$ rpki-client -vvf rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft File: KZYjJd4LreTcndvFdq4ncBK8N1g.mft (raw, json) Hash identifier: Z3BUF/0BrSEEXdIDIJV6g3ZX7PAiKMDufZ795oPUZKI= Subject key identifier: 89:5F:B5:A3:D0:BF:83:B7:9B:F3:36:AD:4D:D5:10:92:0C:93:6E:85 Authority key identifier: 29:96:23:25:DE:0B:AD:E4:DC:9D:DB:C5:76:AE:27:70:12:BC:37:58 Certificate issuer: /CN=A914DA2D/serialNumber=29962325DE0BADE4DC9DDBC576AE277012BC3758 Certificate serial: 1B2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft Manifest number: 1B04 Signing time: Tue 02 Jun 2026 16:18:54 +0000 Manifest this update: Tue 02 Jun 2026 16:18:54 +0000 Manifest next update: Tue 09 Jun 2026 16:18:54 +0000 Files and hashes: 1: KZYjJd4LreTcndvFdq4ncBK8N1g.crl (hash: BiyLKAUbykXSiYxeQapLFkmQdsmKTa0sMTYtglMgpd4=) 2: B201496EF3A311EC8804FE09C4F9AE02.roa (hash: y1WBN7gHbpcQFgS5AiIM5+b+xvlqJCl6oOkurOSohSs=) 3: 442A935E2F1F11F0A35F5757C4F9AE02.roa (hash: Kuw7O4GbqUm/LsdHrCx6y55gHQykPcsm3zG17OVPWXo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.crl rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Jun 2026 15:18:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6954 (0x1b2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DA2D, serialNumber=29962325DE0BADE4DC9DDBC576AE277012BC3758 Validity Not Before: Jun 2 16:18:54 2026 GMT Not After : Jun 9 16:18:54 2026 GMT Subject: CN=6a1f026e-dc2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a1:3a:61:e2:3b:36:e4:92:ca:53:e8:14:cd: 12:12:1d:6f:d2:be:42:b0:21:06:26:cb:94:24:de: ec:6b:b5:d2:79:b4:e1:d9:60:5d:c2:64:99:07:da: 4c:d5:1a:7e:5b:ff:fb:40:6d:dd:9d:6f:fc:8d:c0: 0d:8a:a1:7b:a3:27:65:1c:f5:3a:1b:f8:62:bf:89: c6:af:5b:a8:f2:5c:60:dc:a1:e7:04:0a:34:3e:75: 86:c3:00:ad:21:f4:97:18:5c:6a:98:c8:2e:75:93: d4:f7:bb:ce:06:b8:e3:00:8f:4a:5e:88:8c:30:3c: 45:5d:87:44:24:a1:ec:e9:bb:a6:af:ac:96:18:4b: cd:a4:cf:fa:e4:58:ae:7b:7f:5e:29:ab:75:7d:b2: 5b:e8:75:b7:55:45:ef:f3:f4:9e:19:f2:55:ee:32: 16:3d:27:2d:9a:82:5e:6c:47:24:60:b2:7f:36:8a: 72:27:9e:94:4c:13:df:37:e9:11:56:c2:1b:3e:49: bb:bc:f7:bd:ce:42:fb:6c:6b:ad:33:d1:e9:82:6e: 4d:2d:cf:91:bd:63:09:26:ea:2b:db:2a:ab:92:70: 4b:3a:71:dc:33:97:e0:f3:72:28:38:de:8b:50:5b: 8c:02:1f:15:8a:b6:ec:b4:ba:90:e2:58:8c:9d:83: 57:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:5F:B5:A3:D0:BF:83:B7:9B:F3:36:AD:4D:D5:10:92:0C:93:6E:85 X509v3 Authority Key Identifier: keyid:29:96:23:25:DE:0B:AD:E4:DC:9D:DB:C5:76:AE:27:70:12:BC:37:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:ec:bb:d4:79:94:0e:76:e3:e0:f1:2c:09:06:c5:d8:4d:7f: 75:cf:8f:63:cb:ed:01:43:91:7d:8a:42:40:f1:7f:73:42:20: be:4c:52:83:55:68:80:f7:e6:c1:c2:11:ac:12:f2:46:97:de: 93:fe:f4:33:80:49:54:a4:7b:26:17:43:4a:c7:99:43:c2:40: c4:20:f1:41:e5:59:39:a5:5c:46:6d:6a:0a:be:4a:52:3b:13: e6:68:7c:75:9f:5d:c0:2a:4f:50:d2:3e:e8:8c:bf:ef:ad:3b: c1:4c:7d:48:17:10:c0:89:7b:56:f6:3a:c8:44:14:54:1f:f6: 67:88:76:9e:c4:f4:af:f9:32:c3:6a:eb:c4:ab:75:14:d4:ca: 10:f5:3b:55:b8:2e:c0:48:cc:4d:5a:98:65:4a:aa:6a:48:25: db:98:b9:2c:16:da:fb:28:e9:1d:9d:f3:83:bb:71:37:67:bd: 46:0e:bc:5e:cc:27:98:f7:df:1f:0a:c5:2b:80:fb:b5:80:73: 06:d4:af:7f:e2:e3:25:43:ba:16:ce:6c:0e:1e:4f:88:e0:40: f9:55:de:ba:8a:38:d4:c1:cf:fb:30:57:ea:32:34:bc:7b:0e: 4c:74:0e:59:37:63:8e:41:67:b5:13:73:43:13:f9:7b:bc:41: bb:f5:11:ca -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGyowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERBMkQxMTAvBgNVBAUTKDI5OTYyMzI1REUwQkFERTREQzlEREJDNTc2QUUyNzcw MTJCQzM3NTgwHhcNMjYwNjAyMTYxODU0WhcNMjYwNjA5MTYxODU0WjAYMRYwFAYD VQQDEw02YTFmMDI2ZS1kYzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo6E6YeI7NuSSylPoFM0SEh1v0r5CsCEGJsuUJN7sa7XSebTh2WBdwmSZB9pM 1Rp+W//7QG3dnW/8jcANiqF7oydlHPU6G/hiv4nGr1uo8lxg3KHnBAo0PnWGwwCt IfSXGFxqmMgudZPU97vOBrjjAI9KXoiMMDxFXYdEJKHs6bumr6yWGEvNpM/65Fiu e39eKat1fbJb6HW3VUXv8/SeGfJV7jIWPSctmoJebEckYLJ/NopyJ56UTBPfN+kR VsIbPkm7vPe9zkL7bGutM9Hpgm5NLc+RvWMJJuor2yqrknBLOnHcM5fg83IoON6L UFuMAh8VirbstLqQ4liMnYNXnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIlftaPQ v4O3m/M2rU3VEJIMk26FMB8GA1UdIwQYMBaAFCmWIyXeC63k3J3bxXauJ3ASvDdY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REEyRC84MzgzNjIwQTUw RDUxMUU3OUVDRTQwMTNDNEY5QUUwMi9LWllqSmQ0THJlVGNuZHZGZHE0bmNCSzhO MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0taWWpKZDRMcmVUY25kdkZkcTRuY0JLOE4xZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REEyRC84MzgzNjIwQTUwRDUxMUU3OUVDRTQwMTNDNEY5QUUwMi9LWllqSmQ0THJl VGNuZHZGZHE0bmNCSzhOMWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQOy71HmUDnbj4PEsCQbF2E1/dc+PY8vtAUORfYpCQPF/c0IgvkxSg1VogPfm wcIRrBLyRpfek/70M4BJVKR7JhdDSseZQ8JAxCDxQeVZOaVcRm1qCr5KUjsT5mh8 dZ9dwCpPUNI+6Iy/7607wUx9SBcQwIl7VvY6yEQUVB/2Z4h2nsT0r/kyw2rrxKt1 FNTKEPU7VbguwEjMTVqYZUqqakgl25i5LBba+yjpHZ3zg7txN2e9Rg68XswnmPff HwrFK4D7tYBzBtSvf+LjJUO6Fs5sDh5PiOBA+VXeuoo41MHP+zBX6jI0vHsOTHQO WTdjjkFntRNzQxP5e7xBu/URyg== -----END CERTIFICATE-----Generated at Tue Jun 2 21:48:21 2026 by rpki-client