$ rpki-client -vvf rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft File: M3je4rOhqNPtGvTkXiJdAJnPcBE.mft (raw, json) Hash identifier: Y8Obze3z52z0kMSvlAqvxkCt7n1oxsXUbqZBswpWtU8= Subject key identifier: 03:FB:B7:0C:AA:A0:F2:FE:BC:DB:EA:41:E5:26:86:59:EC:75:64:2F Authority key identifier: 33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11 Certificate issuer: /CN=A915B556/serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011 Certificate serial: 04D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft Manifest number: 04BB Signing time: Mon 01 Jun 2026 00:36:44 +0000 Manifest this update: Mon 01 Jun 2026 00:36:44 +0000 Manifest next update: Mon 08 Jun 2026 00:36:44 +0000 Files and hashes: 1: M3je4rOhqNPtGvTkXiJdAJnPcBE.crl (hash: z68nT1R8/pOHGx/64cNNzjOrP08GiahPmmX+yLDGTLc=) 2: BBA03BF86DD311F09E550D38C4F9AE02.roa (hash: bzANKnbyeKHQq6L/luZgy8RCyHrFKy2/gJCau298tQs=) 3: 2A3B0AAED84211EDBD609A4DC4F9AE02.roa (hash: mocm69lqZdjVVtWbDT8lrUYvlh6Uzdf4NnBQ902rsro=) 4: BC58A5C66DD311F09E550D38C4F9AE02.roa (hash: M/opGFmlb9jaN3RmTRwWVxME38lrA5KzlqcKDnyMekw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.crl rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 00:36:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1241 (0x4d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B556, serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011 Validity Not Before: Jun 1 00:36:44 2026 GMT Not After : Jun 8 00:36:44 2026 GMT Subject: CN=6a1cd41c-dbda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:80:3d:e2:dc:ce:d8:36:61:12:2e:0b:f1:5e: 1d:e0:4c:e7:ae:14:6e:b3:63:b9:2b:5d:dd:2f:6a: 88:13:12:0f:0f:e5:ef:0c:9d:88:a2:6b:98:56:81: f2:27:d9:aa:f2:b6:39:a4:fc:0e:ff:15:8d:64:a0: e4:ed:fe:da:0b:df:b7:1a:ba:c5:03:12:b4:d8:1e: 11:84:b7:c1:78:74:3b:a4:63:f6:d2:75:4a:10:09: 21:27:b8:1c:3a:83:c1:73:40:bd:64:31:2e:42:91: c3:ec:ef:b6:a6:08:ca:67:6a:20:c3:07:e2:e8:53: 1a:ac:e3:5e:d2:4b:6e:07:53:45:3a:80:4c:d6:ab: 11:75:82:d3:10:fa:14:b8:f3:6d:cd:3b:83:cd:4c: 95:74:7b:89:a6:00:0d:bf:0f:ef:aa:d5:59:e1:27: 84:12:bd:4b:be:6e:4a:ba:b4:2e:ce:f3:15:57:db: 9e:99:91:df:b3:ac:17:86:a2:18:e9:f7:cc:0b:62: b0:d2:b0:5a:c7:b4:c1:a1:53:1d:e5:9d:9f:da:a0: ef:05:9b:49:bf:f6:37:df:15:ff:ec:9b:45:e7:c1: 52:8b:eb:5c:07:66:80:ae:c9:38:09:61:ed:0c:3e: 62:25:93:97:08:27:db:ca:6c:bb:23:8c:ad:98:7c: a2:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:FB:B7:0C:AA:A0:F2:FE:BC:DB:EA:41:E5:26:86:59:EC:75:64:2F X509v3 Authority Key Identifier: