$ rpki-client -vvf rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft File: sRd7K0wt-LMG0UpkMAcob4nWnMA.mft (raw, json) Hash identifier: wYXP7jGByPuviNufITQD1ch1PlhO57DptQcn3dVx+Tw= Subject key identifier: 43:78:08:86:1D:E0:83:33:66:C7:8B:BB:0E:3D:DA:4A:52:59:7D:84 Authority key identifier: B1:17:7B:2B:4C:2D:F8:B3:06:D1:4A:64:30:07:28:6F:89:D6:9C:C0 Certificate issuer: /CN=A915DA5A/serialNumber=B1177B2B4C2DF8B306D14A643007286F89D69CC0 Certificate serial: 0D3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft Manifest number: 0D24 Signing time: Fri 12 Jun 2026 18:08:49 +0000 Manifest this update: Fri 12 Jun 2026 18:08:48 +0000 Manifest next update: Fri 19 Jun 2026 18:08:48 +0000 Files and hashes: 1: sRd7K0wt-LMG0UpkMAcob4nWnMA.crl (hash: YMLu0XS5eVohUuN0pacZqKl1hieEZ+ItX3lLcYKGUbw=) 2: 5952728A100E11F18DCC78E3113D8C67.roa (hash: 4DhZatB6LL4lAu55O0tTy0XQ+dQbCozW4+CmbLY+jDk=) 3: A869B800367611F088B7726AC4F9AE02.roa (hash: h0vzLBO9AmONx7Qad7DB4zJWcKBNkWxmiiTY+i7XavM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.crl rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 18:08:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3388 (0xd3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915DA5A, serialNumber=B1177B2B4C2DF8B306D14A643007286F89D69CC0 Validity Not Before: Jun 12 18:08:48 2026 GMT Not After : Jun 19 18:08:48 2026 GMT Subject: CN=6a2c4b30-c8ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:80:1d:23:fa:70:19:2b:e5:08:ba:ab:75:76: 04:54:c3:b0:30:0b:96:3f:e3:d6:f2:12:96:e0:20: 3f:9b:f4:c9:5e:b0:2c:94:11:2e:a9:79:24:0a:bc: b4:8a:27:6e:27:bb:b2:bf:00:af:3b:8d:ae:d3:77: 2c:45:83:86:00:1e:9a:af:31:75:6a:30:19:e3:89: 6d:64:3c:69:c7:88:db:9d:b6:b6:98:b4:ab:c1:27: 5a:26:0e:36:b8:5b:c0:1d:df:af:26:af:66:51:81: 0b:d2:5d:6e:25:7f:1a:7d:e8:fa:be:50:3a:97:57: df:e4:44:67:2b:25:04:74:ee:ad:54:58:a5:d1:4d: 3c:c9:96:97:0f:59:97:b0:05:be:3e:fa:6f:0b:5f: f7:62:dd:28:ac:26:08:7c:8e:74:8c:38:1a:5c:50: c7:77:4b:bc:6a:26:6f:bd:c9:48:12:81:d7:d8:64: a8:de:44:74:15:93:cc:11:53:23:2c:72:12:fb:f6: f4:92:e3:ab:8a:5a:c1:4e:94:c9:8d:8b:0e:a6:29: fc:b5:44:d6:e7:e5:1f:04:09:99:52:e9:09:6b:c3: ff:eb:78:8d:21:3a:f7:c1:d8:d3:57:2c:9e:9a:2f: a2:a5:f0:cd:3f:4a:80:4b:9b:09:b3:0c:30:93:57: a9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:78:08:86:1D:E0:83:33:66:C7:8B:BB:0E:3D:DA:4A:52:59:7D:84 X509v3 Authority Key Identifier: keyid:B1:17:7B:2B:4C:2D:F8:B3:06:D1:4A:64:30:07:28:6F:89:D6:9C:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:dd:0b:cb:f3:c1:05:56:2f:14:ec:e4:3c:f2:ab:93:03:9b: 49:c8:21:df:c6:9f:6e:87:3a:b4:0d:d6:2c:8f:e1:b2:c0:68: d8:1e:ed:b3:6b:c6:a2:65:0e:71:c6:dc:a2:60:4e:6d:24:cb: c1:64:7f:ce:29:fe:bf:3e:31:b1:fb:f4:81:e7:4c:1e:94:8b: 25:00:18:e8:70:4c:62:f5:bd:f2:a3:50:ca:06:e1:45:04:c7: d5:ea:8b:83:18:4c:c4:ec:8a:f0:da:78:bd:c9:a5:b2:68:1a: 10:95:26:84:f5:ab:f0:08:d1:7d:de:ee:5b:f8:93:96:69:77: 74:5f:ea:ed:b1:84:ca:13:06:35:7f:a6:b5:d3:f7:15:90:c5: f5:1f:f4:64:56:1e:0b:38:9f:d8:ef:41:d9:a3:af:3f:3f:fb: 52:f0:14:68:fd:e2:f9:bf:a2:0b:4a:1b:29:a6:83:58:69:72: 42:5f:c9:f9:77:ee:cb:d6:9b:60:22:38:bc:30:e1:4c:79:de: dd:39:f3:ac:a6:2a:36:1b:3f:06:eb:8f:fc:cc:88:e0:66:ea: 3b:a4:87:01:aa:91:8b:42:49:11:1f:6d:b6:ba:d4:1d:c1:38: cb:b9:a5:af:ce:d1:47:ee:f7:f0:78:a2:8c:55:05:48:6a:1b: c6:f0:4c:5f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDTwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NURBNUExMTAvBgNVBAUTKEIxMTc3QjJCNEMyREY4QjMwNkQxNEE2NDMwMDcyODZG ODlENjlDQzAwHhcNMjYwNjEyMTgwODQ4WhcNMjYwNjE5MTgwODQ4WjAYMRYwFAYD VQQDEw02YTJjNGIzMC1jOGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvIAdI/pwGSvlCLqrdXYEVMOwMAuWP+PW8hKW4CA/m/TJXrAslBEuqXkkCry0 iiduJ7uyvwCvO42u03csRYOGAB6arzF1ajAZ44ltZDxpx4jbnba2mLSrwSdaJg42 uFvAHd+vJq9mUYEL0l1uJX8afej6vlA6l1ff5ERnKyUEdO6tVFil0U08yZaXD1mX sAW+PvpvC1/3Yt0orCYIfI50jDgaXFDHd0u8aiZvvclIEoHX2GSo3kR0FZPMEVMj LHIS+/b0kuOrilrBTpTJjYsOpin8tUTW5+UfBAmZUukJa8P/63iNITr3wdjTVyye mi+ipfDNP0qAS5sJswwwk1epfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEN4CIYd 4IMzZseLuw492kpSWX2EMB8GA1UdIwQYMBaAFLEXeytMLfizBtFKZDAHKG+J1pzA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REE1QS80NEU3NzBCMjAz RUUxMUVBQkNBMUExNkVDNEY5QUUwMi9zUmQ3SzB3dC1MTUcwVXBrTUFjb2I0bldu TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NSZDdLMHd0LUxNRzBVcGtNQWNvYjRuV25NQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 REE1QS80NEU3NzBCMjAzRUUxMUVBQkNBMUExNkVDNEY5QUUwMi9zUmQ3SzB3dC1M TUcwVXBrTUFjb2I0blduTUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANd0Ly/PBBVYvFOzkPPKrkwObScgh38afboc6tA3WLI/hssBo2B7ts2vGomUO ccbcomBObSTLwWR/zin+vz4xsfv0gedMHpSLJQAY6HBMYvW98qNQygbhRQTH1eqL gxhMxOyK8Np4vcmlsmgaEJUmhPWr8AjRfd7uW/iTlml3dF/q7bGEyhMGNX+mtdP3 FZDF9R/0ZFYeCzif2O9B2aOvPz/7UvAUaP3i+b+iC0obKaaDWGlyQl/J+Xfuy9ab YCI4vDDhTHne3TnzrKYqNhs/BuuP/MyI4GbqO6SHAaqRi0JJER9ttrrUHcE4y7ml r87RR+738HiijFUFSGobxvBMXw== -----END CERTIFICATE-----Generated at Sat Jun 13 10:05:08 2026 by rpki-client