$ rpki-client -vvf rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft File: 2xy4SFQGnkPKG3JdQuprqbU5gVs.mft (raw, json) Hash identifier: KZ+VZzOYM62RDLWbwyy9s9JiS3vjh5cGuGDf5q/AkFc= Subject key identifier: DD:C5:27:DF:F6:67:0B:24:5B:A6:30:C2:C9:DC:A4:BF:E2:29:1D:2E Authority key identifier: DB:1C:B8:48:54:06:9E:43:CA:1B:72:5D:42:EA:6B:A9:B5:39:81:5B Certificate issuer: /CN=A918F88D/serialNumber=DB1CB84854069E43CA1B725D42EA6BA9B539815B Certificate serial: 0D83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft Manifest number: 0D59 Signing time: Mon 22 Jun 2026 18:05:30 +0000 Manifest this update: Mon 22 Jun 2026 18:05:29 +0000 Manifest next update: Mon 29 Jun 2026 18:05:29 +0000 Files and hashes: 1: 2xy4SFQGnkPKG3JdQuprqbU5gVs.crl (hash: yR4XA2sHUwZ2Kjrqcsj00CjunK5QuDxEqwv+zkgKkJM=) 2: A45810226E0B11F1B444C73C6CA30FBC.roa (hash: Xtf0/6y3YC6FhVot6UpoOkskXFie6As5P2KK3d/KTL0=) 3: 595C264E6E0B11F1ACBB12326CA30FBC.roa (hash: JuMurLXv+8GOmVkD0dIzXf49xiHEijtStC/1h+HNo+A=) 4: 55903190A67E11F0BBF9853FC4F9AE02.roa (hash: 4LEYJL5AX5PWlCqKTlZUy7qHGLo4uYAp+saoJjmZfVo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.crl rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Jun 2026 18:05:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3459 (0xd83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F88D, serialNumber=DB1CB84854069E43CA1B725D42EA6BA9B539815B Validity Not Before: Jun 22 18:05:29 2026 GMT Not After : Jun 29 18:05:29 2026 GMT Subject: CN=6a39796a-9c77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:60:4f:78:d5:32:3e:cd:c6:07:84:aa:d4:27: e3:31:1e:7c:40:51:86:7e:c4:37:75:d8:6b:67:fc: de:5d:cf:fa:8f:be:af:fa:c0:53:e4:32:b6:b6:17: bd:bf:c2:10:2f:56:78:20:20:76:64:1e:27:67:b4: e3:62:34:b2:e8:49:bc:bf:06:03:44:b8:39:da:3e: f4:63:4d:8f:1e:70:e9:ea:79:1b:1a:58:e6:13:13: c5:55:0f:4a:67:81:3d:20:51:3f:12:7f:9c:2f:28: 15:f8:b5:ac:86:75:09:ec:7d:d6:a4:c8:be:23:a0: 76:64:65:42:d3:ee:93:a2:7f:d7:11:b0:a8:af:95: 78:b6:83:8d:a4:c3:ef:85:0c:7b:a2:34:5b:fe:c5: ea:55:d9:39:3a:bd:50:96:dd:a4:73:f7:15:aa:e3: 78:2e:76:97:0c:cf:79:18:29:17:cf:f2:8c:73:5d: 07:9b:3b:3b:ec:51:97:76:35:8d:8e:7d:47:e0:c0: dd:79:d9:e1:59:c7:e5:13:ff:5f:a7:f2:63:c7:87: 2c:a2:68:ee:fb:e8:46:17:35:a5:d5:1e:c0:74:d1: 62:1a:5c:01:37:fd:ed:08:cb:18:08:82:41:26:00: 29:8b:a9:2b:46:a2:cf:e3:29:97:3c:f1:a0:ff:fc: 86:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:C5:27:DF:F6:67:0B:24:5B:A6:30:C2:C9:DC:A4:BF:E2:29:1D:2E X509v3 Authority Key Identifier: