$ rpki-client -vvf rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft File: 8kxEMhD3QcvlnQFOum7pcrXN2uc.mft (raw, json) Hash identifier: oXVuabgmxjIj6WBnVjSPTxTs/GiJ8RVHHePmi60RjZw= Subject key identifier: 87:5D:60:1B:A4:0A:88:B2:44:87:5C:17:C8:CE:8A:B6:78:29:3E:9E Authority key identifier: F2:4C:44:32:10:F7:41:CB:E5:9D:01:4E:BA:6E:E9:72:B5:CD:DA:E7 Certificate issuer: /CN=A916B95A/serialNumber=F24C443210F741CBE59D014EBA6EE972B5CDDAE7 Certificate serial: 0179 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft Manifest number: 0169 Signing time: Mon 01 Jun 2026 05:34:05 +0000 Manifest this update: Mon 01 Jun 2026 05:34:04 +0000 Manifest next update: Mon 08 Jun 2026 05:34:04 +0000 Files and hashes: 1: 8kxEMhD3QcvlnQFOum7pcrXN2uc.crl (hash: ga90VDw8/5PhYCZARUwJE7yJ27MmdYNJbO5JiUK43+A=) 2: 20A6C35C37AF11EF844EC638C4F9AE02.roa (hash: EdoKG/rO2TUcNqvrT3rmtowwCMBDjmlbd0wrAkkItCE=) 3: 2117AE6E37AF11EF844EC638C4F9AE02.roa (hash: fXNyTYwGL5hwQV4+C/rGk2vU+rMPw5B8cRLeFXzc6ZM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.crl rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 05:34:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 377 (0x179) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B95A, serialNumber=F24C443210F741CBE59D014EBA6EE972B5CDDAE7 Validity Not Before: Jun 1 05:34:04 2026 GMT Not After : Jun 8 05:34:04 2026 GMT Subject: CN=6a1d19cd-9b01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:02:01:9b:2a:b5:73:26:ee:78:16:03:a4:92: 14:61:7f:0b:84:e0:f2:45:12:d3:36:8a:4f:eb:73: fb:d5:1e:b6:29:1e:6b:5d:a3:ff:9a:fe:19:a5:9b: fe:63:6f:10:11:f0:e6:9d:ca:7c:92:d7:5b:08:5c: 24:ae:d9:0e:03:78:b0:a0:7a:af:98:a6:b8:48:9e: 05:3b:f7:02:4c:56:3c:85:29:88:05:0b:ab:b3:e6: e2:ca:22:45:8b:0f:a2:97:75:e8:db:0f:1e:ac:d4: d3:85:bc:2c:ec:f2:c6:bd:a0:75:43:32:15:18:28: 3f:d4:28:39:43:0f:f6:c2:18:5e:dc:df:50:29:b0: bb:82:95:38:26:de:04:9f:80:12:fa:de:86:ec:52: 1d:be:29:4b:43:45:32:29:4a:7c:7c:0b:34:c9:1f: 9e:37:24:99:77:2b:af:15:b1:d0:72:04:97:e0:d9: 3d:39:b0:77:d8:eb:d8:d9:c8:23:c2:4a:e9:35:05: 88:7a:c6:2d:2c:d9:64:db:86:c0:9a:26:46:8c:8c: 12:30:8d:9d:f4:41:2d:c1:1d:ea:de:ab:a9:b1:f4: 5a:06:ff:ac:21:18:01:cf:02:a8:04:cb:a1:26:b1: 34:19:6f:9d:95:60:d1:57:07:56:85:4b:30:a3:2c: e2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:5D:60:1B:A4:0A:88:B2:44:87:5C:17:C8:CE:8A:B6:78:29:3E:9E X509v3 Authority Key Identifier: keyid:F2:4C:44:32:10:F7:41:CB:E5:9D:01:4E:BA:6E:E9:72:B5:CD:DA:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:c8:c3:73:1d:48:7a:92:f8:d4:cb:7e:5d:2a:fe:f1:0f:08: 6b:c7:f9:30:44:18:53:f8:23:3a:7c:dc:ce:67:39:44:be:06: 01:c7:15:03:db:a7:35:92:6c:11:56:cb:ab:6f:58:63:85:81: 32:ff:14:c8:e0:d8:a4:1c:a8:4c:69:f0:87:f9:26:c6:fd:40: 66:b1:59:63:ea:3b:bc:c6:cd:4e:29:4f:ca:22:95:b9:7f:0e: 72:2e:01:ab:75:34:56:76:18:7d:64:73:3f:36:cb:4e:60:88: 13:b7:9b:12:49:c0:da:af:e2:e9:b5:99:fa:93:bd:a4:5c:01: 02:f5:8b:79:2c:f3:5e:37:81:a8:78:05:26:1a:00:ce:a3:ec: 8f:63:24:48:d0:73:cc:0e:c3:a7:2b:cd:41:5a:e9:24:c8:7e: 25:97:9b:37:77:bc:cd:89:42:ae:72:7f:3a:6e:2d:03:3f:34: f0:57:89:e7:6e:91:ac:0e:cf:4f:23:d7:49:9a:96:10:0f:d0: 1d:9f:51:a8:90:03:e4:23:64:5c:e4:f3:41:70:cc:95:5f:b4: 2b:8a:e6:d7:11:a0:13:ab:8f:3f:6f:4b:87:74:58:02:65:19: f7:db:d7:26:ac:5b:2a:03:4d:31:1d:75:ca:7b:a6:60:50:62: 6c:9a:80:56 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI5NUExMTAvBgNVBAUTKEYyNEM0NDMyMTBGNzQxQ0JFNTlEMDE0RUJBNkVFOTcy QjVDRERBRTcwHhcNMjYwNjAxMDUzNDA0WhcNMjYwNjA4MDUzNDA0WjAYMRYwFAYD VQQDEw02YTFkMTljZC05YjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5wIBmyq1cybueBYDpJIUYX8LhODyRRLTNopP63P71R62KR5rXaP/mv4ZpZv+ Y28QEfDmncp8ktdbCFwkrtkOA3iwoHqvmKa4SJ4FO/cCTFY8hSmIBQurs+biyiJF iw+il3Xo2w8erNTThbws7PLGvaB1QzIVGCg/1Cg5Qw/2whhe3N9QKbC7gpU4Jt4E n4AS+t6G7FIdvilLQ0UyKUp8fAs0yR+eNySZdyuvFbHQcgSX4Nk9ObB32OvY2cgj wkrpNQWIesYtLNlk24bAmiZGjIwSMI2d9EEtwR3q3qupsfRaBv+sIRgBzwKoBMuh JrE0GW+dlWDRVwdWhUswoyzibwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIddYBuk CoiyRIdcF8jOirZ4KT6eMB8GA1UdIwQYMBaAFPJMRDIQ90HL5Z0BTrpu6XK1zdrn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Qjk1QS81MTJDNzA1RTM3 QUUxMUVGOEE0NThFMzdDNEY5QUUwMi84a3hFTWhEM1FjdmxuUUZPdW03cGNyWE4y dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhreEVNaEQzUWN2bG5RRk91bTdwY3JYTjJ1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Qjk1QS81MTJDNzA1RTM3QUUxMUVGOEE0NThFMzdDNEY5QUUwMi84a3hFTWhEM1Fj dmxuUUZPdW03cGNyWE4ydWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjcjDcx1IepL41Mt+XSr+8Q8Ia8f5MEQYU/gjOnzczmc5RL4GAccVA9unNZJs EVbLq29YY4WBMv8UyODYpByoTGnwh/kmxv1AZrFZY+o7vMbNTilPyiKVuX8Oci4B q3U0VnYYfWRzPzbLTmCIE7ebEknA2q/i6bWZ+pO9pFwBAvWLeSzzXjeBqHgFJhoA zqPsj2MkSNBzzA7DpyvNQVrpJMh+JZebN3e8zYlCrnJ/Om4tAz808FeJ526RrA7P TyPXSZqWEA/QHZ9RqJAD5CNkXOTzQXDMlV+0K4rm1xGgE6uPP29Lh3RYAmUZ99vX JqxbKgNNMR11ynumYFBibJqAVg== -----END CERTIFICATE-----Generated at Tue Jun 2 21:23:49 2026 by rpki-client