$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft File: PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft (raw, json) Hash identifier: D5adQcaqS7Y4G+HUyCum7djaSLQ4HrUfL8X+Cd2F1hU= Subject key identifier: 8A:CF:97:37:B1:07:B8:2A:BE:6C:3B:B9:51:DB:D2:EC:E7:BF:98:B0 Authority key identifier: 3E:C4:F7:5E:64:B7:2A:88:78:6A:F4:B9:7C:98:48:6C:BD:6D:2F:56 Certificate issuer: /CN=A914E0B6/serialNumber=3EC4F75E64B72A88786AF4B97C98486CBD6D2F56 Certificate serial: 01BF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft Manifest number: 01BA Signing time: Mon 01 Jun 2026 04:42:12 +0000 Manifest this update: Mon 01 Jun 2026 04:42:11 +0000 Manifest next update: Mon 08 Jun 2026 04:42:11 +0000 Files and hashes: 1: PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl (hash: UFCc0P1w1zJ+HlVGrXstKFPJYP8Jr4OJh2Mt8ii2gTg=) 2: 36FC37FABF3111EE886C313CC4F9AE02.roa (hash: 6A3uQ575OB8LX3eqmYdyVlzTZlW6pTp9MJ+vD3i9Vf4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 04:42:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 447 (0x1bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E0B6, serialNumber=3EC4F75E64B72A88786AF4B97C98486CBD6D2F56 Validity Not Before: Jun 1 04:42:11 2026 GMT Not After : Jun 8 04:42:11 2026 GMT Subject: CN=6a1d0da3-dad9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:3b:70:a6:8c:42:df:20:3d:59:96:cb:90:9d: f3:18:8f:42:d4:18:94:4b:7b:91:03:5f:2a:03:31: 3a:e8:ef:84:29:bd:2d:c2:f8:7f:63:f1:3f:6c:5c: 32:ae:f2:29:c2:c0:c8:cc:42:d6:e7:fb:f2:99:38: 85:fc:0f:e2:9f:54:e2:29:af:d1:d3:b2:ee:3d:d3: b0:16:bd:42:c1:45:6f:4a:e3:c3:64:af:fa:56:9d: fe:c3:87:f9:96:66:d2:c2:ff:ac:76:b4:e3:a7:07: 6d:c8:90:01:81:00:e4:50:63:27:6f:be:68:6a:74: 8e:07:4e:55:6d:88:b8:55:41:1f:e6:8a:f6:b1:ea: 9b:fc:75:c0:95:d2:eb:3d:65:73:9c:c0:d8:7d:6d: c0:f8:ac:ae:2d:9b:cc:bc:d9:08:3c:5b:89:31:00: 93:63:9e:64:e0:6d:68:f2:28:68:80:46:c3:72:6c: b0:04:69:10:cc:30:c9:6c:47:17:e0:fb:9b:93:3b: f6:bc:31:ae:0c:a4:72:0a:30:b1:21:06:a0:49:6e: 8f:1f:8e:5d:dc:70:42:85:c6:32:a3:3e:1f:d4:04: 6d:fa:a0:7f:dc:1a:b9:6f:45:f3:ae:67:ea:6d:96: f2:2d:d0:87:27:58:32:8d:d5:e1:cf:48:bf:ae:fe: 3c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:CF:97:37:B1:07:B8:2A:BE:6C:3B:B9:51:DB:D2:EC:E7:BF:98:B0 X509v3 Authority Key Identifier: keyid:3E:C4:F7:5E:64:B7:2A:88:78:6A:F4:B9:7C:98:48:6C:BD:6D:2F:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:3a:9f:c7:b5:91:24:4b:79:ff:8d:05:2c:a2:6d:96:40:8a: 