$ rpki-client -vvf rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft File: xsPe6PYn19lovt8i_GEJRiUwF4M.mft (raw, json) Hash identifier: LsuJieAQiO5ypLBYWRIMfQ6KtXi0kOcJORRvdUrJYko= Subject key identifier: FA:52:E7:65:03:82:6D:23:98:9D:DA:77:B0:28:65:33:B4:48:EB:EB Authority key identifier: C6:C3:DE:E8:F6:27:D7:D9:68:BE:DF:22:FC:61:09:46:25:30:17:83 Certificate issuer: /CN=A9151258/serialNumber=C6C3DEE8F627D7D968BEDF22FC61094625301783 Certificate serial: 3583 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft Manifest number: 3550 Signing time: Tue 02 Jun 2026 15:11:43 +0000 Manifest this update: Tue 02 Jun 2026 15:11:43 +0000 Manifest next update: Tue 09 Jun 2026 15:11:43 +0000 Files and hashes: 1: xsPe6PYn19lovt8i_GEJRiUwF4M.crl (hash: YmoNtOnQ5X7Xfw2ph9/IzAxIY/sdHCZyp5nnYF2dzRs=) 2: 8CF6EB2A8D3C11F0A8123F21C4F9AE02.roa (hash: IHiT2JkC8madnsWfQDkJBYO++lG67IBJ1W4/S66TXLY=) 3: 8D769B548D3C11F0A8123F21C4F9AE02.roa (hash: 5cXLpNEPj2n6/HEGy8/26JkT8yzOfvZLJ/SaAIq5f84=) 4: AF01BDAE331211F1A2C10B79B1833773.roa (hash: +lp+LJ18Jwi0gflyPYkZccPDvT37HJQu97mBM2XRD3I=) 5: 504CB1588D3911F093856C71C4F9AE02.roa (hash: XbsPrmHsv3A3kJ0QH0nWqPm+aVwo38LG2afXIGK/eHk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.crl rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Jun 2026 15:11:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13699 (0x3583) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151258, serialNumber=C6C3DEE8F627D7D968BEDF22FC61094625301783 Validity Not Before: Jun 2 15:11:43 2026 GMT Not After : Jun 9 15:11:43 2026 GMT Subject: CN=6a1ef2af-084d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:21:ff:7f:ac:ca:44:16:35:9e:2e:bb:1d:f2: 8d:2b:23:e9:b2:f3:96:8a:dd:85:4d:a8:7f:58:b2: 04:9d:de:16:4e:c8:ad:aa:88:75:eb:10:43:3c:d2: 83:49:d2:08:08:c3:aa:97:15:96:aa:28:ea:9d:24: 69:1a:11:f9:28:1a:ac:0f:7d:a2:7f:e6:ab:e7:b4: 92:f1:0d:a6:c8:05:4a:94:dc:a1:af:6e:24:8e:22: 02:89:b5:6f:71:e2:1f:74:5e:bf:fd:77:c1:ee:ad: 69:ca:59:f7:8f:15:9f:08:f1:97:3a:20:03:e7:47: 73:40:e4:da:4a:ac:a4:7b:29:0e:e4:54:6c:58:b3: 39:40:e2:23:e2:56:98:99:83:f1:90:b8:e6:f4:5a: 8e:6b:b9:6c:94:7e:26:7d:58:f3:ec:09:12:d6:cf: 2d:c8:8c:07:f5:01:b1:0a:79:6f:5d:66:05:52:3e: a5:08:55:d9:89:7a:70:36:ff:d1:5a:f9:85:ce:0b: 5a:d5:16:e2:9d:09:de:b7:90:5e:ec:58:bd:3d:1a: ec:20:7c:66:41:0e:63:e6:3d:c3:07:d8:24:a0:6a: 3a:e4:02:dc:c1:1c:1b:94:6c:32:81:b0:50:37:f0: e5:bb:ac:af:7c:2c:a1:0d:73:a9:61:2c:dc:b8:ee: dd:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:52:E7:65:03:82:6D:23:98:9D:DA:77:B0:28:65:33:B4:48:EB:EB