$ rpki-client -vvf rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.mft File: 2-bH-ZCQRq41ohWw4hVErlIjfoo.mft (raw, json) Hash identifier: pfuT3T49QVzSgZH+Hn8Oy/MjtjngH6vJUHbOBcKiu+8= Subject key identifier: 77:0C:B9:1B:95:B0:C9:D2:CD:C3:C7:E2:F3:FD:C5:5F:C1:5E:E8:B0 Authority key identifier: DB:E6:C7:F9:90:90:46:AE:35:A2:15:B0:E2:15:44:AE:52:23:7E:8A Certificate issuer: /CN=A914F697/serialNumber=DBE6C7F9909046AE35A215B0E21544AE52237E8A Certificate serial: 0741 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-bH-ZCQRq41ohWw4hVErlIjfoo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.mft Manifest number: 086C Signing time: Sat 06 Jun 2026 20:26:07 +0000 Manifest this update: Sat 06 Jun 2026 20:26:06 +0000 Manifest next update: Sat 13 Jun 2026 20:26:06 +0000 Files and hashes: 1: 2-bH-ZCQRq41ohWw4hVErlIjfoo.crl (hash: Va01Ib0wnbBp4FfX982LhhJP3pKiZ290lRMU+EE4ymE=) 2: 1AA7504A92DD11EB9B9E993FC4F9AE02.roa (hash: uPVVKDs8FXCGXCVQqQJZYdG3JPqyWcieyoiy4+qFczg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.crl rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-bH-ZCQRq41ohWw4hVErlIjfoo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 17:25:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1857 (0x741) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F697, serialNumber=DBE6C7F9909046AE35A215B0E21544AE52237E8A Validity Not Before: Jun 6 20:26:06 2026 GMT Not After : Jun 13 20:26:06 2026 GMT Subject: CN=6a24825f-405a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:18:6e:8e:66:91:d3:bb:78:ec:ad:de:0d:ef: ae:a7:d6:05:9c:dd:60:6b:ed:d1:17:59:de:ce:8d: 12:94:35:f5:71:b5:f6:d0:ba:07:f3:06:97:18:f0: 35:e1:95:ed:96:c5:cd:03:2f:b8:30:f5:94:d5:46: 3c:e0:ba:01:bf:f6:98:ba:84:95:e9:17:81:b2:a6: be:36:05:54:1d:92:07:69:1b:24:00:6b:e0:bd:b0: 77:f9:6e:70:d0:df:95:7e:28:fe:32:45:38:16:a9: 77:2b:56:4b:ba:fa:8a:19:5b:37:7e:10:e7:ff:60: 2e:e1:a9:0e:f7:b3:15:85:34:f7:5f:e3:48:2d:d4: eb:96:82:37:c4:d8:af:97:e9:a3:e1:61:97:7a:9c: b8:42:3a:f5:c1:37:7d:98:f6:09:a5:68:cb:a6:5b: 9c:87:8c:a7:cb:5a:f3:62:14:30:14:b6:42:b5:5e: ac:85:37:7f:6d:45:ed:75:d7:ed:67:97:44:de:eb: 8c:f6:19:9c:1b:87:d2:76:35:2a:c9:29:7e:83:7b: 9f:ce:17:74:7b:ef:62:3a:25:d0:fe:db:8e:4b:91: d9:76:82:dc:6c:8f:e4:22:b5:14:3a:f2:1b:b0:a6: 21:9e:84:ab:d7:6d:87:be:76:fb:78:a8:17:70:5b: bf:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:0C:B9:1B:95:B0:C9:D2:CD:C3:C7:E2:F3:FD:C5:5F:C1:5E:E8:B0 X509v3 Authority Key Identifier: keyid:DB:E6:C7:F9:90:90:46:AE:35:A2:15:B0:E2:15:44:AE:52:23:7E:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-bH-ZCQRq41ohWw4hVErlIjfoo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:e4:8a:bf:f5:84:18:02:ae:58:3d:c6:0c:a2:10:ca:d5:ad: b1:71:b5:3d:41:5e:17:72:0e:f9:24:90:0f:78:10:42:14:26: 6c:44:14:c3:80:8e:aa:52:1d:cb:4a:de:ad:78:8e:0f:f5:5d: 3e:69:4f:95:18:39:1d:82:3f:55:4b:b4:97:a4:01:73:75:b7: c5:f6:88:86:77:6d:39:f9:ad:70:1f:ce:64:75:fb:dd:10:be: 25:81:31:04:cd:a1:f0:83:fa:73:ff:9c:c6:79:0f:55:4b:d6: 8b:8f:0a:76:f1:67:cb:ed:24:e0:b0:e8:5d:a7:b5:a7:13:4c: 97:50:db:06:1b:ed:5e:0a:cb:41:94:41:89:e3:67:d3:79:8e: cf:53:8a:65:fd:59:b4:08:b1:54:f5:54:e4:f7:88:73:c4:3c: b9:86:07:4c:bf:60:a6:78:cf:f0:95:30:1f:a6:df:6f:04:51: 95:f1:5b:e8:1b:e9:0e:b6:ac:f3:bc:09:f5:05:f8:06:5c:22: b5:ff:1b:fd:ff:c6:62:c1:af:51:e5:51:66:11:93:64:33:c3: 72:ad:97:3c:ee:25:e3:0d:18:e7:02:e4:64:b5:0d:ea:04:41: c1:f1:9c:ea:d4:5e:97:4a:32:2b:44:02:b0:bb:87:af:24:e6: 9e:37:d1:06 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEY2OTcxMTAvBgNVBAUTKERCRTZDN0Y5OTA5MDQ2QUUzNUEyMTVCMEUyMTU0NEFF NTIyMzdFOEEwHhcNMjYwNjA2MjAyNjA2WhcNMjYwNjEzMjAyNjA2WjAYMRYwFAYD VQQDEw02YTI0ODI1Zi00MDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5hhujmaR07t47K3eDe+up9YFnN1ga+3RF1nezo0SlDX1cbX20LoH8waXGPA1 4ZXtlsXNAy+4MPWU1UY84LoBv/aYuoSV6ReBsqa+NgVUHZIHaRskAGvgvbB3+W5w 0N+Vfij+MkU4Fql3K1ZLuvqKGVs3fhDn/2Au4akO97MVhTT3X+NILdTrloI3xNiv l+mj4WGXepy4Qjr1wTd9mPYJpWjLpluch4yny1rzYhQwFLZCtV6shTd/bUXtddft Z5dE3uuM9hmcG4fSdjUqySl+g3ufzhd0e+9iOiXQ/tuOS5HZdoLcbI/kIrUUOvIb sKYhnoSr122Hvnb7eKgXcFu/TQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHcMuRuV sMnSzcPH4vP9xV/BXuiwMB8GA1UdIwQYMBaAFNvmx/mQkEauNaIVsOIVRK5SI36K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjY5Ny83NTIxREZDMEU4 NUQxMUVBQjIzQzhGODdDNEY5QUUwMi8yLWJILVpDUVJxNDFvaFd3NGhWRXJsSWpm b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzItYkgtWkNRUnE0MW9oV3c0aFZFcmxJamZvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjY5Ny83NTIxREZDMEU4NUQxMUVBQjIzQzhGODdDNEY5QUUwMi8yLWJILVpDUVJx NDFvaFd3NGhWRXJsSWpmb28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHuSKv/WEGAKuWD3GDKIQytWtsXG1PUFeF3IO+SSQD3gQQhQmbEQUw4COqlId y0rerXiOD/VdPmlPlRg5HYI/VUu0l6QBc3W3xfaIhndtOfmtcB/OZHX73RC+JYEx BM2h8IP6c/+cxnkPVUvWi48KdvFny+0k4LDoXae1pxNMl1DbBhvtXgrLQZRBieNn 03mOz1OKZf1ZtAixVPVU5PeIc8Q8uYYHTL9gpnjP8JUwH6bfbwRRlfFb6BvpDras 87wJ9QX4Blwitf8b/f/GYsGvUeVRZhGTZDPDcq2XPO4l4w0Y5wLkZLUN6gRBwfGc 6tRel0oyK0QCsLuHryTmnjfRBg== -----END CERTIFICATE-----Generated at Sat Jun 6 21:54:14 2026 by rpki-client