$ rpki-client -vvf rpki.apnic.net/member_repository/A915BC71/91BE2BC03F0511F1BE3FC0C2C9833773/hRLpaZVqy30-dg7ZhuG-6j-KwPg.mft File: hRLpaZVqy30-dg7ZhuG-6j-KwPg.mft (raw, json) Hash identifier: R4oyeKY+xHvTuwZ7iDBWhmhD9VhGz3cKCNEuYtFyYPQ= Subject key identifier: 37:D7:72:EB:6C:F0:32:95:3C:4F:8B:DE:16:FC:B3:62:F6:DC:3A:E6 Authority key identifier: 85:12:E9:69:95:6A:CB:7D:3E:76:0E:D9:86:E1:BE:EA:3F:8A:C0:F8 Certificate issuer: /CN=A915BC71/serialNumber=8512E969956ACB7D3E760ED986E1BEEA3F8AC0F8 Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRLpaZVqy30-dg7ZhuG-6j-KwPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BC71/91BE2BC03F0511F1BE3FC0C2C9833773/hRLpaZVqy30-dg7ZhuG-6j-KwPg.mft Manifest number: 1D Signing time: Thu 11 Jun 2026 11:17:09 +0000 Manifest this update: Thu 11 Jun 2026 11:17:08 +0000 Manifest next update: Thu 18 Jun 2026 11:17:08 +0000 Files and hashes: 1: hRLpaZVqy30-dg7ZhuG-6j-KwPg.crl (hash: Ik/7XyfAfAzRQU2LXGwnRijRQgd3gKX2Ot5GuvSDvVg=) 2: 2BC7F9083F0611F1ADBFCBF4C9833773.roa (hash: fjBBp9RAWRX1PPIA5V4SattdM60ZaCT18eTtLAtSLSY=) 3: 04DF866C3F0611F1B36B08F4C9833773.roa (hash: ox5XcIpV2S9UAzm7R4v0XD8a/1yL0AoCYGD4B4pq/A8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BC71/91BE2BC03F0511F1BE3FC0C2C9833773/hRLpaZVqy30-dg7ZhuG-6j-KwPg.crl rsync://rpki.apnic.net/member_repository/A915BC71/91BE2BC03F0511F1BE3FC0C2C9833773/hRLpaZVqy30-dg7ZhuG-6j-KwPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRLpaZVqy30-dg7ZhuG-6j-KwPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 11:17:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BC71, serialNumber=8512E969956ACB7D3E760ED986E1BEEA3F8AC0F8 Validity Not Before: Jun 11 11:17:08 2026 GMT Not After : Jun 18 11:17:08 2026 GMT Subject: CN=6a2a9935-d2e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:56:5c:f6:91:72:af:e7:0a:65:bb:fe:00:5d: 01:d6:00:5a:b6:54:42:f3:90:16:50:50:03:0b:5d: c1:10:1e:d9:7e:9d:91:1e:d2:7b:9e:97:45:df:20: 19:df:7b:e8:5d:7a:13:c1:ee:8c:d9:43:df:f7:4f: e7:6d:cb:77:a8:b1:ab:bd:88:df:24:ec:ab:a6:42: 91:34:9a:03:8e:df:e3:00:61:69:c0:b7:3d:aa:21: c7:44:23:db:51:f7:ae:32:92:94:b0:e6:64:28:5b: 66:a8:11:04:63:3d:50:eb:bd:34:97:cb:0d:6b:11: d7:83:bc:16:5f:87:f3:10:d8:05:28:16:ff:36:b7: 7f:9b:3b:e1:bf:41:db:c2:29:7d:88:10:dd:17:2a: f5:00:fc:f8:48:40:3c:af:8a:7e:c7:c1:39:e8:90: b9:f2:b6:39:f5:05:2a:ea:55:ec:a3:f8:f8:11:3a: f4:85:1a:54:cc:4a:a6:c8:18:d4:1e:a1:e0:6a:15: 3e:f2:c7:aa:e5:64:2a:8a:1a:71:55:47:de:f4:d0: 65:a7:72:18:7e:61:d4:67:ce:d3:47:7d:ee:fe:8d: 95:86:09:84:d2:4a:5d:61:67:91:d6:54:df:50:7b: 56:78:28:d7:aa:ab:fc:57:94:75:d7:6e:fb:30:fc: 8c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:D7:72:EB:6C:F0:32:95:3C:4F:8B:DE:16:FC:B3:62:F6:DC:3A:E6 X509v3 Authority Key Identifier: