$ rpki-client -vvf rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft File: kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft (raw, json) Hash identifier: lfAbNhnqX7Q98BjWbQc/pRbkutvM6P4FIGl/oSCrVNE= Subject key identifier: A7:C8:57:7D:7C:26:54:B8:32:34:02:6F:15:74:E3:35:B7:3F:50:76 Authority key identifier: 91:0F:2F:41:40:8E:13:DA:ED:7C:21:DC:47:2D:C5:C5:8C:45:88:36 Certificate issuer: /CN=A917408F/serialNumber=910F2F41408E13DAED7C21DC472DC5C58C458836 Certificate serial: 012B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft Manifest number: 0122 Signing time: Tue 23 Jun 2026 06:01:55 +0000 Manifest this update: Tue 23 Jun 2026 06:01:54 +0000 Manifest next update: Tue 30 Jun 2026 06:01:54 +0000 Files and hashes: 1: kQ8vQUCOE9rtfCHcRy3FxYxFiDY.crl (hash: g6iUi/9evbUgmewfTB0N4EsaBrzg/F/P+ePkd0Rvh6c=) 2: 9CEF2622B76E11EF8FCC9767C4F9AE02.roa (hash: BT5lGoepooMPklXWzsmxnmANaCteYyqvqzOaxtbVyhM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.crl rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jun 2026 06:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917408F, serialNumber=910F2F41408E13DAED7C21DC472DC5C58C458836 Validity Not Before: Jun 23 06:01:54 2026 GMT Not After : Jun 30 06:01:54 2026 GMT Subject: CN=6a3a2152-c913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ec:18:f5:fa:bf:49:5b:9e:ab:2a:59:17:7b: eb:70:55:44:05:a0:46:e0:18:e3:3e:33:9d:5d:69: 86:f7:aa:ab:4f:c3:86:11:c0:4a:45:e2:69:b8:22: e7:bf:6e:88:2b:b8:f6:d9:1c:f2:c7:be:33:3d:75: af:97:93:93:35:01:ed:41:b9:1c:bb:e1:9d:68:45: b1:ca:bf:a3:c9:5d:97:88:a2:8a:0e:ac:c4:79:1f: a6:0b:7b:59:a5:a7:03:3c:b0:96:b6:00:01:9f:ab: 4e:ae:f1:55:4b:3e:22:56:39:79:b7:8f:75:8a:d6: ac:92:23:f5:eb:33:01:51:8e:ac:93:43:cd:bd:dc: e0:e6:41:08:0d:4a:6b:84:62:28:35:de:1f:8e:15: 0d:e2:d3:58:c8:58:a8:b7:d9:92:e1:e8:1e:8c:68: aa:b9:59:b7:47:3e:61:0f:c8:97:43:3e:ef:75:15: 9d:a4:d1:6c:08:d1:12:97:b8:c3:37:1c:69:86:3c: be:7c:9b:1e:49:d6:9d:ee:bc:56:cf:69:5e:01:5c: 80:c5:a6:e2:f5:c9:79:b3:f8:62:47:ae:a0:75:ac: c7:50:aa:73:a8:e2:d0:8e:26:6f:b6:0f:0a:2d:f6: 09:96:5b:aa:fd:a7:1b:c3:8d:6c:23:a7:6b:12:7d: 8e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:C8:57:7D:7C:26:54:B8:32:34:02:6F:15:74:E3:35:B7:3F:50:76 X509v3 Authority Key Identifier: keyid:91:0F:2F:41:40:8E:13:DA:ED:7C:21:DC:47:2D:C5:C5:8C:45:88:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:b8:dc:ff:94:2b:3a:04:84:b1:4c:40:cd:53:9c:51:e8:de: 