$ rpki-client -vvf rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.mft File: OqWspVx7NeP5Iru42qsdfYhw43M.mft (raw, json) Hash identifier: z72SsFMQHA9lmsEzN+SahdMzY3EPfRYHpganz24khms= Subject key identifier: 1C:D9:F1:6C:C0:C1:CF:08:F5:77:CE:F7:2A:10:22:9C:71:D9:C2:2D Authority key identifier: 3A:A5:AC:A5:5C:7B:35:E3:F9:22:BB:B8:DA:AB:1D:7D:88:70:E3:73 Certificate issuer: /CN=A915A533/serialNumber=3AA5ACA55C7B35E3F922BBB8DAAB1D7D8870E373 Certificate serial: 0249 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqWspVx7NeP5Iru42qsdfYhw43M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.mft Manifest number: 0242 Signing time: Sat 13 Jun 2026 02:30:04 +0000 Manifest this update: Sat 13 Jun 2026 02:30:04 +0000 Manifest next update: Sat 20 Jun 2026 02:30:04 +0000 Files and hashes: 1: OqWspVx7NeP5Iru42qsdfYhw43M.crl (hash: FErghSQTmP0HkQG7yYnAgLEMUcTb95sW7aki66qxkBU=) 2: 052E6FBAF9F511EDB2CAA636C4F9AE02.roa (hash: PQd/8cl7exmw5LNAxBVE8+5SKezKc679UfwN3IJFrBs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.crl rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqWspVx7NeP5Iru42qsdfYhw43M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 02:30:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 585 (0x249) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A533, serialNumber=3AA5ACA55C7B35E3F922BBB8DAAB1D7D8870E373 Validity Not Before: Jun 13 02:30:04 2026 GMT Not After : Jun 20 02:30:04 2026 GMT Subject: CN=6a2cc0ac-774c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b7:ab:b0:64:5e:e0:fb:84:4f:cd:63:4f:dc: 9f:1e:da:5e:e0:16:9b:da:a4:a3:7a:3b:a7:dc:ef: 02:4b:f9:61:c0:8e:cc:b1:20:3f:30:a4:b4:13:a2: d7:f3:65:c7:8e:21:1e:6b:c8:c0:9f:7e:93:c4:a7: c3:d6:35:1c:a9:d5:9e:1a:c8:8d:28:55:0e:d3:76: c1:e8:de:72:a8:1d:b7:89:27:dd:62:cc:05:09:61: ed:59:76:7f:9a:32:aa:9b:e3:52:b6:c0:b5:a5:44: 89:f0:0a:90:0d:02:16:5a:b0:56:cf:44:03:c4:22: 6f:13:3c:ca:b4:0e:ce:62:82:0b:c9:d1:2b:af:67: 8b:ec:46:be:65:a3:c2:b3:ed:0e:89:42:c1:c9:d9: 50:fd:18:64:9f:a8:aa:45:9f:92:a9:9e:6c:11:d2: a1:3f:67:88:8c:09:32:de:20:ae:15:5e:42:d8:a5: 83:fa:4f:62:4a:5a:ff:fb:43:f5:6d:7d:d8:a5:7a: 4b:49:70:36:f4:46:d7:70:ce:a4:1b:4d:97:39:dd: 29:8a:7e:4c:48:2f:d3:99:69:90:c0:db:a4:4b:e8: 66:a8:3e:04:e1:56:99:2c:36:2a:f9:6f:f3:03:9c: cb:94:07:9e:9a:67:c1:fa:57:18:d9:82:25:d5:65: 12:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:D9:F1:6C:C0:C1:CF:08:F5:77:CE:F7:2A:10:22:9C:71:D9:C2:2D X509v3 Authority Key Identifier: keyid:3A:A5:AC:A5:5C:7B:35:E3:F9:22:BB:B8:DA:AB:1D:7D:88:70:E3:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqWspVx7NeP5Iru42qsdfYhw43M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:a0:d5:7c:c6:79:ab:c7:c3:aa:af:9c:70:4f:d8:16:07:c3: 90:e1:b9:31:17:61:68:cd:53:c3:30:01:55:95:3e:5e:32:37: 58:0a:01:d3:0b:e3:1d:11:bf:c6:d9:64:36:d3:a5:6f:cb:26: 3f:a6:89:34:a9:6a:b8:40:bc:99:82:2a:b8:13:fa:e7:33:ad: 1b:ea:b7:48:23:47:18:47:7b:7a:a8:90:6d:d3:4f:5e:b1:ce: 9a:04:e2:21:3f:81:2c:49:60:18:3e:25:04:03:17:ce:2f:dd: 80:e3:2b:03:98:1a:29:7b:ff:1d:56:64:27:5e:6d:89:ae:28: 02:d4:4a:f2:a4:85:23:d4:04:03:aa:d0:98:14:55:a7:f1:8d: 8f:03:c1:73:4d:89:47:2d:5b:c7:f0:04:c8:37:61:10:55:36: 17:fc:dc:f2:85:3b:f7:73:cd:b7:8a:39:0a:32:27:31:76:60: a1:7e:eb:0d:77:4e:69:f2:57:7e:98:95:ad:26:f0:0c:d7:ec: 7e:6a:c1:0d:12:6a:73:15:68:a7:66:5a:a4:36:43:8d:ae:b4: 96:11:19:a5:c3:2d:0b:ea:0a:78:d6:a7:df:98:ce:f8:4f:2c: 20:d9:ed:af:f5:a5:a4:49:c4:9d:22:37:69:d7:a3:2a:37:43: f6:4d:4e:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUE1MzMxMTAvBgNVBAUTKDNBQTVBQ0E1NUM3QjM1RTNGOTIyQkJCOERBQUIxRDdE ODg3MEUzNzMwHhcNMjYwNjEzMDIzMDA0WhcNMjYwNjIwMDIzMDA0WjAYMRYwFAYD VQQDEw02YTJjYzBhYy03NzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmLersGRe4PuET81jT9yfHtpe4Bab2qSjejun3O8CS/lhwI7MsSA/MKS0E6LX 82XHjiEea8jAn36TxKfD1jUcqdWeGsiNKFUO03bB6N5yqB23iSfdYswFCWHtWXZ/ mjKqm+NStsC1pUSJ8AqQDQIWWrBWz0QDxCJvEzzKtA7OYoILydErr2eL7Ea+ZaPC s+0OiULBydlQ/Rhkn6iqRZ+SqZ5sEdKhP2eIjAky3iCuFV5C2KWD+k9iSlr/+0P1 bX3YpXpLSXA29EbXcM6kG02XOd0pin5MSC/TmWmQwNukS+hmqD4E4VaZLDYq+W/z A5zLlAeemmfB+lcY2YIl1WUShwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBzZ8WzA wc8I9XfO9yoQIpxx2cItMB8GA1UdIwQYMBaAFDqlrKVcezXj+SK7uNqrHX2IcONz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTUzMy80MDI5OTc4QUY4 N0QxMUVEOTRGMTdDNTdDNEY5QUUwMi9PcVdzcFZ4N05lUDVJcnU0MnFzZGZZaHc0 M00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09xV3NwVng3TmVQNUlydTQycXNkZllodzQzTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTUzMy80MDI5OTc4QUY4N0QxMUVEOTRGMTdDNTdDNEY5QUUwMi9PcVdzcFZ4N05l UDVJcnU0MnFzZGZZaHc0M00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYqDVfMZ5q8fDqq+ccE/YFgfDkOG5MRdhaM1TwzABVZU+XjI3WAoB0wvjHRG/ xtlkNtOlb8smP6aJNKlquEC8mYIquBP65zOtG+q3SCNHGEd7eqiQbdNPXrHOmgTi IT+BLElgGD4lBAMXzi/dgOMrA5gaKXv/HVZkJ15tia4oAtRK8qSFI9QEA6rQmBRV p/GNjwPBc02JRy1bx/AEyDdhEFU2F/zc8oU793PNt4o5CjInMXZgoX7rDXdOafJX fpiVrSbwDNfsfmrBDRJqcxVop2ZapDZDja60lhEZpcMtC+oKeNan35jO+E8sINnt r/WlpEnEnSI3adejKjdD9k1O8A== -----END CERTIFICATE-----Generated at Sat Jun 13 22:55:50 2026 by rpki-client