$ rpki-client -vvf rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft File: 8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft (raw, json) Hash identifier: 1LrHlIYI+5dFr8kwnJ/7l5LAXihok7BP/WXXbArL3ug= Subject key identifier: 58:D7:8A:E0:09:B4:20:EC:5D:34:7F:61:4E:E4:78:E5:E1:54:FC:25 Authority key identifier: F1:99:8A:47:5E:92:DE:8A:6C:7D:40:94:55:6A:0D:A6:7D:5D:4D:0E Certificate issuer: /CN=A9118CA7/serialNumber=F1998A475E92DE8A6C7D4094556A0DA67D5D4D0E Certificate serial: 0A25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft Manifest number: 0A03 Signing time: Mon 22 Jun 2026 19:51:57 +0000 Manifest this update: Mon 22 Jun 2026 19:51:56 +0000 Manifest next update: Mon 29 Jun 2026 19:51:56 +0000 Files and hashes: 1: 8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl (hash: 8J+nisINBjopj82fpxrqqz96IRYY3wfyYT8RjVyLp84=) 2: FFFE56DEDEF111EF8EE4AE37C4F9AE02.roa (hash: 0FWKl6V2UsAeRLSYgRMr9fF+nuXljQkdSIOnzl7uC2U=) 3: E76F99C60FDB11ED9718606AC4F9AE02.roa (hash: jPruOReU41tiy9WKYUDnZKPfOqm/FjV3E9pMcApFq0A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Jun 2026 19:51:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2597 (0xa25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118CA7, serialNumber=F1998A475E92DE8A6C7D4094556A0DA67D5D4D0E Validity Not Before: Jun 22 19:51:56 2026 GMT Not After : Jun 29 19:51:56 2026 GMT Subject: CN=6a39925d-88c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f1:67:36:9c:87:be:b2:a4:88:da:aa:37:38: 69:7a:5c:f1:0b:33:d8:22:c1:24:b2:51:4b:49:b4: 3c:07:e1:c8:f4:39:20:88:a9:a5:c4:4e:51:32:84: 0f:f3:04:e4:67:bf:ac:c2:e6:6b:2b:65:78:75:3b: 65:18:9d:0a:e4:d0:8a:61:a9:fb:d5:e5:da:a5:1c: 5d:da:1f:6c:ad:32:66:d7:68:a1:ef:1a:ba:4c:f8: 03:ca:a7:61:6b:7a:f2:b0:31:69:f8:78:d2:b3:60: 83:c3:b2:9a:ea:c2:51:a5:40:77:af:5a:b7:d7:ac: c9:eb:89:2a:f5:40:c2:04:3f:cd:54:c8:fd:e8:cb: 09:98:22:56:5b:60:53:08:14:fa:98:45:8a:e6:d9: 89:b8:fc:bc:aa:67:33:c6:86:a9:2f:8b:3e:bb:65: bd:ac:a2:28:6e:55:88:a8:5b:fe:a1:90:e8:85:e2: cd:e9:5a:0a:6d:e2:44:2e:ac:86:2a:a2:fe:1e:f1: 8d:d1:94:36:d3:c1:88:15:86:97:57:74:13:3f:3e: 9e:21:02:b8:01:54:cd:e7:9e:c9:da:fd:07:1d:73: c9:47:ec:3e:e6:c0:6f:d8:93:b6:9b:f4:66:62:4a: e4:0b:e3:86:9b:82:4e:58:b1:f4:74:11:1b:ce:11: 27:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:D7:8A:E0:09:B4:20:EC:5D:34:7F:61:4E:E4:78:E5:E1:54:FC:25 X509v3 Authority Key Identifier: keyid:F1:99:8A:47:5E:92:DE:8A:6C:7D:40:94:55:6A:0D:A6:7D:5D:4D:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:98:60:34:07:6d:d8:e7:14:24:e3:c0:08:fc:46:88:bf:cb: 9b:cc:b9:1a:ae:04:9e:64:8a:29:80:6d:67:19:4d:bf:ea:f9: 2e:7c:9f:4c:7d:fc:ff:25:0a:a1:3c:12:17:2a:12:6d:d5:a9: 4a:a8:57:66:9d:95:f1:0d:cb:92:a1:10:65:17:c2:6d:f1:7b: ad:cd:1b:b0:b4:b6:e7:db:5a:49:ed:0b:78:3b:ed:7c:1e:8c: 05:e5:2a:7c:75:6a:98:59:46:db:33:db:e0:3d:a5:60:24:0f: 60:1a:3d:62:bb:6a:35:e5:f3:6f:a4:ba:d3:85:7e:d0:0b:b4: cf:77:63:e3:8a:e1:b8:a2:2b:41:f0:85:8a:b3:86:61:da:89: 7a:12:05:8a:c1:f6:78:12:8f:63:b6:4e:ca:47:2e:8f:fb:0b: 24:65:74:84:43:3a:52:76:6a:ac:1f:f4:e1:1e:29:ab:46:04: 82:c1:76:52:11:ef:4b:d7:81:12:77:63:a2:2d:b7:55:a5:2c: 4d:ac:c9:46:2a:f7:8a:86:e3:64:d7:b6:ef:ea:bf:0b:8d:24: 31:11:82:ab:82:c5:c4:00:e6:87:84:e7:c8:47:04:28:9e:2e: 61:b6:12:e1:72:fd:1a:73:c5:97:aa:3e:f2:ec:4d:f8:23:b0: 00:fb:e3:38 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThDQTcxMTAvBgNVBAUTKEYxOTk4QTQ3NUU5MkRFOEE2QzdENDA5NDU1NkEwREE2 N0Q1RDREMEUwHhcNMjYwNjIyMTk1MTU2WhcNMjYwNjI5MTk1MTU2WjAYMRYwFAYD VQQDEw02YTM5OTI1ZC04OGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu/FnNpyHvrKkiNqqNzhpelzxCzPYIsEkslFLSbQ8B+HI9DkgiKmlxE5RMoQP 8wTkZ7+swuZrK2V4dTtlGJ0K5NCKYan71eXapRxd2h9srTJm12ih7xq6TPgDyqdh a3rysDFp+HjSs2CDw7Ka6sJRpUB3r1q316zJ64kq9UDCBD/NVMj96MsJmCJWW2BT CBT6mEWK5tmJuPy8qmczxoapL4s+u2W9rKIoblWIqFv+oZDoheLN6VoKbeJELqyG KqL+HvGN0ZQ208GIFYaXV3QTPz6eIQK4AVTN557J2v0HHXPJR+w+5sBv2JO2m/Rm YkrkC+OGm4JOWLH0dBEbzhEnQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFjXiuAJ tCDsXTR/YU7keOXhVPwlMB8GA1UdIwQYMBaAFPGZikdekt6KbH1AlFVqDaZ9XU0O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOENBNy8yRkM3MEEyNEEw RDUxMUVBQTdGRkRGMjlDNEY5QUUwMi84Wm1LUjE2UzNvcHNmVUNVVldvTnBuMWRU UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhabUtSMTZTM29wc2ZVQ1VWV29OcG4xZFRRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OENBNy8yRkM3MEEyNEEwRDUxMUVBQTdGRkRGMjlDNEY5QUUwMi84Wm1LUjE2UzNv cHNmVUNVVldvTnBuMWRUUTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAi5hgNAdt2OcUJOPACPxGiL/Lm8y5Gq4EnmSKKYBtZxlNv+r5LnyfTH38/yUK oTwSFyoSbdWpSqhXZp2V8Q3LkqEQZRfCbfF7rc0bsLS259taSe0LeDvtfB6MBeUq fHVqmFlG2zPb4D2lYCQPYBo9YrtqNeXzb6S604V+0Au0z3dj44rhuKIrQfCFirOG YdqJehIFisH2eBKPY7ZOykcuj/sLJGV0hEM6UnZqrB/04R4pq0YEgsF2UhHvS9eB Endjoi23VaUsTazJRir3iobjZNe27+q/C40kMRGCq4LFxADmh4TnyEcEKJ4uYbYS 4XL9GnPFl6o+8uxN+COwAPvjOA== -----END CERTIFICATE-----Generated at Wed Jun 24 11:24:39 2026 by rpki-client