$ rpki-client -vvf rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.mft File: 13OnYxe8qx7vA29fbkx7NMSra3s.mft (raw, json) Hash identifier: 1LSEF1fhxxfpjdga8LTLclTz5ivoP9UJbMQ0WS7os8k= Subject key identifier: B5:2E:28:3F:47:78:F4:1C:D5:8E:14:9D:A7:91:2C:98:3E:62:67:E3 Authority key identifier: D7:73:A7:63:17:BC:AB:1E:EF:03:6F:5F:6E:4C:7B:34:C4:AB:6B:7B Certificate issuer: /CN=A917AE24/serialNumber=D773A76317BCAB1EEF036F5F6E4C7B34C4AB6B7B Certificate serial: 0577 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/13OnYxe8qx7vA29fbkx7NMSra3s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.mft Manifest number: 0577 Signing time: Mon 22 Jun 2026 23:22:23 +0000 Manifest this update: Mon 22 Jun 2026 23:22:22 +0000 Manifest next update: Mon 29 Jun 2026 23:22:22 +0000 Files and hashes: 1: 13OnYxe8qx7vA29fbkx7NMSra3s.crl (hash: z12GmoHSGtiQKdIuQVUob7ZJvdZ0NciuU4sjGaYJckY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.crl rsync://rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/13OnYxe8qx7vA29fbkx7NMSra3s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Jun 2026 23:22:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1399 (0x577) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AE24, serialNumber=D773A76317BCAB1EEF036F5F6E4C7B34C4AB6B7B Validity Not Before: Jun 22 23:22:22 2026 GMT Not After : Jun 29 23:22:22 2026 GMT Subject: CN=6a39c3ae-3ffe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7e:0e:6a:03:83:7d:52:0a:18:f8:19:33:32: 7a:7d:c9:2c:37:80:b7:b8:c1:60:c0:e1:aa:28:e2: a2:3b:24:48:32:71:0f:e9:49:3f:64:e4:45:db:86: 0d:81:9a:1b:61:a6:79:b4:fc:2f:c6:43:56:b0:b2: 13:ad:07:47:07:1e:51:10:97:2d:a4:98:4c:6b:7d: 2e:25:92:16:8e:ec:f0:29:5d:92:25:ad:59:09:14: 84:d6:4a:66:14:c8:89:3e:28:f9:14:76:2f:81:96: ca:a3:63:63:66:da:7c:7c:2f:5a:f6:c8:3a:28:f3: bc:49:28:20:0d:f4:86:75:3f:8b:e6:70:9d:90:a0: 87:8b:94:13:af:ea:86:db:85:e9:ee:f9:eb:92:d9: 3c:7d:2f:b4:07:68:c4:41:5d:28:36:76:9c:d6:25: e6:26:84:50:67:22:64:86:bb:b6:35:f1:0a:bb:aa: a5:81:00:bd:77:9b:6f:d0:ef:d8:8c:33:83:2c:dc: a4:5a:16:5f:d8:98:c8:91:50:59:3e:bc:82:46:38: 4f:b0:6a:ec:de:13:b0:46:5b:d9:a1:26:88:04:0c: 37:56:eb:f9:33:7d:58:e7:fc:7d:25:fa:f6:da:1f: 0f:da:83:29:e0:99:e5:98:ad:c9:aa:bb:f4:bf:c1: 19:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:2E:28:3F:47:78:F4:1C:D5:8E:14:9D:A7:91:2C:98:3E:62:67:E3 X509v3 Authority Key Identifier: keyid:D7:73:A7:63:17:BC:AB:1E:EF:03:6F:5F:6E:4C:7B:34:C4:AB:6B:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/13OnYxe8qx7vA29fbkx7NMSra3s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:58:63:34:7b:11:75:7d:7e:fc:e0:cb:6d:60:14:5b:b6:24: 7f:15:82:60:51:8c:a9:e1:8a:70:d6:a0:3f:fe:70:a0:85:79: 99:6f:d8:c7:92:e1:fe:5e:eb:04:ae:01:e3:ff:bf:38:84:82: 60:9f:96:c6:a4:ed:8a:c6:07:d0:a0:4b:1b:97:40:c4:fe:f0: 19:2b:8f:cd:f9:ba:52:5d:a1:0e:a2:6d:c3:74:13:96:d8:f4: 40:16:fa:c0:ef:6d:c1:2f:63:66:01:e4:44:36:a6:7e:9c:57: 34:4d:c4:1c:01:8d:ba:7d:47:ae:77:30:08:2f:4b:ff:92:4d: ae:f0:cf:39:91:47:40:25:14:d3:be:2f:04:11:a2:e4:58:d9: 02:18:e7:96:67:a9:62:89:7e:c0:00:90:ce:df:8c:82:c7:4e: 71:02:df:d5:96:79:df:c1:63:49:17:0f:71:d9:22:e8:bc:01: 3e:6d:d3:90:3d:82:ff:b3:64:a5:64:a0:77:b0:c6:a4:fe:2a: 5f:95:68:44:70:d9:bd:03:2a:c6:48:37:9b:5a:5b:1d:e8:55: 7b:20:fe:dc:dc:3a:da:a1:72:86:be:f9:6b:1b:ad:f1:f1:d4: 7b:d5:fc:67:9a:4d:e8:79:8d:f6:6d:4b:86:ef:6c:59:30:9f: 8c:42:6e:65 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FFMjQxMTAvBgNVBAUTKEQ3NzNBNzYzMTdCQ0FCMUVFRjAzNkY1RjZFNEM3QjM0 QzRBQjZCN0IwHhcNMjYwNjIyMjMyMjIyWhcNMjYwNjI5MjMyMjIyWjAYMRYwFAYD VQQDEw02YTM5YzNhZS0zZmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqH4OagODfVIKGPgZMzJ6fcksN4C3uMFgwOGqKOKiOyRIMnEP6Uk/ZORF24YN gZobYaZ5tPwvxkNWsLITrQdHBx5REJctpJhMa30uJZIWjuzwKV2SJa1ZCRSE1kpm FMiJPij5FHYvgZbKo2NjZtp8fC9a9sg6KPO8SSggDfSGdT+L5nCdkKCHi5QTr+qG 24Xp7vnrktk8fS+0B2jEQV0oNnac1iXmJoRQZyJkhru2NfEKu6qlgQC9d5tv0O/Y jDODLNykWhZf2JjIkVBZPryCRjhPsGrs3hOwRlvZoSaIBAw3Vuv5M31Y5/x9Jfr2 2h8P2oMp4JnlmK3Jqrv0v8EZPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLUuKD9H ePQc1Y4UnaeRLJg+YmfjMB8GA1UdIwQYMBaAFNdzp2MXvKse7wNvX25MezTEq2t7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUUyNC84RUM0MDA5NDMw QTQxMUVDOEJFREI4MkRDNEY5QUUwMi8xM09uWXhlOHF4N3ZBMjlmYmt4N05NU3Jh M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzEzT25ZeGU4cXg3dkEyOWZia3g3Tk1TcmEzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUUyNC84RUM0MDA5NDMwQTQxMUVDOEJFREI4MkRDNEY5QUUwMi8xM09uWXhlOHF4 N3ZBMjlmYmt4N05NU3JhM3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoVhjNHsRdX1+/ODLbWAUW7YkfxWCYFGMqeGKcNagP/5woIV5mW/Yx5Lh/l7r BK4B4/+/OISCYJ+WxqTtisYH0KBLG5dAxP7wGSuPzfm6Ul2hDqJtw3QTltj0QBb6 wO9twS9jZgHkRDamfpxXNE3EHAGNun1HrncwCC9L/5JNrvDPOZFHQCUU074vBBGi 5FjZAhjnlmepYol+wACQzt+MgsdOcQLf1ZZ538FjSRcPcdki6LwBPm3TkD2C/7Nk pWSgd7DGpP4qX5VoRHDZvQMqxkg3m1pbHehVeyD+3Nw62qFyhr75axut8fHUe9X8 Z5pN6HmN9m1Lhu9sWTCfjEJuZQ== -----END CERTIFICATE-----Generated at Wed Jun 24 11:17:13 2026 by rpki-client