$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft File: _zNBly3YofaHHt6Gmjod2SUorrY.mft (raw, json) Hash identifier: 7AyMLmga78xdzCW9bAjvaWQMIE97xefe9PkhQsB+MOg= Subject key identifier: A4:3F:5F:3F:49:0C:93:E7:47:8D:8B:93:28:AD:06:63:EB:55:7F:FC Authority key identifier: FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6 Certificate issuer: /CN=A917E678/serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6 Certificate serial: 0E3D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft Manifest number: 0D95 Signing time: Fri 12 Jun 2026 16:46:48 +0000 Manifest this update: Fri 12 Jun 2026 16:46:48 +0000 Manifest next update: Fri 19 Jun 2026 16:46:48 +0000 Files and hashes: 1: _zNBly3YofaHHt6Gmjod2SUorrY.crl (hash: 2cn8lUDf3xKVpbP6W1zJe96LuUc4/xbiDbxGE9lSv6w=) 2: 69FDEAC6645511EFB98C143DC4F9AE02.roa (hash: 8GqLPEK+8+LiDMs6TXQYM/u72383yuqkd4BLQepKcQg=) 3: F4A77A06CED911ED9BC69385C4F9AE02.roa (hash: /3UCOZyy7IRWOhuU35PtgiVAbTlyg5NR99z+gedGo9I=) 4: CCFA7454F04611F087BCEF76546F56BC.roa (hash: HCXtiXKgHVhMpaTnQurvVC//OqVn5AKyKkMTKhQsmjM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.crl rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 16:46:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3645 (0xe3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E678, serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6 Validity Not Before: Jun 12 16:46:48 2026 GMT Not After : Jun 19 16:46:48 2026 GMT Subject: CN=6a2c37f8-9e70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ae:cc:ca:4f:71:62:c5:f2:08:40:d2:02:af: a4:89:c3:6d:5e:f0:4f:27:82:60:0b:3c:53:94:a9: f1:05:00:26:94:ca:46:90:6d:ed:3d:d4:e2:31:66: f3:df:9f:ac:bc:52:39:9c:d0:d8:30:c9:fb:b8:cb: 10:00:ef:6a:98:a7:69:b8:0f:54:c1:e9:87:80:c1: c8:52:ed:1e:07:23:85:ea:02:68:4c:31:b9:79:fc: 45:cd:ac:72:e5:c8:45:41:72:ec:d0:2f:91:82:74: 6b:a3:bd:74:ee:7c:9f:30:55:15:6b:5f:bc:b8:cc: a0:c9:fa:48:20:a9:80:40:ce:5e:e7:c6:17:3a:2d: 87:9a:c2:c2:a2:2a:f4:64:40:3a:62:1a:47:37:03: b1:59:1f:05:3b:aa:06:d0:86:ba:aa:42:1a:f2:5d: 77:7f:03:d2:c4:ad:7d:90:e0:e9:1d:7f:6e:b0:3c: 3e:a8:bc:3a:57:df:59:7b:89:3d:8c:2c:18:df:49: e0:7e:7f:8b:bf:c8:e1:eb:08:c3:f5:76:1f:66:f9: 97:ae:f4:19:a9:09:b3:c6:64:c5:75:0b:44:b4:96: 2e:27:16:e1:56:67:2d:8a:37:f6:bb:e7:57:cc:fa: 00:ab:f5:6d:73:35:79:49:aa:20:3b:58:89:38:dd: e9:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:3F:5F:3F:49:0C:93:E7:47:8D:8B:93:28:AD:06:63:EB:55:7F:FC X509v3 Authority