$ rpki-client -vvf rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft File: ihHrdksVeFOdbtOykDv2H0wIAHw.mft (raw, json) Hash identifier: /YIvSIH8Eu1d5pqc12N3L+tufYr1dFwI+Qtejvman0k= Subject key identifier: 65:B7:E7:A3:59:E0:E8:18:9E:88:25:42:32:77:F1:2B:47:F4:5C:5F Authority key identifier: 8A:11:EB:76:4B:15:78:53:9D:6E:D3:B2:90:3B:F6:1F:4C:08:00:7C Certificate issuer: /CN=A914CC0F/serialNumber=8A11EB764B1578539D6ED3B2903BF61F4C08007C Certificate serial: D3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ihHrdksVeFOdbtOykDv2H0wIAHw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft Manifest number: D3 Signing time: Fri 12 Jun 2026 19:47:39 +0000 Manifest this update: Fri 12 Jun 2026 19:47:39 +0000 Manifest next update: Fri 19 Jun 2026 19:47:39 +0000 Files and hashes: 1: ihHrdksVeFOdbtOykDv2H0wIAHw.crl (hash: vKfl6DJ/IsfWqXvbcQEVLalLw1jtPi1X1twPi3MD6mE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.crl rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ihHrdksVeFOdbtOykDv2H0wIAHw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 19:47:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CC0F, serialNumber=8A11EB764B1578539D6ED3B2903BF61F4C08007C Validity Not Before: Jun 12 19:47:39 2026 GMT Not After : Jun 19 19:47:39 2026 GMT Subject: CN=6a2c625b-d630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9c:c8:e3:08:3d:ec:a2:a8:a7:da:e5:e1:45: 91:09:d2:b0:41:13:15:b8:23:38:5b:e1:63:ea:97: 71:ea:3f:fb:00:9a:71:fc:13:e0:31:8d:1f:2b:39: 71:58:9b:13:07:9a:35:36:ac:ff:b9:e8:bb:de:4c: 27:4a:cc:74:5c:a9:19:19:6f:c8:2e:e0:44:4f:36: 0b:d9:a9:62:3d:26:b9:ee:e1:48:65:7a:dd:94:e3: f4:02:32:96:56:4f:c9:47:9d:99:98:67:26:8a:af: 32:e7:fd:e5:d5:46:a2:8c:0f:97:1d:e0:8d:bc:b6: be:23:fb:67:51:ed:8b:82:63:a7:e1:93:41:09:66: 20:e3:17:67:01:dd:21:80:f5:f6:dd:ff:94:8b:79: a2:27:a8:30:42:76:0c:70:aa:18:da:d9:4c:e1:fe: 20:ca:b2:4a:46:ff:34:41:16:3b:65:53:cd:fc:88: 62:04:a4:dd:53:ab:29:a1:6b:96:62:a9:fd:3c:c8: 0c:4d:7f:09:ab:57:c0:f1:f6:c9:16:a2:3d:91:90: 20:51:3a:c4:7f:b3:f8:5f:74:bc:2d:fb:b6:f6:20: eb:0d:69:22:df:2a:0c:ad:76:cd:dc:d4:00:c1:e3: 44:c8:95:34:19:94:4e:63:7f:35:3f:98:11:b1:d4: 49:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:B7:E7:A3:59:E0:E8:18:9E:88:25:42:32:77:F1:2B:47:F4:5C:5F X509v3 Authority Key Identifier: keyid:8A:11:EB:76:4B:15:78:53:9D:6E:D3:B2:90:3B:F6:1F:4C:08:00:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ihHrdksVeFOdbtOykDv2H0wIAHw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:60:da:f9:b6:b9:96:22:ad:c4:21:e8:a8:e7:7e:f1:a7:11: db:94:25:f9:50:a6:7c:4b:f7:a0:9e:7a:6f:f8:9b:25:ad:61: f6:e1:8f:8c:a3:c3:50:e0:4e:3f:fa:b6:92:48:f3:83:af:fa: 5c:07:8b:c6:28:2e:32:ff:25:60:2b:f4:74:47:99:0b:6a:02: 0b:19:1d:af:2a:50:c2:3e:8c:26:8f:2b:55:ca:52:37:1a:20: 9e:e5:4d:ec:c4:e3:16:ca:83:e9:f5:55:fd:06:d2:97:50:92: fe:02:42:2c:d2:d5:bf:d3:11:10:93:62:19:c5:74:9f:ae:7a: 84:da:29:1f:eb:a5:f1:8c:91:d3:32:62:83:38:4f:38:e3:dc: 7b:8d:13:02:bf:31:96:7d:c0:c6:3d:ee:66:57:6b:b3:67:89: 94:1d:80:93:67:b5:db:7a:95:40:81:01:43:39:70:d7:4c:2d: ce:b2:55:4d:81:1f:bd:97:13:99:5a:bf:ca:80:e3:26:18:3d: 61:5c:ed:a9:04:83:ca:6e:4d:b7:d3:e6:52:e1:d7:86:78:9e: 5c:d1:ed:8b:1b:33:24:3c:81:b3:9c:de:f1:24:c6:3f:63:82: ee:34:8d:55:a3:df:f5:3f:73:d7:d2:1b:ce:12:b4:21:b1:2d: 5e:a7:a5:cd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENDMEYxMTAvBgNVBAUTKDhBMTFFQjc2NEIxNTc4NTM5RDZFRDNCMjkwM0JGNjFG NEMwODAwN0MwHhcNMjYwNjEyMTk0NzM5WhcNMjYwNjE5MTk0NzM5WjAYMRYwFAYD VQQDEw02YTJjNjI1Yi1kNjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjpzI4wg97KKop9rl4UWRCdKwQRMVuCM4W+Fj6pdx6j/7AJpx/BPgMY0fKzlx WJsTB5o1Nqz/uei73kwnSsx0XKkZGW/ILuBETzYL2aliPSa57uFIZXrdlOP0AjKW Vk/JR52ZmGcmiq8y5/3l1UaijA+XHeCNvLa+I/tnUe2LgmOn4ZNBCWYg4xdnAd0h gPX23f+Ui3miJ6gwQnYMcKoY2tlM4f4gyrJKRv80QRY7ZVPN/IhiBKTdU6spoWuW Yqn9PMgMTX8Jq1fA8fbJFqI9kZAgUTrEf7P4X3S8Lfu29iDrDWki3yoMrXbN3NQA weNEyJU0GZROY381P5gRsdRJ9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGW356NZ 4OgYnoglQjJ38StH9FxfMB8GA1UdIwQYMBaAFIoR63ZLFXhTnW7TspA79h9MCAB8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0MwRi80OUU5OTZDNDJD NjIxMUYwQTlCMUM2NUFDNEY5QUUwMi9paEhyZGtzVmVGT2RidE95a0R2Mkgwd0lB SHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2loSHJka3NWZUZPZGJ0T3lrRHYySDB3SUFIdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0MwRi80OUU5OTZDNDJDNjIxMUYwQTlCMUM2NUFDNEY5QUUwMi9paEhyZGtzVmVG T2RidE95a0R2Mkgwd0lBSHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWmDa+ba5liKtxCHoqOd+8acR25Ql+VCmfEv3oJ56b/ibJa1h9uGPjKPDUOBO P/q2kkjzg6/6XAeLxiguMv8lYCv0dEeZC2oCCxkdrypQwj6MJo8rVcpSNxognuVN 7MTjFsqD6fVV/QbSl1CS/gJCLNLVv9MREJNiGcV0n656hNopH+ul8YyR0zJigzhP OOPce40TAr8xln3Axj3uZldrs2eJlB2Ak2e123qVQIEBQzlw10wtzrJVTYEfvZcT mVq/yoDjJhg9YVztqQSDym5Nt9PmUuHXhnieXNHtixszJDyBs5ze8STGP2OC7jSN VaPf9T9z19IbzhK0IbEtXqelzQ== -----END CERTIFICATE-----Generated at Sat Jun 13 15:53:51 2026 by rpki-client