$ rpki-client -vvf rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft File: n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft (raw, json) Hash identifier: J7vfvHXPECPynhColGUXMhTZN3aKTrCy3RadTuN/hvM= Subject key identifier: 65:DC:45:58:E2:D3:8D:7C:F0:24:B3:0D:D1:A8:83:78:3C:5C:B0:6F Authority key identifier: 9F:49:06:C0:D4:CC:96:45:D9:BF:D9:33:64:A2:3A:5A:33:EF:58:DB Certificate issuer: /CN=A917D958/serialNumber=9F4906C0D4CC9645D9BFD93364A23A5A33EF58DB Certificate serial: 012C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft Manifest number: 0123 Signing time: Sat 13 Jun 2026 05:49:08 +0000 Manifest this update: Sat 13 Jun 2026 05:49:07 +0000 Manifest next update: Sat 20 Jun 2026 05:49:07 +0000 Files and hashes: 1: n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl (hash: tZLdoufeoUQav+L/5w825/oQ/qP2P/04XzUWhP7LFkw=) 2: 0AC8BB74B5E211EFBEF4BC5AC4F9AE02.roa (hash: cNiuneTPpAk/1Up/27Y7yEVc2t/NxzEM4qlSWeyAw6E=) 3: 0A581522B5E211EFBEF4BC5AC4F9AE02.roa (hash: rgdWivD/zFCykGa3ALQEG38H7edm211EbAOpvttCktk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 05:49:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 300 (0x12c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D958, serialNumber=9F4906C0D4CC9645D9BFD93364A23A5A33EF58DB Validity Not Before: Jun 13 05:49:07 2026 GMT Not After : Jun 20 05:49:07 2026 GMT Subject: CN=6a2cef54-019e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:da:f0:68:ec:38:6a:b5:9a:58:eb:5d:18:a3: f6:93:f4:cf:64:d9:cb:09:48:b0:c3:4d:c4:a1:ca: 34:2a:d1:a8:d1:51:93:92:66:8b:3b:fd:a1:09:bf: f2:1a:bd:32:2e:63:1a:9e:5a:8c:6d:25:f6:57:ec: 93:29:5e:ee:5c:16:0a:16:2a:75:f5:94:58:8d:99: 60:e9:60:b6:81:00:0a:06:95:85:64:f3:a9:fc:71: f1:23:05:22:a6:3a:6f:3d:2d:11:24:32:80:67:84: 0e:6b:fc:67:64:6b:98:88:95:fc:f9:5e:d5:7e:4d: 06:5e:4f:f4:d4:69:66:ea:32:67:fa:3a:55:00:f8: 9a:5f:37:ac:35:c6:e1:a3:84:00:70:7f:24:c0:fa: 4a:78:6a:1f:f8:9f:95:25:e0:9d:ec:2a:92:46:3a: ae:93:fc:f5:3a:18:98:b7:4f:a4:40:ea:2e:9b:62: 71:f2:f8:e1:71:79:89:40:83:ac:6e:72:7a:cc:4e: 72:66:57:b6:0c:09:66:be:5e:02:17:7a:15:2e:27: 24:fe:fe:96:c5:3e:1e:b0:6f:e5:9f:ce:a7:76:9a: 85:fb:36:9f:d6:8b:7e:95:08:4b:46:37:39:67:f4: 5c:d3:27:3e:12:ac:0e:08:a8:dc:3d:51:df:a7:9a: 71:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:DC:45:58:E2:D3:8D:7C:F0:24:B3:0D:D1:A8:83:78:3C:5C:B0:6F X509v3 Authority Key Identifier: keyid:9F:49:06:C0:D4:CC:96:45:D9:BF:D9:33:64:A2:3A:5A:33:EF:58:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:ca:4a:df:7c:13:7a:ba:08:07:1d:ac:05:95:4c:80:2e:75: 25:0e:53:c7:61:28:8f:10:37:80:b5:78:53:44:15:7e:98:0e: 79:75:d7:04:42:4d:2e:21:3a:42:d2:5b:ea:17:50:bd:7b:c2: 79:73:7d:b5:da:fa:d0:17:78:8c:5b:47:56:b1:67:2f:16:bc: e3:4e:49:5e:70:71:10:72:b4:81:cf:1b:8d:a8:85:4a:d3:7e: 43:03:91:f9:ad:a0:1e:38:f7:f7:bf:c3:55:16:4b:9c:e5:3c: 47:ee:f3:22:d7:6c:b7:1f:b5:48:b1:3e:70:8d:fd:28:0b:1f: f1:d9:68:a5:38:cb:49:8d:02:f9:98:15:6d:95:09:f5:a4:d8: 7b:7a:f2:d1:9f:15:34:61:9a:de:20:88:23:0d:27:1c:f6:12: bb:94:cf:2e:2e:89:58:98:13:af:8a:ed:3a:8a:00:64:9c:10: 3b:6e:31:4c:ce:c3:60:14:0d:31:9e:55:6d:a6:3a:80:d9:ec: cb:ab:11:5c:13:18:6b:0a:87:9d:c7:ba:76:a4:90:85:dc:16: 70:fa:05:aa:6d:c5:ec:13:a3:93:09:ea:b2:5b:ce:55:78:28: 07:d9:a2:07:20:13:12:8c:88:46:2f:c5:09:a4:af:29:03:77: 16:02:04:57 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q5NTgxMTAvBgNVBAUTKDlGNDkwNkMwRDRDQzk2NDVEOUJGRDkzMzY0QTIzQTVB MzNFRjU4REIwHhcNMjYwNjEzMDU0OTA3WhcNMjYwNjIwMDU0OTA3WjAYMRYwFAYD VQQDEw02YTJjZWY1NC0wMTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp9rwaOw4arWaWOtdGKP2k/TPZNnLCUiww03Eoco0KtGo0VGTkmaLO/2hCb/y Gr0yLmManlqMbSX2V+yTKV7uXBYKFip19ZRYjZlg6WC2gQAKBpWFZPOp/HHxIwUi pjpvPS0RJDKAZ4QOa/xnZGuYiJX8+V7Vfk0GXk/01Glm6jJn+jpVAPiaXzesNcbh o4QAcH8kwPpKeGof+J+VJeCd7CqSRjquk/z1OhiYt0+kQOoum2Jx8vjhcXmJQIOs bnJ6zE5yZle2DAlmvl4CF3oVLick/v6WxT4esG/ln86ndpqF+zaf1ot+lQhLRjc5 Z/Rc0yc+EqwOCKjcPVHfp5pxVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGXcRVji 04188CSzDdGog3g8XLBvMB8GA1UdIwQYMBaAFJ9JBsDUzJZF2b/ZM2SiOloz71jb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDk1OC82NzJEQjA0OEIz OUIxMUVGODBGNjQzNUVDNEY5QUUwMi9uMGtHd05UTWxrWFp2OWt6WktJNldqUHZX TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL24wa0d3TlRNbGtYWnY5a3paS0k2V2pQdldOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDk1OC82NzJEQjA0OEIzOUIxMUVGODBGNjQzNUVDNEY5QUUwMi9uMGtHd05UTWxr WFp2OWt6WktJNldqUHZXTnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArMpK33wTeroIBx2sBZVMgC51JQ5Tx2EojxA3gLV4U0QVfpgOeXXXBEJNLiE6 QtJb6hdQvXvCeXN9tdr60Bd4jFtHVrFnLxa8405JXnBxEHK0gc8bjaiFStN+QwOR +a2gHjj397/DVRZLnOU8R+7zItdstx+1SLE+cI39KAsf8dlopTjLSY0C+ZgVbZUJ 9aTYe3ry0Z8VNGGa3iCIIw0nHPYSu5TPLi6JWJgTr4rtOooAZJwQO24xTM7DYBQN MZ5VbaY6gNnsy6sRXBMYawqHnce6dqSQhdwWcPoFqm3F7BOjkwnqslvOVXgoB9mi ByATEoyIRi/FCaSvKQN3FgIEVw== -----END CERTIFICATE-----Generated at Sat Jun 13 15:11:00 2026 by rpki-client