$ rpki-client -vvf rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft File: cEb4mD38NwS25c1-oSgP0PUpeaA.mft (raw, json) Hash identifier: u7DZVdJBCf4jonta25z93cdqFVR2MAjp4p/QIL1cfBY= Subject key identifier: AF:FD:0C:92:55:30:1F:32:10:3B:01:6B:08:06:71:37:B7:87:4C:3A Authority key identifier: 70:46:F8:98:3D:FC:37:04:B6:E5:CD:7E:A1:28:0F:D0:F5:29:79:A0 Certificate issuer: /CN=A916320B/serialNumber=7046F8983DFC3704B6E5CD7EA1280FD0F52979A0 Certificate serial: 0C73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft Manifest number: 0C5C Signing time: Sun 14 Jun 2026 18:41:40 +0000 Manifest this update: Sun 14 Jun 2026 18:41:39 +0000 Manifest next update: Sun 21 Jun 2026 18:41:39 +0000 Files and hashes: 1: cEb4mD38NwS25c1-oSgP0PUpeaA.crl (hash: gdH0+u2bbfkgRT12k6APpnMmi3UTKmdL3ebHSBSifOo=) 2: 1B8483D04EEA11EA828FA155C4F9AE02.roa (hash: 6MBuRcB02GtiYUBvJ02SIBDjH2QM+fC5ns7ciouEVr4=) 3: B9003CC84EE811EA8C045D52C4F9AE02.roa (hash: OjXelywDvs3PcA0G5eAXOiCmYLOHa7gJb/8woUyNMgM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.crl rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 18:41:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3187 (0xc73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916320B, serialNumber=7046F8983DFC3704B6E5CD7EA1280FD0F52979A0 Validity Not Before: Jun 14 18:41:39 2026 GMT Not After : Jun 21 18:41:39 2026 GMT Subject: CN=6a2ef5e4-34f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:04:d0:2f:46:c1:55:d1:ce:fb:cb:31:2f:9a: c2:78:12:65:03:cc:75:4c:46:b3:81:b5:92:49:9b: ec:dc:85:29:bb:71:d7:ef:8d:5d:a1:c4:65:76:87: 37:a3:90:ef:88:18:b9:bc:dc:7c:60:0c:30:36:eb: d8:83:e8:9d:7e:9b:e3:f9:84:43:ac:d0:53:9c:a7: be:cd:d3:91:df:c6:e5:ec:ec:58:3d:8f:3e:53:3f: 99:15:8d:e7:5f:86:aa:29:43:50:f9:f1:0a:eb:ec: 6a:e3:4e:2c:50:d8:44:24:5c:e4:a7:9b:7b:3b:f1: 81:f5:65:2e:ff:40:29:8e:78:93:03:d8:1a:d9:dc: b7:65:ff:ac:5d:7f:df:4d:8f:0c:d3:ee:45:77:87: 6d:04:e3:ed:94:aa:58:60:46:59:95:32:a7:a1:a3: 97:78:e9:0f:a0:ce:18:6c:b1:48:aa:d9:2c:22:f0: 74:41:12:04:55:cb:ba:2e:a3:31:53:90:47:43:49: 68:11:2b:8b:8a:24:3e:c7:7f:bc:e4:d3:10:35:36: 6d:d1:b3:77:20:ac:20:5e:d1:fc:f3:65:b0:f8:82: cf:e7:5a:3b:40:57:61:97:1d:f9:ee:52:bc:ff:11: cf:db:02:cc:da:fb:cb:8b:c2:1f:d2:f2:f0:fc:56: fb:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:FD:0C:92:55:30:1F:32:10:3B:01:6B:08:06:71:37:B7:87:4C:3A X509v3 Authority Key Identifier: