$ rpki-client -vvf rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft File: h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft (raw, json) Hash identifier: 0++zHI284pnYTLvIZuXcsXwixGySY2HbEqOQZeG3kY0= Subject key identifier: 3D:2A:6A:F4:24:F2:18:76:7B:62:60:58:2A:AB:FC:81:B0:0E:BF:C1 Authority key identifier: 87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B Certificate issuer: /CN=A919F9A8/serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B Certificate serial: 01CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft Manifest number: 01AE Signing time: Mon 01 Jun 2026 05:01:32 +0000 Manifest this update: Mon 01 Jun 2026 05:01:32 +0000 Manifest next update: Mon 08 Jun 2026 05:01:32 +0000 Files and hashes: 1: h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl (hash: kjxyBHNIVSj31vaq+h3xlq41ZVAWOZgZC7nXVv87Wn8=) 2: F2D5C21216F511F086107D74C4F9AE02.roa (hash: ZuKywPCk/DkKyCpqoZBfyKV9L6QxTxAVdxmCPTDjvq8=) 3: 9E54710E16D511F09EF28A4EC4F9AE02.roa (hash: PS353luWU5EZRXf1V5KYpvKbmWd2t8tkTqJLhBlN/tY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 05:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 460 (0x1cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F9A8, serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B Validity Not Before: Jun 1 05:01:32 2026 GMT Not After : Jun 8 05:01:32 2026 GMT Subject: CN=6a1d122c-cf22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:75:9e:75:69:91:dc:fb:0b:37:71:78:6f:b3: b0:26:cd:e7:1a:4e:c0:ae:36:01:57:92:51:4b:17: 71:3c:c4:3b:8f:ea:c6:cf:8a:fa:53:d8:53:b1:0f: 25:b1:09:7f:24:70:c9:56:c7:28:78:ff:a6:83:d8: 99:1f:06:f2:8f:b6:44:f0:48:c3:08:e7:f3:4d:b7: bb:ff:82:e4:3b:7f:11:b0:dc:c3:aa:51:78:3d:83: 40:f0:f3:8c:5e:7f:1d:ff:a1:4f:4b:7b:7a:ca:3e: f3:76:93:18:d6:55:b1:08:55:44:b9:a1:f9:bc:4e: 1e:f8:f0:44:2a:bb:fa:e6:a9:9b:ed:36:46:c6:45: b7:01:77:96:51:bf:65:39:dc:c4:40:13:e0:cb:0f: 45:09:1f:c1:92:3f:27:2b:37:35:9d:4f:a1:cd:00: 9e:1d:3a:49:4c:34:1e:37:a7:63:c0:33:ca:b8:65: 13:2c:30:50:60:87:08:5d:a3:73:1d:e0:b2:bb:13: 3b:5a:7c:a2:71:e9:46:49:d3:c4:ea:0b:b6:d1:b3: 36:5a:2d:84:2a:9f:8d:98:38:cc:b8:f7:9e:08:b9: 14:f4:b7:4a:8a:fa:7d:72:57:06:a5:26:d6:1a:59: ab:8d:70:41:f7:74:97:5b:09:06:af:60:a4:88:04: 9d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:2A:6A:F4:24:F2:18:76:7B:62:60:58:2A:AB:FC:81:B0:0E:BF:C1 X509v3 Authority Key Identifier: