$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEA1/E71398C654E511F1AEEFDFE69C833773/8aRhKgbhDvW9ljFz7CZTi31ANzY.mft File: 8aRhKgbhDvW9ljFz7CZTi31ANzY.mft (raw, json) Hash identifier: 5u0fSyndPfr1pkyI3CDxshISd810qObySxYQrbIOAcw= Subject key identifier: C0:8A:38:06:F4:74:AA:5F:6D:88:B1:25:06:E7:64:93:69:27:E3:BE Authority key identifier: F1:A4:61:2A:06:E1:0E:F5:BD:96:31:73:EC:26:53:8B:7D:40:37:36 Certificate issuer: /CN=A917BEA1/serialNumber=F1A4612A06E10EF5BD963173EC26538B7D403736 Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8aRhKgbhDvW9ljFz7CZTi31ANzY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BEA1/E71398C654E511F1AEEFDFE69C833773/8aRhKgbhDvW9ljFz7CZTi31ANzY.mft Manifest number: 0A Signing time: Mon 01 Jun 2026 09:58:48 +0000 Manifest this update: Mon 01 Jun 2026 09:58:48 +0000 Manifest next update: Mon 08 Jun 2026 09:58:48 +0000 Files and hashes: 1: 8aRhKgbhDvW9ljFz7CZTi31ANzY.crl (hash: 0QsfnpIkHyM7kpmX0mJBo6hbzjHI8GuV22U6rvMvzbY=) 2: 243C67FE55CD11F19CECB2B5A8833773.roa (hash: Gh2g+A+hy3CyM7ywchuFzI/qMxiOQm+zUJkUhcqgKUg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BEA1/E71398C654E511F1AEEFDFE69C833773/8aRhKgbhDvW9ljFz7CZTi31ANzY.crl rsync://rpki.apnic.net/member_repository/A917BEA1/E71398C654E511F1AEEFDFE69C833773/8aRhKgbhDvW9ljFz7CZTi31ANzY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8aRhKgbhDvW9ljFz7CZTi31ANzY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 09:58:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BEA1, serialNumber=F1A4612A06E10EF5BD963173EC26538B7D403736 Validity Not Before: Jun 1 09:58:48 2026 GMT Not After : Jun 8 09:58:48 2026 GMT Subject: CN=6a1d57d8-aaa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:17:64:e2:96:b1:fe:bb:7c:97:a6:96:ab:e6: b9:94:9e:36:15:2d:ce:28:aa:cb:23:45:85:69:a6: d7:4b:ee:79:52:a8:d9:36:a1:40:3d:49:3a:60:57: 70:63:ed:82:7d:6f:8c:99:d7:d4:27:ed:70:3a:1b: 6a:f8:eb:c6:9c:0d:3d:9c:f3:99:72:ca:d6:b6:2d: e7:92:c1:9d:d3:37:5a:be:f7:19:62:34:70:a5:51: c9:bf:ba:00:66:1f:b1:e7:15:22:f8:e4:be:4b:5f: a9:3c:c9:46:5f:0c:fc:77:fc:89:50:e1:4a:4a:19: 73:c3:58:6c:47:9b:2f:f7:3e:eb:48:f6:53:e9:6c: be:9d:93:27:19:6f:14:63:7c:d4:4f:4a:45:bd:45: 92:b1:77:69:85:54:a1:5b:33:07:31:d8:0e:88:4b: 44:1a:e5:28:dd:af:5c:1e:9e:b4:60:5e:80:f5:f6: c6:db:91:49:b4:1d:bc:ba:0e:3f:11:1f:48:1d:d6: 05:66:55:05:87:29:18:5e:e5:f3:52:db:f1:24:b2: 45:5e:4e:ca:ea:ec:70:5b:9f:f5:dc:ec:54:b0:2e: bb:4e:0d:ba:40:77:d3:cb:79:b5:bd:ea:3a:7c:4b: 40:96:3a:2c:a5:16:fe:dd:f0:76:a4:6a:03:1a:ef: 17:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:8A:38:06:F4:74:AA:5F:6D:88:B1:25:06:E7:64:93:69:27:E3:BE X509v3 Authority Key Identifier: