$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft File: P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft (raw, json) Hash identifier: wLv3tRS6oh3SqduE+Gq/pOKYlIeak5CPJ0/Mgz1+7Io= Subject key identifier: CD:4B:F5:C4:44:A8:AA:6F:69:54:96:CF:47:96:8D:04:85:8E:98:E6 Authority key identifier: 3F:41:E0:48:D2:2B:2A:1A:EA:4C:E0:B8:44:95:2A:4A:39:D6:CB:37 Certificate issuer: /CN=A919F0DA/serialNumber=3F41E048D22B2A1AEA4CE0B844952A4A39D6CB37 Certificate serial: 3554 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft Manifest number: 628C Signing time: Mon 22 Jun 2026 14:15:24 +0000 Manifest this update: Mon 22 Jun 2026 14:15:24 +0000 Manifest next update: Mon 29 Jun 2026 14:15:24 +0000 Files and hashes: 1: P0HgSNIrKhrqTOC4RJUqSjnWyzc.crl (hash: zA8nNu3ED8mpfeLtzkesbn0qEzmHMvIWZpI6yrt0xgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.crl rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Jun 2026 14:15:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13652 (0x3554) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F0DA, serialNumber=3F41E048D22B2A1AEA4CE0B844952A4A39D6CB37 Validity Not Before: Jun 22 14:15:24 2026 GMT Not After : Jun 29 14:15:24 2026 GMT Subject: CN=6a39437c-5afa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:7f:5c:36:b2:68:5b:55:e1:10:01:33:91:b3: 34:d8:d4:ef:ae:05:cf:03:25:6b:0e:2a:51:6f:2f: db:40:44:f6:53:2c:72:34:fe:45:99:58:c5:e4:1a: bb:dc:83:06:80:c4:d6:12:ec:ae:d7:92:e5:fa:4a: 18:0e:c4:60:a4:4a:5b:ac:3a:4e:50:d8:4c:c1:d2: 48:5a:29:25:d6:15:81:e8:ad:6b:77:d1:a0:22:c6: 8f:3b:7d:e2:5b:45:b4:37:b9:ce:ed:3a:96:47:09: 09:9a:cf:b3:36:a0:2b:96:59:a2:f3:28:64:b6:55: 52:34:a4:c4:94:30:46:d8:b0:b6:b5:15:20:3e:21: 97:95:58:bd:00:76:2a:98:ac:5b:b3:2c:d1:f9:2a: 1e:3b:8c:06:83:25:d2:3c:3e:c8:2c:bf:1f:38:76: 87:c3:39:03:24:31:f7:e7:a8:cd:ba:9b:08:bd:63: 91:7f:b4:50:4e:50:09:ce:2c:15:27:be:3a:be:83: d0:8f:22:6b:7b:79:6a:e9:d4:bc:61:d2:cc:54:ce: c6:aa:5a:ef:dd:dc:10:91:7e:ad:a0:fb:cc:07:af: c1:d4:07:2d:8f:8c:fa:00:a1:2e:08:2b:17:15:47: 39:eb:12:35:d5:58:11:ef:ee:92:5d:b2:af:19:c9: 82:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:4B:F5:C4:44:A8:AA:6F:69:54:96:CF:47:96:8D:04:85:8E:98:E6 X509v3 Authority Key Identifier: keyid:3F:41:E0:48:D2:2B:2A:1A:EA:4C:E0:B8:44:95:2A:4A:39:D6:CB:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:b2:82:a0:8b:62:78:f3:cb:5b:00:da:12:cb:29:0e:dd:1f: 