP52HAY81DaMyLuQCiVE TuW8LrrjGRSswGfS0BD7MuhtGYakGCRItVGIRj/OE1bSzkbHMvAcOqNhx2ACAEHU 90yuOkYn6rgpXg1IQmpsIdq7PBaYqIxLmQ8CErlNYcyKhKr9TQhC7lMZlEyqazUU uHR7cW+5dNpUs4nU2G4sLMP4adByWG+Yecvjdqqrgu0Uw2ulqvzlmRPghs8Silom BTGBoXTQYy7lJH7fsF6WWwIk7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF3Wjkrb TdOah0rbYN3RHjTZ0WVtMB8GA1UdIwQYMBaAFOPxb51zzO4mk5FaJE9EtVOk2z3M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUIxMy80NjM3RkJGMkIx MjgxMUVGQjc1MEE1MkJDNEY5QUUwMi80X0Z2blhQTTdpYVRrVm9rVDBTMVU2VGJQ Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRfRnZuWFBNN2lhVGtWb2tUMFMxVTZUYlBjdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUIxMy80NjM3RkJGMkIxMjgxMUVGQjc1MEE1MkJDNEY5QUUwMi80X0Z2blhQTTdp YVRrVm9rVDBTMVU2VGJQY3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsoMKAym5ZYgLx89CEPTv5LUAo0xmhjbScw8fNFK90ovevLrOlwY0f6lZoKjM vw9DyyLqeurOEleWXLHVrtZuRjNHuuWhoWRNir2un6WLq6+oq5qoHT3Uc571pD+a hmpvuD9KdJafhB/yD0LR+HcAb/ALVboAsr1p7BNw1Cm2VPxYjUXV7XliNOu5pBF0 fFlyg4VMv8qiJ+o5OsXjbt5UPdCrALXZPS15TLINcfTUmBJqpWznrkuzyhZOAWCW XqCAC7ZrZgbX0Oyzoby2VKBPv8vGDRV5a+KxfFCpaHrtm3uVQWkYDj3kyYv3kZug nFHKlf77tKYQt7Jr3SDZqN/oLQ== -----END CERTIFICATE-----Generated at Tue Jun 2 21:23:26 2026 by rpki-client