$ rpki-client -vvf rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft File: -KpwkWtspYPANj63qaX38mJ9c2A.mft (raw, json) Hash identifier: h3xmOgynZZwfFRiERbD4S4fYb4oQXA8v2TcWNYKeVSI= Subject key identifier: 09:3B:B2:E1:7B:37:51:28:3E:ED:3C:DB:8B:F4:F7:BA:80:99:F5:DD Authority key identifier: F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60 Certificate issuer: /CN=A915EE53/serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360 Certificate serial: 2736 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft Manifest number: 2600 Signing time: Tue 02 Jun 2026 15:45:35 +0000 Manifest this update: Tue 02 Jun 2026 15:45:34 +0000 Manifest next update: Tue 09 Jun 2026 15:45:34 +0000 Files and hashes: 1: -KpwkWtspYPANj63qaX38mJ9c2A.crl (hash: KfwZWnIXTJjTUh1dqVuPYtft1kbsvkPJsZ+laaqH3DQ=) 2: 86D13B7E571C11EC81276481C4F9AE02.roa (hash: EsFL7ZLG4qzCWyTx81VJ4FIJ+vovxCZrLT1BVweKgqc=) 3: 9DBB8670790211EC9EE24885C4F9AE02.roa (hash: 8YUEuPh3TxbLBkrRsi2o2BfYfS5T4DERKvY1wpAF8Lg=) 4: 63C97CBAC49E11EBAC936D7AC4F9AE02.roa (hash: AHfY7AUJpWe7BNWUNT/uLmoUme06v0hAUNHbmnBADSc=) 5: 6E042EFCABF011EC92152E22C4F9AE02.roa (hash: Spot7p9zSNAAsEMFmZpLPx1zmvfxVQZv9xfzDFvYL6o=) 6: 5CCAC7F8528C11ECB6101B10C4F9AE02.roa (hash: uifIApbHfV42HS+k8rHXkfR4eC5owLbdOciccVTBlF8=) 7: 15812F82C4A111EBAE6C7F49C4F9AE02.roa (hash: 1rZWgbUmjxQN06CeOuGX07QdWjTq8x0pS2P/AZOZPKA=) 8: CFF5A20078E011EC8357FA15C4F9AE02.roa (hash: Dg/YVoaAbQDeMOZ225L2eC6YXpKJAjiybrKz9YFG+0w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Jun 2026 15:45:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10038 (0x2736) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EE53, serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360 Validity Not Before: Jun 2 15:45:34 2026 GMT Not After : Jun 9 15:45:34 2026 GMT Subject: CN=6a1efa9f-11cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:80:2d:0d:da:7f:49:33:d6:b3:42:dc:fd:32: 88:31:e9:40:89:0e:e2:8f:db:40:03:94:ce:3f:d3: 48:b1:4b:89:27:13:1d:9f:70:f6:aa:61:66:59:ce: a7:72:6b:07:20:37:e0:6a:52:e2:39:d9:e8:61:12: 73:07:f0:c1:23:31:86:a0:27:e1:08:77:d5:f4:56: 35:1a:5a:fc:67:ac:2d:19:de:8a:b5:9a:8f:ea:4b: 00:71:83:68:5c:c3:e2:0b:1a:0e:d6:f4:4b:9e:21: a1:52:4e:84:00:f3:2d:5c:1a:7e:e2:14:52:76:43: 06:27:90:5a:24:8a:63:b3:1a:63:ae:6c:a9:97:ed: 46:b3:c5:20:26:21:a6:2e:fa:b1:4c:da:d2:41:ea: 23:3c:f8:9f:c4:0a:b8:0a:f5:34:0c:6c:ff:1a:7b: 61:26:54:37:88:b0:ce:2c:79:69:28:84:79:a8:49: b4:71:4e:3d:7d:a1:d4:dc:ab:ee:46:a6:8e:95:d7: f0:3d:9f:0a:16:98:a2:eb:0e:41:9d:c0:4e:06:91: 98:6b:4d:2c:7a:06:17:dc:79:2f:6b:4c:f8:c3:33: 77:eb:ac:bf:cd:20:68:c5:2f:df:0f:41:0a:6d:84: 