$ rpki-client -vvf rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft File: xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft (raw, json) Hash identifier: G/9O0Fz/rcJoZVZRNJXL6aqbZpj9VgknmFtxEU695lE= Subject key identifier: 2A:BF:9A:E7:3F:E1:42:2E:9D:51:9F:FB:48:06:65:B4:CD:48:98:6B Authority key identifier: C4:26:D4:26:40:06:76:55:59:73:DF:ED:E4:EB:26:44:BE:ED:28:73 Certificate issuer: /CN=A9161857/serialNumber=C426D426400676555973DFEDE4EB2644BEED2873 Certificate serial: C7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft Manifest number: C4 Signing time: Mon 01 Jun 2026 07:45:14 +0000 Manifest this update: Mon 01 Jun 2026 07:45:13 +0000 Manifest next update: Mon 08 Jun 2026 07:45:13 +0000 Files and hashes: 1: xCbUJkAGdlVZc9_t5OsmRL7tKHM.crl (hash: vxZfSPmYJnXq6zcQd/3Hk/gjQ5DtnfUUYXRl+s6QFDo=) 2: 4660810C41DE11F083E3205EC4F9AE02.roa (hash: 8cuDD60OBi1vO/7c9lhKgZt7KgJpxsLM7iezV0RYbzQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.crl rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 07:45:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 199 (0xc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161857, serialNumber=C426D426400676555973DFEDE4EB2644BEED2873 Validity Not Before: Jun 1 07:45:13 2026 GMT Not After : Jun 8 07:45:13 2026 GMT Subject: CN=6a1d3889-96f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:1a:00:9a:a6:7c:c8:0d:c5:8c:d2:f8:26:6e: de:c0:cb:e8:bf:72:25:74:47:ca:bb:35:c5:88:d0: 8b:c1:b8:92:93:b7:d4:cd:ff:d2:82:de:f4:2c:cf: 5e:1d:c4:96:03:7f:ac:63:ee:2f:98:7c:7b:83:46: 90:46:f8:2e:48:05:95:37:b1:d2:48:48:ff:f8:b5: 0d:4a:13:a4:61:b7:79:a4:59:56:ce:08:2d:ee:c5: 75:c2:4a:0f:3c:41:bb:cf:d3:af:6a:36:a0:f8:27: ea:b3:f5:33:2b:ea:5b:37:d2:14:92:03:32:cd:50: 2d:03:3c:50:f9:be:27:0a:b1:44:e6:8d:ff:42:46: 3c:51:3c:31:74:10:86:ce:dd:9e:66:87:86:7b:39: f9:1b:02:d2:60:3f:bb:dc:d7:cb:02:1b:44:6e:7b: 9c:74:9a:0d:1f:8d:16:1a:4a:43:16:25:d5:7b:39: f5:d0:c6:dd:9d:97:cc:87:37:07:83:f2:f2:db:95: 55:d8:b4:d5:bb:43:86:c1:71:88:68:fb:2f:f7:56: ef:44:6b:37:26:81:11:1e:4e:0c:9b:be:fe:75:95: 80:64:47:39:6a:c8:20:86:1f:9f:8f:e3:ad:51:7c: 1c:a7:b6:87:a5:81:7b:ff:39:98:f0:fa:b2:29:4a: 12:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:BF:9A:E7:3F:E1:42:2E:9D:51:9F:FB:48:06:65:B4:CD:48:98:6B X509v3 Authority Key Identifier: keyid:C4:26:D4:26:40:06:76:55:59:73:DF:ED:E4:EB:26:44:BE:ED:28:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:60:92:ef:6c:26:60:13:dc:63:7d:76:7f:2b:a9:e4:af:56: