$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.mft File: KbaocCpK1kSocQZLZAet5JPmOo0.mft (raw, json) Hash identifier: n//YUvX+MjoF3ogWm1oQr+CVyDqrdnEphv/D0/VtG4E= Subject key identifier: 88:4A:F3:7B:D1:C3:0E:A3:33:6C:A9:5E:F9:E0:12:A2:6E:79:C7:5C Authority key identifier: 29:B6:A8:70:2A:4A:D6:44:A8:71:06:4B:64:07:AD:E4:93:E6:3A:8D Certificate issuer: /CN=A919EAF3/serialNumber=29B6A8702A4AD644A871064B6407ADE493E63A8D Certificate serial: 1A71 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KbaocCpK1kSocQZLZAet5JPmOo0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.mft Manifest number: 1A46 Signing time: Fri 12 Jun 2026 16:18:10 +0000 Manifest this update: Fri 12 Jun 2026 16:18:10 +0000 Manifest next update: Fri 19 Jun 2026 16:18:10 +0000 Files and hashes: 1: KbaocCpK1kSocQZLZAet5JPmOo0.crl (hash: lLIlh6nUGBOauGPfsnXLA+iD0W6qTh1xHHEhBSMWUBM=) 2: E7729178378211EF822BAA6EC4F9AE02.roa (hash: FC6f6swDrytiXT9xRSCl2yrTExj3rPMVZ/X6aFbgLFM=) 3: 92AEE092378211EFAEB6B36DC4F9AE02.roa (hash: Sw7KRJ3Hz6dAXQ9/sIjAX/GFlM314WtidHFZ3x1gnFQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.crl rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KbaocCpK1kSocQZLZAet5JPmOo0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 16:18:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6769 (0x1a71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EAF3, serialNumber=29B6A8702A4AD644A871064B6407ADE493E63A8D Validity Not Before: Jun 12 16:18:10 2026 GMT Not After : Jun 19 16:18:10 2026 GMT Subject: CN=6a2c3142-a643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2c:e0:c6:15:49:a4:18:43:e8:a3:d1:bb:cd: 9d:78:63:01:d8:a0:36:d2:79:f8:5b:e8:a7:03:7e: ec:5d:67:23:fc:0a:6e:27:c3:87:fe:3d:2d:8b:2c: 24:09:b4:94:4d:8d:59:f9:48:eb:f6:83:86:e3:c0: b7:b1:c6:df:3c:97:90:f5:6f:56:23:da:dd:fc:04: 41:a6:4e:ba:c8:15:45:bd:dc:07:40:d1:61:da:5f: d4:a4:79:f3:27:c4:ff:69:89:48:66:b7:8a:30:bc: d4:c4:e0:63:75:2e:cd:b7:dd:da:9f:3e:15:ba:2e: 22:cf:96:8b:3e:01:71:2f:3a:ba:09:91:49:8b:a6: 76:1a:69:d3:c9:af:9a:d4:18:9d:ff:48:ac:d7:46: 86:29:6f:52:8c:80:5d:d9:fb:ed:10:55:78:f4:71: 0b:dc:33:26:1f:ad:6b:d7:6e:b9:1d:0b:cf:67:de: 64:26:b9:32:62:d9:e1:a3:fe:c9:e5:6e:c4:79:2b: f5:5e:27:84:35:b5:d7:66:c1:c8:66:5f:01:ce:1b: 87:4e:73:1b:05:40:e8:5b:ac:b4:86:10:07:ef:c4: 78:de:c2:65:2d:92:b9:61:75:32:53:49:15:c3:3c: 7b:90:05:2d:c2:ec:db:8b:e6:90:1e:3a:45:82:04: 2e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:4A:F3:7B:D1:C3:0E:A3:33:6C:A9:5E:F9:E0:12:A2:6E:79:C7:5C X509v3 Authority Key Identifier: keyid:29:B6:A8:70:2A:4A:D6:44:A8:71:06:4B:64:07:AD:E4:93:E6:3A:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KbaocCpK1kSocQZLZAet5JPmOo0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:19:30:7c:e5:7c:89:02:71:5d:e3:75:33:48:9a:75:68:96: 57:c5:9c:d1:08:2a:64:81:15:5a:2e:78:92:8d:34:1c:32:1f: 53:1b:b0:16:17:98:e1:a5:54:15:c1:82:15:24:f1:a1:ce:66: 3f:a4:b9:10:d1:ea:d7:91:02:27:6e:c5:9d:27:13:46:e3:cd: bc:f3:3a:12:0d:eb:ee:92:18:68:99:35:77:f4:be:5f:0a:01: 71:ca:51:87:8e:c2:03:4a:9a:91:2f:46:a7:df:b3:0b:72:94: 29:07:b6:eb:e1:d0:89:6e:de:07:12:dc:33:ee:28:17:2d:9e: 4f:eb:81:b3:59:52:b0:8f:a3:f0:ab:c5:d6:54:16:4f:cb:14: ec:ef:63:71:d1:da:cf:b6:46:3c:dc:50:74:f0:ad:f4:87:3c: b2:8a:5b:da:b0:4a:8c:ef:df:74:5a:9a:58:2d:94:5b:21:f9: a2:34:96:b6:4d:59:52:07:f7:5c:ed:9c:cd:16:f8:4a:13:71: 07:fc:b5:29:03:61:1f:b8:1e:aa:f8:a0:10:c1:5e:1a:79:88: c8:1d:e4:d4:23:48:68:47:71:23:02:69:26:08:b0:38:37:61: d8:93:c4:8d:e7:bc:c9:42:b2:9a:6c:38:3d:46:64:56:72:ea: ee:17:90:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVBRjMxMTAvBgNVBAUTKDI5QjZBODcwMkE0QUQ2NDRBODcxMDY0QjY0MDdBREU0 OTNFNjNBOEQwHhcNMjYwNjEyMTYxODEwWhcNMjYwNjE5MTYxODEwWjAYMRYwFAYD VQQDEw02YTJjMzE0Mi1hNjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvCzgxhVJpBhD6KPRu82deGMB2KA20nn4W+inA37sXWcj/ApuJ8OH/j0tiywk CbSUTY1Z+Ujr9oOG48C3scbfPJeQ9W9WI9rd/ARBpk66yBVFvdwHQNFh2l/UpHnz J8T/aYlIZreKMLzUxOBjdS7Nt93anz4Vui4iz5aLPgFxLzq6CZFJi6Z2GmnTya+a 1Bid/0is10aGKW9SjIBd2fvtEFV49HEL3DMmH61r1265HQvPZ95kJrkyYtnho/7J 5W7EeSv1XieENbXXZsHIZl8BzhuHTnMbBUDoW6y0hhAH78R43sJlLZK5YXUyU0kV wzx7kAUtwuzbi+aQHjpFggQu8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIhK83vR ww6jM2ypXvngEqJuecdcMB8GA1UdIwQYMBaAFCm2qHAqStZEqHEGS2QHreST5jqN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUFGMy85M0JCNTAyRTZE MTgxMUU3QTgxNURBODBDNEY5QUUwMi9LYmFvY0NwSzFrU29jUVpMWkFldDVKUG1P bzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0tiYW9jQ3BLMWtTb2NRWkxaQWV0NUpQbU9vMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUFGMy85M0JCNTAyRTZEMTgxMUU3QTgxNURBODBDNEY5QUUwMi9LYmFvY0NwSzFr U29jUVpMWkFldDVKUG1PbzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAABkwfOV8iQJxXeN1M0iadWiWV8Wc0QgqZIEVWi54ko00HDIfUxuwFheY4aVU FcGCFSTxoc5mP6S5ENHq15ECJ27FnScTRuPNvPM6Eg3r7pIYaJk1d/S+XwoBccpR h47CA0qakS9Gp9+zC3KUKQe26+HQiW7eBxLcM+4oFy2eT+uBs1lSsI+j8KvF1lQW T8sU7O9jcdHaz7ZGPNxQdPCt9Ic8sopb2rBKjO/fdFqaWC2UWyH5ojSWtk1ZUgf3 XO2czRb4ShNxB/y1KQNhH7geqvigEMFeGnmIyB3k1CNIaEdxIwJpJgiwODdh2JPE jee8yUKymmw4PUZkVnLq7heQ9g== -----END CERTIFICATE-----Generated at Sat Jun 13 22:56:48 2026 by rpki-client