$ rpki-client -vvf rpki.apnic.net/member_repository/A9112EF1/DBBFBF32477411F189732A8493833773/06UO20LhYmfFVu4xl9edpaVxu4A.mft File: 06UO20LhYmfFVu4xl9edpaVxu4A.mft (raw, json) Hash identifier: Ge6h+jVFlygTyPXaBeie3QTlN8XUqzBiouyl5ANoUko= Subject key identifier: BE:5D:5C:86:6D:48:FB:A2:02:26:D8:75:20:30:EC:45:0C:98:76:CB Authority key identifier: D3:A5:0E:DB:42:E1:62:67:C5:56:EE:31:97:D7:9D:A5:A5:71:BB:80 Certificate issuer: /CN=A9112EF1/serialNumber=D3A50EDB42E16267C556EE3197D79DA5A571BB80 Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/06UO20LhYmfFVu4xl9edpaVxu4A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112EF1/DBBFBF32477411F189732A8493833773/06UO20LhYmfFVu4xl9edpaVxu4A.mft Manifest number: 0A Signing time: Tue 19 May 2026 09:02:09 +0000 Manifest this update: Tue 19 May 2026 09:02:08 +0000 Manifest next update: Tue 26 May 2026 09:02:08 +0000 Files and hashes: 1: 06UO20LhYmfFVu4xl9edpaVxu4A.crl (hash: 8VjXrx7pXuVPTFD00NQf3vJpKDmNMa7xuX1FiH7ICKA=) 2: 3BB9ADCA477611F1A6BF688A93833773.roa (hash: 9GKWHgpxBeQ/TqZUw4KKkIZHqZtanRZEsCZNvCpcSnE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112EF1/DBBFBF32477411F189732A8493833773/06UO20LhYmfFVu4xl9edpaVxu4A.crl rsync://rpki.apnic.net/member_repository/A9112EF1/DBBFBF32477411F189732A8493833773/06UO20LhYmfFVu4xl9edpaVxu4A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/06UO20LhYmfFVu4xl9edpaVxu4A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 09:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112EF1, serialNumber=D3A50EDB42E16267C556EE3197D79DA5A571BB80 Validity Not Before: May 19 09:02:08 2026 GMT Not After : May 26 09:02:08 2026 GMT Subject: CN=6a0c2711-9beb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:36:1d:13:8c:c4:b8:3b:85:03:d3:a5:77:92: 42:6d:0a:75:01:68:ce:d0:74:c6:f8:be:c0:ea:b3: cf:83:ba:a3:ba:8c:2f:28:23:0b:81:c3:b1:1a:e2: 7c:a4:bb:13:4b:5e:e5:9f:a8:6d:e5:cb:b9:f6:b1: 2a:5c:cb:28:c5:ea:cb:f9:b6:fa:c4:aa:83:54:e0: 22:73:33:d5:9d:6c:5c:0b:f5:36:73:ea:1f:b3:f6: 55:04:d6:b9:24:48:20:3c:ce:f0:85:02:74:09:e9: c7:2a:84:7e:28:30:71:f0:80:47:30:cd:10:3f:9b: 6b:0d:04:57:25:bf:20:34:da:55:df:8b:48:dc:74: fc:87:d6:61:f9:96:a7:6a:b9:a6:31:94:27:a6:93: 59:77:59:de:b1:32:14:8c:52:e5:4b:6c:ad:f6:b9: 6a:fe:f4:ca:8d:bc:01:5b:d1:32:7c:35:e6:5d:a8: 2d:41:28:56:7f:f5:b4:48:b4:33:82:c4:f0:2f:41: 03:84:4a:36:e6:67:12:1b:73:97:4c:e5:10:68:54: e3:bf:0b:a1:ff:2b:94:62:f4:2e:da:fc:49:4c:94: 4c:1b:c6:95:85:8a:2b:af:af:0a:07:97:5b:78:e3: 60:33:1f:c9:d9:e5:df:78:84:8d:97:2c:94:c2:79: 96:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:5D:5C:86:6D:48:FB:A2:02:26:D8:75:20:30:EC:45:0C:98:76:CB X509v3 Authority Key Identifier: keyid:D3:A5:0E:DB:42:E1:62:67:C5:56:EE:31:97:D7:9D:A5:A5:71:BB:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112EF1/DBBFBF32477411F189732A8493833773/06UO20LhYmfFVu4xl9edpaVxu4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/06UO20LhYmfFVu4xl9edpaVxu4A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112EF1/DBBFBF32477411F189732A8493833773/06UO20LhYmfFVu4xl9edpaVxu4A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:cb:fd:b0:35:5c:8c:da:c3:6e:0b:b6:2f:10:0e:17:f5:83: 94:4e:71:c3:8d:84:dc:1f:75:53:17:f8:74:8f:46:12:f3:34: 6d:3d:23:1a:bd:46:ff:af:e5:02:68:31:80:60:5b:00:82:cf: 48:f3:29:d9:05:3f:7e:e3:4d:ca:db:e2:83:fb:12:14:c7:10: 98:9d:39:8d:29:53:b2:3d:7c:ed:9b:64:29:90:05:f6:2b:dd: 52:28:77:25:be:29:15:16:d7:be:c9:41:b9:d7:76:10:8e:32: f3:0f:f3:52:b6:1d:6d:84:b6:b9:a9:6c:dd:b6:a4:5e:d2:82: 3f:a1:e8:f9:59:c8:a1:e9:f7:d4:96:27:26:d2:bf:58:72:e4: 74:df:cd:77:66:90:f1:1e:54:24:cf:58:7b:89:d7:00:cb:72: 34:43:c0:47:65:b4:ad:01:37:2d:ea:62:4b:2f:15:d7:18:a4: 3b:0f:f1:2e:1c:8d:77:e1:f0:0d:c9:9a:7b:4e:81:84:cc:da: b3:d1:e8:51:49:2c:ce:7a:c4:a2:b8:32:ac:91:ad:a6:26:ff: dd:cb:b3:69:94:35:71:5f:43:6d:64:ec:ea:03:1f:59:78:c4: 66:bc:8d:ff:67:2f:0a:b7:16:37:b4:a4:66:98:ab:95:4e:79: 72:0f:85:8e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MkVGMTExMC8GA1UEBRMoRDNBNTBFREI0MkUxNjI2N0M1NTZFRTMxOTdENzlEQTVB NTcxQkI4MDAeFw0yNjA1MTkwOTAyMDhaFw0yNjA1MjYwOTAyMDhaMBgxFjAUBgNV BAMTDTZhMGMyNzExLTliZWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3Nh0TjMS4O4UD06V3kkJtCnUBaM7QdMb4vsDqs8+DuqO6jC8oIwuBw7Ea4nyk uxNLXuWfqG3ly7n2sSpcyyjF6sv5tvrEqoNU4CJzM9WdbFwL9TZz6h+z9lUE1rkk SCA8zvCFAnQJ6ccqhH4oMHHwgEcwzRA/m2sNBFclvyA02lXfi0jcdPyH1mH5lqdq uaYxlCemk1l3Wd6xMhSMUuVLbK32uWr+9MqNvAFb0TJ8NeZdqC1BKFZ/9bRItDOC xPAvQQOESjbmZxIbc5dM5RBoVOO/C6H/K5Ri9C7a/ElMlEwbxpWFiiuvrwoHl1t4 42AzH8nZ5d94hI2XLJTCeZZHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUvl1chm1I +6ICJth1IDDsRQyYdsswHwYDVR0jBBgwFoAU06UO20LhYmfFVu4xl9edpaVxu4Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEyRUYxL0RCQkZCRjMyNDc3 NDExRjE4OTczMkE4NDkzODMzNzczLzA2VU8yMExoWW1mRlZ1NHhsOWVkcGFWeHU0 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMDZVTzIwTGhZbWZGVnU0eGw5ZWRwYVZ4dTRBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEy RUYxL0RCQkZCRjMyNDc3NDExRjE4OTczMkE4NDkzODMzNzczLzA2VU8yMExoWW1m RlZ1NHhsOWVkcGFWeHU0QS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQANy/2wNVyM2sNuC7YvEA4X9YOUTnHDjYTcH3VTF/h0j0YS8zRtPSMavUb/r+UC aDGAYFsAgs9I8ynZBT9+403K2+KD+xIUxxCYnTmNKVOyPXztm2QpkAX2K91SKHcl vikVFte+yUG513YQjjLzD/NSth1thLa5qWzdtqRe0oI/oej5Wcih6ffUlicm0r9Y cuR03813ZpDxHlQkz1h7idcAy3I0Q8BHZbStATct6mJLLxXXGKQ7D/EuHI134fAN yZp7ToGEzNqz0ehRSSzOesSiuDKska2mJv/dy7NplDVxX0NtZOzqAx9ZeMRmvI3/ Zy8KtxY3tKRmmKuVTnlyD4WO -----END CERTIFICATE-----Generated at Thu May 21 09:34:21 2026 by rpki-client