keyid:70:46:F8:98:3D:FC:37:04:B6:E5:CD:7E:A1:28:0F:D0:F5:29:79:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:63:90:61:25:b9:3e:be:d9:dd:73:8d:4e:22:3b:f1:f7:5a: ea:cf:e1:bb:f1:58:e8:1f:f4:4e:d2:1b:01:cd:ca:90:25:d8: 98:4c:10:03:8a:4b:1b:71:68:d2:4e:14:f6:79:83:fe:09:a5: b0:80:2d:ec:28:ab:fb:cd:d6:6d:e1:e0:01:e1:1d:fb:03:99: 60:36:b0:a0:7d:9f:4e:dc:53:87:e3:49:44:5c:10:90:c5:29: b1:76:12:f1:15:97:82:7d:1e:5e:28:85:c9:49:88:c9:4a:73: 0e:a7:db:af:eb:ad:d5:7b:dd:57:6c:b9:d7:44:91:d5:c3:11: 4c:f6:fa:09:f3:64:7d:38:82:43:04:dd:cd:56:43:1d:03:7b: 16:9e:cd:07:4f:41:94:47:5e:c8:7c:16:75:05:7d:6c:6d:85: 6e:08:ba:e0:49:11:37:e5:ad:1a:d3:9c:5f:bd:03:89:20:37: 4c:cb:fb:ba:55:18:f1:2b:be:00:e1:b7:98:9a:4b:5b:9e:44: a6:2a:06:df:01:05:b7:35:83:08:36:42:48:ae:53:fa:8d:4c: 25:45:f3:ef:80:e8:ed:a9:ed:b2:a5:ef:74:0c:96:8c:67:97: ed:0f:8f:cf:a4:6a:3b:7c:bf:88:7d:90:dc:71:80:7e:03:db: bc:59:6c:fe -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDHMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjMyMEIxMTAvBgNVBAUTKDcwNDZGODk4M0RGQzM3MDRCNkU1Q0Q3RUExMjgwRkQw RjUyOTc5QTAwHhcNMjYwNjE0MTg0MTM5WhcNMjYwNjIxMTg0MTM5WjAYMRYwFAYD VQQDEw02YTJlZjVlNC0zNGYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6gTQL0bBVdHO+8sxL5rCeBJlA8x1TEazgbWSSZvs3IUpu3HX741docRldoc3 o5DviBi5vNx8YAwwNuvYg+idfpvj+YRDrNBTnKe+zdOR38bl7OxYPY8+Uz+ZFY3n X4aqKUNQ+fEK6+xq404sUNhEJFzkp5t7O/GB9WUu/0ApjniTA9ga2dy3Zf+sXX/f TY8M0+5Fd4dtBOPtlKpYYEZZlTKnoaOXeOkPoM4YbLFIqtksIvB0QRIEVcu6LqMx U5BHQ0loESuLiiQ+x3+85NMQNTZt0bN3IKwgXtH882Ww+ILP51o7QFdhlx357lK8 /xHP2wLM2vvLi8If0vLw/Fb7gQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK/9DJJV MB8yEDsBawgGcTe3h0w6MB8GA1UdIwQYMBaAFHBG+Jg9/DcEtuXNfqEoD9D1KXmg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzIwQi8wRkZGN0FBQTI3 QUUxMUVBODU5NTZFNzhDNEY5QUUwMi9jRWI0bUQzOE53UzI1YzEtb1NnUDBQVXBl YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NFYjRtRDM4TndTMjVjMS1vU2dQMFBVcGVhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzIwQi8wRkZGN0FBQTI3QUUxMUVBODU5NTZFNzhDNEY5QUUwMi9jRWI0bUQzOE53 UzI1YzEtb1NnUDBQVXBlYUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO2OQYSW5Pr7Z3XONTiI78fda6s/hu/FY6B/0TtIbAc3KkCXYmEwQA4pLG3Fo 0k4U9nmD/gmlsIAt7Cir+83WbeHgAeEd+wOZYDawoH2fTtxTh+NJRFwQkMUpsXYS 8RWXgn0eXiiFyUmIyUpzDqfbr+ut1XvdV2y510SR1cMRTPb6CfNkfTiCQwTdzVZD HQN7Fp7NB09BlEdeyHwWdQV9bG2Fbgi64EkRN+WtGtOcX70DiSA3TMv7ulUY8Su+ AOG3mJpLW55EpioG3wEFtzWDCDZCSK5T+o1MJUXz74Do7antsqXvdAyWjGeX7Q+P z6RqO3y/iH2Q3HGAfgPbvFls/g== -----END CERTIFICATE-----Generated at Tue Jun 16 17:38:02 2026 by rpki-client