$ rpki-client -vvf rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.mft File: zDdqaPyj4J8M61wsuRs02xTD68k.mft (raw, json) Hash identifier: znPDvP/wv53JFEaTr4IbHWdGKVvTZRGBghwzsjY28EM= Subject key identifier: DD:0C:59:4B:D4:12:B2:7D:6D:E7:14:8F:61:71:57:E9:0C:3D:6D:B5 Authority key identifier: CC:37:6A:68:FC:A3:E0:9F:0C:EB:5C:2C:B9:1B:34:DB:14:C3:EB:C9 Certificate issuer: /CN=A914DCD4/serialNumber=CC376A68FCA3E09F0CEB5C2CB91B34DB14C3EBC9 Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zDdqaPyj4J8M61wsuRs02xTD68k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.mft Manifest number: 59 Signing time: Mon 01 Jun 2026 09:01:28 +0000 Manifest this update: Mon 01 Jun 2026 09:01:27 +0000 Manifest next update: Mon 08 Jun 2026 09:01:27 +0000 Files and hashes: 1: zDdqaPyj4J8M61wsuRs02xTD68k.crl (hash: b3kFYDSoYgnt/ikAySSRUlq5VCVZW8mkdV0ximhs3JE=) 2: 8056379A118511F1AFA21CD3333D8C67.roa (hash: a+0zEEh0IkQBVa10yTGuRhVRnpnLL42o4daj18Tc6Gk=) 3: E611D250118111F1BD19AAF2323D8C67.roa (hash: ZlY819q3BVvBAVN3kikGmOs572rGxvo+Slai0R6y0MM=) 4: 2A8244EEE1AB11F0A6B6CFD64A6F56BC.roa (hash: EqLKG4uPYdf+DEH4UJyfrFpvPeTolC1wKzTsRMJAbCw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.crl rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zDdqaPyj4J8M61wsuRs02xTD68k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DCD4, serialNumber=CC376A68FCA3E09F0CEB5C2CB91B34DB14C3EBC9 Validity Not Before: Jun 1 09:01:27 2026 GMT Not After : Jun 8 09:01:27 2026 GMT Subject: CN=6a1d4a68-b326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:b4:9e:00:69:b3:6d:93:58:54:cd:77:4c:a9: 69:89:8b:4f:30:53:5e:29:97:41:63:c4:e9:ec:64: 21:b7:12:bb:64:50:d7:f4:9e:b1:c4:e6:40:af:ba: 7b:55:42:22:d2:90:2f:4f:83:93:62:e3:55:6a:b8: 17:cb:13:3d:b2:0e:f5:28:fb:76:43:1f:a8:4d:a8: 0e:31:09:28:3f:88:9b:32:bd:02:35:fa:e6:c0:61: cd:5a:31:8b:4a:d2:b7:fb:25:2d:1c:e8:90:a4:76: 55:ab:9b:11:f0:89:7f:d6:5e:45:6f:12:25:18:0b: df:e7:12:5d:63:cb:de:9c:87:33:4d:01:40:40:c2: b6:34:73:70:32:95:7f:74:95:c4:44:22:cb:87:e2: 2a:69:e7:72:4d:b0:61:16:e6:2a:31:51:d9:c5:8b: d5:2b:82:c8:b0:91:49:03:4b:25:3b:f2:4f:5b:a1: 2b:63:3e:08:cc:11:ff:01:26:9a:93:70:02:92:65: 0d:de:b3:10:28:7c:13:71:95:43:c3:99:a3:f1:9a: 1a:e3:7c:da:81:08:4d:aa:e8:af:ef:63:8e:4f:90: 84:b5:44:8c:8b:1d:69:a8:45:42:42:9a:8f:1a:0e: 60:e3:b3:4e:ad:6d:39:51:f5:87:6a:33:ac:00:d3: 53:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:0C:59:4B:D4:12:B2:7D:6D:E7:14:8F:61:71:57:E9:0C:3D:6D:B5 X509v3 Authority Key Identifier: