$ rpki-client -vvf rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft File: -bj5HSkovqo1HMNFxHNpMv2GOfE.mft (raw, json) Hash identifier: buMjzkhc0ourJ3c9+7A0bx+seQ2ZhjEPzWlwI3NO4ys= Subject key identifier: A9:1C:EC:B8:82:B2:21:94:BD:41:9D:7D:D9:D8:11:B9:2A:B9:B6:59 Authority key identifier: F9:B8:F9:1D:29:28:BE:AA:35:1C:C3:45:C4:73:69:32:FD:86:39:F1 Certificate issuer: /CN=A917C2CC/serialNumber=F9B8F91D2928BEAA351CC345C4736932FD8639F1 Certificate serial: 0FDE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft Manifest number: 0FCF Signing time: Tue 02 Jun 2026 17:30:17 +0000 Manifest this update: Tue 02 Jun 2026 17:30:17 +0000 Manifest next update: Tue 09 Jun 2026 17:30:17 +0000 Files and hashes: 1: -bj5HSkovqo1HMNFxHNpMv2GOfE.crl (hash: Xz2PyGpDZwTgrErkGk2gisaah87QBEynN3H/KabnMqU=) 2: F6B0145ACD2011F0B3EB5B69C4F9AE02.roa (hash: /IS4YM9w5ydj5jQwxn3DGGKdeny8JyV0qrmFMYEg2lc=) 3: AA75695ACD2011F0B214A868C4F9AE02.roa (hash: MRRSvyAs4nXdOy4NirT/FV+CCoUxnvEKIcU+qHvpGa8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.crl rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Jun 2026 15:18:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4062 (0xfde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C2CC, serialNumber=F9B8F91D2928BEAA351CC345C4736932FD8639F1 Validity Not Before: Jun 2 17:30:17 2026 GMT Not After : Jun 9 17:30:17 2026 GMT Subject: CN=6a1f1329-ce07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7f:a6:2a:0f:b2:30:97:6a:10:eb:c6:f5:d8: 6e:33:2b:61:37:be:5a:9c:88:9a:8d:23:52:23:a0: aa:2d:d3:68:4f:50:e7:e3:2e:b7:b9:bd:f8:5c:85: 17:38:d9:54:29:1f:cb:d5:92:68:f6:b1:80:67:55: 5d:0f:cc:6b:31:a0:45:e7:11:b3:66:74:86:5b:00: 10:a1:50:34:34:c0:0e:a2:ef:f4:cd:ae:a8:00:d8: c2:21:fd:20:f6:59:dd:58:ee:66:94:d9:23:ad:fe: d4:74:f5:7c:24:f3:e7:49:48:9c:a2:c7:c1:f1:04: ab:14:12:89:47:be:c0:e2:51:47:d0:b4:ac:12:88: 9f:04:5b:51:7b:8e:fc:7e:9a:2e:18:61:d7:fb:64: 9e:ec:70:16:39:2e:b7:66:83:55:f4:77:da:f8:fe: 5a:9d:c3:6e:f2:73:38:02:a1:69:e4:c2:9b:47:7a: 4e:ac:e5:97:26:82:ae:56:e5:67:a7:eb:4a:c8:ad: 6f:0c:a9:90:85:b6:2b:be:7b:f4:bf:a0:02:38:4f: 23:22:e0:b9:05:1f:e7:02:4e:46:7b:7b:e0:ed:b4: 1c:c7:64:46:74:39:64:96:cc:39:d1:9b:d9:ce:aa: 25:b5:4a:c2:69:68:88:5e:2f:db:57:19:e5:e6:f8: ec:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:1C:EC:B8:82:B2:21:94:BD:41:9D:7D:D9:D8:11:B9:2A:B9:B6:59 X509v3 Authority Key Identifier: keyid:F9:B8:F9:1D:29:28:BE:AA:35:1C:C3:45:C4:73:69:32:FD:86:39:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:71:d3:a7:e7:a1:1c:96:b7:c2:c7:88:1f:5f:98:f0:3b:18: bb:43:ef:57:c6:e8:39:30:81:11:8a:2b:f5:a8:82:d1:4b:91: 7b:5e:0e:77:da:81:16:fa:45:d2:bb:fd:51:25:fb:99:69:00: a2:9b:d0:54:b0:05:6b:ed:3a:6c:2d:d9:5c:66:14:7f:71:39: 1e:a0:84:cf:c2:3c:20:4f:79:9f:8a:17:3f:a5:fb:4a:f7:7b: 57:d3:f4:b4:ca:4c:d0:3b:d8:38:78:09:16:68:ce:7c:43:c2: 7b:47:90:02:8b:00:0d:e5:1e:38:77:f4:d9:45:80:79:2c:25: 8a:06:9e:cf:db:57:57:7e:d9:ae:85:a2:83:08:16:c5:c3:ec: 95:07:13:fc:db:ac:29:3c:c3:47:aa:59:16:23:a7:a9:01:c4: 6f:ff:b5:40:f8:48:f0:42:f4:3d:80:1e:7d:65:15:3b:1c:a5: a0:df:ac:0f:c7:46:72:a5:30:15:42:d1:78:d1:f9:16:3b:1f: 38:7f:ff:a3:b0:31:d5:c3:0b:6a:bc:53:26:34:97:bb:ec:65: 7f:78:e4:6b:e4:47:1d:b9:c9:b5:58:8c:75:d8:23:b6:ad:69: 09:00:40:80:fd:7b:88:cf:0e:f5:05:9b:23:97:b2:0c:e8:c0: 00:e2:f7:ca -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD94wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MyQ0MxMTAvBgNVBAUTKEY5QjhGOTFEMjkyOEJFQUEzNTFDQzM0NUM0NzM2OTMy RkQ4NjM5RjEwHhcNMjYwNjAyMTczMDE3WhcNMjYwNjA5MTczMDE3WjAYMRYwFAYD VQQDEw02YTFmMTMyOS1jZTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0H+mKg+yMJdqEOvG9dhuMythN75anIiajSNSI6CqLdNoT1Dn4y63ub34XIUX ONlUKR/L1ZJo9rGAZ1VdD8xrMaBF5xGzZnSGWwAQoVA0NMAOou/0za6oANjCIf0g 9lndWO5mlNkjrf7UdPV8JPPnSUicosfB8QSrFBKJR77A4lFH0LSsEoifBFtRe478 fpouGGHX+2Se7HAWOS63ZoNV9Hfa+P5ancNu8nM4AqFp5MKbR3pOrOWXJoKuVuVn p+tKyK1vDKmQhbYrvnv0v6ACOE8jIuC5BR/nAk5Ge3vg7bQcx2RGdDlklsw50ZvZ zqoltUrCaWiIXi/bVxnl5vjs2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKkc7LiC siGUvUGdfdnYEbkqubZZMB8GA1UdIwQYMBaAFPm4+R0pKL6qNRzDRcRzaTL9hjnx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzJDQy9DQzE5Mzg3Njc4 REExMUU5OTAxQjdGNERDNEY5QUUwMi8tYmo1SFNrb3ZxbzFITU5GeEhOcE12MkdP ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1iajVIU2tvdnFvMUhNTkZ4SE5wTXYyR09mRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzJDQy9DQzE5Mzg3Njc4REExMUU5OTAxQjdGNERDNEY5QUUwMi8tYmo1SFNrb3Zx bzFITU5GeEhOcE12MkdPZkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWHHTp+ehHJa3wseIH1+Y8DsYu0PvV8boOTCBEYor9aiC0UuRe14Od9qBFvpF 0rv9USX7mWkAopvQVLAFa+06bC3ZXGYUf3E5HqCEz8I8IE95n4oXP6X7Svd7V9P0 tMpM0DvYOHgJFmjOfEPCe0eQAosADeUeOHf02UWAeSwligaez9tXV37ZroWigwgW xcPslQcT/NusKTzDR6pZFiOnqQHEb/+1QPhI8EL0PYAefWUVOxyloN+sD8dGcqUw FULReNH5FjsfOH//o7Ax1cMLarxTJjSXu+xlf3jka+RHHbnJtViMddgjtq1pCQBA gP17iM8O9QWbI5eyDOjAAOL3yg== -----END CERTIFICATE-----Generated at Tue Jun 2 22:16:27 2026 by rpki-client