keyid:33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:e6:47:5a:b5:98:28:25:8b:e8:97:17:54:2c:8b:e1:fa:68: 5b:aa:04:0a:47:f4:ae:02:dc:13:63:41:d0:d9:7e:a6:dc:bc: 89:c6:ac:43:0f:63:00:ee:c5:83:77:08:e7:ec:8a:fa:35:74: 2b:e9:c2:5b:79:38:ac:49:d6:b8:19:39:76:08:cb:c9:dd:45: 5b:93:b4:16:6d:10:ef:ef:7c:07:9c:74:03:1b:61:86:d7:64: a5:20:d4:c8:f3:9f:b4:fd:e4:7b:7b:ee:e2:8a:25:72:94:6c: 75:9f:50:75:0f:3f:cf:da:01:e4:f5:2c:b9:74:5f:f8:20:83: 32:29:e1:49:fd:a8:91:34:71:d2:63:f5:01:3b:7d:11:2c:eb: 99:aa:7c:dc:51:10:04:93:e4:6b:b7:f8:97:9b:e5:17:b9:47: 3e:bc:2d:42:7f:5d:c5:34:80:23:d8:29:68:f8:47:e7:67:ee: e0:45:da:38:74:cf:08:5e:86:1f:b1:06:ca:a2:d4:08:ba:29: 88:98:4d:c8:6d:71:99:75:80:b3:a9:58:4c:0e:9e:1c:08:ea: bb:94:8a:c4:f9:2f:4b:9f:48:22:82:c7:fe:14:53:8b:3b:6f: 39:57:4a:43:4a:ba:05:15:0e:7b:8b:27:ee:b1:cd:cb:b4:b0: 8c:63:a2:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBNkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1NTYxMTAvBgNVBAUTKDMzNzhERUUyQjNBMUE4RDNFRDFBRjRFNDVFMjI1RDAw OTlDRjcwMTEwHhcNMjYwNjAxMDAzNjQ0WhcNMjYwNjA4MDAzNjQ0WjAYMRYwFAYD VQQDEw02YTFjZDQxYy1kYmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArIA94tzO2DZhEi4L8V4d4EznrhRus2O5K13dL2qIExIPD+XvDJ2IomuYVoHy J9mq8rY5pPwO/xWNZKDk7f7aC9+3GrrFAxK02B4RhLfBeHQ7pGP20nVKEAkhJ7gc OoPBc0C9ZDEuQpHD7O+2pgjKZ2ogwwfi6FMarONe0ktuB1NFOoBM1qsRdYLTEPoU uPNtzTuDzUyVdHuJpgANvw/vqtVZ4SeEEr1Lvm5KurQuzvMVV9uemZHfs6wXhqIY 6ffMC2Kw0rBax7TBoVMd5Z2f2qDvBZtJv/Y33xX/7JtF58FSi+tcB2aArsk4CWHt DD5iJZOXCCfbymy7I4ytmHyi5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAP7twyq oPL+vNvqQeUmhlnsdWQvMB8GA1UdIwQYMBaAFDN43uKzoajT7Rr05F4iXQCZz3AR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjU1Ni8xMDQ1MkFGQTdE QzkxMUVDOEU5RjZCMjNDNEY5QUUwMi9NM2plNHJPaHFOUHRHdlRrWGlKZEFKblBj QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00zamU0ck9ocU5QdEd2VGtYaUpkQUpuUGNCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjU1Ni8xMDQ1MkFGQTdEQzkxMUVDOEU5RjZCMjNDNEY5QUUwMi9NM2plNHJPaHFO UHRHdlRrWGlKZEFKblBjQkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAheZHWrWYKCWL6JcXVCyL4fpoW6oECkf0rgLcE2NB0Nl+pty8icasQw9jAO7F g3cI5+yK+jV0K+nCW3k4rEnWuBk5dgjLyd1FW5O0Fm0Q7+98B5x0AxthhtdkpSDU yPOftP3ke3vu4oolcpRsdZ9QdQ8/z9oB5PUsuXRf+CCDMinhSf2okTRx0mP1ATt9 ESzrmap83FEQBJPka7f4l5vlF7lHPrwtQn9dxTSAI9gpaPhH52fu4EXaOHTPCF6G H7EGyqLUCLopiJhNyG1xmXWAs6lYTA6eHAjqu5SKxPkvS59IIoLH/hRTiztvOVdK Q0q6BRUOe4sn7rHNy7SwjGOi1Q== -----END CERTIFICATE-----Generated at Tue Jun 2 22:20:41 2026 by rpki-client