$ rpki-client -vvf rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft File: BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft (raw, json) Hash identifier: zYISXnkyAY9AsFhL9cQJgZXhifh+1WI1tHxA+aW3fbQ= Subject key identifier: 36:8E:8C:49:00:2E:51:32:23:67:38:9E:FB:BC:75:D4:50:2E:54:F2 Authority key identifier: 04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44 Certificate issuer: /CN=A916BDA4/serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444 Certificate serial: 1AEF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft Manifest number: 17BE Signing time: Mon 22 Jun 2026 17:03:13 +0000 Manifest this update: Mon 22 Jun 2026 17:03:12 +0000 Manifest next update: Mon 29 Jun 2026 17:03:12 +0000 Files and hashes: 1: BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl (hash: aDCApdZAUOUQRd3Cf+wXDPmWK84KLPnAUJD9WyEgInc=) 2: E3F7B966E5A811ECBE11DA6DC4F9AE02.roa (hash: AjuChnART3ISDBvzklladAYGqLiagodKkP77AQzP1jg=) 3: 164F6E2079BF11EAB3ADD60FC4F9AE02.roa (hash: 88karHuZHn9NVBaZGr8GAqmmBxfDq19Aww01VbIu2gM=) 4: 876FDB56D90211EFB7CAB32BC4F9AE02.roa (hash: CQJn2m/zy2h51mqqokDPEig3fL8lUtl0Yo6/mWdzXdA=) 5: 4E804E6C49EE11F1815E1723B9833773.roa (hash: tTb1gva5H/HAc2AdO+B3nsM1wOHKQv6Nk4oZMAjwFmc=) 6: 32BF2AD8F36E11E883FFB865C4F9AE02.roa (hash: dZG6es6tOCIPazsxJ8KTxDzO3mGqMFOCDjB+9iL/OjU=) 7: D26DDCB6F36C11E88E372D61C4F9AE02.roa (hash: +B/cYcsSzsw7yQo6HYp5CEsauNY3ej5R1D+A17Ni44Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Jun 2026 17:03:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6895 (0x1aef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BDA4, serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444 Validity Not Before: Jun 22 17:03:12 2026 GMT Not After : Jun 29 17:03:12 2026 GMT Subject: CN=6a396ad1-5820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:82:68:84:70:41:ce:f5:9a:1d:4a:b6:d3:bd: 1d:97:97:44:af:1c:32:74:a4:78:16:78:b0:1d:45: a6:27:b7:be:19:1b:73:ce:1b:4d:29:f8:ac:f0:7d: 1f:28:b6:62:ab:53:55:24:7e:e3:40:ec:fb:5f:ee: 92:71:36:53:e9:3f:87:5d:50:e2:5e:1f:51:56:7a: 71:b0:64:74:45:c3:52:cf:2d:91:2d:b1:58:9b:f2: 6f:60:b3:90:a9:e3:23:a1:8b:5c:ba:28:01:1b:dd: 7b:19:0f:48:bd:96:e1:63:30:df:8a:f7:a8:4a:c2: 1f:94:77:dd:58:66:df:4c:c7:82:70:01:5f:93:c3: cd:5f:af:2f:f4:59:cc:1a:96:db:88:2d:3b:28:f3: 49:e2:22:61:c4:93:ec:69:be:56:35:0f:b3:ba:6d: 39:7e:c1:7b:8e:53:42:b0:6e:99:b1:f7:57:94:78: d9:bc:b9:1a:60:45:1c:9b:53:61:5d:85:ec:d4:bd: 34:91:66:c8:e7:ba:03:e7:d3:13:89:77:de:32:52: d8:07:99:47:b9:78:dd:e5:f3:3a:65:fd:68:a6:05: 69:ba:bd:01:b7:d8:bf:04:90:46:54:c2:1f:09:22: da:4d:b5:54:74:16:17:d2:3c:10:85:09:21:96:fc: 