$ rpki-client -vvf rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft File: xM4RIyFRinKEfG1X56ijVDRVNzs.mft (raw, json) Hash identifier: RNwTey/FhyofNJXGtBa5nHlTdWC151NelaHSgb/2nGU= Subject key identifier: A7:71:7A:E7:CD:12:4C:59:5A:75:2F:45:A5:A3:99:D5:54:94:D0:92 Authority key identifier: C4:CE:11:23:21:51:8A:72:84:7C:6D:57:E7:A8:A3:54:34:55:37:3B Certificate issuer: /CN=A9116D64/serialNumber=C4CE112321518A72847C6D57E7A8A3543455373B Certificate serial: 354D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft Manifest number: 354D Signing time: Mon 22 Jun 2026 15:07:18 +0000 Manifest this update: Mon 22 Jun 2026 15:07:17 +0000 Manifest next update: Mon 29 Jun 2026 15:07:17 +0000 Files and hashes: 1: xM4RIyFRinKEfG1X56ijVDRVNzs.crl (hash: wR3cZI2xAln8mbCs9yyUR5SX9b24ADTNOXPpXB81Pw8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.crl rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Jun 2026 15:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13645 (0x354d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116D64, serialNumber=C4CE112321518A72847C6D57E7A8A3543455373B Validity Not Before: Jun 22 15:07:17 2026 GMT Not After : Jun 29 15:07:17 2026 GMT Subject: CN=6a394fa5-4958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f4:81:f9:80:6c:53:41:56:fa:a1:b3:9f:c6: 91:c2:87:33:20:0e:d3:2e:cc:57:16:30:73:c3:76: 85:60:6f:9b:54:63:bd:6c:fd:dd:50:a3:61:eb:83: 09:4a:ab:36:31:4c:61:82:bf:3e:a1:27:b5:39:dd: fe:46:3e:1e:d4:6f:1a:7d:bf:e8:e7:cc:b2:f6:c6: 8e:e3:b7:bf:7a:1d:9b:39:2c:4f:fb:b5:d8:a9:8b: 49:e6:e4:f3:7c:bb:79:72:7c:82:c3:34:a1:7a:16: 51:00:fd:ab:d9:bc:96:2c:7f:d6:6b:6a:52:8a:4a: b2:9d:27:bf:cf:a0:d7:83:54:90:f2:ae:f6:35:78: ac:da:22:ca:34:25:75:79:2b:9a:73:f1:68:9f:47: 5e:91:66:33:79:0d:9c:6e:ab:8d:49:49:de:01:05: 4b:e3:69:cb:7f:9e:6d:7b:8c:73:0a:cc:2f:3f:58: 92:66:52:34:d2:46:17:8e:a3:f0:74:10:58:33:84: 64:13:8f:d0:f6:73:85:42:9f:89:57:dd:6f:90:90: ce:b0:7c:47:b2:9b:be:f4:03:af:8c:ea:93:e8:ca: a8:29:11:37:94:9e:56:80:97:a0:32:3b:7c:11:1b: 90:32:93:54:b2:b5:8e:ff:cf:31:b5:3c:4c:c2:22: b7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:71:7A:E7:CD:12:4C:59:5A:75:2F:45:A5:A3:99:D5:54:94:D0:92 X509v3 Authority Key Identifier: keyid:C4:CE:11:23:21:51:8A:72:84:7C:6D:57:E7:A8:A3:54:34:55:37:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:32:c0:71:89:1b:89:2f:9c:50:df:2e:b2:1d:11:5e:ba:e4: 