d0:d1:f8:2d:ed:58:e4:01:ca:24:a2:9d:b5:77:9f:8e:08:5b: c1:86:78:f2:3e:fa:3d:23:57:38:02:93:1a:de:d8:53:d0:5a: 79:89:db:e7:15:7a:b9:42:65:a9:a3:46:44:2c:2c:78:0e:09: cc:48:df:5f:6a:11:9c:37:26:43:5f:0e:1e:8e:81:9f:33:23: 57:6f:2a:78:aa:b6:0a:30:a1:55:b8:ab:44:e2:be:89:0c:66: 24:06:13:85:86:33:83:fd:b7:0b:16:31:d8:fa:5f:36:63:6f: ca:55:26:f4:cd:b9:1c:53:72:8e:95:d8:8a:a4:f0:22:fa:9c: 7c:eb:34:55:48:35:eb:c6:af:2a:36:7f:b1:fc:e1:e2:c7:a0: d1:a6:9a:3c:cb:cb:b2:8b:2b:ba:95:bc:5a:35:e5:2a:dc:d3: 77:a2:97:b0:a1:55:63:c8:35:46:73:15:d1:c6:17:8c:0f:40: 99:5e:75:bf:a8:2f:6a:86:37:00:f5:fa:7e:c8:54:cf:22:af: 56:56:bf:49:46:03:a5:e3:a8:99:2b:97:f8:77:10:b8:bd:b8: 73:e1:61:e3:21:d3:e6:a3:0b:cd:b5:c6:65:ae:5b:af:b1:8a: 01:5c:f4:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE4NTcxMTAvBgNVBAUTKEM0MjZENDI2NDAwNjc2NTU1OTczREZFREU0RUIyNjQ0 QkVFRDI4NzMwHhcNMjYwNjAxMDc0NTEzWhcNMjYwNjA4MDc0NTEzWjAYMRYwFAYD VQQDEw02YTFkMzg4OS05NmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4RoAmqZ8yA3FjNL4Jm7ewMvov3IldEfKuzXFiNCLwbiSk7fUzf/Sgt70LM9e HcSWA3+sY+4vmHx7g0aQRvguSAWVN7HSSEj/+LUNShOkYbd5pFlWzggt7sV1wkoP PEG7z9Ovajag+Cfqs/UzK+pbN9IUkgMyzVAtAzxQ+b4nCrFE5o3/QkY8UTwxdBCG zt2eZoeGezn5GwLSYD+73NfLAhtEbnucdJoNH40WGkpDFiXVezn10MbdnZfMhzcH g/Ly25VV2LTVu0OGwXGIaPsv91bvRGs3JoERHk4Mm77+dZWAZEc5asgghh+fj+Ot UXwcp7aHpYF7/zmY8PqyKUoSEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCq/muc/ 4UIunVGf+0gGZbTNSJhrMB8GA1UdIwQYMBaAFMQm1CZABnZVWXPf7eTrJkS+7Shz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTg1Ny9DMUY3MzA3MjND OTgxMUYwQUYxMjRCMzhDNEY5QUUwMi94Q2JVSmtBR2RsVlpjOV90NU9zbVJMN3RL SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3hDYlVKa0FHZGxWWmM5X3Q1T3NtUkw3dEtITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTg1Ny9DMUY3MzA3MjNDOTgxMUYwQUYxMjRCMzhDNEY5QUUwMi94Q2JVSmtBR2Rs VlpjOV90NU9zbVJMN3RLSE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOGCS72wmYBPcY312fyup5K9W0NH4Le1Y5AHKJKKdtXefjghbwYZ48j76PSNX OAKTGt7YU9BaeYnb5xV6uUJlqaNGRCwseA4JzEjfX2oRnDcmQ18OHo6BnzMjV28q eKq2CjChVbirROK+iQxmJAYThYYzg/23CxYx2PpfNmNvylUm9M25HFNyjpXYiqTw IvqcfOs0VUg168avKjZ/sfzh4seg0aaaPMvLsosrupW8WjXlKtzTd6KXsKFVY8g1 RnMV0cYXjA9AmV51v6gvaoY3APX6fshUzyKvVla/SUYDpeOomSuX+HcQuL24c+Fh 4yHT5qMLzbXGZa5br7GKAVz0Ug== -----END CERTIFICATE-----Generated at Tue Jun 2 21:20:11 2026 by rpki-client