0e:6a:8b:e8:d8:96:43:80:cb:60:4f:53:5c:a6:a2:4b:f9:01: 0e:06:fa:5e:7e:a2:23:e8:8d:7e:cd:80:41:32:92:32:93:87: 65:46:07:3b:e8:38:8e:db:4a:92:9b:17:c3:95:3a:ea:3c:cc: b6:de:96:f3:3e:00:fd:c9:26:b4:04:f3:67:8b:01:f6:1b:43: 61:6b:7b:00:67:14:3c:72:fc:43:6a:43:74:a8:3c:be:e6:2e: b6:07:a9:a8:ff:09:ed:34:95:18:30:35:d3:38:8d:66:6a:e0: a2:37:23:8a:e6:62:99:88:51:af:8d:13:b0:1d:9d:37:0e:a7: 14:56:e5:68:48:e2:8d:3c:ac:79:65:56:c5:ff:e2:17:d0:b8: 15:aa:00:7e:74:49:a8:69:80:f4:a9:46:88:1b:bc:0e:6a:ed: e3:b7:e1:52:9a:05:c3:3f:fe:b1:83:12:63:91:df:3a:e2:73: cf:6b:48:bf:27:dc:49:db:0e:17:3c:68:7b:90:32:2b:a0:7d: 18:fb:fd:0b:f9:29:76:44:1a:58:97:cf:dd:30:72:b7:6a:2f: e2:ea:93:1d:73:d6:db:3b:19:58:f7:e6:ae:a4:58:f3:28:8e: 9f:11:81:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQwOEYxMTAvBgNVBAUTKDkxMEYyRjQxNDA4RTEzREFFRDdDMjFEQzQ3MkRDNUM1 OEM0NTg4MzYwHhcNMjYwNjIzMDYwMTU0WhcNMjYwNjMwMDYwMTU0WjAYMRYwFAYD VQQDEw02YTNhMjE1Mi1jOTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm+wY9fq/SVueqypZF3vrcFVEBaBG4BjjPjOdXWmG96qrT8OGEcBKReJpuCLn v26IK7j22Rzyx74zPXWvl5OTNQHtQbkcu+GdaEWxyr+jyV2XiKKKDqzEeR+mC3tZ pacDPLCWtgABn6tOrvFVSz4iVjl5t491itaskiP16zMBUY6sk0PNvdzg5kEIDUpr hGIoNd4fjhUN4tNYyFiot9mS4egejGiquVm3Rz5hD8iXQz7vdRWdpNFsCNESl7jD Nxxphjy+fJseSdad7rxWz2leAVyAxabi9cl5s/hiR66gdazHUKpzqOLQjiZvtg8K LfYJlluq/acbw41sI6drEn2OmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKfIV318 JlS4MjQCbxV04zW3P1B2MB8GA1UdIwQYMBaAFJEPL0FAjhPa7Xwh3EctxcWMRYg2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDA4Ri8xNkNEOTg1OEI3 NkUxMUVGQUNGMEY4NjVDNEY5QUUwMi9rUTh2UVVDT0U5cnRmQ0hjUnkzRnhZeEZp RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tROHZRVUNPRTlydGZDSGNSeTNGeFl4RmlEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDA4Ri8xNkNEOTg1OEI3NkUxMUVGQUNGMEY4NjVDNEY5QUUwMi9rUTh2UVVDT0U5 cnRmQ0hjUnkzRnhZeEZpRFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiLjc/5QrOgSEsUxAzVOcUejeDmqL6NiWQ4DLYE9TXKaiS/kBDgb6Xn6iI+iN fs2AQTKSMpOHZUYHO+g4jttKkpsXw5U66jzMtt6W8z4A/ckmtATzZ4sB9htDYWt7 AGcUPHL8Q2pDdKg8vuYutgepqP8J7TSVGDA10ziNZmrgojcjiuZimYhRr40TsB2d Nw6nFFblaEjijTyseWVWxf/iF9C4FaoAfnRJqGmA9KlGiBu8Dmrt47fhUpoFwz/+ sYMSY5HfOuJzz2tIvyfcSdsOFzxoe5AyK6B9GPv9C/kpdkQaWJfP3TByt2ov4uqT HXPW2zsZWPfmrqRY8yiOnxGBFw== -----END CERTIFICATE-----Generated at Wed Jun 24 11:25:17 2026 by rpki-client