5d:af:c2:57:f8:4b:62:d6:a8:b3:25:83:ae:1a:3a:21:1a:a0: 35:d2:63:1d:b7:4f:6b:2d:d8:f7:95:b8:ad:b1:99:b5:f2:93: e5:7c:ec:fd:da:76:78:71:d2:0f:f3:6f:60:fd:4e:69:f4:d0: 47:ea:c8:b0:1e:75:d6:94:a4:6c:2c:ec:ff:e5:99:12:46:eb: 15:f8:50:cd:e7:0b:54:50:bc:21:4d:27:1f:2a:49:79:14:2c: 74:e0:dc:9c:99:eb:1a:92:fe:12:af:54:ca:ca:b8:a9:73:65: e0:11:be:17:e2:7d:f7:2e:bf:1d:f6:9b:fb:d1:9a:f7:ac:14: fa:71:63:5d:90:28:b2:70:c8:0f:a6:f9:e4:10:2c:09:90:c1: f0:10:1c:91:e2:b8:7d:88:9a:3d:2e:10:de:f6:9d:9f:2f:3b: f3:1e:77:f4:d4:75:2c:75:3d:31:60:8a:83:36:91:e9:e8:3b: f6:6b:0f:3d:73:49:78:c4:71:e2:08:3f:ae:1c:b9:e8:d0:6d: 9f:7e:64:93:80:e2:db:d7:30:9d:e5:41:46:46:0d:29:48:2f: 5e:de:7a:73:3e:74:fb:d9:5a:65:0b:8c:66:83:43:05:d1:5a: 78:81:82:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZENjQxMTAvBgNVBAUTKEM0Q0UxMTIzMjE1MThBNzI4NDdDNkQ1N0U3QThBMzU0 MzQ1NTM3M0IwHhcNMjYwNjIyMTUwNzE3WhcNMjYwNjI5MTUwNzE3WjAYMRYwFAYD VQQDEw02YTM5NGZhNS00OTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3fSB+YBsU0FW+qGzn8aRwoczIA7TLsxXFjBzw3aFYG+bVGO9bP3dUKNh64MJ Sqs2MUxhgr8+oSe1Od3+Rj4e1G8afb/o58yy9saO47e/eh2bOSxP+7XYqYtJ5uTz fLt5cnyCwzShehZRAP2r2byWLH/Wa2pSikqynSe/z6DXg1SQ8q72NXis2iLKNCV1 eSuac/Fon0dekWYzeQ2cbquNSUneAQVL42nLf55te4xzCswvP1iSZlI00kYXjqPw dBBYM4RkE4/Q9nOFQp+JV91vkJDOsHxHspu+9AOvjOqT6MqoKRE3lJ5WgJegMjt8 ERuQMpNUsrWO/88xtTxMwiK3qQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKdxeufN EkxZWnUvRaWjmdVUlNCSMB8GA1UdIwQYMBaAFMTOESMhUYpyhHxtV+eoo1Q0VTc7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkQ2NC8zQUY5Q0FEODFE QTQxMUUyOEJBMzIxOUEwOEIwMkNEMi94TTRSSXlGUmluS0VmRzFYNTZpalZEUlZO enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hNNFJJeUZSaW5LRWZHMVg1NmlqVkRSVk56cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkQ2NC8zQUY5Q0FEODFEQTQxMUUyOEJBMzIxOUEwOEIwMkNEMi94TTRSSXlGUmlu S0VmRzFYNTZpalZEUlZOenMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAijLAcYkbiS+cUN8ush0RXrrkXa/CV/hLYtaosyWDrho6IRqgNdJjHbdPay3Y 95W4rbGZtfKT5Xzs/dp2eHHSD/NvYP1OafTQR+rIsB511pSkbCzs/+WZEkbrFfhQ zecLVFC8IU0nHypJeRQsdODcnJnrGpL+Eq9Uysq4qXNl4BG+F+J99y6/Hfab+9Ga 96wU+nFjXZAosnDID6b55BAsCZDB8BAckeK4fYiaPS4Q3vadny878x539NR1LHU9 MWCKgzaR6eg79msPPXNJeMRx4gg/rhy56NBtn35kk4Di29cwneVBRkYNKUgvXt56 cz50+9laZQuMZoNDBdFaeIGCqQ== -----END CERTIFICATE-----Generated at Wed Jun 24 11:25:16 2026 by rpki-client