$ rpki-client -vvf rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.mft File: NnO2jJT8If8_zeajk-7GOxbAFP4.mft (raw, json) Hash identifier: pdJHMxYLrU7RSQ0nNe08/S2IDyvFH0v9mq4Bmijqgms= Subject key identifier: C0:98:8D:36:25:22:68:64:FF:24:B0:E7:51:CE:E7:CE:1C:9F:09:27 Authority key identifier: 36:73:B6:8C:94:FC:21:FF:3F:CD:E6:A3:93:EE:C6:3B:16:C0:14:FE Certificate issuer: /CN=A918D663/serialNumber=3673B68C94FC21FF3FCDE6A393EEC63B16C014FE Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NnO2jJT8If8_zeajk-7GOxbAFP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.mft Manifest number: 29 Signing time: Mon 01 Jun 2026 07:28:59 +0000 Manifest this update: Mon 01 Jun 2026 07:28:59 +0000 Manifest next update: Mon 08 Jun 2026 07:28:59 +0000 Files and hashes: 1: NnO2jJT8If8_zeajk-7GOxbAFP4.crl (hash: IUeUVI2ejZnAptHo8RgfcWRPhJhJ7E+NahOYk117EUQ=) 2: 80FBB9EE267611F1BE9D6DCBAE833773.roa (hash: 5HwzbEOKPdxTsCPtrzPWqSHsCnPYkwuW4SaoTNQwNwo=) 3: 80708DE2267611F1BE9D6DCBAE833773.roa (hash: 3jGpuDySJyyXbAx9OGVPaRjdZyMkm11KUe6Dtnn4fHo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.crl rsync://rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NnO2jJT8If8_zeajk-7GOxbAFP4.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 07:28:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D663, serialNumber=3673B68C94FC21FF3FCDE6A393EEC63B16C014FE Validity Not Before: Jun 1 07:28:59 2026 GMT Not After : Jun 8 07:28:59 2026 GMT Subject: CN=6a1d34bb-8a41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a5:c4:eb:3d:00:96:2f:92:e5:a8:49:dc:ef: d4:8e:8a:0a:1b:cf:5e:18:eb:62:fa:9d:33:5c:54: 5a:25:20:bb:b3:fc:bd:18:fa:39:a3:c3:0d:dd:4c: 37:87:1b:f6:b1:34:7e:d5:0d:0d:d1:d8:2d:1e:c8: 6c:dd:4d:5d:43:28:47:02:5d:40:b6:4f:d1:f2:64: ec:58:6b:70:46:6c:c8:1a:fd:02:a1:0a:37:1a:42: 5f:83:4b:fa:65:0f:51:fd:6d:49:18:98:e9:a0:01: 76:26:da:47:dc:99:57:f2:06:14:e6:51:ad:dc:61: 6f:d5:62:af:d7:ff:97:7b:06:75:b6:d5:4d:5b:a0: 5d:d5:87:36:aa:c9:b1:9d:71:b2:af:78:be:d4:4f: 8c:53:c9:b1:0b:15:a3:77:d8:4d:73:c7:d9:d9:c6: 8e:57:18:51:77:0a:4b:7e:04:d5:f9:68:b8:d8:bc: fc:1c:c7:6b:a5:a4:2b:64:3a:d7:7e:75:b4:ec:5d: 72:ed:8e:52:ca:ad:b4:16:94:a3:8b:da:eb:26:d1: 6c:38:64:f0:48:69:5e:c5:74:75:db:ca:88:c7:4a: 69:07:6a:03:90:12:78:4f:89:8f:4b:b4:71:4a:be: 29:7c:f9:e5:40:fd:65:46:ad:6d:c2:9f:1e:45:3e: 35:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:98:8D:36:25:22:68:64:FF:24:B0:E7:51:CE:E7:CE:1C:9F:09:27 X509v3 Authority Key Identifier: keyid:36:73:B6:8C:94:FC:21:FF:3F:CD:E6:A3:93:EE:C6:3B:16:C0:14:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NnO2jJT8If8_zeajk-7GOxbAFP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:fb:b1:7e:4e:f8:82:bc:a7:6b:a6:ce:ad:f1:36:cf:a4:d0: 5f:eb:37:46:2e:8c:40:48:70:21:59:5e:02:d3:ce:3e:87:77: 53:97:50:39:2b:52:5d:71:ac:55:45:68:f1:62:8e:c7:e2:73: a0:bb:e8:5e:90:d8:ac:6e:70:a1:aa:a3:55:4e:fd:e4:e5:0e: 5c:e3:a0:00:67:bc:b6:b3:a0:a4:95:e4:16:8d:48:0f:f3:c8: ea:91:d6:5d:31:fe:2f:11:1d:8d:c8:18:28:d4:49:d5:ec:b7: 2a:d1:f0:a0:a0:74:fb:dd:c2:db:f7:ea:c9:23:c2:8a:1d:2a: 66:1d:df:f5:62:78:df:b2:c3:33:1d:9a:8a:d2:e2:0e:99:0c: 9b:7e:db:c4:9f:5d:55:6c:73:71:0c:8b:30:07:49:d1:a1:ad: 10:3a:36:0a:18:ea:12:3f:8d:76:2a:06:72:ae:ee:e4:1f:a0: 04:bf:b6:43:74:3d:58:c7:22:e2:d3:7f:50:65:2c:13:0e:33: 73:57:2b:ba:f1:96:6d:a4:f4:42:58:92:cc:0e:80:4b:a4:83: d6:5f:5f:46:7c:59:66:09:09:54:8c:30:32:4c:bd:ec:2b:3a: 8b:61:54:ea:e9:3f:ae:59:a3:07:14:a0:79:d0:e0:36:b3:a8: 06:f3:e9:90 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RDY2MzExMC8GA1UEBRMoMzY3M0I2OEM5NEZDMjFGRjNGQ0RFNkEzOTNFRUM2M0Ix NkMwMTRGRTAeFw0yNjA2MDEwNzI4NTlaFw0yNjA2MDgwNzI4NTlaMBgxFjAUBgNV BAMTDTZhMWQzNGJiLThhNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDipcTrPQCWL5LlqEnc79SOigobz14Y62L6nTNcVFolILuz/L0Y+jmjww3dTDeH G/axNH7VDQ3R2C0eyGzdTV1DKEcCXUC2T9HyZOxYa3BGbMga/QKhCjcaQl+DS/pl D1H9bUkYmOmgAXYm2kfcmVfyBhTmUa3cYW/VYq/X/5d7BnW21U1boF3VhzaqybGd cbKveL7UT4xTybELFaN32E1zx9nZxo5XGFF3Ckt+BNX5aLjYvPwcx2ulpCtkOtd+ dbTsXXLtjlLKrbQWlKOL2usm0Ww4ZPBIaV7FdHXbyojHSmkHagOQEnhPiY9LtHFK vil8+eVA/WVGrW3Cnx5FPjUHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUwJiNNiUi aGT/JLDnUc7nzhyfCScwHwYDVR0jBBgwFoAUNnO2jJT8If8/zeajk+7GOxbAFP4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThENjYzL0NENDcwQ0FFMjRF QjExRjE5MDg2OTAyRUIxRUU1MjhFL05uTzJqSlQ4SWY4X3plYWprLTdHT3hiQUZQ NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvTm5PMmpKVDhJZjhfemVhamstN0dPeGJBRlA0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThE NjYzL0NENDcwQ0FFMjRFQjExRjE5MDg2OTAyRUIxRUU1MjhFL05uTzJqSlQ4SWY4 X3plYWprLTdHT3hiQUZQNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAB+7F+TviCvKdrps6t8TbPpNBf6zdGLoxASHAhWV4C084+h3dTl1A5K1JdcaxV RWjxYo7H4nOgu+hekNisbnChqqNVTv3k5Q5c46AAZ7y2s6CkleQWjUgP88jqkdZd Mf4vER2NyBgo1EnV7Lcq0fCgoHT73cLb9+rJI8KKHSpmHd/1YnjfssMzHZqK0uIO mQybftvEn11VbHNxDIswB0nRoa0QOjYKGOoSP412KgZyru7kH6AEv7ZDdD1YxyLi 039QZSwTDjNzVyu68ZZtpPRCWJLMDoBLpIPWX19GfFlmCQlUjDAyTL3sKzqLYVTq 6T+uWaMHFKB50OA2s6gG8+mQ -----END CERTIFICATE-----Generated at Tue Jun 2 21:48:16 2026 by rpki-client