8e:5c:ca:f1:14:2b:46:1b:61:49:d0:87:f9:99:ac:1a:71:e7: e3:17:23:b7:e1:5e:df:4d:3e:de:f8:d6:bf:4f:d1:01:af:f0: 7c:9b:fb:b6:01:a1:42:ba:fe:ac:c2:01:cc:cd:a9:98:1b:4b: 03:8e:22:dd:24:56:ea:99:2f:66:fd:c3:7f:57:f1:f3:9a:e1: a9:08:1e:e3:52:66:78:19:be:b0:12:0b:e6:50:e6:91:ff:91: 72:0f:71:b9:05:80:ab:a8:d9:c7:cd:f1:fa:37:64:90:32:f7: 12:08:de:af:61:3c:42:01:5d:f1:34:73:29:7e:9b:d6:af:6e: 3c:b6:1a:7a:33:0f:06:1a:94:7a:9d:f2:12:93:c8:05:46:1d: 39:29:37:3f:ac:6b:8a:61:d8:4a:16:2c:a1:bf:b3:4f:be:dd: f7:3e:a3:d4:ad:09:cc:12:ad:65:fd:d4:07:d0:c0:79:b5:dc: 4e:aa:0b:10:c6:17:f1:0e:a9:34:1c:9e:9c:a5:38:87:49:f4: f2:cb:83:09:f5:ed:52:6a:5e:12:49:e0:99:7f:87:3f:f6:ad: 28:90:97:ac:48:fc:5b:b0:fb:ca:6d:33:4c:99:ed:e9:50:59: 9c:a5:48:ce -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYwREExMTAvBgNVBAUTKDNGNDFFMDQ4RDIyQjJBMUFFQTRDRTBCODQ0OTUyQTRB MzlENkNCMzcwHhcNMjYwNjIyMTQxNTI0WhcNMjYwNjI5MTQxNTI0WjAYMRYwFAYD VQQDEw02YTM5NDM3Yy01YWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/n9cNrJoW1XhEAEzkbM02NTvrgXPAyVrDipRby/bQET2UyxyNP5FmVjF5Bq7 3IMGgMTWEuyu15Ll+koYDsRgpEpbrDpOUNhMwdJIWikl1hWB6K1rd9GgIsaPO33i W0W0N7nO7TqWRwkJms+zNqArllmi8yhktlVSNKTElDBG2LC2tRUgPiGXlVi9AHYq mKxbsyzR+SoeO4wGgyXSPD7ILL8fOHaHwzkDJDH356jNupsIvWORf7RQTlAJziwV J746voPQjyJre3lq6dS8YdLMVM7Gqlrv3dwQkX6toPvMB6/B1Actj4z6AKEuCCsX FUc56xI11VgR7+6SXbKvGcmCKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM1L9cRE qKpvaVSWz0eWjQSFjpjmMB8GA1UdIwQYMBaAFD9B4EjSKyoa6kzguESVKko51ss3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjBEQS8xNTBEM0VGNDFE NjgxMUUyOEMxODI4QTQwOEIwMkNEMi9QMEhnU05JcktocnFUT0M0UkpVcVNqbld5 emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AwSGdTTklyS2hycVRPQzRSSlVxU2puV3l6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjBEQS8xNTBEM0VGNDFENjgxMUUyOEMxODI4QTQwOEIwMkNEMi9QMEhnU05Jckto cnFUT0M0UkpVcVNqbld5emMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAU7KCoItiePPLWwDaEsspDt0fjlzK8RQrRhthSdCH+ZmsGnHn4xcjt+Fe300+ 3vjWv0/RAa/wfJv7tgGhQrr+rMIBzM2pmBtLA44i3SRW6pkvZv3Df1fx85rhqQge 41JmeBm+sBIL5lDmkf+Rcg9xuQWAq6jZx83x+jdkkDL3Egjer2E8QgFd8TRzKX6b 1q9uPLYaejMPBhqUep3yEpPIBUYdOSk3P6xrimHYShYsob+zT77d9z6j1K0JzBKt Zf3UB9DAebXcTqoLEMYX8Q6pNByenKU4h0n08suDCfXtUmpeEkngmX+HP/atKJCX rEj8W7D7ym0zTJnt6VBZnKVIzg== -----END CERTIFICATE-----Generated at Wed Jun 24 11:26:13 2026 by rpki-client