$ rpki-client -vvf rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.mft File: xNdQnlMs4vbky06OXDwia6MVTm8.mft (raw, json) Hash identifier: hzNeWELhVWw1fXttfEMf5aH38dTlxxhdMtvI1mgHZD4= Subject key identifier: BF:13:EB:E4:D3:3C:C9:97:C2:B0:64:84:42:85:55:36:55:DA:B2:19 Authority key identifier: C4:D7:50:9E:53:2C:E2:F6:E4:CB:4E:8E:5C:3C:22:6B:A3:15:4E:6F Certificate issuer: /CN=A912AF0B/serialNumber=C4D7509E532CE2F6E4CB4E8E5C3C226BA3154E6F Certificate serial: 1169 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNdQnlMs4vbky06OXDwia6MVTm8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.mft Manifest number: 1148 Signing time: Fri 12 Jun 2026 17:11:55 +0000 Manifest this update: Fri 12 Jun 2026 17:11:55 +0000 Manifest next update: Fri 19 Jun 2026 17:11:55 +0000 Files and hashes: 1: xNdQnlMs4vbky06OXDwia6MVTm8.crl (hash: K/jTtuTfRU+vpkH14lEYkYgUhFtptD2cJtvJLolH7xA=) 2: 9FC6F664BE2A11EFA17DA82CC4F9AE02.roa (hash: ssMQ43fjcNDdMMcxP4Zyw/zUAL+E/8FkY3VJGMomUwo=) 3: 21151EF0A8C411EC8F560C42C4F9AE02.roa (hash: iceccqvc3kg29socz/RRWvyJpHDglBn90E6v9vB2qCg=) 4: 1803FFC65E5F11EBBE37FA4CC4F9AE02.roa (hash: dYx5rg+ikh6rVRuWFPmqQgmz1ejCnGZL23u6GCNg5Bw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.crl rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNdQnlMs4vbky06OXDwia6MVTm8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 17:11:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4457 (0x1169) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AF0B, serialNumber=C4D7509E532CE2F6E4CB4E8E5C3C226BA3154E6F Validity Not Before: Jun 12 17:11:55 2026 GMT Not After : Jun 19 17:11:55 2026 GMT Subject: CN=6a2c3ddb-2e35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:67:d7:0e:f0:8e:5b:77:61:05:77:a1:92:c4: 8a:95:b3:ab:73:c2:f9:22:06:a4:05:89:b9:79:57: 76:25:ee:7f:f3:88:06:cd:22:f4:ad:34:20:2d:0f: 6c:ce:3f:28:db:5a:99:08:06:a1:dc:b4:61:0c:2a: 9d:5e:71:0b:b6:02:ee:32:e5:2c:42:f7:72:d1:26: 18:86:cd:e3:88:bb:9c:d6:e6:6a:0c:58:9d:ee:22: 99:49:ba:e2:d9:52:5f:8b:6e:32:50:49:aa:37:4f: 8e:24:ce:0f:a5:80:3b:d5:42:cb:30:11:d1:b2:a0: f4:0f:2c:c4:7a:8f:56:e3:7d:68:18:01:86:f9:23: 3c:21:08:07:1c:c7:58:14:93:bd:8d:c1:c8:18:b6: d5:ad:e6:0e:65:40:5e:98:9e:5e:77:b3:e4:f4:9a: 76:86:75:d4:dc:30:37:46:b9:89:b3:53:4c:39:ff: 6b:a3:34:7c:7f:01:20:83:ea:2b:e8:5a:47:2a:38: d8:00:6b:fe:0d:e5:6a:96:c4:63:a5:28:6a:79:5e: 99:2a:d8:0a:7a:7f:14:fa:67:5a:13:89:88:d5:e7: da:16:7a:7d:38:fb:02:94:90:4c:75:8a:94:61:2a: 5d:86:59:cd:a6:67:13:e2:4a:98:ea:b3:ff:5c:a7: 60:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:13:EB:E4:D3:3C:C9:97:C2:B0:64:84:42:85:55:36:55:DA:B2:19 