$ rpki-client -vvf rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft File: 2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft (raw, json) Hash identifier: jHG67Vp1FSUak7GvHQ++Fx3zXHus9Gb++KxGs2BU8g0= Subject key identifier: 33:9C:DB:2C:C7:85:BF:54:08:6E:6E:5E:B6:26:65:39:F6:DE:E2:71 Authority key identifier: DA:EF:A5:43:58:F4:BC:C0:D8:47:CC:6D:C9:CA:F7:8B:C5:E0:99:6E Certificate issuer: /CN=A915FA96/serialNumber=DAEFA54358F4BCC0D847CC6DC9CAF78BC5E0996E Certificate serial: 012D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2u-lQ1j0vMDYR8xtycr3i8XgmW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft Manifest number: 0123 Signing time: Sun 21 Jun 2026 05:50:22 +0000 Manifest this update: Sun 21 Jun 2026 05:50:21 +0000 Manifest next update: Sun 28 Jun 2026 05:50:21 +0000 Files and hashes: 1: 2u-lQ1j0vMDYR8xtycr3i8XgmW4.crl (hash: AV+m3J643thNbU1mQfr7HER7BeTIuO5zoQzODCFI51E=) 2: 50B93FA8B5EE11EF9AC9D812C4F9AE02.roa (hash: zIvaOMrJj6tNY8+g0C9uE13uNUrzvq9Y4fdiG+e+9uY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.crl rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2u-lQ1j0vMDYR8xtycr3i8XgmW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Jun 2026 05:50:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 301 (0x12d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FA96, serialNumber=DAEFA54358F4BCC0D847CC6DC9CAF78BC5E0996E Validity Not Before: Jun 21 05:50:21 2026 GMT Not After : Jun 28 05:50:21 2026 GMT Subject: CN=6a377b9e-5695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:24:46:50:2e:3d:5d:04:d5:d0:79:63:f9:ce: aa:7c:22:46:20:f3:0e:8b:d2:ee:d6:64:67:5c:69: 63:58:e9:34:64:a7:81:b4:c5:68:e4:45:57:41:ac: c8:e1:96:a9:87:1d:ee:21:e2:06:f6:91:8a:06:32: e3:b5:0e:0c:d1:47:83:79:18:9f:f9:fb:9d:88:dd: 2e:83:d2:22:bd:06:a0:b7:18:be:eb:ab:03:41:a0: f7:5f:6e:b8:50:b3:e5:8b:ce:b7:cf:ea:fa:dc:86: ad:8b:49:1a:2a:7c:4d:6b:82:0d:d0:27:3c:04:5e: 0f:35:84:e2:27:12:5f:67:00:b9:ca:d7:17:f0:2b: 35:cc:47:99:49:45:28:0f:bf:8a:30:14:b0:30:f7: 1c:c7:a0:ab:39:f7:30:2c:1a:72:3e:ca:d9:6e:39: 1a:a1:fa:72:0e:33:4d:05:f2:28:7d:20:ca:1d:93: e2:04:41:a0:6d:a8:da:25:84:5e:71:f1:4d:2f:24: 23:52:d0:18:56:cd:ad:cb:bf:59:15:2b:03:c8:33: 64:da:b7:88:11:65:58:d5:9b:7c:ad:70:04:86:89: 9b:cd:4c:11:e8:c2:0d:08:0f:c1:4c:d9:0f:e2:a0: 4a:1d:ca:13:95:a8:00:ac:d9:27:b8:a9:eb:15:f0: ee:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:9C:DB:2C:C7:85:BF:54:08:6E:6E:5E:B6:26:65:39:F6:DE:E2:71 X509v3 Authority Key Identifier: keyid:DA:EF:A5:43:58:F4:BC:C0:D8:47:CC:6D:C9:CA:F7:8B:C5:E0:99:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2u-lQ1j0vMDYR8xtycr3i8XgmW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:32:b2:5f:98:5b:2e:a0:e8:32:d5:12:0c:9e:b1:1d:61:82: a8:ae:af:65:4f:44:77:7f:69:ba:dc:43:3d:cb:00:4f:eb:b9: ee:0e:81:86:c2:1d:d2:52:c2:15:24:6e:3c:38:27:b5:cc:2b: 6b:03:fb:70:39:0e:6a:df:6b:ae:eb:fd:41:2e:07:2a:cf:a4: bf:62:d2:72:90:10:e7:f7:17:89:d9:19:10:61:6d:b9:b3:a3: b0:df:ec:da:38:de:6b:7d:21:8f:96:4f:91:be:e4:ff:9c:89: df:f8:e5:4f:cf:2a:1b:37:ed:4f:e8:95:bc:64:9d:20:23:ea: ae:4e:52:ff:cd:d9:d2:48:5b:b2:6f:74:a9:15:e7:db:17:a8: 31:c1:d7:99:98:aa:13:4c:ef:ec:23:af:ac:75:73:ec:5d:57: 34:4d:33:cd:13:05:20:6f:a8:5b:33:4c:3c:1b:e9:b4:2d:e4: 56:57:36:10:d4:c3:9b:a0:b1:5a:49:a5:01:93:c4:39:cf:18: e3:60:d2:86:31:4c:04:33:56:a0:d3:e0:f3:64:86:a6:3b:c7: d7:df:16:ef:3d:64:f5:90:46:76:21:9c:f9:b1:c8:83:09:ae: ea:6b:4a:cc:9d:fa:ae:54:b1:e4:b1:25:c1:91:8b:fa:3e:ee: cb:6f:7c:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZBOTYxMTAvBgNVBAUTKERBRUZBNTQzNThGNEJDQzBEODQ3Q0M2REM5Q0FGNzhC QzVFMDk5NkUwHhcNMjYwNjIxMDU1MDIxWhcNMjYwNjI4MDU1MDIxWjAYMRYwFAYD VQQDEw02YTM3N2I5ZS01Njk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwiRGUC49XQTV0Hlj+c6qfCJGIPMOi9Lu1mRnXGljWOk0ZKeBtMVo5EVXQazI 4Zaphx3uIeIG9pGKBjLjtQ4M0UeDeRif+fudiN0ug9IivQagtxi+66sDQaD3X264 ULPli863z+r63Iati0kaKnxNa4IN0Cc8BF4PNYTiJxJfZwC5ytcX8Cs1zEeZSUUo D7+KMBSwMPccx6CrOfcwLBpyPsrZbjkaofpyDjNNBfIofSDKHZPiBEGgbajaJYRe cfFNLyQjUtAYVs2ty79ZFSsDyDNk2reIEWVY1Zt8rXAEhombzUwR6MINCA/BTNkP 4qBKHcoTlagArNknuKnrFfDu/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDOc2yzH hb9UCG5uXrYmZTn23uJxMB8GA1UdIwQYMBaAFNrvpUNY9LzA2EfMbcnK94vF4Jlu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkE5Ni84QTM1MDkwQ0I1 RUQxMUVGOUQyMDY5MEVDNEY5QUUwMi8ydS1sUTFqMHZNRFlSOHh0eWNyM2k4WGdt VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ1LWxRMWowdk1EWVI4eHR5Y3IzaThYZ21XNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkE5Ni84QTM1MDkwQ0I1RUQxMUVGOUQyMDY5MEVDNEY5QUUwMi8ydS1sUTFqMHZN RFlSOHh0eWNyM2k4WGdtVzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATDKyX5hbLqDoMtUSDJ6xHWGCqK6vZU9Ed39putxDPcsAT+u57g6BhsId0lLC FSRuPDgntcwrawP7cDkOat9rruv9QS4HKs+kv2LScpAQ5/cXidkZEGFtubOjsN/s 2jjea30hj5ZPkb7k/5yJ3/jlT88qGzftT+iVvGSdICPqrk5S/83Z0khbsm90qRXn 2xeoMcHXmZiqE0zv7COvrHVz7F1XNE0zzRMFIG+oWzNMPBvptC3kVlc2ENTDm6Cx WkmlAZPEOc8Y42DShjFMBDNWoNPg82SGpjvH198W7z1k9ZBGdiGc+bHIgwmu6mtK zJ36rlSx5LElwZGL+j7uy2988A== -----END CERTIFICATE-----Generated at Mon Jun 22 09:35:35 2026 by rpki-client