$ rpki-client -vvf rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.mft File: D96C0nlIVMmvzdhe-37-ScR9Lu4.mft (raw, json) Hash identifier: oUsm6TnXpbNUxe506iUPRKxYLmdH06oUy66aKndWn/M= Subject key identifier: 16:8D:AE:D3:FD:3B:4A:A3:FD:70:90:5B:E6:BF:0E:87:DF:5A:31:41 Authority key identifier: 0F:DE:82:D2:79:48:54:C9:AF:CD:D8:5E:FB:7E:FE:49:C4:7D:2E:EE Certificate issuer: /CN=A914C33A/serialNumber=0FDE82D2794854C9AFCDD85EFB7EFE49C47D2EEE Certificate serial: 0DAA Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D96C0nlIVMmvzdhe-37-ScR9Lu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.mft Manifest number: 0D9C Signing time: Thu 04 Jun 2026 15:33:22 +0000 Manifest this update: Thu 04 Jun 2026 15:33:21 +0000 Manifest next update: Thu 11 Jun 2026 15:33:21 +0000 Files and hashes: 1: D96C0nlIVMmvzdhe-37-ScR9Lu4.crl (hash: tvB98vUyu2h9CNpSoTgLclilk6vyDn3129IysN47M+I=) 2: 0DF331C28F9411EAA5E7B573C4F9AE02.roa (hash: KN/qO3b9F5dp3gvVSi/2Av1F8gy5I+kWuZVNLBkzY6g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.crl rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D96C0nlIVMmvzdhe-37-ScR9Lu4.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 15:33:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3498 (0xdaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C33A, serialNumber=0FDE82D2794854C9AFCDD85EFB7EFE49C47D2EEE Validity Not Before: Jun 4 15:33:21 2026 GMT Not After : Jun 11 15:33:21 2026 GMT Subject: CN=6a219ac2-037e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:13:da:6b:81:ec:33:70:d0:5c:e1:f0:00:3e: dd:b6:b9:98:94:3c:9a:3e:8b:f3:54:20:11:84:8f: 8a:70:f1:fe:41:b4:1d:db:09:a9:2e:1b:a0:7e:84: 67:55:ed:89:fc:e6:c8:25:cd:06:4a:ac:15:0c:c3: 12:e8:8b:72:d7:0b:0f:3f:21:ff:ca:6c:99:09:72: b1:61:53:a5:1e:c0:a7:a1:10:29:51:72:86:05:67: 28:18:50:aa:ee:1e:79:9f:1c:f5:cb:0f:88:eb:90: c5:4f:b4:92:8d:ac:f4:fb:3a:54:c0:8e:2d:be:82: 46:fa:7e:44:66:44:ec:9b:ae:e0:fa:53:be:3e:c3: 02:ce:e9:d2:43:42:4b:f8:62:bb:48:d8:e9:6f:21: 53:5b:79:1e:6e:e6:20:22:e4:b2:c5:e9:76:a0:b3: 36:c0:7c:17:db:39:ae:46:b3:d0:c6:b8:81:cc:bf: fc:4d:62:03:41:e2:5b:fa:8e:99:1b:01:5c:fa:cd: d8:32:81:ac:52:d6:e4:e0:46:c6:c6:dc:ba:11:3e: 9d:c3:1f:1c:88:44:86:63:62:89:4f:2e:a1:73:42: 2d:65:80:51:a4:e1:e6:15:40:d8:dd:12:b7:fa:50: 21:98:9c:b8:97:5b:d6:17:73:a6:f7:f0:06:be:89: db:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:8D:AE:D3:FD:3B:4A:A3:FD:70:90:5B:E6:BF:0E:87:DF:5A:31:41 X509v3 Authority Key Identifier: keyid:0F:DE:82:D2:79:48:54:C9:AF:CD:D8:5E:FB:7E:FE:49:C4:7D:2E:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D96C0nlIVMmvzdhe-37-ScR9Lu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:54:b1:37:01:26:99:d2:7c:d6:6a:45:9b:22:50:95:cd:5b: e8:e5:e5:27:b8:94:09:40:5c:b5:34:ff:09:4c:3a:6d:b6:4b: 73:e1:f4:40:98:b5:78:2d:3a:0c:85:55:5a:28:87:ab:ee:d6: 5c:8a:e7:8a:4f:c0:a6:b2:6a:10:20:40:f7:cf:b2:1b:07:21: a2:e6:fd:f5:e6:d5:57:cb:5e:25:07:97:be:2a:7a:29:eb:24: 0f:e8:db:56:4c:b2:4f:6a:20:1c:b6:13:8d:56:6f:98:ec:39: d8:ef:ef:60:ee:6f:21:1c:d3:ca:15:9c:ba:54:e1:33:13:dd: 08:5e:7f:c8:01:ba:98:54:dc:a3:55:48:a3:7c:01:07:ca:c1: 01:a1:0a:89:09:0f:99:17:9a:f6:a8:b5:9f:c2:9a:22:b5:3a: 25:f0:c9:1c:ee:bf:10:ac:6b:9b:8c:fc:1c:57:b8:a6:d4:37: bb:4d:d5:3b:61:f4:0c:59:71:9d:47:c3:0b:be:6c:52:24:a4: e9:fe:cf:74:28:cf:15:4a:d6:ca:9f:2d:e7:1b:21:37:21:5c: 7f:7c:48:d2:6e:62:38:68:d2:19:1c:b4:11:92:c6:40:52:14: 3d:a1:e0:fc:ed:55:64:bf:a4:01:6f:33:e0:40:dd:99:25:7e: 2b:d3:6a:fd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMzM0ExMTAvBgNVBAUTKDBGREU4MkQyNzk0ODU0QzlBRkNERDg1RUZCN0VGRTQ5 QzQ3RDJFRUUwHhcNMjYwNjA0MTUzMzIxWhcNMjYwNjExMTUzMzIxWjAYMRYwFAYD VQQDEw02YTIxOWFjMi0wMzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlhPaa4HsM3DQXOHwAD7dtrmYlDyaPovzVCARhI+KcPH+QbQd2wmpLhugfoRn Ve2J/ObIJc0GSqwVDMMS6Ity1wsPPyH/ymyZCXKxYVOlHsCnoRApUXKGBWcoGFCq 7h55nxz1yw+I65DFT7SSjaz0+zpUwI4tvoJG+n5EZkTsm67g+lO+PsMCzunSQ0JL +GK7SNjpbyFTW3kebuYgIuSyxel2oLM2wHwX2zmuRrPQxriBzL/8TWIDQeJb+o6Z GwFc+s3YMoGsUtbk4EbGxty6ET6dwx8ciESGY2KJTy6hc0ItZYBRpOHmFUDY3RK3 +lAhmJy4l1vWF3Om9/AGvonbxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBaNrtP9 O0qj/XCQW+a/DoffWjFBMB8GA1UdIwQYMBaAFA/egtJ5SFTJr83YXvt+/knEfS7u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzMzQS84RjQ3QTlGQUU5 N0QxMUU5QTlEQjVFNTJDNEY5QUUwMi9EOTZDMG5sSVZNbXZ6ZGhlLTM3LVNjUjlM dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0Q5NkMwbmxJVk1tdnpkaGUtMzctU2NSOUx1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzMzQS84RjQ3QTlGQUU5N0QxMUU5QTlEQjVFNTJDNEY5QUUwMi9EOTZDMG5sSVZN bXZ6ZGhlLTM3LVNjUjlMdTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtlSxNwEmmdJ81mpFmyJQlc1b6OXlJ7iUCUBctTT/CUw6bbZLc+H0QJi1eC06 DIVVWiiHq+7WXIrnik/AprJqECBA98+yGwchoub99ebVV8teJQeXvip6KeskD+jb VkyyT2ogHLYTjVZvmOw52O/vYO5vIRzTyhWculThMxPdCF5/yAG6mFTco1VIo3wB B8rBAaEKiQkPmRea9qi1n8KaIrU6JfDJHO6/EKxrm4z8HFe4ptQ3u03VO2H0DFlx nUfDC75sUiSk6f7PdCjPFUrWyp8t5xshNyFcf3xI0m5iOGjSGRy0EZLGQFIUPaHg /O1VZL+kAW8z4EDdmSV+K9Nq/Q== -----END CERTIFICATE-----Generated at Sat Jun 6 12:09:04 2026 by rpki-client