$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft File: DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft (raw, json) Hash identifier: Ox0PscbOkUsC/J2Ruu2JzNgwvH94OEqYmjpf8qfAnX8= Subject key identifier: 44:CA:B1:2F:4D:0D:DA:4A:77:D3:89:C4:2D:6B:78:E9:D5:05:E0:ED Authority key identifier: 0C:58:C6:96:9E:E6:4C:41:91:AA:B6:69:63:F4:09:D4:5A:EA:F6:98 Certificate issuer: /CN=A9112FE1/serialNumber=0C58C6969EE64C4191AAB66963F409D45AEAF698 Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft Manifest number: 5F Signing time: Mon 01 Jun 2026 07:23:11 +0000 Manifest this update: Mon 01 Jun 2026 07:23:10 +0000 Manifest next update: Mon 08 Jun 2026 07:23:10 +0000 Files and hashes: 1: DFjGlp7mTEGRqrZpY_QJ1Frq9pg.crl (hash: bmqzZPYqPfrGK0faJRINdMW6vtswggzo+dW/T9cOSlg=) 2: 7D2D672CDED711F0AB94945E506F56BC.roa (hash: I092lUbHTPyqI08H+trkIwLUS+cACGuVgfM1lS806Io=) 3: 5B694A50EAD711F0B1E9CBE6646F56BC.roa (hash: UEWOVoTQ4xp6OOkBixX7mmshmyRaVVdCqDXyxlBmgyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.crl rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 07:23:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112FE1, serialNumber=0C58C6969EE64C4191AAB66963F409D45AEAF698 Validity Not Before: Jun 1 07:23:10 2026 GMT Not After : Jun 8 07:23:10 2026 GMT Subject: CN=6a1d335f-adc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:50:b4:81:23:2c:65:a6:0d:84:c7:82:16:d9: 35:94:56:ad:ff:00:c4:30:d8:d9:45:6d:42:d2:7f: 99:de:15:f1:da:a1:a0:dc:34:5d:0d:57:4f:04:a3: ae:a7:9a:22:ca:55:7f:4d:75:42:61:86:0a:83:6d: 55:71:cd:95:51:2d:03:54:bf:1f:83:7b:d9:34:8f: 5d:34:c3:c7:58:84:7f:84:92:21:db:2a:79:e1:22: e7:f9:2f:71:7f:ed:04:da:6b:e8:cc:b9:8d:b7:80: e0:6a:60:3d:d3:b2:cd:6b:15:1d:c1:18:d5:5c:c1: 8a:1c:e7:aa:18:4e:15:8d:f0:2e:4c:cf:72:2d:02: 3e:d2:33:84:6c:b6:eb:88:06:0f:18:c3:d1:29:e1: e0:87:76:09:fd:fa:68:6f:03:42:4d:59:f8:4b:0b: 21:bb:8c:80:49:60:af:b3:46:27:fd:7f:b7:4b:87: 6f:da:b5:7b:33:47:c7:da:c1:cb:bc:34:e9:9a:4a: fa:7d:fd:bc:0c:06:37:b9:aa:ea:f7:11:0b:9a:75: 5f:6c:da:10:27:b8:d1:83:f1:18:e9:0f:5a:01:7a: 90:f3:14:ea:d0:f8:0b:51:63:1f:69:e1:11:e2:14: 38:29:de:82:b3:2d:57:48:09:b1:22:75:e5:af:8e: 67:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:CA:B1:2F:4D:0D:DA:4A:77:D3:89:C4:2D:6B:78:E9:D5:05:E0:ED X509v3 Authority Key Identifier: keyid:0C:58:C6:96:9E:E6:4C:41:91:AA:B6:69:63:F4:09:D4:5A:EA:F6:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:34:24:bc:f1:b9:e0:81:f1:fd:dc:2a:ff:de:d4:34:9f:59: 