$ rpki-client -vvf rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft File: XW8me3qjzDZHyTE7nux9aaFnOVg.mft (raw, json) Hash identifier: Z3hDFwrivu4DVoknJce10hZf5S+IRVvCBaO+cvoy9jU= Subject key identifier: 9A:5C:89:27:93:8A:A6:81:20:80:BA:74:DF:38:10:25:6C:DF:9B:C9 Authority key identifier: 5D:6F:26:7B:7A:A3:CC:36:47:C9:31:3B:9E:EC:7D:69:A1:67:39:58 Certificate issuer: /CN=A91583E2/serialNumber=5D6F267B7AA3CC3647C9313B9EEC7D69A1673958 Certificate serial: D7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft Manifest number: C7 Signing time: Sat 13 Jun 2026 06:58:03 +0000 Manifest this update: Sat 13 Jun 2026 06:58:02 +0000 Manifest next update: Sat 20 Jun 2026 06:58:02 +0000 Files and hashes: 1: XW8me3qjzDZHyTE7nux9aaFnOVg.crl (hash: yY+ND7aULBc9I+AIO+dnjlZQESML2sF/5PnR64/HLYE=) 2: B05F386E3B9911F09DE90D79C4F9AE02.roa (hash: 6w1HzCUg6p4mztXpRSikJO2Y5n7Og6kFlJojI34dx8M=) 3: 22D3C2B23B9E11F096AB407FC4F9AE02.roa (hash: AQbnIHwCJBjkidfFhnjxCBn8qJ9nAragqxJAtmgwlvI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.crl rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 06:58:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91583E2, serialNumber=5D6F267B7AA3CC3647C9313B9EEC7D69A1673958 Validity Not Before: Jun 13 06:58:02 2026 GMT Not After : Jun 20 06:58:02 2026 GMT Subject: CN=6a2cff7b-b37e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f9:59:7a:d9:eb:7f:00:91:d5:ba:64:84:d4: ca:7c:19:45:af:95:b7:7d:28:ea:ac:5f:8c:c0:df: 7c:e3:0c:bc:3d:ae:5b:b3:8f:f3:1f:11:98:99:0b: 8f:a7:0d:1a:b5:2c:25:f2:52:dc:a8:9e:4b:fe:41: 74:61:b2:e9:6e:97:af:6a:33:64:4f:1a:24:70:0d: 41:e8:28:2f:d0:52:d4:02:e4:f0:f2:90:e1:d7:c6: ce:ed:aa:dc:1e:4e:be:76:dd:8d:02:9a:30:39:d9: b5:4c:1d:24:aa:84:4d:3b:81:4a:94:88:fc:15:3f: f1:c4:fc:6a:cc:c7:c5:42:11:ee:61:4b:19:8a:d2: 5f:42:65:fb:78:ed:27:47:92:f4:f7:61:83:a4:90: 5f:c4:07:94:7d:38:eb:b6:f4:f9:08:6a:20:d3:da: 0c:8d:fc:28:52:ed:7c:93:92:52:b2:6c:fd:cf:c0: 5c:81:c0:ad:e7:b3:a1:2c:c6:21:57:96:00:d9:a6: 66:c7:f0:6f:36:24:14:f7:2e:9e:51:7a:34:b6:37: 4e:90:c1:2b:9a:95:12:0f:ac:44:b8:85:91:67:cc: 0a:3f:ef:f1:b2:d6:ed:cd:24:10:c0:4f:6c:b1:7a: 91:49:08:d2:66:82:97:64:82:63:d7:10:42:fa:a8: 78:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:5C:89:27:93:8A:A6:81:20:80:BA:74:DF:38:10:25:6C:DF:9B:C9 X509v3 Authority Key Identifier: keyid:5D:6F:26:7B:7A:A3:CC:36:47:C9:31:3B:9E:EC:7D:69:A1:67:39:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:8d:70:83:df:ae:69:c6:9a:a3:94:7f:8a:05:96:a4:5c:a4: 3d:ad:4c:08:cf:0b:87:1f:6d:7d:20:64:f5:98:ae:a5:49:d7: 40:91:cb:fa:8e:01:7a:1e:22:1b:07:55:f3:b0:be:54:36:16: b4:9c:f3:91:d3:71:ac:09:04:d1:22:dd:53:b0:73:ee:aa:c1: a7:29:12:4a:19:1a:08:92:b1:84:64:73:bf:4c:c2:b5:11:3b: 03:ba:20:b8:5f:2f:b0:7b:f0:f6:e7:2d:9f:48:dd:eb:7e:dd: a0:e7:cd:92:56:ac:f5:6a:3b:e6:f5:6a:7c:a2:da:5e:3f:e2: 12:8a:ea:bb:48:68:10:39:b2:39:0c:14:34:2c:0d:a1:8d:06: 3e:fd:a6:a6:57:db:68:08:82:2e:8f:46:bf:c6:b9:6a:b6:16: 68:b3:67:24:4e:57:07:5a:b8:66:e6:17:98:04:42:54:23:74: 19:6c:20:e2:bd:92:c3:36:46:17:f6:c1:3d:bf:d5:89:00:35: 60:9e:0e:96:2a:00:95:d8:dd:0b:81:15:1c:f8:fb:2e:d4:e4: 65:02:50:89:ba:a9:35:84:bc:c5:16:7e:d9:98:5a:5c:fb:97: 2f:6d:92:c2:00:31:9a:59:2c:ed:d0:f3:4e:c4:87:a3:ff:04: e6:ed:6e:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgzRTIxMTAvBgNVBAUTKDVENkYyNjdCN0FBM0NDMzY0N0M5MzEzQjlFRUM3RDY5 QTE2NzM5NTgwHhcNMjYwNjEzMDY1ODAyWhcNMjYwNjIwMDY1ODAyWjAYMRYwFAYD VQQDEw02YTJjZmY3Yi1iMzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAovlZetnrfwCR1bpkhNTKfBlFr5W3fSjqrF+MwN984wy8Pa5bs4/zHxGYmQuP pw0atSwl8lLcqJ5L/kF0YbLpbpevajNkTxokcA1B6Cgv0FLUAuTw8pDh18bO7arc Hk6+dt2NApowOdm1TB0kqoRNO4FKlIj8FT/xxPxqzMfFQhHuYUsZitJfQmX7eO0n R5L092GDpJBfxAeUfTjrtvT5CGog09oMjfwoUu18k5JSsmz9z8BcgcCt57OhLMYh V5YA2aZmx/BvNiQU9y6eUXo0tjdOkMErmpUSD6xEuIWRZ8wKP+/xstbtzSQQwE9s sXqRSQjSZoKXZIJj1xBC+qh4YwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJpciSeT iqaBIIC6dN84ECVs35vJMB8GA1UdIwQYMBaAFF1vJnt6o8w2R8kxO57sfWmhZzlY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODNFMi80M0ZCNzg3QzNC OTkxMUYwQTBDQzU5NzhDNEY5QUUwMi9YVzhtZTNxanpEWkh5VEU3bnV4OWFhRm5P VmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hXOG1lM3FqekRaSHlURTdudXg5YWFGbk9WZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODNFMi80M0ZCNzg3QzNCOTkxMUYwQTBDQzU5NzhDNEY5QUUwMi9YVzhtZTNxanpE Wkh5VEU3bnV4OWFhRm5PVmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUI1wg9+uacaao5R/igWWpFykPa1MCM8Lhx9tfSBk9ZiupUnXQJHL+o4Beh4i GwdV87C+VDYWtJzzkdNxrAkE0SLdU7Bz7qrBpykSShkaCJKxhGRzv0zCtRE7A7og uF8vsHvw9uctn0jd637doOfNklas9Wo75vVqfKLaXj/iEorqu0hoEDmyOQwUNCwN oY0GPv2mplfbaAiCLo9Gv8a5arYWaLNnJE5XB1q4ZuYXmARCVCN0GWwg4r2SwzZG F/bBPb/ViQA1YJ4OlioAldjdC4EVHPj7LtTkZQJQibqpNYS8xRZ+2ZhaXPuXL22S wgAxmlks7dDzTsSHo/8E5u1uPg== -----END CERTIFICATE-----Generated at Sun Jun 14 01:54:54 2026 by rpki-client