46:8d:4d:d6:80:20:63:0b:b7:bf:c1:ad:fd:7c:f6:8d:89:7f: 82:47:ea:7d:51:a9:54:6a:40:13:f9:1b:47:41:6f:9c:42:27: 7d:8a:c0:16:6b:e6:c5:40:cc:da:14:7a:ad:8d:4f:7d:b5:c4: 7c:43:f1:fb:35:3c:a3:a3:05:67:e6:3f:2c:78:93:e2:d4:74: 10:ef:53:51:65:67:c0:a2:85:31:78:ab:c2:29:e4:24:28:03: bf:c2:4f:5f:17:60:79:7d:f4:b9:5d:f8:e7:e2:bb:5e:a3:27: 48:de:3e:83:bd:b1:e1:b4:97:f8:39:99:e3:b4:00:1a:4a:b4: 65:8d:07:7b:74:11:b4:d6:cd:85:46:0a:b3:ff:12:cb:71:2a: cf:a8:d8:54:c3:ab:24:7f:f1:b4:ef:c6:3c:4d:cb:01:3c:9d: ee:ef:3c:1c:84:a2:c9:ad:6d:f7:7e:9e:be:40:ac:77:91:4d: 2b:fb:23:72:25:b9:b7:fb:c2:e2:7d:56:01:3b:ff:17:72:9a: d9:f0:e6:47:c5:6a:23:e8:eb:a6:f8:af:82:9d:d1:96:8d:55: 82:6a:fb:06:29:ab:f3:a2:54:5d:f1:8e:b3:6a:78:c9:2e:00: b0:c4:d1:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwQjYxMTAvBgNVBAUTKDNFQzRGNzVFNjRCNzJBODg3ODZBRjRCOTdDOTg0ODZD QkQ2RDJGNTYwHhcNMjYwNjAxMDQ0MjExWhcNMjYwNjA4MDQ0MjExWjAYMRYwFAYD VQQDEw02YTFkMGRhMy1kYWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjTtwpoxC3yA9WZbLkJ3zGI9C1BiUS3uRA18qAzE66O+EKb0twvh/Y/E/bFwy rvIpwsDIzELW5/vymTiF/A/in1TiKa/R07LuPdOwFr1CwUVvSuPDZK/6Vp3+w4f5 lmbSwv+sdrTjpwdtyJABgQDkUGMnb75oanSOB05VbYi4VUEf5or2seqb/HXAldLr PWVznMDYfW3A+KyuLZvMvNkIPFuJMQCTY55k4G1o8ihogEbDcmywBGkQzDDJbEcX 4Pubkzv2vDGuDKRyCjCxIQagSW6PH45d3HBChcYyoz4f1ARt+qB/3Bq5b0Xzrmfq bZbyLdCHJ1gyjdXhz0i/rv48LwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIrPlzex B7gqvmw7uVHb0uznv5iwMB8GA1UdIwQYMBaAFD7E915ktyqIeGr0uXyYSGy9bS9W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTBCNi81RkJFNDNCNEJG MzAxMUVFQkU0RjNDMUVDNEY5QUUwMi9Qc1QzWG1TM0tvaDRhdlM1ZkpoSWJMMXRM MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BzVDNYbVMzS29oNGF2UzVmSmhJYkwxdEwxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTBCNi81RkJFNDNCNEJGMzAxMUVFQkU0RjNDMUVDNEY5QUUwMi9Qc1QzWG1TM0tv aDRhdlM1ZkpoSWJMMXRMMVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIzqfx7WRJEt5/40FLKJtlkCKRo1N1oAgYwu3v8Gt/Xz2jYl/gkfqfVGpVGpA E/kbR0FvnEInfYrAFmvmxUDM2hR6rY1PfbXEfEPx+zU8o6MFZ+Y/LHiT4tR0EO9T UWVnwKKFMXirwinkJCgDv8JPXxdgeX30uV345+K7XqMnSN4+g72x4bSX+DmZ47QA Gkq0ZY0He3QRtNbNhUYKs/8Sy3Eqz6jYVMOrJH/xtO/GPE3LATyd7u88HISiya1t 936evkCsd5FNK/sjciW5t/vC4n1WATv/F3Ka2fDmR8VqI+jrpvivgp3Rlo1Vgmr7 Bimr86JUXfGOs2p4yS4AsMTRjA== -----END CERTIFICATE-----Generated at Tue Jun 2 21:19:47 2026 by rpki-client