$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft File: lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft (raw, json) Hash identifier: 3iXSQUshSql1AHESv44JHAkdAIvan/rpLsIhRVr9db8= Subject key identifier: 7D:28:BC:F4:A5:38:18:9F:B1:97:FC:84:73:E5:66:E2:E2:81:E5:96 Authority key identifier: 96:4D:08:72:7D:AE:DA:C7:40:37:AB:9C:43:A5:08:BA:DB:CF:DA:FD Certificate issuer: /CN=A914E0FE/serialNumber=964D08727DAEDAC74037AB9C43A508BADBCFDAFD Certificate serial: 013B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft Manifest number: 0126 Signing time: Mon 01 Jun 2026 06:34:54 +0000 Manifest this update: Mon 01 Jun 2026 06:34:54 +0000 Manifest next update: Mon 08 Jun 2026 06:34:54 +0000 Files and hashes: 1: lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl (hash: 85DgRJrnDAO6RImjYrFn4ia5HyUZUhov5AojwhRUl80=) 2: 9C9FACF6502411F093EA9419C4F9AE02.roa (hash: dKN+fQdCYaHSjnPaMzWvmqBEhN/PUwJv3Ea9b1RzV1Q=) 3: 3853657658CA11F188C8E1F19D833773.roa (hash: dGgAXDrAOa6dHqoeo3Tw6FLvY9KJRR5IMwL6J/VPqTs=) 4: C5D7AFBA502411F0881DEB19C4F9AE02.roa (hash: 0gUF/085wYPoCyvzlJWV9rqJj0B1nA/oZ4c4Dkoi26s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 06:34:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 315 (0x13b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E0FE, serialNumber=964D08727DAEDAC74037AB9C43A508BADBCFDAFD Validity Not Before: Jun 1 06:34:54 2026 GMT Not After : Jun 8 06:34:54 2026 GMT Subject: CN=6a1d280e-5e49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:10:67:5f:4b:15:8e:6a:49:4e:68:7e:21:1e: 08:19:a9:d7:d3:0a:40:66:48:9e:9f:53:82:53:a0: 98:19:8b:8d:9d:c3:a1:92:9f:08:61:26:31:68:76: 9c:ec:a2:99:53:d8:c3:f1:e4:f7:41:69:99:4a:38: 5f:99:04:d0:5f:54:9c:05:ab:62:74:95:61:5b:57: 71:06:b3:2e:2c:fc:e5:74:d2:52:4d:ba:62:6f:52: 41:bc:ee:6f:8a:13:96:61:82:c7:4a:58:e1:14:47: 18:78:1f:a4:24:51:23:25:e1:e9:f2:4d:ee:c1:c0: 22:01:d3:f1:ab:54:bf:cb:41:ed:15:45:ef:95:d7: 5a:28:28:4f:b6:83:e3:92:3e:65:4f:e6:eb:78:34: 4f:bf:fe:7b:11:50:65:f9:c3:96:29:2e:0f:ab:58: 41:91:cd:5b:56:19:54:36:10:04:52:30:45:c3:72: 04:20:33:07:71:ff:a8:70:f0:29:1e:2d:a7:07:5b: 57:7d:f6:b0:5e:40:14:d2:63:7a:22:69:e9:1e:ce: 1b:cc:8a:95:46:f6:ff:0d:ab:43:61:77:8d:67:2a: 0d:0a:fe:5f:19:d6:5c:12:31:cd:df:48:42:b7:98: cf:78:23:ae:84:6f:57:e7:99:9c:62:b9:ea:a9:3e: 88:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:28:BC:F4:A5:38:18:9F:B1:97:FC:84:73:E5:66:E2:E2:81:E5:96 X509v3 Authority Key Identifier: keyid:96:4D:08:72:7D:AE:DA:C7:40:37:AB:9C:43:A5:08:BA:DB:CF:DA:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:44:09:ea:c4:be:cb:db:03:5d:b2:09:31:ec:db:c6:93:34: 8f:19:af:f4:94:8f:a3:38:aa:85:39:c0:95:c7:29:de:20:75: a0:13:c4:6d:af:11:17:77:2b:95:25:7c:42:71:52:9a:fb:23: 4c:c8:9f:ef:44:93:f2:a2:88:3d:3f:7b:46:54:e7:de:c9:95: c6:7d:2f:ec:1c:e5:3d:92:a6:fe:97:2e:07:45:80:58:02:50: f1:5a:25:f8:d0:ca:35:85:db:33:fd:6e:3b:fe:93:7e:24:67: a7:98:6c:0a:03:06:50:49:e3:0f:5e:83:7c:d0:11:7d:ff:77: bd:e5:37:c9:f6:05:ff:a5:b7:b4:69:1f:75:58:09:99:3c:58: 61:19:ae:f8:98:9d:bc:fd:8e:af:a5:f8:90:f3:84:96:31:5d: 71:83:b4:f0:e7:04:77:ad:a6:77:58:0d:7b:c3:b5:e3:f5:70: 03:85:f5:a6:68:57:94:d4:1f:24:dc:b7:70:2a:eb:b6:ef:e0: 2a:a0:8d:77:a3:39:22:bb:37:cf:e3:38:27:06:5c:72:1f:cd: b7:32:39:68:fb:ae:89:43:5b:1f:7b:2d:d8:f9:c5:8c:16:f7: 62:16:42:45:4b:22:b0:99:b6:68:a6:bb:23:4e:49:5a:b2:7d: 74:f8:8c:24 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwRkUxMTAvBgNVBAUTKDk2NEQwODcyN0RBRURBQzc0MDM3QUI5QzQzQTUwOEJB REJDRkRBRkQwHhcNMjYwNjAxMDYzNDU0WhcNMjYwNjA4MDYzNDU0WjAYMRYwFAYD VQQDEw02YTFkMjgwZS01ZTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvRBnX0sVjmpJTmh+IR4IGanX0wpAZkien1OCU6CYGYuNncOhkp8IYSYxaHac 7KKZU9jD8eT3QWmZSjhfmQTQX1ScBatidJVhW1dxBrMuLPzldNJSTbpib1JBvO5v ihOWYYLHSljhFEcYeB+kJFEjJeHp8k3uwcAiAdPxq1S/y0HtFUXvlddaKChPtoPj kj5lT+breDRPv/57EVBl+cOWKS4Pq1hBkc1bVhlUNhAEUjBFw3IEIDMHcf+ocPAp Hi2nB1tXffawXkAU0mN6ImnpHs4bzIqVRvb/DatDYXeNZyoNCv5fGdZcEjHN30hC t5jPeCOuhG9X55mcYrnqqT6IoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH0ovPSl OBifsZf8hHPlZuLigeWWMB8GA1UdIwQYMBaAFJZNCHJ9rtrHQDernEOlCLrbz9r9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTBGRS8yRjJCNkZFMkFC Q0ExMUVGQTk5NEQxMjlDNEY5QUUwMi9sazBJY24ydTJzZEFONnVjUTZVSXV0dlAy djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xrMEljbjJ1MnNkQU42dWNRNlVJdXR2UDJ2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTBGRS8yRjJCNkZFMkFCQ0ExMUVGQTk5NEQxMjlDNEY5QUUwMi9sazBJY24ydTJz ZEFONnVjUTZVSXV0dlAydjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOkQJ6sS+y9sDXbIJMezbxpM0jxmv9JSPoziqhTnAlccp3iB1oBPEba8RF3cr lSV8QnFSmvsjTMif70ST8qKIPT97RlTn3smVxn0v7BzlPZKm/pcuB0WAWAJQ8Vol +NDKNYXbM/1uO/6TfiRnp5hsCgMGUEnjD16DfNARff93veU3yfYF/6W3tGkfdVgJ mTxYYRmu+JidvP2Or6X4kPOEljFdcYO08OcEd62md1gNe8O14/VwA4X1pmhXlNQf JNy3cCrrtu/gKqCNd6M5Irs3z+M4JwZcch/NtzI5aPuuiUNbH3st2PnFjBb3YhZC RUsisJm2aKa7I05JWrJ9dPiMJA== -----END CERTIFICATE-----Generated at Tue Jun 2 21:19:26 2026 by rpki-client