keyid:85:12:E9:69:95:6A:CB:7D:3E:76:0E:D9:86:E1:BE:EA:3F:8A:C0:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BC71/91BE2BC03F0511F1BE3FC0C2C9833773/hRLpaZVqy30-dg7ZhuG-6j-KwPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRLpaZVqy30-dg7ZhuG-6j-KwPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC71/91BE2BC03F0511F1BE3FC0C2C9833773/hRLpaZVqy30-dg7ZhuG-6j-KwPg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:9d:f3:1a:59:af:0d:c6:f5:27:79:b9:c4:53:ca:80:1d:c8: f7:28:2e:59:f0:e8:76:93:5a:c1:af:0b:6d:03:7a:56:bc:2b: 0c:0f:55:2d:32:0d:db:16:ff:b2:10:ac:8a:e2:cb:26:34:06: 36:81:aa:5a:73:d7:1b:f8:6b:7d:82:3f:fd:e7:76:26:6b:ad: a0:46:ba:74:ab:b9:76:27:8e:d4:8e:7e:e3:ac:72:6c:76:d4: 6b:d4:4d:09:b2:3a:3c:e8:5c:ab:98:f0:37:2b:c7:01:7a:0a: 8b:78:57:35:71:f9:b3:8e:41:ac:81:14:84:c6:b1:1d:1d:b1: 2f:6e:43:53:e4:be:89:44:0e:5f:5e:22:a8:57:27:07:7e:85: 44:f7:58:42:8b:b5:b3:a2:e2:45:4f:b0:77:b7:39:ca:62:a9: 56:a6:72:93:0e:97:8b:1d:ae:16:99:aa:c9:08:ec:02:b1:1f: 59:5a:84:27:de:a0:1f:b6:44:dd:dc:59:f9:d0:5c:f6:e9:11: 96:4a:8a:71:5f:c3:9a:b6:e6:8e:13:e5:73:6a:8f:0f:7e:b4: aa:e5:c8:e8:7d:ec:f8:e3:97:72:78:89:ac:cb:78:bc:13:a4: 3f:3f:7e:6d:6e:67:cd:77:ab:e3:5e:0e:3c:54:d5:e1:63:7b: e8:85:be:fd -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QkM3MTExMC8GA1UEBRMoODUxMkU5Njk5NTZBQ0I3RDNFNzYwRUQ5ODZFMUJFRUEz RjhBQzBGODAeFw0yNjA2MTExMTE3MDhaFw0yNjA2MTgxMTE3MDhaMBgxFjAUBgNV BAMTDTZhMmE5OTM1LWQyZTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKVlz2kXKv5wplu/4AXQHWAFq2VELzkBZQUAMLXcEQHtl+nZEe0nuel0XfIBnf e+hdehPB7ozZQ9/3T+dty3eosau9iN8k7KumQpE0mgOO3+MAYWnAtz2qIcdEI9tR 964ykpSw5mQoW2aoEQRjPVDrvTSXyw1rEdeDvBZfh/MQ2AUoFv82t3+bO+G/QdvC KX2IEN0XKvUA/PhIQDyvin7HwTnokLnytjn1BSrqVeyj+PgROvSFGlTMSqbIGNQe oeBqFT7yx6rlZCqKGnFVR9700GWnchh+YdRnztNHfe7+jZWGCYTSSl1hZ5HWVN9Q e1Z4KNeqq/xXlHXXbvsw/IzRAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUN9dy62zw MpU8T4veFvyzYvbcOuYwHwYDVR0jBBgwFoAUhRLpaZVqy30+dg7ZhuG+6j+KwPgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVCQzcxLzkxQkUyQkMwM0Yw NTExRjFCRTNGQzBDMkM5ODMzNzczL2hSTHBhWlZxeTMwLWRnN1podUctNmotS3dQ Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaFJMcGFaVnF5MzAtZGc3Wmh1Ry02ai1Ld1BnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVC QzcxLzkxQkUyQkMwM0YwNTExRjFCRTNGQzBDMkM5ODMzNzczL2hSTHBhWlZxeTMw LWRnN1podUctNmotS3dQZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCfnfMaWa8NxvUnebnEU8qAHcj3KC5Z8Oh2k1rBrwttA3pWvCsMD1UtMg3bFv+y EKyK4ssmNAY2gapac9cb+Gt9gj/953Yma62gRrp0q7l2J47Ujn7jrHJsdtRr1E0J sjo86FyrmPA3K8cBegqLeFc1cfmzjkGsgRSExrEdHbEvbkNT5L6JRA5fXiKoVycH foVE91hCi7WzouJFT7B3tznKYqlWpnKTDpeLHa4WmarJCOwCsR9ZWoQn3qAftkTd 3Fn50Fz26RGWSopxX8OatuaOE+Vzao8PfrSq5cjofez445dyeImsy3i8E6Q/P35t bmfNd6vjXg48VNXhY3vohb79 -----END CERTIFICATE-----Generated at Sat Jun 13 09:14:27 2026 by rpki-client