1f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:8E:8C:49:00:2E:51:32:23:67:38:9E:FB:BC:75:D4:50:2E:54:F2 X509v3 Authority Key Identifier: keyid:04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:60:05:77:0a:81:9a:71:ad:ea:8e:00:30:c0:6e:50:8a:30: 3a:e0:db:62:5c:37:45:f4:43:ea:bb:ac:89:79:78:32:88:b6: 17:09:2e:0c:82:d7:58:58:ef:2a:95:18:95:2a:ad:46:5e:56: 16:40:2b:33:6d:e2:5a:f9:5f:c8:27:56:d7:30:16:a1:98:0b: 1e:02:32:f5:8f:33:31:ad:f3:ce:c4:00:69:c3:2f:7d:69:f2: 32:2c:64:72:e6:ef:83:d8:5e:98:ae:f1:d2:b2:40:99:71:bc: e7:bb:6b:2c:f7:84:f1:83:2f:70:c2:97:d3:9b:5e:4c:8e:19: fa:ef:d1:4c:77:ab:04:54:72:01:87:6d:13:41:6c:57:af:75: 0d:3e:bb:21:29:3e:17:ed:bb:bb:48:4e:57:9c:63:a5:06:a1: 8b:f7:4c:20:46:6c:1b:61:ba:a6:67:58:4d:cc:ec:25:5d:01: 95:e5:38:f5:fe:ab:f7:1c:b7:d4:59:ed:62:bc:9b:2b:0a:0d: bc:27:73:83:c9:8b:af:c2:d6:29:df:59:7c:75:f2:5d:3d:d0: c9:34:9c:2d:95:f3:eb:be:a0:46:79:60:44:e8:81:ca:ea:a8: 4e:ab:9a:56:ea:7a:5f:9a:4e:78:e7:80:6b:86:57:16:6b:1d: a1:52:9d:8a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGu8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJEQTQxMTAvBgNVBAUTKDA0RTZDOTI0OUVFMzQ4RENGNzY0REYwQjlBNDBEM0U4 NTQwNjY0NDQwHhcNMjYwNjIyMTcwMzEyWhcNMjYwNjI5MTcwMzEyWjAYMRYwFAYD VQQDEw02YTM5NmFkMS01ODIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApYJohHBBzvWaHUq2070dl5dErxwydKR4FniwHUWmJ7e+GRtzzhtNKfis8H0f KLZiq1NVJH7jQOz7X+6ScTZT6T+HXVDiXh9RVnpxsGR0RcNSzy2RLbFYm/JvYLOQ qeMjoYtcuigBG917GQ9IvZbhYzDfiveoSsIflHfdWGbfTMeCcAFfk8PNX68v9FnM GpbbiC07KPNJ4iJhxJPsab5WNQ+zum05fsF7jlNCsG6ZsfdXlHjZvLkaYEUcm1Nh XYXs1L00kWbI57oD59MTiXfeMlLYB5lHuXjd5fM6Zf1opgVpur0Bt9i/BJBGVMIf CSLaTbVUdBYX0jwQhQkhlvwfJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDaOjEkA LlEyI2c4nvu8ddRQLlTyMB8GA1UdIwQYMBaAFATmySSe40jc92TfC5pA0+hUBmRE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkRBNC8xRUM3MDJCQ0Yx QTcxMUU4OTBGMDY2NTBDNEY5QUUwMi9CT2JKSko3alNOejNaTjhMbWtEVDZGUUda RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JPYkpKSjdqU056M1pOOExta0RUNkZRR1pFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkRBNC8xRUM3MDJCQ0YxQTcxMUU4OTBGMDY2NTBDNEY5QUUwMi9CT2JKSko3alNO ejNaTjhMbWtEVDZGUUdaRVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAWAFdwqBmnGt6o4AMMBuUIowOuDbYlw3RfRD6rusiXl4Moi2FwkuDILXWFjv KpUYlSqtRl5WFkArM23iWvlfyCdW1zAWoZgLHgIy9Y8zMa3zzsQAacMvfWnyMixk cubvg9hemK7x0rJAmXG857trLPeE8YMvcMKX05teTI4Z+u/RTHerBFRyAYdtE0Fs V691DT67ISk+F+27u0hOV5xjpQahi/dMIEZsG2G6pmdYTczsJV0BleU49f6r9xy3 1FntYrybKwoNvCdzg8mLr8LWKd9ZfHXyXT3QyTScLZXz676gRnlgROiByuqoTqua Vup6X5pOeOeAa4ZXFmsdoVKdig== -----END CERTIFICATE-----Generated at Tue Jun 23 20:18:20 2026 by rpki-client