$ rpki-client -vvf rpki.apnic.net/member_repository/A9111D65/CFB9E77622A811F1A29C851CB5833773/--6lC0fY6xxw_ToK6VrRt2nYQ0o.mft File: --6lC0fY6xxw_ToK6VrRt2nYQ0o.mft (raw, json) Hash identifier: iF7coCgld7P26bE5DVZDRAyMRrJ/2n8JR6qFdtyThL4= Subject key identifier: 28:A0:AD:8A:EC:DF:7E:97:8C:C4:43:BF:B2:D3:91:8D:74:18:47:92 Authority key identifier: FB:EE:A5:0B:47:D8:EB:1C:70:FD:3A:0A:E9:5A:D1:B7:69:D8:43:4A Certificate issuer: /CN=A9111D65/serialNumber=FBEEA50B47D8EB1C70FD3A0AE95AD1B769D8434A Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--6lC0fY6xxw_ToK6VrRt2nYQ0o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111D65/CFB9E77622A811F1A29C851CB5833773/--6lC0fY6xxw_ToK6VrRt2nYQ0o.mft Manifest number: 22 Signing time: Tue 19 May 2026 08:43:21 +0000 Manifest this update: Tue 19 May 2026 08:43:21 +0000 Manifest next update: Tue 26 May 2026 08:43:21 +0000 Files and hashes: 1: --6lC0fY6xxw_ToK6VrRt2nYQ0o.crl (hash: LwFB8OUtCu+nMdkYVG8nlGx5+8HjMSNtuEYCuq/Zyc0=) 2: D6075FAE22A911F1B999B242B5833773.roa (hash: hoH+7hdmgPXKwxfgbiApjuFfBwt+Y2bPJbIp+G+HCz0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111D65/CFB9E77622A811F1A29C851CB5833773/--6lC0fY6xxw_ToK6VrRt2nYQ0o.crl rsync://rpki.apnic.net/member_repository/A9111D65/CFB9E77622A811F1A29C851CB5833773/--6lC0fY6xxw_ToK6VrRt2nYQ0o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--6lC0fY6xxw_ToK6VrRt2nYQ0o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 08:43:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111D65, serialNumber=FBEEA50B47D8EB1C70FD3A0AE95AD1B769D8434A Validity Not Before: May 19 08:43:21 2026 GMT Not After : May 26 08:43:21 2026 GMT Subject: CN=6a0c22a9-c8b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:db:a6:90:9f:ee:1d:c4:c6:1e:76:04:1a:6d: 21:a3:85:a5:9d:39:8c:5d:74:39:5e:84:9d:dc:be: f2:7f:1c:52:db:34:41:e6:82:2c:df:ae:da:90:6f: cf:4c:0f:e7:20:7c:f9:8c:e3:14:a8:de:fc:b9:e4: 4a:90:90:e7:f1:bf:3d:37:16:71:74:04:cc:04:e3: 83:e8:b7:9f:f2:dc:61:b5:87:dd:44:e6:11:2b:7c: 64:ca:73:21:42:b4:eb:f4:4c:9e:fe:38:c1:03:9d: bf:33:af:51:00:7e:7e:8f:54:44:24:de:2f:c7:02: d4:2b:5b:75:7d:03:40:49:29:63:ed:4b:c3:39:2a: ac:e4:5f:f4:66:fc:c9:0f:6b:7f:5f:47:fa:4a:c2: ed:6d:c9:0e:ae:23:58:b8:46:77:74:71:5e:5d:b2: 26:e6:ca:ec:dd:be:06:70:40:b5:47:74:92:67:f4: 70:3e:7b:85:f7:e0:41:15:29:16:0c:f9:ed:5e:8e: 37:13:1d:9c:de:fc:28:e1:79:a8:16:41:e0:d1:84: d5:4d:4a:d7:f6:6e:ec:f0:04:95:d0:13:0a:97:99: 36:9c:a8:69:aa:d9:2c:f8:d9:74:c2:40:7e:44:04: 1c:5e:94:eb:cb:dd:db:56:76:f5:0b:50:69:27:ef: c7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:A0:AD:8A:EC:DF:7E:97:8C:C4:43:BF:B2:D3:91:8D:74:18:47:92 X509v3 Authority Key Identifier: keyid:FB:EE:A5:0B:47:D8:EB:1C:70:FD:3A:0A:E9:5A:D1:B7:69:D8:43:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111D65/CFB9E77622A811F1A29C851CB5833773/--6lC0fY6xxw_ToK6VrRt2nYQ0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--6lC0fY6xxw_ToK6VrRt2nYQ0o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111D65/CFB9E77622A811F1A29C851CB5833773/--6lC0fY6xxw_ToK6VrRt2nYQ0o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:98:f7:2f:55:ef:26:0d:91:83:d7:f3:55:96:be:e1:fa:80: e3:50:fb:fc:29:02:5f:1a:db:92:66:26:cb:9a:f0:84:b7:04: 23:c6:8a:ac:a9:df:29:71:aa:ef:16:fa:4b:1c:31:52:f6:8c: ae:8e:13:21:d3:ef:7d:16:f6:7a:6a:69:12:75:e7:db:ac:8a: 9a:7b:6e:ae:4e:55:0b:40:d9:8f:79:ba:05:15:a4:a1:a0:36: f3:d2:14:4b:78:e7:c2:8e:10:36:f9:9d:9d:14:f1:20:75:d5: 04:a4:d6:94:2e:2c:1f:a9:ca:3a:24:e0:27:b7:a3:93:63:a9: 02:e3:0b:18:de:4f:ad:c7:61:cd:6c:98:bc:b9:64:be:6e:66: 0b:93:f4:d8:55:4e:9e:8d:88:72:7b:d5:a0:01:4d:af:08:3e: 2b:d1:2a:eb:25:c9:79:de:b3:f4:1e:0b:60:bd:a4:9e:99:3a: 40:f7:93:6b:3a:1f:88:b7:7a:55:cf:69:12:cb:d3:ed:8f:cb: 5b:e0:56:4f:2e:df:c3:cd:08:4f:c8:37:80:c7:ff:c1:93:66: aa:fa:65:c3:23:d2:d1:32:57:44:9e:d5:48:44:f9:ca:1f:3a: 45:9d:a6:1b:65:9b:1f:ec:10:79:5f:f5:b7:8f:13:b3:a7:4b: 78:15:b7:03 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MUQ2NTExMC8GA1UEBRMoRkJFRUE1MEI0N0Q4RUIxQzcwRkQzQTBBRTk1QUQxQjc2 OUQ4NDM0QTAeFw0yNjA1MTkwODQzMjFaFw0yNjA1MjYwODQzMjFaMBgxFjAUBgNV BAMTDTZhMGMyMmE5LWM4YjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDf26aQn+4dxMYedgQabSGjhaWdOYxddDlehJ3cvvJ/HFLbNEHmgizfrtqQb89M D+cgfPmM4xSo3vy55EqQkOfxvz03FnF0BMwE44Pot5/y3GG1h91E5hErfGTKcyFC tOv0TJ7+OMEDnb8zr1EAfn6PVEQk3i/HAtQrW3V9A0BJKWPtS8M5KqzkX/Rm/MkP a39fR/pKwu1tyQ6uI1i4Rnd0cV5dsibmyuzdvgZwQLVHdJJn9HA+e4X34EEVKRYM +e1ejjcTHZze/CjheagWQeDRhNVNStf2buzwBJXQEwqXmTacqGmq2Sz42XTCQH5E BBxelOvL3dtWdvULUGkn78eRAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUKKCtiuzf fpeMxEO/stORjXQYR5IwHwYDVR0jBBgwFoAU++6lC0fY6xxw/ToK6VrRt2nYQ0ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTExRDY1L0NGQjlFNzc2MjJB ODExRjFBMjlDODUxQ0I1ODMzNzczLy0tNmxDMGZZNnh4d19Ub0s2VnJSdDJuWVEw by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLS02bEMwZlk2eHh3X1RvSzZWclJ0Mm5ZUTBvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEx RDY1L0NGQjlFNzc2MjJBODExRjFBMjlDODUxQ0I1ODMzNzczLy0tNmxDMGZZNnh4 d19Ub0s2VnJSdDJuWVEwby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB0mPcvVe8mDZGD1/NVlr7h+oDjUPv8KQJfGtuSZibLmvCEtwQjxoqsqd8pcarv FvpLHDFS9oyujhMh0+99FvZ6amkSdefbrIqae26uTlULQNmPeboFFaShoDbz0hRL eOfCjhA2+Z2dFPEgddUEpNaULiwfqco6JOAnt6OTY6kC4wsY3k+tx2HNbJi8uWS+ bmYLk/TYVU6ejYhye9WgAU2vCD4r0SrrJcl53rP0HgtgvaSemTpA95NrOh+It3pV z2kSy9Ptj8tb4FZPLt/DzQhPyDeAx//Bk2aq+mXDI9LRMldEntVIRPnKHzpFnaYb ZZsf7BB5X/W3jxOzp0t4FbcD -----END CERTIFICATE-----Generated at Thu May 21 09:39:21 2026 by rpki-client