$ rpki-client -vvf rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/s4Q_FBVTnelR6maApOmQCK-DeHQ.mft File: s4Q_FBVTnelR6maApOmQCK-DeHQ.mft (raw, json) Hash identifier: u5Sy0wrvGn49jbgN5qTuCV7wIK3lGGR3PfXln8sqByU= Subject key identifier: 8E:87:9F:47:51:A3:63:BD:1F:81:9B:A5:26:86:F7:F0:39:78:CA:AD Authority key identifier: B3:84:3F:14:15:53:9D:E9:51:EA:66:80:A4:E9:90:08:AF:83:78:74 Certificate issuer: /CN=A914E6AA/serialNumber=B3843F1415539DE951EA6680A4E99008AF837874 Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s4Q_FBVTnelR6maApOmQCK-DeHQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/s4Q_FBVTnelR6maApOmQCK-DeHQ.mft Manifest number: 0C28 Signing time: Mon 22 Jun 2026 22:23:53 +0000 Manifest this update: Mon 22 Jun 2026 22:23:53 +0000 Manifest next update: Mon 29 Jun 2026 22:23:53 +0000 Files and hashes: 1: s4Q_FBVTnelR6maApOmQCK-DeHQ.crl (hash: tW+FMhNxLKGvsK9EZVliQDJGUvo1I5Ob/c8K4r+fB7k=) 2: 6017E5BE54FB11F1B81DC57BA3833773.roa (hash: P+pna3FadF29aa6apDihcWdlag9aJJPNQ/+Y5gHcH4s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/s4Q_FBVTnelR6maApOmQCK-DeHQ.crl rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/s4Q_FBVTnelR6maApOmQCK-DeHQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s4Q_FBVTnelR6maApOmQCK-DeHQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Jun 2026 22:23:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E6AA, serialNumber=B3843F1415539DE951EA6680A4E99008AF837874 Validity Not Before: Jun 22 22:23:53 2026 GMT Not After : Jun 29 22:23:53 2026 GMT Subject: CN=6a39b5f9-363b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9a:72:b9:a6:96:fd:42:ae:a1:e5:1c:85:b3: 1a:6f:26:35:bc:f3:eb:53:55:e2:c6:68:3a:49:fe: 71:de:09:3d:50:24:2e:66:43:6f:a7:db:37:92:7a: 03:6d:3a:df:9e:7c:62:54:c1:97:2c:cf:79:47:7a: 46:9a:10:e0:0b:d7:93:a4:e2:64:9e:e1:6a:8d:71: f6:a0:85:eb:62:fa:8e:e5:69:3e:b0:71:92:b3:78: 9b:55:cc:52:e9:52:3d:ce:b6:5c:d3:84:1e:51:88: 2a:3f:8a:3b:5e:3e:a7:d3:31:62:6b:b1:a1:68:a4: ea:09:2b:d9:41:01:6e:aa:96:7e:21:6d:65:68:5b: 81:dc:e9:fd:19:f6:24:16:e2:72:ca:8b:bd:0a:7b: c7:cb:6e:34:29:fa:30:5c:02:64:08:0e:0a:cc:05: 1b:1d:90:a5:98:70:9f:bb:85:45:a9:7a:98:6e:3e: a5:d8:4c:13:1b:94:f6:6c:63:83:41:13:49:d0:31: 94:15:24:02:db:ae:c5:a5:6f:01:90:14:f1:f7:6e: 49:c9:e5:d3:16:e3:68:1a:9f:5c:b9:05:f2:81:cd: b1:3b:7d:38:02:30:34:c8:69:8b:70:ec:fa:42:e8: 09:ed:03:2c:4f:b4:5f:61:90:12:38:05:bc:cc:99: ad:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:87:9F:47:51:A3:63:BD:1F:81:9B:A5:26:86:F7:F0:39:78:CA:AD X509v3 Authority Key Identifier: keyid:B3:84:3F:14:15:53:9D:E9:51:EA:66:80:A4:E9:90:08:AF:83:78:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/s4Q_FBVTnelR6maApOmQCK-DeHQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s4Q_FBVTnelR6maApOmQCK-DeHQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/s4Q_FBVTnelR6maApOmQCK-DeHQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:99:a5:41:5a:ac:e1:be:e0:7b:54:5c:4e:43:5b:5d:b8:3c: 15:a9:d2:65:27:23:90:57:cf:df:4d:53:cc:02:9e:d3:76:11: 4e:0e:a5:be:ef:1b:3a:05:9b:db:6a:af:10:5c:e5:93:a8:21: 3d:a6:1a:0b:e7:ab:8d:51:cf:99:49:db:11:9e:5b:a3:aa:33: a6:8f:64:b7:54:25:be:99:4e:d3:06:d3:2d:cf:8a:98:20:7d: 0b:6a:2c:85:75:22:5a:6f:74:c2:3b:4d:45:a3:d7:55:33:d4: f2:d8:45:00:49:52:38:b1:09:e9:e8:b0:db:eb:3a:5f:fc:58: f9:69:3d:20:e2:a4:c7:2b:86:45:30:27:0e:3c:27:3e:85:77: 5c:e9:9d:e7:25:46:56:e5:ad:17:05:fa:22:56:e1:cb:bd:1b: 36:2c:25:e4:35:6d:ae:c2:b3:df:4c:ca:5a:70:f2:d5:79:16: ea:ca:66:6a:08:e9:29:3c:f7:c4:c2:9d:fc:15:c3:34:16:99: cd:f6:a0:f6:2c:19:c4:68:38:e6:42:24:e5:42:70:19:3b:93: 45:5c:f4:4d:a7:d7:a4:5e:eb:4d:95:33:a5:a7:e3:ab:ea:ff: 24:4b:2f:98:86:5e:47:c7:26:01:02:8b:23:0e:88:6d:e5:49: 83:a0:c0:e5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RTZBQTExMC8GA1UEBRMoQjM4NDNGMTQxNTUzOURFOTUxRUE2NjgwQTRFOTkwMDhB RjgzNzg3NDAeFw0yNjA2MjIyMjIzNTNaFw0yNjA2MjkyMjIzNTNaMBgxFjAUBgNV BAMTDTZhMzliNWY5LTM2M2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCumnK5ppb9Qq6h5RyFsxpvJjW88+tTVeLGaDpJ/nHeCT1QJC5mQ2+n2zeSegNt Ot+efGJUwZcsz3lHekaaEOAL15Ok4mSe4WqNcfagheti+o7laT6wcZKzeJtVzFLp Uj3OtlzThB5RiCo/ijtePqfTMWJrsaFopOoJK9lBAW6qln4hbWVoW4Hc6f0Z9iQW 4nLKi70Ke8fLbjQp+jBcAmQIDgrMBRsdkKWYcJ+7hUWpephuPqXYTBMblPZsY4NB E0nQMZQVJALbrsWlbwGQFPH3bknJ5dMW42gan1y5BfKBzbE7fTgCMDTIaYtw7PpC 6AntAyxPtF9hkBI4BbzMma2LAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUjoefR1Gj Y70fgZulJob38Dl4yq0wHwYDVR0jBBgwFoAUs4Q/FBVTnelR6maApOmQCK+DeHQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFNkFBLzhFREIxMDdFQURB ODExRUJBN0M5RjU2N0M0RjlBRTAyL3M0UV9GQlZUbmVsUjZtYUFwT21RQ0stRGVI US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvczRRX0ZCVlRuZWxSNm1hQXBPbVFDSy1EZUhRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRF NkFBLzhFREIxMDdFQURBODExRUJBN0M5RjU2N0M0RjlBRTAyL3M0UV9GQlZUbmVs UjZtYUFwT21RQ0stRGVIUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCHmaVBWqzhvuB7VFxOQ1tduDwVqdJlJyOQV8/fTVPMAp7TdhFODqW+7xs6BZvb aq8QXOWTqCE9phoL56uNUc+ZSdsRnlujqjOmj2S3VCW+mU7TBtMtz4qYIH0LaiyF dSJab3TCO01Fo9dVM9Ty2EUASVI4sQnp6LDb6zpf/Fj5aT0g4qTHK4ZFMCcOPCc+ hXdc6Z3nJUZW5a0XBfoiVuHLvRs2LCXkNW2uwrPfTMpacPLVeRbqymZqCOkpPPfE wp38FcM0FpnN9qD2LBnEaDjmQiTlQnAZO5NFXPRNp9ekXutNlTOlp+Or6v8kSy+Y hl5HxyYBAosjDoht5UmDoMDl -----END CERTIFICATE-----Generated at Wed Jun 24 11:10:04 2026 by rpki-client