$ rpki-client -vvf rpki.apnic.net/member_repository/A9173D5E/2AA6E244FE6711F0A75C8852536F56BC/f2OOENa_P0qFS8YKE8I5svNdFOE.mft File: f2OOENa_P0qFS8YKE8I5svNdFOE.mft (raw, json) Hash identifier: Isz2SDGYy/gH+WkFSWMVfp9oG1tkWjxxKtuRwYCdzXM= Subject key identifier: 36:64:3B:28:25:F0:80:0A:D0:67:FE:BB:40:E1:D6:8A:81:3C:DD:DF Authority key identifier: 7F:63:8E:10:D6:BF:3F:4A:85:4B:C6:0A:13:C2:39:B2:F3:5D:14:E1 Certificate issuer: /CN=A9173D5E/serialNumber=7F638E10D6BF3F4A854BC60A13C239B2F35D14E1 Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f2OOENa_P0qFS8YKE8I5svNdFOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173D5E/2AA6E244FE6711F0A75C8852536F56BC/f2OOENa_P0qFS8YKE8I5svNdFOE.mft Manifest number: 42 Signing time: Mon 01 Jun 2026 09:15:48 +0000 Manifest this update: Mon 01 Jun 2026 09:15:47 +0000 Manifest next update: Mon 08 Jun 2026 09:15:47 +0000 Files and hashes: 1: f2OOENa_P0qFS8YKE8I5svNdFOE.crl (hash: 4geXO/IglT6bVzFtwj4np196qYzMGskVtDsR1MrNvdI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173D5E/2AA6E244FE6711F0A75C8852536F56BC/f2OOENa_P0qFS8YKE8I5svNdFOE.crl rsync://rpki.apnic.net/member_repository/A9173D5E/2AA6E244FE6711F0A75C8852536F56BC/f2OOENa_P0qFS8YKE8I5svNdFOE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f2OOENa_P0qFS8YKE8I5svNdFOE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 09:15:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173D5E, serialNumber=7F638E10D6BF3F4A854BC60A13C239B2F35D14E1 Validity Not Before: Jun 1 09:15:47 2026 GMT Not After : Jun 8 09:15:47 2026 GMT Subject: CN=6a1d4dc4-22ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:19:e3:73:6b:85:48:b6:14:31:de:8a:12:8f: 41:ed:6d:bf:29:fc:aa:e5:11:65:c2:c5:1c:f9:e2: 18:ab:d6:8a:d6:39:d9:f1:f0:3b:e4:a2:3f:50:2e: 6e:2e:a9:1c:cf:a9:d9:f0:8b:36:dc:2d:a7:d9:49: 7e:f2:4c:7e:b0:5f:a0:48:64:f1:c9:59:21:3c:58: 42:91:a0:2e:c2:5c:b9:e4:60:81:18:bb:47:9e:c3: 2b:fd:b6:8f:28:9b:31:c4:cc:30:8f:35:09:ee:a5: d7:71:c8:77:74:b2:df:ef:f3:6f:2a:13:8b:2b:6d: 5e:81:a7:2d:08:af:c8:98:b6:c3:30:db:65:18:f1: 5e:0d:16:85:be:44:09:ce:7a:08:68:c6:2b:2a:13: 7d:fc:2c:01:a6:a8:0e:ad:9b:52:c0:d6:ab:86:76: 47:e8:c9:31:9c:2c:49:40:ed:93:52:f2:dc:7f:e9: 0c:77:e4:62:ad:e4:0c:1d:a8:9c:fe:39:56:0a:31: a1:9d:6f:09:04:62:10:4d:04:26:a0:d8:31:fe:58: 1c:65:d7:0c:29:1f:31:68:0f:40:bb:82:92:ed:b8: 25:d0:d3:55:a3:b2:2b:c5:65:0d:c6:a0:90:82:69: 1d:71:dd:57:e4:52:17:58:55:99:c2:6d:b1:02:6b: 2f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:64:3B:28:25:F0:80:0A:D0:67:FE:BB:40:E1:D6:8A:81:3C:DD:DF X509v3 Authority Key Identifier: keyid:7F:63:8E:10:D6:BF:3F:4A:85:4B:C6:0A:13:C2:39:B2:F3:5D:14:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173D5E/2AA6E244FE6711F0A75C8852536F56BC/f2OOENa_P0qFS8YKE8I5svNdFOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f2OOENa_P0qFS8YKE8I5svNdFOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173D5E/2AA6E244FE6711F0A75C8852536F56BC/f2OOENa_P0qFS8YKE8I5svNdFOE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:99:d2:1d:75:f5:db:23:b6:aa:eb:cc:9f:08:18:b8:94:ea: 17:17:7b:3e:39:5d:49:a3:ee:99:48:bb:e9:c8:41:a4:e0:fd: b1:3b:54:a9:c5:52:48:35:d2:ab:ca:b8:b9:bf:cd:38:ac:fb: 6b:00:f1:c7:7a:84:69:54:dc:44:ee:02:8f:44:51:24:a7:a2: 3c:58:80:94:a6:40:97:4e:cc:ba:f7:11:20:be:04:70:d8:30: 4f:7b:3d:b8:32:11:78:1b:f4:9c:3d:ae:83:ce:06:1d:db:07: 11:3c:3f:61:eb:ca:f2:d1:1d:a3:35:4f:d8:d9:19:e9:b2:ff: 09:c0:d5:14:19:3c:79:3d:84:54:61:3b:53:58:63:27:60:10: b4:52:4f:2a:f1:c1:b6:16:0b:a0:3e:7d:de:b3:69:20:cf:f3: b5:99:15:09:bf:fc:9c:1c:91:a2:91:49:9a:88:1e:10:b2:06: 03:3d:6b:ce:82:ba:d2:4d:52:4b:7d:d7:2c:6c:da:a7:3f:88: d1:3d:23:9f:64:10:6e:a7:11:8c:c0:f9:29:31:4e:1a:24:56: 2b:50:92:84:3c:98:3e:dc:8e:06:90:53:44:b3:14:14:d5:a2: a6:1f:33:0c:c4:55:57:7c:b3:dd:b3:74:30:3f:11:ef:f6:2d: af:b4:c1:f3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 M0Q1RTExMC8GA1UEBRMoN0Y2MzhFMTBENkJGM0Y0QTg1NEJDNjBBMTNDMjM5QjJG MzVEMTRFMTAeFw0yNjA2MDEwOTE1NDdaFw0yNjA2MDgwOTE1NDdaMBgxFjAUBgNV BAMTDTZhMWQ0ZGM0LTIyYmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMGeNza4VIthQx3ooSj0Htbb8p/KrlEWXCxRz54hir1orWOdnx8Dvkoj9QLm4u qRzPqdnwizbcLafZSX7yTH6wX6BIZPHJWSE8WEKRoC7CXLnkYIEYu0eewyv9to8o mzHEzDCPNQnupddxyHd0st/v828qE4srbV6Bpy0Ir8iYtsMw22UY8V4NFoW+RAnO eghoxisqE338LAGmqA6tm1LA1quGdkfoyTGcLElA7ZNS8tx/6Qx35GKt5AwdqJz+ OVYKMaGdbwkEYhBNBCag2DH+WBxl1wwpHzFoD0C7gpLtuCXQ01WjsivFZQ3GoJCC aR1x3VfkUhdYVZnCbbECay+zAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUNmQ7KCXw gArQZ/67QOHWioE83d8wHwYDVR0jBBgwFoAUf2OOENa/P0qFS8YKE8I5svNdFOEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTczRDVFLzJBQTZFMjQ0RkU2 NzExRjBBNzVDODg1MjUzNkY1NkJDL2YyT09FTmFfUDBxRlM4WUtFOEk1c3ZOZEZP RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZjJPT0VOYV9QMHFGUzhZS0U4STVzdk5kRk9FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcz RDVFLzJBQTZFMjQ0RkU2NzExRjBBNzVDODg1MjUzNkY1NkJDL2YyT09FTmFfUDBx RlM4WUtFOEk1c3ZOZEZPRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBNmdIddfXbI7aq68yfCBi4lOoXF3s+OV1Jo+6ZSLvpyEGk4P2xO1SpxVJINdKr yri5v804rPtrAPHHeoRpVNxE7gKPRFEkp6I8WICUpkCXTsy69xEgvgRw2DBPez24 MhF4G/ScPa6DzgYd2wcRPD9h68ry0R2jNU/Y2Rnpsv8JwNUUGTx5PYRUYTtTWGMn YBC0Uk8q8cG2FgugPn3es2kgz/O1mRUJv/ycHJGikUmaiB4QsgYDPWvOgrrSTVJL fdcsbNqnP4jRPSOfZBBupxGMwPkpMU4aJFYrUJKEPJg+3I4GkFNEsxQU1aKmHzMM xFVXfLPds3QwPxHv9i2vtMHz -----END CERTIFICATE-----Generated at Tue Jun 2 21:19:42 2026 by rpki-client