X509v3 Authority Key Identifier: keyid:C6:C3:DE:E8:F6:27:D7:D9:68:BE:DF:22:FC:61:09:46:25:30:17:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:f7:0f:51:5c:88:1e:46:40:ee:89:8b:7b:97:2d:d9:25:68: b4:a2:51:e3:38:a1:18:6d:a3:fa:7e:e2:31:e7:64:0e:8c:28: 2d:a4:db:75:64:0f:7e:ab:bf:91:c3:6f:3e:f0:54:84:b7:ec: 52:7c:ca:62:7e:61:27:31:92:2d:66:69:bc:c7:80:85:1f:57: 84:0f:d9:d4:5d:56:fe:c5:22:e9:9c:21:c5:29:7f:13:3a:26: ec:d9:88:cd:cc:e2:47:c2:7a:1b:ca:78:64:69:b3:74:0b:a4: aa:96:cb:85:68:65:15:ae:96:4e:79:f3:42:9b:a0:7c:fe:30: fc:a8:9f:f5:b8:d6:9e:cb:9a:1a:a8:9c:61:d2:c1:9e:2d:c6: a2:1d:54:79:9b:fe:de:8e:60:09:1a:4a:aa:86:b6:89:d8:c5: 75:46:1f:00:60:83:ab:58:ed:3b:1f:d6:f7:bb:d3:2d:67:97: 52:be:46:fc:f8:f6:6d:30:e0:b5:7d:93:05:4b:14:e5:33:40: 24:d4:df:54:f5:ec:32:52:26:c1:3d:41:2b:fc:ae:bb:c5:f0: f2:31:0c:2e:32:22:47:b8:cc:df:fd:6d:8a:3f:58:ec:7a:9d: 15:a4:80:be:80:38:51:fb:15:7e:9e:40:31:2d:79:8f:08:ae: c2:27:29:b8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEyNTgxMTAvBgNVBAUTKEM2QzNERUU4RjYyN0Q3RDk2OEJFREYyMkZDNjEwOTQ2 MjUzMDE3ODMwHhcNMjYwNjAyMTUxMTQzWhcNMjYwNjA5MTUxMTQzWjAYMRYwFAYD VQQDEw02YTFlZjJhZi0wODRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1yH/f6zKRBY1ni67HfKNKyPpsvOWit2FTah/WLIEnd4WTsitqoh16xBDPNKD SdIICMOqlxWWqijqnSRpGhH5KBqsD32if+ar57SS8Q2myAVKlNyhr24kjiICibVv ceIfdF6//XfB7q1pyln3jxWfCPGXOiAD50dzQOTaSqykeykO5FRsWLM5QOIj4laY mYPxkLjm9FqOa7lslH4mfVjz7AkS1s8tyIwH9QGxCnlvXWYFUj6lCFXZiXpwNv/R WvmFzgta1RbinQnet5Be7Fi9PRrsIHxmQQ5j5j3DB9gkoGo65ALcwRwblGwygbBQ N/Dlu6yvfCyhDXOpYSzcuO7dkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPpS52UD gm0jmJ3ad7AoZTO0SOvrMB8GA1UdIwQYMBaAFMbD3uj2J9fZaL7fIvxhCUYlMBeD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTI1OC9CQjJERENFMjFE QTYxMUUyODZEOTFEOUUwOEIwMkNEMi94c1BlNlBZbjE5bG92dDhpX0dFSlJpVXdG NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3hzUGU2UFluMTlsb3Z0OGlfR0VKUmlVd0Y0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTI1OC9CQjJERENFMjFEQTYxMUUyODZEOTFEOUUwOEIwMkNEMi94c1BlNlBZbjE5 bG92dDhpX0dFSlJpVXdGNE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEfcPUVyIHkZA7omLe5ct2SVotKJR4zihGG2j+n7iMedkDowoLaTbdWQPfqu/ kcNvPvBUhLfsUnzKYn5hJzGSLWZpvMeAhR9XhA/Z1F1W/sUi6ZwhxSl/Ezom7NmI zcziR8J6G8p4ZGmzdAukqpbLhWhlFa6WTnnzQpugfP4w/Kif9bjWnsuaGqicYdLB ni3Goh1UeZv+3o5gCRpKqoa2idjFdUYfAGCDq1jtOx/W97vTLWeXUr5G/Pj2bTDg tX2TBUsU5TNAJNTfVPXsMlImwT1BK/yuu8Xw8jEMLjIiR7jM3/1tij9Y7HqdFaSA voA4UfsVfp5AMS15jwiuwicpuA== -----END CERTIFICATE-----Generated at Tue Jun 2 21:41:42 2026 by rpki-client