$ rpki-client -vvf rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft File: aAYK77v8wH1z211yeLyPJJxX9RU.mft (raw, json) Hash identifier: 86W13l2nlygZTVwv0qDLkhvCcHHofT1l5264lC+Ehww= Subject key identifier: B4:C3:B3:E4:0F:FC:35:2C:2C:08:EF:6F:0D:92:BF:8C:28:9E:34:D4 Authority key identifier: 68:06:0A:EF:BB:FC:C0:7D:73:DB:5D:72:78:BC:8F:24:9C:57:F5:15 Certificate issuer: /CN=A912859A/serialNumber=68060AEFBBFCC07D73DB5D7278BC8F249C57F515 Certificate serial: 046F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft Manifest number: 045E Signing time: Sat 13 Jun 2026 00:12:33 +0000 Manifest this update: Sat 13 Jun 2026 00:12:32 +0000 Manifest next update: Sat 20 Jun 2026 00:12:32 +0000 Files and hashes: 1: aAYK77v8wH1z211yeLyPJJxX9RU.crl (hash: 9C5Gxf2hhSd232jlmDnzlkjCdrORAxibgWnVanPVhAQ=) 2: 5B639C667CEB11EDA3D10364C4F9AE02.roa (hash: Yp8vQRRn+1isdhS7HH7fMBWq8BHFrYVDOBpfy5O1p3A=) 3: ADBB651E043411ED9F02B325C4F9AE02.roa (hash: cVYpcEpLmW3gYRT3SsW9LPnpjNMLZz8OsKdq5PALSk0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.crl rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 00:12:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1135 (0x46f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912859A, serialNumber=68060AEFBBFCC07D73DB5D7278BC8F249C57F515 Validity Not Before: Jun 13 00:12:32 2026 GMT Not After : Jun 20 00:12:32 2026 GMT Subject: CN=6a2ca070-f741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:52:f9:8b:41:af:6b:17:ed:df:80:43:04:58: b7:6f:2e:bc:5b:2f:68:aa:54:f9:45:c4:c5:2a:ca: 10:84:df:6b:cb:fd:2e:7e:97:72:7d:8f:cd:0b:fb: 09:4b:66:55:e9:fd:f1:9c:71:6e:3e:d3:44:60:99: fe:5d:12:d6:f1:82:81:c0:e4:34:00:f0:79:5b:2d: 7a:08:88:d1:97:bf:37:3a:c2:e8:b3:e8:60:06:9f: 78:7d:06:ab:b6:e0:4d:7b:31:05:d3:75:ba:9f:33: ad:cf:dd:8c:e0:b8:5c:ea:86:0a:42:c8:d8:bc:b7: 70:a0:a3:3f:78:17:5b:67:ab:37:72:e2:a9:8d:bd: b7:85:a6:89:d6:1d:1e:8e:82:a6:07:16:f6:f8:d7: a7:ba:9e:2e:0b:3d:35:68:aa:27:24:f8:5c:7d:65: 16:54:4d:bf:71:41:33:1e:08:b0:ca:46:b7:ce:cd: cd:c2:d4:30:d1:0a:23:4c:9d:c2:ab:15:46:95:e0: 06:0c:2f:be:93:b3:cd:c5:59:10:da:d9:bc:d2:e2: 4a:a7:ca:2f:63:fa:ef:80:d8:f2:29:8f:c8:dc:02: da:13:4c:2b:87:c6:db:f7:a7:fb:3e:c3:53:89:bb: b1:3c:8e:55:03:a6:8d:f4:e4:5b:75:18:0a:0f:78: 4f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:C3:B3:E4:0F:FC:35:2C:2C:08:EF:6F:0D:92:BF:8C:28:9E:34:D4 X509v3 Authority Key Identifier: keyid:68:06:0A:EF:BB:FC:C0:7D:73:DB:5D:72:78:BC:8F:24:9C:57:F5:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:b5:03:31:03:50:42:e9:2c:03:a6:4f:25:1b:14:bc:cb:9f: 2c:c6:4d:ad:1f:41:bc:8e:29:32:14:11:a0:66:f8:f1:31:12: a3:f3:46:af:95:71:69:6d:43:fc:79:31:05:11:00:c2:78:8f: 74:d6:24:7f:1b:f6:ba:af:3c:f1:52:df:a2:ff:e6:0a:a3:b6: 2c:aa:75:61:f3:86:63:df:fb:01:3d:82:1e:19:99:37:41:8b: 7e:92:0d:db:79:ca:07:93:a6:74:da:b2:bb:28:d7:2f:c4:d6: 3c:00:a1:a6:88:c1:d4:48:5f:79:17:71:60:8b:43:9a:86:d4: 55:2e:1a:33:95:28:5c:98:87:35:c2:49:5c:b4:17:6f:92:e6: 09:18:a4:f0:4a:09:c0:7d:b8:2e:ba:82:74:41:e2:73:4f:3b: ee:a1:05:16:f1:81:a7:9d:2b:94:22:f4:11:c7:82:a9:b9:24: f7:8f:9c:b4:c9:26:9f:45:56:85:88:67:30:df:a0:55:a2:6f: 94:29:84:16:da:3b:f5:35:d8:42:9f:a1:60:56:82:9e:ff:7e: f4:33:95:ee:dd:b0:69:07:c9:0e:a9:f5:54:5e:45:ab:f9:49: 30:c1:ca:21:3c:8c:25:8b:3f:af:36:94:68:d7:15:4b:ed:23: b6:0e:d7:b0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg1OUExMTAvBgNVBAUTKDY4MDYwQUVGQkJGQ0MwN0Q3M0RCNUQ3Mjc4QkM4RjI0 OUM1N0Y1MTUwHhcNMjYwNjEzMDAxMjMyWhcNMjYwNjIwMDAxMjMyWjAYMRYwFAYD VQQDEw02YTJjYTA3MC1mNzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtFL5i0Gvaxft34BDBFi3by68Wy9oqlT5RcTFKsoQhN9ry/0ufpdyfY/NC/sJ S2ZV6f3xnHFuPtNEYJn+XRLW8YKBwOQ0APB5Wy16CIjRl783OsLos+hgBp94fQar tuBNezEF03W6nzOtz92M4Lhc6oYKQsjYvLdwoKM/eBdbZ6s3cuKpjb23haaJ1h0e joKmBxb2+Nenup4uCz01aKonJPhcfWUWVE2/cUEzHgiwyka3zs3NwtQw0QojTJ3C qxVGleAGDC++k7PNxVkQ2tm80uJKp8ovY/rvgNjyKY/I3ALaE0wrh8bb96f7PsNT ibuxPI5VA6aN9ORbdRgKD3hP7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLTDs+QP /DUsLAjvbw2Sv4wonjTUMB8GA1UdIwQYMBaAFGgGCu+7/MB9c9tdcni8jyScV/UV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODU5QS9CQUNBQjdFQzlE RkUxMUVDQjg3RjUxNDdDNEY5QUUwMi9hQVlLNzd2OHdIMXoyMTF5ZUx5UEpKeFg5 UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FBWUs3N3Y4d0gxejIxMXllTHlQSkp4WDlSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODU5QS9CQUNBQjdFQzlERkUxMUVDQjg3RjUxNDdDNEY5QUUwMi9hQVlLNzd2OHdI MXoyMTF5ZUx5UEpKeFg5UlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAW7UDMQNQQuksA6ZPJRsUvMufLMZNrR9BvI4pMhQRoGb48TESo/NGr5VxaW1D /HkxBREAwniPdNYkfxv2uq888VLfov/mCqO2LKp1YfOGY9/7AT2CHhmZN0GLfpIN 23nKB5OmdNqyuyjXL8TWPAChpojB1EhfeRdxYItDmobUVS4aM5UoXJiHNcJJXLQX b5LmCRik8EoJwH24LrqCdEHic0877qEFFvGBp50rlCL0EceCqbkk94+ctMkmn0VW hYhnMN+gVaJvlCmEFto79TXYQp+hYFaCnv9+9DOV7t2waQfJDqn1VF5Fq/lJMMHK ITyMJYs/rzaUaNcVS+0jtg7XsA== -----END CERTIFICATE-----Generated at Sat Jun 13 13:32:57 2026 by rpki-client