$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft File: -tfsycBc2OsgVpCdbGFHFeLFEz4.mft (raw, json) Hash identifier: dd+X/OC675XseC8JdS35sSNwEx1OfbfpkEujdGX9KXo= Subject key identifier: BD:6D:72:9A:3A:C8:C3:5A:C9:DD:EA:21:D7:9C:22:6A:DA:B7:E5:6E Authority key identifier: FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E Certificate issuer: /CN=A9183B95/serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E Certificate serial: 0520 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft Manifest number: 04E4 Signing time: Fri 05 Jun 2026 00:01:29 +0000 Manifest this update: Fri 05 Jun 2026 00:01:28 +0000 Manifest next update: Fri 12 Jun 2026 00:01:28 +0000 Files and hashes: 1: -tfsycBc2OsgVpCdbGFHFeLFEz4.crl (hash: Pa7GkRlL2ytv23q5ymyKkNPKLpWH087VPKNlOyAUVjM=) 2: A6E8B05401D611F1A42696D7366F56BC.roa (hash: YEAiHBQjv0Zqw7hAyBqvx7s0VzUV/cItMf0F3kX5g2g=) 3: 98CF37B28F0E11F0880D4780C4F9AE02.roa (hash: uKQ3Os5h8Ciy1ALccS2eT5zdXu6OgoHV6FkwnLjZ7Y0=) 4: C3CDE52C01D611F1B315EDD8366F56BC.roa (hash: 3d/B1cImc/RFP7X2DoDqV9LtQ79OxGVpr8nJEv4LRf4=) 5: 8000E572494F11F1BF737F10BE833773.roa (hash: RSiETjjKzvCQ0UxbntfjXpMp1b8caiQTMLYifGRmsgs=) 6: 942DCEF2FC0B11F0BEECCDA4756F56BC.roa (hash: J5KApiO82LjzqeOhyJKbcpqwAb46zG+PlR5LTK867CE=) 7: 383B44025D9611F1B9265F2C96833773.roa (hash: EO2xxLUvNm7FBpTOWiIAm3NKdCmim8bp+YI/OdPLP8c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 00:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1312 (0x520) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183B95, serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E Validity Not Before: Jun 5 00:01:28 2026 GMT Not After : Jun 12 00:01:28 2026 GMT Subject: CN=6a2211d9-ee6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:32:92:69:cf:be:4c:d4:59:8a:d2:5b:1c:79: 0f:f8:ab:2c:a8:76:ac:d6:33:8a:f8:cb:be:a5:0e: 1d:ad:d3:51:4f:9e:32:ac:46:6e:5d:2a:ad:85:ab: 44:13:34:3a:b3:a3:ad:36:82:fb:54:d3:a3:e7:2d: 4b:7f:77:06:ec:8e:dc:74:0e:a5:24:8d:5b:7d:dc: 5e:3c:87:b1:4e:91:8f:a8:6f:be:63:70:00:a8:98: de:5e:aa:60:cf:a9:fb:d0:7b:a5:05:93:5f:ea:fe: 3b:ac:9a:f9:a1:a4:10:15:02:5b:2a:93:0e:8e:76: fc:33:0a:72:61:51:28:e2:17:84:f7:5a:78:09:9f: 35:1c:d6:cf:24:6f:f2:cd:e0:d1:96:33:08:37:df: 5f:ad:75:a0:b7:80:ca:7b:b3:d7:eb:f0:5c:14:71: 8d:ff:9f:c4:71:6c:e5:3b:86:35:a5:ac:d2:a5:c7: ab:8c:ec:44:2d:34:16:a8:7e:f0:03:8c:ea:0b:74: 94:82:05:3d:dd:1a:74:c4:90:04:44:df:21:da:a6: 07:e9:42:31:81:d5:6f:bb:0e:8d:9a:a2:0d:e3:e5: 27:ad:f7:ba:1e:4d:1e:5d:73:15:99:e8:2a:f8:c7: 7d:fd:2d:af:a3:c4:fe:5a:bd:d0:46:ac:68:e1:21: 30:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:6D:72:9A:3A:C8:C3:5A:C9:DD:EA:21:D7:9C:22:6A:DA:B7:E5:6E X509v3 Authority Key Identifier: keyid:FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:09:7c:62:92:01:89:4f:f6:d6:bf:2f:96:6f:9e:ee:4c:fa: 71:33:c7:85:6c:29:16:43:9d:d1:71:e1:df:81:0e:02:c2:4d: 39:1d:71:62:5d:b4:bc:46:a1:1e:3b:5f:cc:f9:90:9b:68:57: 7f:57:69:e4:c9:2d:f8:06:ee:c3:f1:de:9f:00:ad:6a:80:d6: 07:4a:c0:15:7b:b6:97:fc:eb:98:cd:77:9d:60:d0:4b:fa:f3: 17:b1:cb:98:15:f2:5d:ff:d5:e4:5d:0f:62:90:55:b7:9e:74: 5d:f6:9d:6d:ab:28:07:3c:1a:ab:a8:e7:13:08:0c:c2:1b:27: 07:48:10:a7:7d:7b:34:2a:ad:0d:4a:da:c7:d1:ab:27:93:fb: 85:4b:4e:51:09:f9:e5:59:c2:9b:3c:a9:9b:8b:aa:04:2d:c1: 52:6e:e1:06:88:ce:84:5b:4f:9b:cc:26:68:55:35:8f:19:0f: ae:c7:0c:04:72:81:e8:7c:dc:f7:a2:88:75:f6:44:32:08:8b: 92:1b:3e:07:04:47:37:96:a2:1e:61:fb:20:c7:2b:7d:39:9e: 0c:d2:5c:b1:9a:d1:df:dd:fc:b8:2c:18:19:e8:0f:14:1c:3a: 5e:f4:ef:0d:e7:d3:f0:1e:aa:b9:ed:e9:b0:c2:0c:cd:47:b1: 90:50:23:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBSAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNCOTUxMTAvBgNVBAUTKEZBRDdFQ0M5QzA1Q0Q4RUIyMDU2OTA5RDZDNjE0NzE1 RTJDNTEzM0UwHhcNMjYwNjA1MDAwMTI4WhcNMjYwNjEyMDAwMTI4WjAYMRYwFAYD VQQDEw02YTIyMTFkOS1lZTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvzKSac++TNRZitJbHHkP+KssqHas1jOK+Mu+pQ4drdNRT54yrEZuXSqthatE EzQ6s6OtNoL7VNOj5y1Lf3cG7I7cdA6lJI1bfdxePIexTpGPqG++Y3AAqJjeXqpg z6n70HulBZNf6v47rJr5oaQQFQJbKpMOjnb8MwpyYVEo4heE91p4CZ81HNbPJG/y zeDRljMIN99frXWgt4DKe7PX6/BcFHGN/5/EcWzlO4Y1pazSpcerjOxELTQWqH7w A4zqC3SUggU93Rp0xJAERN8h2qYH6UIxgdVvuw6NmqIN4+Unrfe6Hk0eXXMVmegq +Md9/S2vo8T+Wr3QRqxo4SEwiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL1tcpo6 yMNayd3qIdecImrat+VuMB8GA1UdIwQYMBaAFPrX7MnAXNjrIFaQnWxhRxXixRM+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0I5NS9CNTRBM0MzNDgw MzUxMUVDOUFEREE1NEZDNEY5QUUwMi8tdGZzeWNCYzJPc2dWcENkYkdGSEZlTEZF ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy10ZnN5Y0JjMk9zZ1ZwQ2RiR0ZIRmVMRkV6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0I5NS9CNTRBM0MzNDgwMzUxMUVDOUFEREE1NEZDNEY5QUUwMi8tdGZzeWNCYzJP c2dWcENkYkdGSEZlTEZFejQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACgl8YpIBiU/21r8vlm+e7kz6cTPHhWwpFkOd0XHh34EOAsJNOR1xYl20vEah HjtfzPmQm2hXf1dp5Mkt+Abuw/HenwCtaoDWB0rAFXu2l/zrmM13nWDQS/rzF7HL mBXyXf/V5F0PYpBVt550XfadbasoBzwaq6jnEwgMwhsnB0gQp317NCqtDUrax9Gr J5P7hUtOUQn55VnCmzypm4uqBC3BUm7hBojOhFtPm8wmaFU1jxkPrscMBHKB6Hzc 96KIdfZEMgiLkhs+BwRHN5aiHmH7IMcrfTmeDNJcsZrR3938uCwYGegPFBw6XvTv DefT8B6que3psMIMzUexkFAjPg== -----END CERTIFICATE-----Generated at Sat Jun 6 06:48:03 2026 by rpki-client