keyid:CC:37:6A:68:FC:A3:E0:9F:0C:EB:5C:2C:B9:1B:34:DB:14:C3:EB:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zDdqaPyj4J8M61wsuRs02xTD68k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:90:b8:53:23:ef:e3:bc:c5:59:18:86:7b:86:ec:db:59:3c: 86:75:0c:4c:9b:08:92:75:fd:bd:07:76:f2:62:bd:d3:23:10: ec:45:4f:3e:04:29:67:5c:b6:a7:e2:06:36:99:76:34:14:8e: 21:e0:fb:0c:29:bf:65:13:05:ca:95:67:4f:b1:0e:83:3b:b0: e4:5b:7a:dd:b2:4a:d7:47:be:86:72:53:40:1c:c4:67:0a:43: b0:a0:33:39:9d:29:2a:20:c0:27:f0:f9:f1:a6:ae:b9:4a:08: f0:cc:5a:f0:2e:d5:f7:d9:4f:59:1c:3f:86:be:65:56:7d:48: 8c:cb:7c:d8:9d:b8:c9:ca:b1:6f:19:22:35:c8:81:4a:59:28: 24:07:94:ed:29:36:63:bb:02:ab:77:58:4d:26:af:b3:88:bc: 7f:03:b4:86:65:82:ea:f8:3f:84:1e:76:0a:75:a2:3e:80:96: a4:32:82:4b:13:0c:8b:4f:b3:fc:2a:9c:09:f3:bc:83:46:24: 29:d8:3a:da:19:03:9c:42:99:2f:58:d2:e1:8f:bb:74:e3:94: 60:6a:93:4c:3b:1f:3b:ba:f9:0e:cb:35:5a:d8:53:43:37:63: 13:83:57:de:4d:a8:0b:2c:23:4b:eb:b8:63:1d:91:a2:f4:16: 4e:bd:ef:cf -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RENENDExMC8GA1UEBRMoQ0MzNzZBNjhGQ0EzRTA5RjBDRUI1QzJDQjkxQjM0REIx NEMzRUJDOTAeFw0yNjA2MDEwOTAxMjdaFw0yNjA2MDgwOTAxMjdaMBgxFjAUBgNV BAMTDTZhMWQ0YTY4LWIzMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD1tJ4AabNtk1hUzXdMqWmJi08wU14pl0FjxOnsZCG3ErtkUNf0nrHE5kCvuntV QiLSkC9Pg5Ni41VquBfLEz2yDvUo+3ZDH6hNqA4xCSg/iJsyvQI1+ubAYc1aMYtK 0rf7JS0c6JCkdlWrmxHwiX/WXkVvEiUYC9/nEl1jy96chzNNAUBAwrY0c3AylX90 lcREIsuH4ipp53JNsGEW5ioxUdnFi9UrgsiwkUkDSyU78k9boStjPgjMEf8BJpqT cAKSZQ3esxAofBNxlUPDmaPxmhrjfNqBCE2q6K/vY45PkIS1RIyLHWmoRUJCmo8a DmDjs06tbTlR9YdqM6wA01MJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU3QxZS9QS sn1t5xSPYXFX6Qw9bbUwHwYDVR0jBBgwFoAUzDdqaPyj4J8M61wsuRs02xTD68kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTREQ0Q0L0IxNzFEQjUwRTFB QTExRjBBRkNFODRCODRBNkY1NkJDL3pEZHFhUHlqNEo4TTYxd3N1UnMwMnhURDY4 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvekRkcWFQeWo0SjhNNjF3c3VSczAyeFRENjhrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRE Q0Q0L0IxNzFEQjUwRTFBQTExRjBBRkNFODRCODRBNkY1NkJDL3pEZHFhUHlqNEo4 TTYxd3N1UnMwMnhURDY4ay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBkkLhTI+/jvMVZGIZ7huzbWTyGdQxMmwiSdf29B3byYr3TIxDsRU8+BClnXLan 4gY2mXY0FI4h4PsMKb9lEwXKlWdPsQ6DO7DkW3rdskrXR76GclNAHMRnCkOwoDM5 nSkqIMAn8Pnxpq65SgjwzFrwLtX32U9ZHD+GvmVWfUiMy3zYnbjJyrFvGSI1yIFK WSgkB5TtKTZjuwKrd1hNJq+ziLx/A7SGZYLq+D+EHnYKdaI+gJakMoJLEwyLT7P8 KpwJ87yDRiQp2DraGQOcQpkvWNLhj7t045RgapNMOx87uvkOyzVa2FNDN2MTg1fe TagLLCNL67hjHZGi9BZOve/P -----END CERTIFICATE-----Generated at Tue Jun 2 21:23:32 2026 by rpki-client