43:c3:80:5b:26:b1:8d:46:ea:90:19:34:b0:b9:b1:1e:e7:73: 99:73:43:43:30:20:64:c4:ac:9b:56:bc:cd:aa:93:9e:19:7d: b4:61:27:b3:50:56:3a:a2:b4:b3:79:80:a0:4c:f8:63:6f:90: 56:0e:20:9b:f7:da:15:bd:3d:59:02:dc:cb:d3:5a:54:80:04: 7e:4e:dc:fe:fa:b9:b8:b3:d4:5e:fc:a5:04:2a:f0:e3:33:a5: 06:4f:6a:c4:9d:4e:f7:fc:42:92:52:c2:2d:ad:cc:32:86:4e: 60:70:87:1b:de:ad:d1:4f:4a:34:ab:fb:8b:7a:5f:10:3d:93: 85:05:e2:6b:94:4b:15:3f:79:fe:77:5f:95:5b:80:ed:9a:7d: 7f:2b:ed:9a:d5:63:e0:a8:23:c9:06:4c:df:e5:e0:d8:a0:27: e4:60:b5:0e:d7:82:c7:ee:3a:c4:38:70:93:8d:9d:17:d5:c3: 12:1f:de:eb:64:de:4b:8e:39:0a:01:27:c8:32:74:01:ed:c1: 1d:ad:90:a2:df:c7:90:e7:e7:55:55:04:38:47:b3:b8:95:9e: 78:cb:c5:6c:cc:6f:3d:7c:4e:8f:d9:e9:10:9e:8d:f3:3a:cd: 4d:62:5b:03 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MkZFMTExMC8GA1UEBRMoMEM1OEM2OTY5RUU2NEM0MTkxQUFCNjY5NjNGNDA5RDQ1 QUVBRjY5ODAeFw0yNjA2MDEwNzIzMTBaFw0yNjA2MDgwNzIzMTBaMBgxFjAUBgNV BAMTDTZhMWQzMzVmLWFkYzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnULSBIyxlpg2Ex4IW2TWUVq3/AMQw2NlFbULSf5neFfHaoaDcNF0NV08Eo66n miLKVX9NdUJhhgqDbVVxzZVRLQNUvx+De9k0j100w8dYhH+EkiHbKnnhIuf5L3F/ 7QTaa+jMuY23gOBqYD3Tss1rFR3BGNVcwYoc56oYThWN8C5Mz3ItAj7SM4RstuuI Bg8Yw9Ep4eCHdgn9+mhvA0JNWfhLCyG7jIBJYK+zRif9f7dLh2/atXszR8fawcu8 NOmaSvp9/bwMBje5qur3EQuadV9s2hAnuNGD8RjpD1oBepDzFOrQ+AtRYx9p4RHi FDgp3oKzLVdICbEideWvjmdnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQURMqxL00N 2kp304nELWt46dUF4O0wHwYDVR0jBBgwFoAUDFjGlp7mTEGRqrZpY/QJ1Frq9pgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEyRkUxL0ZCMjhEOUYwREM5 QzExRjA4MTdFODk2MUEyRUU1MjhFL0RGakdscDdtVEVHUnFyWnBZX1FKMUZycTlw Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvREZqR2xwN21URUdScXJacFlfUUoxRnJxOXBnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEy RkUxL0ZCMjhEOUYwREM5QzExRjA4MTdFODk2MUEyRUU1MjhFL0RGakdscDdtVEVH UnFyWnBZX1FKMUZycTlwZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBANCS88bnggfH93Cr/3tQ0n1lDw4BbJrGNRuqQGTSwubEe53OZc0NDMCBkxKyb VrzNqpOeGX20YSezUFY6orSzeYCgTPhjb5BWDiCb99oVvT1ZAtzL01pUgAR+Ttz+ +rm4s9Re/KUEKvDjM6UGT2rEnU73/EKSUsItrcwyhk5gcIcb3q3RT0o0q/uLel8Q PZOFBeJrlEsVP3n+d1+VW4Dtmn1/K+2a1WPgqCPJBkzf5eDYoCfkYLUO14LH7jrE OHCTjZ0X1cMSH97rZN5LjjkKASfIMnQB7cEdrZCi38eQ5+dVVQQ4R7O4lZ54y8Vs zG89fE6P2ekQno3zOs1NYlsD -----END CERTIFICATE-----Generated at Tue Jun 2 21:19:48 2026 by rpki-client