$ rpki-client -vvf rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.mft File: lC1UHf55gvbgHmvMl23Ay4QU6Dg.mft (raw, json) Hash identifier: icahduArAwONHjbsi8wc+pMfwLNnAi7cjIRHKaRxMpM= Subject key identifier: 39:4A:6E:FC:8B:4A:33:8E:54:B8:0A:52:5D:46:69:9A:24:C8:C9:D6 Authority key identifier: 94:2D:54:1D:FE:79:82:F6:E0:1E:6B:CC:97:6D:C0:CB:84:14:E8:38 Certificate issuer: /CN=A917D7F2/serialNumber=942D541DFE7982F6E01E6BCC976DC0CB8414E838 Certificate serial: 3561 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.mft Manifest number: 3559 Signing time: Tue 16 Jun 2026 14:37:47 +0000 Manifest this update: Tue 16 Jun 2026 14:37:47 +0000 Manifest next update: Tue 23 Jun 2026 14:37:47 +0000 Files and hashes: 1: lC1UHf55gvbgHmvMl23Ay4QU6Dg.crl (hash: HecL3uAz45IVI92j3USEbCFYN6ryQuiVgECFelV6XF8=) 2: 35FC192C272C11ED9E64C718C4F9AE02.roa (hash: 5gb2IR3RmAQfetfMD3Cf2kp33anqtncaV+qXbOqkB4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.crl rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Jun 2026 01:32:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13665 (0x3561) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D7F2, serialNumber=942D541DFE7982F6E01E6BCC976DC0CB8414E838 Validity Not Before: Jun 16 14:37:47 2026 GMT Not After : Jun 23 14:37:47 2026 GMT Subject: CN=6a315fbb-7a9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ee:13:35:23:d2:5f:75:9a:fc:12:af:cd:16: 72:68:bc:ab:6a:90:c0:57:19:6d:fa:10:31:da:01: 1d:c8:c0:94:bb:ba:1e:ba:98:ad:8e:8f:ba:48:5c: b3:09:bc:24:ae:64:65:b3:18:24:c5:2e:d3:b8:a0: 5d:e5:b5:53:a0:53:2c:6e:67:13:b3:a6:20:84:69: 8e:59:b0:99:b4:49:52:f4:a7:9d:c3:4f:cf:9c:d2: f5:c3:4a:b6:10:a2:38:9b:11:e9:b5:bd:fb:f8:83: 7c:8b:00:85:ff:67:c5:e1:fd:86:b7:b0:8e:e6:24: 82:67:98:40:86:a5:88:f3:a4:4d:7e:b9:c0:97:95: 58:78:fe:78:45:6d:e7:e2:d3:5d:da:48:22:e8:50: db:84:a7:16:c8:32:8e:7d:ec:b2:23:a5:2a:da:34: 4a:bb:80:0d:36:b6:31:c2:a5:a2:6c:f0:e2:83:95: 4d:44:60:85:74:ca:9d:95:0a:ae:8d:6c:d5:ae:e6: 87:43:1c:db:85:18:ea:fc:fd:8a:7b:f2:00:a7:d8: ef:66:6f:0b:c3:5b:ea:da:89:ed:b0:67:ff:f9:9a: fd:36:ea:b0:e2:36:74:64:90:59:f7:62:5f:55:1f: 84:2b:5b:1b:9b:9f:84:84:7c:2b:57:79:b8:bb:17: 3e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:4A:6E:FC:8B:4A:33:8E:54:B8:0A:52:5D:46:69:9A:24:C8:C9:D6 X509v3 Authority Key Identifier: keyid:94:2D:54:1D:FE:79:82:F6:E0:1E:6B:CC:97:6D:C0:CB:84:14:E8:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:5d:fc:d9:ce:48:cf:fb:0e:87:e3:08:13:89:e5:c5:81:44: 