$ rpki-client -vvf rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft File: 5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft (raw, json) Hash identifier: q/4EfYLUNBXu/kAe0lgapNb9/zVrnbwYPTIZ1eypBvY= Subject key identifier: 78:56:FA:7E:5F:3A:63:DC:DC:03:31:1D:84:BA:4B:9F:CE:03:FF:06 Authority key identifier: E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2 Certificate issuer: /CN=A912DA1D/serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2 Certificate serial: 042D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft Manifest number: 0417 Signing time: Sat 13 Jun 2026 00:25:57 +0000 Manifest this update: Sat 13 Jun 2026 00:25:56 +0000 Manifest next update: Sat 20 Jun 2026 00:25:56 +0000 Files and hashes: 1: 5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl (hash: QHA3+5h+i1exFFc7aBuQuR5TjrVTOGNbCCErCAE4Dps=) 2: 44B90434DFA011ED8C895F7CC4F9AE02.roa (hash: fOCLl/2VKdNa0vhoLYzfZhLV3T1IotJ/iZtFzsPrmrk=) 3: 0589A4B8DF9511EDAAA7E22AC4F9AE02.roa (hash: 8QW6SQzpdf8WqjCw4pnkX0HYCGVvI59bpneK0fchnuE=) 4: 36B1CD340A6D11ED89FD3F13C4F9AE02.roa (hash: YL8hbnsNwgCnn/NcUCv0iY/57aut2UGD2Ataw87mmvw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 00:25:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1069 (0x42d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DA1D, serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2 Validity Not Before: Jun 13 00:25:56 2026 GMT Not After : Jun 20 00:25:56 2026 GMT Subject: CN=6a2ca395-e935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ef:cd:fe:42:eb:6b:a7:bf:ff:1f:8d:af:e4: d1:b0:cb:ef:a5:d8:34:dd:e1:73:47:45:61:ce:7b: 2b:9f:da:e0:49:ea:2b:80:f1:5e:fa:73:2a:14:ac: 7e:44:56:88:2e:52:c5:66:34:ea:5e:59:8d:a0:74: 65:de:70:31:46:17:83:e6:87:bd:99:1c:ec:fa:8a: 7a:7c:f5:19:74:fc:10:c6:86:d4:35:b0:e8:79:85: 5f:fd:15:55:8c:67:1a:01:fe:17:cb:93:ce:8e:f6: 29:57:bd:9d:fe:28:d3:f8:01:d6:1b:8e:93:8f:1e: 86:ef:85:b6:e6:07:c3:83:34:66:a7:0c:5c:04:bd: bc:be:0f:38:82:bf:1d:36:bb:2b:09:80:f9:d9:2e: 1d:40:14:3c:5a:25:25:e5:8d:b5:19:aa:b4:c2:72: 5c:96:95:5b:1d:b7:3f:0e:6e:da:2e:91:63:cd:57: a0:a2:05:c7:6a:0c:7c:69:a0:5c:94:fe:1b:ac:52: 38:ca:ca:f2:26:7a:94:27:c5:9e:51:bc:7b:2b:56: 92:85:5e:2b:aa:6f:77:3a:4f:fc:bc:bc:21:20:4d: 87:91:0f:d7:86:1a:23:12:6f:b4:d6:29:eb:70:4b: 58:9b:b9:0b:4e:67:3d:92:f3:21:06:8b:3f:ef:55: cf:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:56:FA:7E:5F:3A:63:DC:DC:03:31:1D:84:BA:4B:9F:CE:03:FF:06 X509v3 Authority Key Identifier: keyid:E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:7b:b5:5f:9c:21:92:4f:a9:cf:b3:eb:39:fb:1d:cf:3b:b9: 33:f1:90:db:61:55:ae:05:5f:2a:e5:7e:ed:e2:a5:60:5b:f4: dd:94:75:ef:60:ea:98:57:b6:06:5a:13:7d:d0:6e:93:46:d6: e1:c2:68:f8:96:e5:b3:99:bb:1b:3b:1e:f8:4c:1a:74:51:c8: 9a:01:d7:71:87:a1:5e:2b:fd:69:ba:06:da:83:ce:35:71:e6: 6c:7e:69:5f:36:69:4e:e0:a4:31:35:a7:eb:da:85:d2:c4:15: f0:ea:8c:26:6f:71:00:cc:50:01:51:99:fd:b8:0f:cf:98:51: 39:4f:6f:01:54:2f:02:63:c5:13:fa:c3:ad:82:95:4a:b2:c5: 81:2f:c6:4d:45:38:c9:3b:67:dd:24:05:d4:d3:5f:ea:2e:5a: 14:23:20:e9:fb:8f:f0:ea:7d:ee:51:a1:d5:b2:fb:dd:c0:a2: 92:bb:65:99:5b:e7:db:61:77:44:78:47:e4:e2:1d:58:0c:be: 23:b1:8b:20:b8:95:ae:69:96:29:e4:8c:da:8a:be:2c:97:14: 33:66:b3:54:3b:36:24:cf:0a:b2:4c:e6:93:9e:24:a4:1a:36: 6e:8d:cb:5b:78:36:14:b5:7e:ef:42:58:bb:25:d6:26:9c:5a: 47:89:cd:3f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBC0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRBMUQxMTAvBgNVBAUTKEU0MjE0MkUzRTU4NDU3NjJEMEU4RDY4QjAyRkIxMEU4 NzVCQzZCRjIwHhcNMjYwNjEzMDAyNTU2WhcNMjYwNjIwMDAyNTU2WjAYMRYwFAYD VQQDEw02YTJjYTM5NS1lOTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo+/N/kLra6e//x+Nr+TRsMvvpdg03eFzR0Vhznsrn9rgSeorgPFe+nMqFKx+ RFaILlLFZjTqXlmNoHRl3nAxRheD5oe9mRzs+op6fPUZdPwQxobUNbDoeYVf/RVV jGcaAf4Xy5POjvYpV72d/ijT+AHWG46Tjx6G74W25gfDgzRmpwxcBL28vg84gr8d NrsrCYD52S4dQBQ8WiUl5Y21Gaq0wnJclpVbHbc/Dm7aLpFjzVegogXHagx8aaBc lP4brFI4ysryJnqUJ8WeUbx7K1aShV4rqm93Ok/8vLwhIE2HkQ/XhhojEm+01inr cEtYm7kLTmc9kvMhBos/71XPFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHhW+n5f OmPc3AMxHYS6S5/OA/8GMB8GA1UdIwQYMBaAFOQhQuPlhFdi0OjWiwL7EOh1vGvy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREExRC9CNDZFNDJEQUJC MUIxMUVDQjBBQzBGMTRDNEY5QUUwMi81Q0ZDNC1XRVYyTFE2TmFMQXZzUTZIVzhh X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVDRkM0LVdFVjJMUTZOYUxBdnNRNkhXOGFfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REExRC9CNDZFNDJEQUJCMUIxMUVDQjBBQzBGMTRDNEY5QUUwMi81Q0ZDNC1XRVYy TFE2TmFMQXZzUTZIVzhhX0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmXu1X5whkk+pz7PrOfsdzzu5M/GQ22FVrgVfKuV+7eKlYFv03ZR172DqmFe2 BloTfdBuk0bW4cJo+Jbls5m7Gzse+EwadFHImgHXcYehXiv9aboG2oPONXHmbH5p XzZpTuCkMTWn69qF0sQV8OqMJm9xAMxQAVGZ/bgPz5hROU9vAVQvAmPFE/rDrYKV SrLFgS/GTUU4yTtn3SQF1NNf6i5aFCMg6fuP8Op97lGh1bL73cCikrtlmVvn22F3 RHhH5OIdWAy+I7GLILiVrmmWKeSM2oq+LJcUM2azVDs2JM8Kskzmk54kpBo2bo3L W3g2FLV+70JYuyXWJpxaR4nNPw== -----END CERTIFICATE-----Generated at Sat Jun 13 11:02:31 2026 by rpki-client