X509v3 Authority Key Identifier: keyid:C4:D7:50:9E:53:2C:E2:F6:E4:CB:4E:8E:5C:3C:22:6B:A3:15:4E:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNdQnlMs4vbky06OXDwia6MVTm8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:65:78:cb:da:e7:88:7c:66:df:4a:70:35:34:32:69:b5:51: 39:94:e8:bd:e3:30:2e:b5:b1:d5:db:ae:bf:ed:cc:3f:4f:07: 3b:47:11:2c:75:74:0b:31:e9:97:b9:82:1b:04:5d:2d:67:6b: 58:0f:f1:fa:53:6c:df:f2:62:c7:3f:52:9f:e8:4b:d7:98:00: 33:02:b7:70:1d:0f:ba:3e:c5:45:3d:57:0e:a9:f4:ad:14:ea: 06:d3:73:0e:8b:be:6f:12:3b:0f:fd:f0:b9:8b:e6:8e:75:12: 33:40:f7:73:44:d9:ad:f1:fb:2b:f0:2d:d8:4a:c5:be:1f:a7: 42:3f:4e:16:b8:c8:f1:59:3b:df:b4:36:18:5e:3e:c2:4f:20: 65:ab:eb:b4:a2:c3:76:04:2e:f4:68:01:c2:6d:e4:bc:f4:c5: e8:80:54:e1:36:3d:16:98:36:40:44:a1:0f:c9:3d:a1:c8:00: 66:13:0f:09:92:58:e4:d9:f6:28:29:69:01:61:c0:04:4e:bf: 19:1f:b5:7d:61:11:d1:b4:94:c6:8a:ce:d1:5e:89:15:b5:36: c3:0b:fe:fa:a0:8a:f0:99:ef:71:1d:8b:79:2f:1d:78:57:48: fa:0c:4e:5f:3c:0b:12:5b:db:e6:21:40:48:0b:ec:1a:2e:4b: f0:c4:99:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFGMEIxMTAvBgNVBAUTKEM0RDc1MDlFNTMyQ0UyRjZFNENCNEU4RTVDM0MyMjZC QTMxNTRFNkYwHhcNMjYwNjEyMTcxMTU1WhcNMjYwNjE5MTcxMTU1WjAYMRYwFAYD VQQDEw02YTJjM2RkYi0yZTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5mfXDvCOW3dhBXehksSKlbOrc8L5IgakBYm5eVd2Je5/84gGzSL0rTQgLQ9s zj8o21qZCAah3LRhDCqdXnELtgLuMuUsQvdy0SYYhs3jiLuc1uZqDFid7iKZSbri 2VJfi24yUEmqN0+OJM4PpYA71ULLMBHRsqD0DyzEeo9W431oGAGG+SM8IQgHHMdY FJO9jcHIGLbVreYOZUBemJ5ed7Pk9Jp2hnXU3DA3RrmJs1NMOf9rozR8fwEgg+or 6FpHKjjYAGv+DeVqlsRjpShqeV6ZKtgKen8U+mdaE4mI1efaFnp9OPsClJBMdYqU YSpdhlnNpmcT4kqY6rP/XKdgPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL8T6+TT PMmXwrBkhEKFVTZV2rIZMB8GA1UdIwQYMBaAFMTXUJ5TLOL25MtOjlw8ImujFU5v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUYwQi9CNTk0MTlEMjMy RUQxMUU5OUM5NTRDMjRDNEY5QUUwMi94TmRRbmxNczR2Ymt5MDZPWER3aWE2TVZU bTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hOZFFubE1zNHZia3kwNk9YRHdpYTZNVlRtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUYwQi9CNTk0MTlEMjMyRUQxMUU5OUM5NTRDMjRDNEY5QUUwMi94TmRRbmxNczR2 Ymt5MDZPWER3aWE2TVZUbTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA2V4y9rniHxm30pwNTQyabVROZToveMwLrWx1duuv+3MP08HO0cRLHV0CzHp l7mCGwRdLWdrWA/x+lNs3/Jixz9Sn+hL15gAMwK3cB0Puj7FRT1XDqn0rRTqBtNz Dou+bxI7D/3wuYvmjnUSM0D3c0TZrfH7K/At2ErFvh+nQj9OFrjI8Vk737Q2GF4+ wk8gZavrtKLDdgQu9GgBwm3kvPTF6IBU4TY9Fpg2QEShD8k9ocgAZhMPCZJY5Nn2 KClpAWHABE6/GR+1fWER0bSUxorO0V6JFbU2wwv++qCK8JnvcR2LeS8deFdI+gxO XzwLElvb5iFASAvsGi5L8MSZGQ== -----END CERTIFICATE-----Generated at Sat Jun 13 09:32:13 2026 by rpki-client