$ rpki-client -vvf rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft File: 7CxkBsqh85689Fh1MVANVrlTYsA.mft (raw, json) Hash identifier: kSOu9n1L0QVjFT00y0JL61/OrmADvlSBbEDTvkdb88M= Subject key identifier: 1C:8E:C6:87:D2:0F:6D:FD:21:9B:28:E3:41:20:B2:6E:64:EC:0C:0C Authority key identifier: EC:2C:64:06:CA:A1:F3:9E:BC:F4:58:75:31:50:0D:56:B9:53:62:C0 Certificate issuer: /CN=A9174880/serialNumber=EC2C6406CAA1F39EBCF4587531500D56B95362C0 Certificate serial: 3590 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft Manifest number: 3564 Signing time: Tue 02 Jun 2026 14:16:44 +0000 Manifest this update: Tue 02 Jun 2026 14:16:43 +0000 Manifest next update: Tue 09 Jun 2026 14:16:43 +0000 Files and hashes: 1: 7CxkBsqh85689Fh1MVANVrlTYsA.crl (hash: iutDl7TodtEG1z24/hTVr68+1Bev1h0JBafnu+qdB4k=) 2: 3768DFB41C6011EEAF58FB61C4F9AE02.roa (hash: iodpqPzJXCkEMjXNizFOPmkITOS3ty8iD6q0/vbWTBk=) 3: 316EEFD4AAE511E68EBE4D52C4F9AE02.roa (hash: cXxlTlh2e8x7rwEZccluqoXbQOcppLc/t/OKxLCL9Es=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.crl rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Jun 2026 14:16:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13712 (0x3590) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174880, serialNumber=EC2C6406CAA1F39EBCF4587531500D56B95362C0 Validity Not Before: Jun 2 14:16:43 2026 GMT Not After : Jun 9 14:16:43 2026 GMT Subject: CN=6a1ee5cb-e48a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:82:46:7c:35:ff:32:64:7e:84:4f:50:53:7d: 8c:1b:e7:ad:1b:fa:a5:db:8a:b4:25:56:1e:53:84: fd:e9:3c:89:05:92:61:e5:63:3a:7e:4b:60:0a:45: ad:b5:b0:eb:21:58:24:2f:92:4d:ab:59:78:9c:46: 16:43:45:a8:6f:05:e5:a3:1f:85:be:18:c3:b7:7a: 87:d6:53:25:47:67:af:9b:bf:60:05:42:42:6a:9b: de:c9:f7:49:16:fb:ce:de:f6:ec:15:c5:d2:31:5e: 13:49:2d:e3:e9:ee:b7:d8:aa:0f:68:b5:75:2f:d0: 74:27:4c:02:68:91:9e:dc:e3:f2:02:43:65:b0:50: 4a:e8:9a:91:fd:c7:57:0e:52:c3:9f:fe:0c:42:19: 3b:27:a9:d9:9e:5f:08:d5:12:28:3d:02:ab:06:f6: 65:b6:c4:8c:3d:24:1e:d2:b5:f4:4b:8d:ed:32:ce: 08:3e:08:4a:57:42:0a:f2:09:2d:60:00:f3:b6:c2: 55:a2:d5:ce:2e:ae:67:3b:47:64:4f:f0:f8:10:5e: 3f:38:99:6e:a7:64:14:78:0f:d5:74:ae:d2:0c:71: 86:72:93:27:ff:16:ee:58:70:89:20:cc:fa:52:1b: 57:5f:b2:93:e6:eb:b7:e0:a8:e1:3b:bf:99:37:28: 34:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:8E:C6:87:D2:0F:6D:FD:21:9B:28:E3:41:20:B2:6E:64:EC:0C:0C X509v3 Authority Key Identifier: keyid:EC:2C:64:06:CA:A1:F3:9E:BC:F4:58:75:31:50:0D:56:B9:53:62:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:13:22:c5:52:f4:02:11:0b:f1:cc:02:e3:1f:17:0c:8c:64: 84:e0:a7:e4:37:ec:9d:a2:cc:08:0f:b9:17:56:73:1a:96:b8: 10:19:be:2a:0b:59:3d:4d:8a:33:ec:41:28:66:26:5c:2f:0c: fc:c2:a1:02:02:26:5f:1b:59:bd:24:74:41:9b:c1:97:0c:fe: 47:30:e2:0c:ce:b7:1f:88:40:c5:6a:0b:0a:55:43:90:14:4a: a7:b3:fd:da:7b:37:1f:de:ad:06:f9:c5:ac:60:14:64:1f:d2: 86:cc:18:c7:4d:f3:84:73:bf:cf:1f:5f:9e:eb:ee:70:89:4a: de:3c:9e:36:6a:53:40:b3:39:0b:1d:34:30:33:6b:99:d6:97: cc:79:79:d8:31:11:64:a3:f3:54:e2:14:fe:9e:fb:ad:b1:f7: c0:b9:ea:ff:b8:d9:58:74:03:8d:0c:e6:08:33:5d:9e:7e:e9: d9:a2:66:c8:bc:18:d3:4e:68:c1:b1:9d:a9:3b:29:1f:15:a6: 59:49:ff:1d:23:d6:bb:d6:0c:ff:c2:1b:51:71:7f:b5:bf:8a: 24:40:4b:ef:46:f5:99:18:a6:9e:cf:f2:38:da:de:2d:df:6a: 4c:5e:fe:fa:89:dc:d0:1e:7f:63:2e:45:52:b3:43:ed:6b:68: 65:53:2e:67 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ4ODAxMTAvBgNVBAUTKEVDMkM2NDA2Q0FBMUYzOUVCQ0Y0NTg3NTMxNTAwRDU2 Qjk1MzYyQzAwHhcNMjYwNjAyMTQxNjQzWhcNMjYwNjA5MTQxNjQzWjAYMRYwFAYD VQQDEw02YTFlZTVjYi1lNDhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj4JGfDX/MmR+hE9QU32MG+etG/ql24q0JVYeU4T96TyJBZJh5WM6fktgCkWt tbDrIVgkL5JNq1l4nEYWQ0WobwXlox+FvhjDt3qH1lMlR2evm79gBUJCapveyfdJ FvvO3vbsFcXSMV4TSS3j6e632KoPaLV1L9B0J0wCaJGe3OPyAkNlsFBK6JqR/cdX DlLDn/4MQhk7J6nZnl8I1RIoPQKrBvZltsSMPSQe0rX0S43tMs4IPghKV0IK8gkt YADztsJVotXOLq5nO0dkT/D4EF4/OJlup2QUeA/VdK7SDHGGcpMn/xbuWHCJIMz6 UhtXX7KT5uu34KjhO7+ZNyg0bwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFByOxofS D239IZso40Egsm5k7AwMMB8GA1UdIwQYMBaAFOwsZAbKofOevPRYdTFQDVa5U2LA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDg4MC80RTg2NDUwQzFE NkExMUUyQkI3MDE0QTgwOEIwMkNEMi83Q3hrQnNxaDg1Njg5RmgxTVZBTlZybFRZ c0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdDeGtCc3FoODU2ODlGaDFNVkFOVnJsVFlzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDg4MC80RTg2NDUwQzFENkExMUUyQkI3MDE0QTgwOEIwMkNEMi83Q3hrQnNxaDg1 Njg5RmgxTVZBTlZybFRZc0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXRMixVL0AhEL8cwC4x8XDIxkhOCn5DfsnaLMCA+5F1ZzGpa4EBm+KgtZPU2K M+xBKGYmXC8M/MKhAgImXxtZvSR0QZvBlwz+RzDiDM63H4hAxWoLClVDkBRKp7P9 2ns3H96tBvnFrGAUZB/ShswYx03zhHO/zx9fnuvucIlK3jyeNmpTQLM5Cx00MDNr mdaXzHl52DERZKPzVOIU/p77rbH3wLnq/7jZWHQDjQzmCDNdnn7p2aJmyLwY005o wbGdqTspHxWmWUn/HSPWu9YM/8IbUXF/tb+KJEBL70b1mRimns/yONreLd9qTF7+ +onc0B5/Yy5FUrND7WtoZVMuZw== -----END CERTIFICATE-----Generated at Tue Jun 2 21:20:01 2026 by rpki-client