11:dd:ca:8a:0e:25:c3:cc:29:bf:1b:cf:65:92:32:d3:77:5d: 6c:49:8a:c3:18:60:a6:bf:2e:22:1b:27:3b:8f:4c:87:4d:79: d8:c4:be:f9:61:be:4c:60:6e:74:9c:a0:93:66:1e:d4:a1:5b: a9:e7:fa:9d:78:be:46:66:66:52:11:93:7a:81:cc:23:b3:40: d3:8c:ae:a5:77:22:b8:59:f3:79:80:43:ce:a8:9e:0e:61:9c: 92:1e:38:80:af:21:d2:ab:fc:14:12:51:f2:56:7d:f4:09:4a: 0c:da:79:23:74:bd:94:3d:7b:b1:1c:12:93:60:f0:59:81:4f: b6:75:4a:0c:4c:59:8a:57:71:fe:43:66:12:60:93:c1:a4:46: bb:dd:49:85:76:3f:fa:d3:c8:ec:91:c4:bc:65:3c:00:91:39: 1e:77:d7:84:61:1a:9a:bd:62:68:fc:32:f9:88:ac:29:6f:02: a1:fd:65:12:66:16:6c:b5:83:83:35:95:14:0d:f4:ce:b5:7d: 8a:0a:b1:5a:dd:12:a2:bb:40:32:89:94:0c:8d:be:6a:39:1f: d5:d4:76:a0:08:71:f5:a7:1c:a3:95:2f:12:9a:b1:6d:db:b9: 9e:ba:73:c6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q3RjIxMTAvBgNVBAUTKDk0MkQ1NDFERkU3OTgyRjZFMDFFNkJDQzk3NkRDMENC ODQxNEU4MzgwHhcNMjYwNjE2MTQzNzQ3WhcNMjYwNjIzMTQzNzQ3WjAYMRYwFAYD VQQDEw02YTMxNWZiYi03YTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAue4TNSPSX3Wa/BKvzRZyaLyrapDAVxlt+hAx2gEdyMCUu7oeupitjo+6SFyz CbwkrmRlsxgkxS7TuKBd5bVToFMsbmcTs6YghGmOWbCZtElS9Kedw0/PnNL1w0q2 EKI4mxHptb37+IN8iwCF/2fF4f2Gt7CO5iSCZ5hAhqWI86RNfrnAl5VYeP54RW3n 4tNd2kgi6FDbhKcWyDKOfeyyI6Uq2jRKu4ANNrYxwqWibPDig5VNRGCFdMqdlQqu jWzVruaHQxzbhRjq/P2Ke/IAp9jvZm8Lw1vq2ontsGf/+Zr9Nuqw4jZ0ZJBZ92Jf VR+EK1sbm5+EhHwrV3m4uxc+/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDlKbvyL SjOOVLgKUl1GaZokyMnWMB8GA1UdIwQYMBaAFJQtVB3+eYL24B5rzJdtwMuEFOg4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDdGMi9GMDI4OTAzQzFE OEMxMUUyQjE5RDVGRUEwOEIwMkNEMi9sQzFVSGY1NWd2YmdIbXZNbDIzQXk0UVU2 RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xDMVVIZjU1Z3ZiZ0htdk1sMjNBeTRRVTZEZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDdGMi9GMDI4OTAzQzFEOEMxMUUyQjE5RDVGRUEwOEIwMkNEMi9sQzFVSGY1NWd2 YmdIbXZNbDIzQXk0UVU2RGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADl382c5Iz/sOh+MIE4nlxYFEEd3Kig4lw8wpvxvPZZIy03ddbEmKwxhgpr8u IhsnO49Mh0152MS++WG+TGBudJygk2Ye1KFbqef6nXi+RmZmUhGTeoHMI7NA04yu pXciuFnzeYBDzqieDmGckh44gK8h0qv8FBJR8lZ99AlKDNp5I3S9lD17sRwSk2Dw WYFPtnVKDExZildx/kNmEmCTwaRGu91JhXY/+tPI7JHEvGU8AJE5HnfXhGEamr1i aPwy+YisKW8Cof1lEmYWbLWDgzWVFA30zrV9igqxWt0SortAMomUDI2+ajkf1dR2 oAhx9acco5UvEpqxbdu5nrpzxg== -----END CERTIFICATE-----Generated at Tue Jun 16 22:52:41 2026 by rpki-client