keyid:87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:83:04:93:53:3d:21:83:48:c2:0a:10:b3:fa:12:be:ab:4d: 46:2e:89:c2:7a:5d:85:b4:83:ee:3d:6f:ec:9b:0b:4f:1a:0f: fc:06:f2:f0:3c:43:6c:56:7f:6d:56:a3:93:12:98:af:83:c0: 40:64:36:af:20:a4:77:53:1e:ed:48:34:97:d9:a8:ec:d1:eb: 40:87:d3:7a:ad:2a:dd:36:4d:2f:e8:e5:6d:70:21:e7:0c:f8: 01:d9:2f:12:f9:08:af:57:ee:c1:ec:23:9a:4f:c7:d5:3f:c4: 11:bc:b9:2c:73:27:a3:00:83:17:dd:7e:23:26:16:bb:f8:15: 8d:46:ac:c6:38:e2:36:69:b6:42:86:55:3e:08:97:bc:22:cf: e8:96:81:60:f0:20:70:4a:c3:9d:6b:66:f6:b1:2e:79:af:ba: 59:0d:f0:e6:18:47:90:38:77:f7:17:9b:83:7f:d6:31:ad:7d: b2:d8:c5:23:68:92:0d:81:6b:e3:e6:e0:ab:fb:36:cd:17:cb: db:18:0d:0d:ac:83:3d:f2:ec:2d:43:34:19:f0:1c:84:4c:c7: f5:45:ba:30:e4:d1:a7:56:4c:ee:9a:57:42:60:97:c7:16:ac: 98:d3:7c:36:18:7d:82:93:fb:44:d3:f1:cb:7e:27:4a:38:d5: bd:59:53:df -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY5QTgxMTAvBgNVBAUTKDg3QjYyQzM0RThEQzVENDAyMzhDMEY2QkRFOTExNTZF NUQwNkE0NEIwHhcNMjYwNjAxMDUwMTMyWhcNMjYwNjA4MDUwMTMyWjAYMRYwFAYD VQQDEw02YTFkMTIyYy1jZjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkXWedWmR3PsLN3F4b7OwJs3nGk7ArjYBV5JRSxdxPMQ7j+rGz4r6U9hTsQ8l sQl/JHDJVscoeP+mg9iZHwbyj7ZE8EjDCOfzTbe7/4LkO38RsNzDqlF4PYNA8POM Xn8d/6FPS3t6yj7zdpMY1lWxCFVEuaH5vE4e+PBEKrv65qmb7TZGxkW3AXeWUb9l OdzEQBPgyw9FCR/Bkj8nKzc1nU+hzQCeHTpJTDQeN6djwDPKuGUTLDBQYIcIXaNz HeCyuxM7WnyicelGSdPE6gu20bM2Wi2EKp+NmDjMuPeeCLkU9LdKivp9clcGpSbW GlmrjXBB93SXWwkGr2CkiASdUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD0qavQk 8hh2e2JgWCqr/IGwDr/BMB8GA1UdIwQYMBaAFIe2LDTo3F1AI4wPa96RFW5dBqRL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjlBOC9COTIzMDZGRUVC NkExMUVFOUMwM0I3MTFDNEY5QUUwMi9oN1lzTk9qY1hVQWpqQTlyM3BFVmJsMEdw RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g3WXNOT2pjWFVBampBOXIzcEVWYmwwR3BFcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjlBOC9COTIzMDZGRUVCNkExMUVFOUMwM0I3MTFDNEY5QUUwMi9oN1lzTk9qY1hV QWpqQTlyM3BFVmJsMEdwRXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA4MEk1M9IYNIwgoQs/oSvqtNRi6JwnpdhbSD7j1v7JsLTxoP/Aby8DxDbFZ/ bVajkxKYr4PAQGQ2ryCkd1Me7Ug0l9mo7NHrQIfTeq0q3TZNL+jlbXAh5wz4Adkv EvkIr1fuwewjmk/H1T/EEby5LHMnowCDF91+IyYWu/gVjUasxjjiNmm2QoZVPgiX vCLP6JaBYPAgcErDnWtm9rEuea+6WQ3w5hhHkDh39xebg3/WMa19stjFI2iSDYFr 4+bgq/s2zRfL2xgNDayDPfLsLUM0GfAchEzH9UW6MOTRp1ZM7ppXQmCXxxasmNN8 Nhh9gpP7RNPxy34nSjjVvVlT3w== -----END CERTIFICATE-----Generated at Tue Jun 2 21:02:58 2026 by rpki-client