Key Identifier: keyid:FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:13:c6:2e:4c:83:d9:1c:f2:66:3b:22:87:80:9a:0d:26:1c: 01:4c:08:6d:cc:3a:c5:cc:ac:35:d7:37:80:e0:6c:76:e3:e1: d5:c1:0e:24:f7:08:f1:45:e6:a6:10:54:25:e7:5e:f2:99:4e: 0d:f4:2b:ef:c4:f4:bc:1c:32:f4:32:f9:6d:2e:1b:c4:00:ee: 8c:74:21:0f:d2:64:33:73:77:96:a5:90:7a:de:25:fa:93:35: 0c:3d:62:24:f0:0c:b5:dc:b5:21:4d:ac:95:3a:32:a5:e1:d1: 6d:05:35:dc:00:fd:d1:8e:04:cd:d9:da:86:99:2b:7a:4e:76: e5:50:69:50:b1:a0:5d:20:0c:ef:31:3b:69:74:cb:5d:6e:81: 49:63:a8:81:8c:f0:22:73:cb:62:33:cb:98:b6:4a:08:ec:80: 51:a9:72:fe:13:ad:10:e1:e0:90:2b:31:db:34:ee:df:d0:ae: c5:45:d1:44:9a:e0:ca:16:aa:32:1c:33:5d:38:20:b5:20:f6: 06:6c:60:6a:f2:eb:fe:b6:5a:6c:58:db:ac:46:48:16:e9:7e: fa:32:29:21:7d:d6:9d:48:ce:57:53:b5:46:a0:59:00:cb:17: 34:6d:fb:23:cf:dd:35:f0:58:61:55:c5:7b:21:97:c3:cc:ec: 26:85:ad:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2NzgxMTAvBgNVBAUTKEZGMzM0MTk3MkREOEExRjY4NzFFREU4NjlBM0ExREQ5 MjUyOEFFQjYwHhcNMjYwNjEyMTY0NjQ4WhcNMjYwNjE5MTY0NjQ4WjAYMRYwFAYD VQQDEw02YTJjMzdmOC05ZTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAza7Myk9xYsXyCEDSAq+kicNtXvBPJ4JgCzxTlKnxBQAmlMpGkG3tPdTiMWbz 35+svFI5nNDYMMn7uMsQAO9qmKdpuA9UwemHgMHIUu0eByOF6gJoTDG5efxFzaxy 5chFQXLs0C+RgnRro7107nyfMFUVa1+8uMygyfpIIKmAQM5e58YXOi2HmsLCoir0 ZEA6YhpHNwOxWR8FO6oG0Ia6qkIa8l13fwPSxK19kODpHX9usDw+qLw6V99Ze4k9 jCwY30ngfn+Lv8jh6wjD9XYfZvmXrvQZqQmzxmTFdQtEtJYuJxbhVmctijf2u+dX zPoAq/VtczV5SaogO1iJON3p6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKQ/Xz9J DJPnR42LkyitBmPrVX/8MB8GA1UdIwQYMBaAFP8zQZct2KH2hx7ehpo6HdklKK62 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC9CRUIzMzNGQTIy NTExMUVBQjJDQjg0NjlDNEY5QUUwMi9fek5CbHkzWW9mYUhIdDZHbWpvZDJTVW9y clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL196TkJseTNZb2ZhSEh0Nkdtam9kMlNVb3JyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTY3OC9CRUIzMzNGQTIyNTExMUVBQjJDQjg0NjlDNEY5QUUwMi9fek5CbHkzWW9m YUhIdDZHbWpvZDJTVW9yclkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuxPGLkyD2RzyZjsih4CaDSYcAUwIbcw6xcysNdc3gOBsduPh1cEOJPcI8UXm phBUJede8plODfQr78T0vBwy9DL5bS4bxADujHQhD9JkM3N3lqWQet4l+pM1DD1i JPAMtdy1IU2slToypeHRbQU13AD90Y4Ezdnahpkrek525VBpULGgXSAM7zE7aXTL XW6BSWOogYzwInPLYjPLmLZKCOyAUaly/hOtEOHgkCsx2zTu39CuxUXRRJrgyhaq MhwzXTggtSD2BmxgavLr/rZabFjbrEZIFul++jIpIX3WnUjOV1O1RqBZAMsXNG37 I8/dNfBYYVXFeyGXw8zsJoWt1g== -----END CERTIFICATE-----Generated at Sat Jun 13 13:58:20 2026 by rpki-client