62:6b:41:2c:1f:21:d9:91:75:45:3f:8f:38:ca:74: d9:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:3B:B2:E1:7B:37:51:28:3E:ED:3C:DB:8B:F4:F7:BA:80:99:F5:DD X509v3 Authority Key Identifier: keyid:F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:53:82:1c:f9:7e:9d:40:05:4d:82:f9:5f:a2:c2:22:62:9c: 85:c6:4d:fc:b5:15:48:38:55:54:89:52:62:70:64:10:97:0b: 96:53:8d:b5:77:f6:1c:6d:bf:2c:9b:d9:d0:40:69:51:17:5d: dd:f2:1e:e0:07:1e:92:db:aa:68:42:45:f1:43:0a:bd:29:9c: 96:a7:72:69:97:89:b2:93:e6:96:b1:ef:d6:41:75:a0:96:ab: 7b:67:0a:9d:d0:e1:1e:b0:02:b1:41:20:55:64:a3:98:a7:70: 5e:67:ca:4c:ae:01:af:72:69:29:8d:df:78:fb:2b:be:23:2b: ed:64:c4:54:6e:a4:b1:0e:ea:a2:1c:09:2a:9f:aa:ed:60:c4: 2e:14:c5:c8:c9:d3:b9:d6:b5:d8:b7:da:42:34:f6:ee:7b:30: 68:de:71:6d:cc:b6:c9:31:f7:42:a8:6f:0d:d8:4d:36:d4:8f: 5d:a8:4e:37:c4:22:fa:d5:ab:89:8c:43:90:ae:e3:30:fa:42: fd:ba:69:a7:55:55:54:fd:a4:38:77:45:d2:f3:ff:49:bb:ff: b8:d9:f0:7d:a6:a7:4d:8f:40:5d:80:5d:12:e3:ba:07:13:28: 5d:13:64:5e:67:b4:ab:d3:d2:e3:0f:d5:2a:63:e8:17:c3:71: 0e:a8:4d:24 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVFNTMxMTAvBgNVBAUTKEY4QUE3MDkxNkI2Q0E1ODNDMDM2M0VCN0E5QTVGN0Yy NjI3RDczNjAwHhcNMjYwNjAyMTU0NTM0WhcNMjYwNjA5MTU0NTM0WjAYMRYwFAYD VQQDEw02YTFlZmE5Zi0xMWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkYAtDdp/STPWs0Lc/TKIMelAiQ7ij9tAA5TOP9NIsUuJJxMdn3D2qmFmWc6n cmsHIDfgalLiOdnoYRJzB/DBIzGGoCfhCHfV9FY1Glr8Z6wtGd6KtZqP6ksAcYNo XMPiCxoO1vRLniGhUk6EAPMtXBp+4hRSdkMGJ5BaJIpjsxpjrmypl+1Gs8UgJiGm LvqxTNrSQeojPPifxAq4CvU0DGz/GnthJlQ3iLDOLHlpKIR5qEm0cU49faHU3Kvu RqaOldfwPZ8KFpii6w5BncBOBpGYa00segYX3Hkva0z4wzN366y/zSBoxS/fD0EK bYRia0EsHyHZkXVFP484ynTZLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAk7suF7 N1EoPu0824v097qAmfXdMB8GA1UdIwQYMBaAFPiqcJFrbKWDwDY+t6ml9/JifXNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUU1My8zODUxMTg0MDQ1 ODgxMUU1OUIyRDgzNzFDNEY5QUUwMi8tS3B3a1d0c3BZUEFOajYzcWFYMzhtSjlj MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1LcHdrV3RzcFlQQU5qNjNxYVgzOG1KOWMyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RUU1My8zODUxMTg0MDQ1ODgxMUU1OUIyRDgzNzFDNEY5QUUwMi8tS3B3a1d0c3BZ UEFOajYzcWFYMzhtSjljMkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANVOCHPl+nUAFTYL5X6LCImKchcZN/LUVSDhVVIlSYnBkEJcLllONtXf2HG2/ LJvZ0EBpURdd3fIe4AcektuqaEJF8UMKvSmclqdyaZeJspPmlrHv1kF1oJare2cK ndDhHrACsUEgVWSjmKdwXmfKTK4Br3JpKY3fePsrviMr7WTEVG6ksQ7qohwJKp+q 7WDELhTFyMnTuda12LfaQjT27nswaN5xbcy2yTH3QqhvDdhNNtSPXahON8Qi+tWr iYxDkK7jMPpC/bppp1VVVP2kOHdF0vP/Sbv/uNnwfaanTY9AXYBdEuO6BxMoXRNk Xme0q9PS4w/VKmPoF8NxDqhNJA== -----END CERTIFICATE-----Generated at Thu Jun 4 12:26:36 2026 by rpki-client