keyid:DB:1C:B8:48:54:06:9E:43:CA:1B:72:5D:42:EA:6B:A9:B5:39:81:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:02:bc:52:97:ca:80:89:92:2f:12:96:2d:dd:0e:19:6c:83: 7f:24:76:5b:46:18:2b:dc:1e:b6:31:bb:22:65:c3:21:6e:47: 23:70:46:5c:6c:c7:08:74:48:b1:ea:88:a3:67:ba:44:97:02: 30:d1:f5:eb:b2:e0:89:ce:29:54:03:6b:d4:04:cd:d9:91:e3: 6c:b9:7d:48:5e:d9:6f:7a:13:70:ab:0d:db:06:97:93:5c:a1: b7:a7:d7:d1:2a:3c:62:91:1f:6b:e2:0e:b4:b1:ac:7a:92:39: bf:7f:4a:92:6e:1d:e7:a3:79:70:e9:d1:05:38:bf:17:47:ce: 91:4d:13:9a:ce:24:20:71:1b:74:14:1c:c4:50:22:35:8e:0a: cf:6d:8b:f3:45:62:17:b4:e4:6e:dd:f0:b8:db:bd:fd:68:43: 47:b7:f1:79:3d:d6:f2:7c:7a:07:70:22:e4:73:d4:92:39:ce: 68:1e:9d:fb:7f:98:78:e3:1c:de:c2:1a:39:87:5b:8e:7b:cd: f7:1a:42:25:80:cf:d9:28:9f:95:42:97:63:7f:5b:71:fa:24: 4f:96:8b:d0:29:3c:0a:74:37:87:f0:39:c6:43:72:7e:6f:26: e6:8a:0e:6d:b0:4f:4c:c3:c2:71:cc:6a:1f:c8:d6:29:1f:38: ed:af:8d:04 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY4OEQxMTAvBgNVBAUTKERCMUNCODQ4NTQwNjlFNDNDQTFCNzI1RDQyRUE2QkE5 QjUzOTgxNUIwHhcNMjYwNjIyMTgwNTI5WhcNMjYwNjI5MTgwNTI5WjAYMRYwFAYD VQQDEw02YTM5Nzk2YS05Yzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr2BPeNUyPs3GB4Sq1CfjMR58QFGGfsQ3ddhrZ/zeXc/6j76v+sBT5DK2the9 v8IQL1Z4ICB2ZB4nZ7TjYjSy6Em8vwYDRLg52j70Y02PHnDp6nkbGljmExPFVQ9K Z4E9IFE/En+cLygV+LWshnUJ7H3WpMi+I6B2ZGVC0+6Ton/XEbCor5V4toONpMPv hQx7ojRb/sXqVdk5Or1Qlt2kc/cVquN4LnaXDM95GCkXz/KMc10Hmzs77FGXdjWN jn1H4MDdednhWcflE/9fp/Jjx4csomju++hGFzWl1R7AdNFiGlwBN/3tCMsYCIJB JgApi6krRqLP4ymXPPGg//yG8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN3FJ9/2 ZwskW6YwwsncpL/iKR0uMB8GA1UdIwQYMBaAFNscuEhUBp5DyhtyXULqa6m1OYFb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Rjg4RC8yQTE0QkUwODAw NUExMUVBOEZEQ0ExMzBDNEY5QUUwMi8yeHk0U0ZRR25rUEtHM0pkUXVwcnFiVTVn VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ4eTRTRlFHbmtQS0czSmRRdXBycWJVNWdWcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Rjg4RC8yQTE0QkUwODAwNUExMUVBOEZEQ0ExMzBDNEY5QUUwMi8yeHk0U0ZRR25r UEtHM0pkUXVwcnFiVTVnVnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgwK8UpfKgImSLxKWLd0OGWyDfyR2W0YYK9wetjG7ImXDIW5HI3BGXGzHCHRI seqIo2e6RJcCMNH167Lgic4pVANr1ATN2ZHjbLl9SF7Zb3oTcKsN2waXk1yht6fX 0So8YpEfa+IOtLGsepI5v39Kkm4d56N5cOnRBTi/F0fOkU0Tms4kIHEbdBQcxFAi NY4Kz22L80ViF7Tkbt3wuNu9/WhDR7fxeT3W8nx6B3Ai5HPUkjnOaB6d+3+YeOMc 3sIaOYdbjnvN9xpCJYDP2SiflUKXY39bcfokT5aL0Ck8CnQ3h/A5xkNyfm8m5ooO bbBPTMPCccxqH8jWKR847a+NBA== -----END CERTIFICATE-----Generated at Wed Jun 24 15:35:09 2026 by rpki-client