keyid:F1:A4:61:2A:06:E1:0E:F5:BD:96:31:73:EC:26:53:8B:7D:40:37:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BEA1/E71398C654E511F1AEEFDFE69C833773/8aRhKgbhDvW9ljFz7CZTi31ANzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8aRhKgbhDvW9ljFz7CZTi31ANzY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEA1/E71398C654E511F1AEEFDFE69C833773/8aRhKgbhDvW9ljFz7CZTi31ANzY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:e3:b3:59:35:10:a9:3e:40:8d:c3:ac:cd:1c:59:66:67:db: 64:af:a5:b7:93:1e:3d:2e:98:29:ef:ed:bc:3d:6d:48:e6:38: 46:75:8f:32:cf:67:2b:2b:a5:b3:0a:d9:3d:b1:95:36:05:49: f7:77:a4:cc:04:de:31:fe:47:74:92:21:ef:a3:c6:a7:2c:48: 25:c4:e1:5d:8f:c1:12:bd:a5:41:8a:f4:30:17:c4:6a:dd:d9: 06:bf:4a:87:0e:f6:9b:5f:d3:dd:6d:fc:cc:b3:91:9e:c9:db: 94:72:2c:d0:1f:88:08:44:59:af:71:01:f8:62:83:87:06:d4: 9b:4d:53:dc:cf:67:69:1e:10:dc:6e:49:ea:0b:63:02:f4:07: 32:57:d1:7e:b7:57:c2:80:65:f2:7e:3b:47:69:94:7b:92:d6: 2e:d6:a0:fc:81:38:2d:5f:e8:2b:f6:9d:ae:98:ae:76:9d:71: 00:3d:5d:da:c9:21:fa:e1:0b:d8:a2:a1:9a:99:b2:ea:20:4b: 68:b8:19:dc:11:0c:6c:e0:24:8f:f8:bb:56:c7:1d:07:97:5c: bd:cd:88:48:cf:93:2f:10:60:a3:a1:60:03:10:8c:6e:78:73: 3e:87:86:f9:d6:9c:e6:0a:45:6c:6a:71:da:79:6a:9e:ba:4e: 3d:8c:6b:50 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QkVBMTExMC8GA1UEBRMoRjFBNDYxMkEwNkUxMEVGNUJEOTYzMTczRUMyNjUzOEI3 RDQwMzczNjAeFw0yNjA2MDEwOTU4NDhaFw0yNjA2MDgwOTU4NDhaMBgxFjAUBgNV BAMTDTZhMWQ1N2Q4LWFhYTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9F2TilrH+u3yXppar5rmUnjYVLc4oqssjRYVpptdL7nlSqNk2oUA9STpgV3Bj 7YJ9b4yZ19Qn7XA6G2r468acDT2c85lyyta2LeeSwZ3TN1q+9xliNHClUcm/ugBm H7HnFSL45L5LX6k8yUZfDPx3/IlQ4UpKGXPDWGxHmy/3PutI9lPpbL6dkycZbxRj fNRPSkW9RZKxd2mFVKFbMwcx2A6IS0Qa5Sjdr1wenrRgXoD19sbbkUm0Hby6Dj8R H0gd1gVmVQWHKRhe5fNS2/EkskVeTsrq7HBbn/Xc7FSwLrtODbpAd9PLebW96jp8 S0CWOiylFv7d8HakagMa7xehAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUwIo4BvR0 ql9tiLElBudkk2kn474wHwYDVR0jBBgwFoAU8aRhKgbhDvW9ljFz7CZTi31ANzYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCRUExL0U3MTM5OEM2NTRF NTExRjFBRUVGREZFNjlDODMzNzczLzhhUmhLZ2JoRHZXOWxqRno3Q1pUaTMxQU56 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOGFSaEtnYmhEdlc5bGpGejdDWlRpMzFBTnpZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdC RUExL0U3MTM5OEM2NTRFNTExRjFBRUVGREZFNjlDODMzNzczLzhhUmhLZ2JoRHZX OWxqRno3Q1pUaTMxQU56WS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCd47NZNRCpPkCNw6zNHFlmZ9tkr6W3kx49Lpgp7+28PW1I5jhGdY8yz2crK6Wz Ctk9sZU2BUn3d6TMBN4x/kd0kiHvo8anLEglxOFdj8ESvaVBivQwF8Rq3dkGv0qH DvabX9PdbfzMs5GeyduUcizQH4gIRFmvcQH4YoOHBtSbTVPcz2dpHhDcbknqC2MC 9AcyV9F+t1fCgGXyfjtHaZR7ktYu1qD8gTgtX+gr9p2umK52nXEAPV3aySH64QvY oqGambLqIEtouBncEQxs4CSP+LtWxx0Hl1y9zYhIz5MvEGCjoWADEIxueHM+h4b5 1pzmCkVsanHaeWqeuk49jGtQ -----END CERTIFICATE-----Generated at Tue Jun 2 21:17:51 2026 by rpki-client