$ rpki-client -vvf rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/KdFsmNs9W_ZLa5IEwJYAhgzSlFI.mft File: KdFsmNs9W_ZLa5IEwJYAhgzSlFI.mft (raw, json) Hash identifier: XfiRL4d4zG27Tqd53ROTVTscgQBH0uBwzsxNOvFjX2Q= Subject key identifier: C2:42:48:22:84:C1:80:04:81:B5:29:AF:74:BE:56:FB:7D:75:79:5C Authority key identifier: 29:D1:6C:98:DB:3D:5B:F6:4B:6B:92:04:C0:96:00:86:0C:D2:94:52 Certificate issuer: /CN=A916022F/serialNumber=29D16C98DB3D5BF64B6B9204C09600860CD29452 Certificate serial: 118F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KdFsmNs9W_ZLa5IEwJYAhgzSlFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/KdFsmNs9W_ZLa5IEwJYAhgzSlFI.mft Manifest number: 2560 Signing time: Fri 12 Jun 2026 16:53:39 +0000 Manifest this update: Fri 12 Jun 2026 16:53:39 +0000 Manifest next update: Fri 19 Jun 2026 16:53:39 +0000 Files and hashes: 1: KdFsmNs9W_ZLa5IEwJYAhgzSlFI.crl (hash: w+HB6rMHA6IHy9rtHRqEF2W35b75ZjXP9COJHu5YmHc=) 2: DE0A75A605EB11EA94CD7287C4F9AE02.roa (hash: FaFqBcKylUM1Ik2J0LQMDMkip4pQ4QSSImVSUK0dY18=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/KdFsmNs9W_ZLa5IEwJYAhgzSlFI.crl rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/KdFsmNs9W_ZLa5IEwJYAhgzSlFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KdFsmNs9W_ZLa5IEwJYAhgzSlFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 16:53:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4495 (0x118f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916022F, serialNumber=29D16C98DB3D5BF64B6B9204C09600860CD29452 Validity Not Before: Jun 12 16:53:39 2026 GMT Not After : Jun 19 16:53:39 2026 GMT Subject: CN=6a2c3993-c9af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:79:34:fb:c5:7e:a5:3b:26:95:7b:be:c5:9e: 57:35:99:44:79:f4:1d:0d:20:cd:8f:ca:d6:07:a3: cb:d1:e6:bf:65:7c:dd:8e:aa:b6:c9:64:cc:3c:9b: 75:a2:a5:86:e8:96:57:3b:8c:f6:6a:6d:2f:e8:69: 3c:cf:fa:71:9b:4f:96:e1:53:1b:a7:cc:9a:43:be: 81:b5:66:3c:fd:1d:30:a6:f2:ce:a8:c8:e4:4d:3a: f9:31:85:fe:c2:07:ee:41:55:af:5b:42:51:5a:b8: df:98:f4:a7:8c:17:0d:c7:73:2c:b6:26:30:ad:84: f0:bd:01:9e:d8:df:67:22:4f:cd:28:21:8f:c9:7d: 5f:94:c4:40:5d:65:69:fd:ba:aa:3a:1f:c6:00:82: 18:9f:ca:e5:b6:09:91:80:5b:13:2a:b6:f8:bc:38: 76:a6:a0:18:44:68:9b:39:4a:e9:3c:23:7e:c4:89: fb:b6:67:24:d0:44:ea:e0:a5:16:43:a6:3c:86:d2: 0f:05:77:4c:86:33:04:24:4c:46:b8:ea:ed:c8:f2: 04:ad:52:c7:54:12:ac:b4:f8:6d:67:91:88:4c:2a: d0:e1:6a:c5:0d:a1:e4:9f:85:20:a4:ea:8f:52:f3: 9b:ae:04:43:e0:91:df:c0:06:d8:3a:bb:39:7f:12: a1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:42:48:22:84:C1:80:04:81:B5:29:AF:74:BE:56:FB:7D:75:79:5C X509v3 Authority Key Identifier: keyid:29:D1:6C:98:DB:3D:5B:F6:4B:6B:92:04:C0:96:00:86:0C:D2:94:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/KdFsmNs9W_ZLa5IEwJYAhgzSlFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KdFsmNs9W_ZLa5IEwJYAhgzSlFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/KdFsmNs9W_ZLa5IEwJYAhgzSlFI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:f6:00:7b:f2:fc:4b:7b:b3:c9:ed:05:31:4b:da:92:50:de: 84:b8:7c:2e:1b:17:7c:0a:26:e6:1b:c9:bc:6e:2c:bf:fe:8a: 49:e2:a7:d9:d2:c7:70:83:17:5f:84:f2:66:aa:a1:b1:08:4d: 9a:92:83:47:c4:4c:fc:eb:21:81:1d:88:64:e4:e9:aa:9c:f7: da:ea:45:bc:bf:96:15:71:58:79:07:5b:47:5b:8c:e8:bf:1a: fb:9b:dc:9b:fa:6a:eb:41:b6:96:b9:38:89:8d:ca:f6:31:75: 6d:3b:63:45:36:8a:d7:9b:30:40:7c:3a:97:2b:ea:e8:a0:71: 11:d9:09:67:73:b8:5c:36:1b:64:06:71:2c:53:0b:92:70:4d: 5b:bb:dc:f6:83:cb:99:e6:da:1f:ed:fb:1d:38:42:08:a0:da: 5f:bb:44:55:00:08:11:32:bd:76:57:28:05:39:c9:f2:ea:d4: 54:4b:e8:df:0a:f8:9e:47:0e:92:f5:31:61:d6:61:af:b0:14: f2:8d:2d:48:93:04:47:ec:67:67:3d:f5:c7:58:ef:c5:80:66: c5:51:98:32:80:79:8a:01:32:ca:8d:cc:ea:64:af:a5:dc:83: 53:3d:d1:6a:7e:3f:de:cd:4e:be:eb:37:8d:ad:51:29:40:40: ec:a0:ab:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjAyMkYxMTAvBgNVBAUTKDI5RDE2Qzk4REIzRDVCRjY0QjZCOTIwNEMwOTYwMDg2 MENEMjk0NTIwHhcNMjYwNjEyMTY1MzM5WhcNMjYwNjE5MTY1MzM5WjAYMRYwFAYD VQQDEw02YTJjMzk5My1jOWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA13k0+8V+pTsmlXu+xZ5XNZlEefQdDSDNj8rWB6PL0ea/ZXzdjqq2yWTMPJt1 oqWG6JZXO4z2am0v6Gk8z/pxm0+W4VMbp8yaQ76BtWY8/R0wpvLOqMjkTTr5MYX+ wgfuQVWvW0JRWrjfmPSnjBcNx3MstiYwrYTwvQGe2N9nIk/NKCGPyX1flMRAXWVp /bqqOh/GAIIYn8rltgmRgFsTKrb4vDh2pqAYRGibOUrpPCN+xIn7tmck0ETq4KUW Q6Y8htIPBXdMhjMEJExGuOrtyPIErVLHVBKstPhtZ5GITCrQ4WrFDaHkn4UgpOqP UvObrgRD4JHfwAbYOrs5fxKh2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMJCSCKE wYAEgbUpr3S+Vvt9dXlcMB8GA1UdIwQYMBaAFCnRbJjbPVv2S2uSBMCWAIYM0pRS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDIyRi85RUM3QUZCNEFB N0QxMUU4ODYxNDQ1MjRDNEY5QUUwMi9LZEZzbU5zOVdfWkxhNUlFd0pZQWhnelNs RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tkRnNtTnM5V19aTGE1SUV3SllBaGd6U2xGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDIyRi85RUM3QUZCNEFBN0QxMUU4ODYxNDQ1MjRDNEY5QUUwMi9LZEZzbU5zOVdf WkxhNUlFd0pZQWhnelNsRkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARvYAe/L8S3uzye0FMUvaklDehLh8LhsXfAom5hvJvG4sv/6KSeKn2dLHcIMX X4TyZqqhsQhNmpKDR8RM/OshgR2IZOTpqpz32upFvL+WFXFYeQdbR1uM6L8a+5vc m/pq60G2lrk4iY3K9jF1bTtjRTaK15swQHw6lyvq6KBxEdkJZ3O4XDYbZAZxLFML knBNW7vc9oPLmebaH+37HThCCKDaX7tEVQAIETK9dlcoBTnJ8urUVEvo3wr4nkcO kvUxYdZhr7AU8o0tSJMER+xnZz31x1jvxYBmxVGYMoB5igEyyo3M6mSvpdyDUz3R an4/3s1Ovus3ja1RKUBA7KCrJQ== -----END CERTIFICATE-----Generated at Sat Jun 13 14:53:42 2026 by rpki-client