$ rpki-client -vvf rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft File: D5qo3lPwhe6GWh490qI0TiEwrxQ.mft (raw, json) Hash identifier: TUfhHE834qD2Rr/Yfdt61kXXfPRcaWH6aHD1aZy9g54= Subject key identifier: DF:FB:0F:67:DA:E6:9F:DC:F1:17:E3:0F:7E:EA:AB:2A:A2:45:8F:1A Authority key identifier: 0F:9A:A8:DE:53:F0:85:EE:86:5A:1E:3D:D2:A2:34:4E:21:30:AF:14 Certificate issuer: /CN=A916F7BE/serialNumber=0F9AA8DE53F085EE865A1E3DD2A2344E2130AF14 Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5qo3lPwhe6GWh490qI0TiEwrxQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft Manifest number: 0129 Signing time: Mon 01 Jun 2026 06:26:31 +0000 Manifest this update: Mon 01 Jun 2026 06:26:30 +0000 Manifest next update: Mon 08 Jun 2026 06:26:30 +0000 Files and hashes: 1: D5qo3lPwhe6GWh490qI0TiEwrxQ.crl (hash: UgVqNxbBkUeiPKJPlcDF/3oHhv26d+z62G9JDEqWUC4=) 2: 9AEE04EAA30C11EFB8323D14C4F9AE02.roa (hash: iPK+TPwB+YsNmbSno8QK/8aEGZdVfS6O1fIUEsLY2Vk=) 3: 310E8C36A30A11EFB999C96CC4F9AE02.roa (hash: m8laUDI9Zve1KrkarzeEr1E6AJ5CS17om1cAY5y7GWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.crl rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5qo3lPwhe6GWh490qI0TiEwrxQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 06:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F7BE, serialNumber=0F9AA8DE53F085EE865A1E3DD2A2344E2130AF14 Validity Not Before: Jun 1 06:26:30 2026 GMT Not After : Jun 8 06:26:30 2026 GMT Subject: CN=6a1d2616-a799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c2:7f:fb:d6:1c:32:1b:34:bb:20:44:5e:6d: 12:ad:d2:9c:65:8d:19:f7:ba:bb:34:e0:72:5c:02: bb:d2:d4:ed:70:04:81:2a:12:f7:cb:63:55:67:60: b0:30:6b:6f:97:2a:53:ff:73:90:d4:09:2b:b8:6a: 1f:2c:a8:a5:3b:b0:99:cf:d5:4c:5e:66:39:e5:5b: 08:aa:42:ab:ec:f1:d6:4e:af:5b:ec:cf:b2:e0:2d: 30:3e:d6:57:f6:61:fa:62:c4:43:25:7f:c2:10:54: 1d:68:53:f1:3a:55:8f:0e:5e:e9:61:31:41:05:48: 7a:54:9b:6c:ca:c3:41:81:8c:0a:71:e5:d5:5a:41: 61:3d:3d:16:74:62:f6:a7:b3:92:6a:45:7d:16:0f: 6c:90:92:da:2a:b5:c2:e5:f4:b1:fd:f3:6d:76:b8: c7:fb:b0:3a:85:e7:d2:33:de:99:d4:06:ab:b6:c9: 88:c5:bd:fa:fb:5f:52:7e:fe:75:75:46:04:f7:cb: 49:62:ac:fa:1e:e1:40:d2:88:a0:5b:ac:cd:cc:eb: 97:3c:38:42:da:1c:85:77:59:89:b6:52:52:92:4f: 92:8f:0c:8e:96:f6:a0:3b:dc:fa:a5:79:45:ca:e4: 18:dc:d5:2c:85:7e:4a:b3:b3:3b:1e:14:42:4a:88: b8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:FB:0F:67:DA:E6:9F:DC:F1:17:E3:0F:7E:EA:AB:2A:A2:45:8F:1A X509v3 Authority Key Identifier: keyid:0F:9A:A8:DE:53:F0:85:EE:86:5A:1E:3D:D2:A2:34:4E:21:30:AF:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5qo3lPwhe6GWh490qI0TiEwrxQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:f6:eb:fd:81:97:f0:28:b8:56:d8:50:6d:86:9d:2b:41:05: 48:f8:54:9e:28:57:e3:fa:7b:59:8b:d3:12:08:94:5f:cc:3d: 63:18:19:80:1a:b2:80:be:ea:9d:da:60:5a:52:74:25:03:54: e8:f1:be:7c:d5:6c:e3:19:bd:88:23:7f:1e:9a:bf:33:41:a9: af:a2:a5:f7:e0:ae:0c:b5:b1:91:d7:b6:07:f6:78:74:e5:89: b2:8a:72:86:f3:9e:0e:2e:d2:72:61:52:65:32:04:2b:f5:e8: 5c:68:80:91:aa:9d:54:45:0f:71:07:06:3f:d9:7e:a1:99:c9: 48:62:dc:c6:83:4f:f4:13:33:d3:cb:c6:8b:eb:bc:86:fb:55: 4b:66:7e:34:03:62:9c:e8:52:6f:cc:56:85:47:99:32:84:cf: 58:e1:9a:d5:36:09:50:56:72:b3:af:63:a2:fb:22:ad:31:37: 2f:3a:28:dd:44:27:de:3d:6b:31:ef:cb:23:49:2d:90:f2:d2: ba:3a:7c:d2:39:92:d5:a7:37:d5:43:9d:9d:b6:6d:39:6d:c0: 73:ad:f0:ba:c6:c6:3e:a1:2e:c4:5c:24:b6:0c:1d:11:7b:49: b1:b2:d1:b8:60:20:50:28:65:4e:3d:1f:b1:f4:16:bf:75:4b: c0:02:27:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkY3QkUxMTAvBgNVBAUTKDBGOUFBOERFNTNGMDg1RUU4NjVBMUUzREQyQTIzNDRF MjEzMEFGMTQwHhcNMjYwNjAxMDYyNjMwWhcNMjYwNjA4MDYyNjMwWjAYMRYwFAYD VQQDEw02YTFkMjYxNi1hNzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsMJ/+9YcMhs0uyBEXm0SrdKcZY0Z97q7NOByXAK70tTtcASBKhL3y2NVZ2Cw MGtvlypT/3OQ1AkruGofLKilO7CZz9VMXmY55VsIqkKr7PHWTq9b7M+y4C0wPtZX 9mH6YsRDJX/CEFQdaFPxOlWPDl7pYTFBBUh6VJtsysNBgYwKceXVWkFhPT0WdGL2 p7OSakV9Fg9skJLaKrXC5fSx/fNtdrjH+7A6hefSM96Z1AartsmIxb36+19Sfv51 dUYE98tJYqz6HuFA0oigW6zNzOuXPDhC2hyFd1mJtlJSkk+SjwyOlvagO9z6pXlF yuQY3NUshX5Ks7M7HhRCSoi4CQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN/7D2fa 5p/c8RfjD37qqyqiRY8aMB8GA1UdIwQYMBaAFA+aqN5T8IXuhloePdKiNE4hMK8U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RjdCRS8wOUNFMzI2NDlD RkUxMUVGOEVFQzkwNEFDNEY5QUUwMi9ENXFvM2xQd2hlNkdXaDQ5MHFJMFRpRXdy eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q1cW8zbFB3aGU2R1doNDkwcUkwVGlFd3J4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RjdCRS8wOUNFMzI2NDlDRkUxMUVGOEVFQzkwNEFDNEY5QUUwMi9ENXFvM2xQd2hl NkdXaDQ5MHFJMFRpRXdyeFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnPbr/YGX8Ci4VthQbYadK0EFSPhUnihX4/p7WYvTEgiUX8w9YxgZgBqygL7q ndpgWlJ0JQNU6PG+fNVs4xm9iCN/Hpq/M0Gpr6Kl9+CuDLWxkde2B/Z4dOWJsopy hvOeDi7ScmFSZTIEK/XoXGiAkaqdVEUPcQcGP9l+oZnJSGLcxoNP9BMz08vGi+u8 hvtVS2Z+NANinOhSb8xWhUeZMoTPWOGa1TYJUFZys69jovsirTE3Lzoo3UQn3j1r Me/LI0ktkPLSujp80jmS1ac31UOdnbZtOW3Ac63wusbGPqEuxFwktgwdEXtJsbLR uGAgUChlTj0fsfQWv3VLwAIn8w== -----END CERTIFICATE-----Generated at Wed Jun 3 19:57:46 2026 by rpki-client