$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft File: gCx1H6mENH35yTztuX7ZUalSgoY.mft (raw, json) Hash identifier: ssNFWvqU/IOGa2QfNj3mf4AxZYiS8kAOp8LmkUEPCq0= Subject key identifier: 52:CC:82:25:BD:53:B1:94:76:8C:2D:83:F9:C7:EE:3E:6C:A4:B9:91 Authority key identifier: 80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86 Certificate issuer: /CN=A911AE8B/serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286 Certificate serial: 0DFA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft Manifest number: 0DD2 Signing time: Wed 10 Jun 2026 17:54:34 +0000 Manifest this update: Wed 10 Jun 2026 17:54:33 +0000 Manifest next update: Wed 17 Jun 2026 17:54:33 +0000 Files and hashes: 1: gCx1H6mENH35yTztuX7ZUalSgoY.crl (hash: pUvHpv+meUSavY+u8AHCK1U90AAT2Ab9x1RuxtLuj04=) 2: 677F3316E02711E9AB669750C4F9AE02.roa (hash: Rx39rgdKBA7zdcc962yiNhgXGCpK5LRJSU4D4pU54RA=) 3: C5C152D2F28211F0B78FCAB4696F56BC.roa (hash: BXi41BPmYbwmPR7CH8efyQzZoCZh4MQESuU5TAzEzUA=) 4: AF2CB5CE101E11ED9FA78415C4F9AE02.roa (hash: c6Bxsf4/9YtF+57E7R8e7VzwUukKAS9p7Ji/ny3xUY8=) 5: 9A735F54EBE611EC82C08A11C4F9AE02.roa (hash: B3wAK97jhUd9WZXrgCNdwLjXUkDVCtHuNCOpZHTWsx4=) 6: AD727D903F8111F1AAE343DCAF833773.roa (hash: 6/Bw7aE+CShp5tga2BPNlQn9ZAcE3QdhOoOj6cEOvU8=) 7: C64AB888F28211F0B78FCAB4696F56BC.roa (hash: 2Wh9GEwPkIT3ersV2cUdA77BiYM2ozOHXH7e19XrJGE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 17:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3578 (0xdfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AE8B, serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286 Validity Not Before: Jun 10 17:54:33 2026 GMT Not After : Jun 17 17:54:33 2026 GMT Subject: CN=6a29a4d9-bb79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:9f:a3:28:3d:3c:35:bd:45:66:9e:ba:42:82: ef:2d:83:0b:68:27:71:6b:eb:d7:f9:3f:63:ed:92: de:01:7e:cf:3b:0d:7e:cd:db:5b:60:69:b9:34:32: bc:fd:7b:ab:a2:bf:c2:5d:2b:21:00:ae:53:3a:09: a4:b0:ca:1e:bb:21:74:e0:dc:04:ee:b3:ca:15:5b: 06:7d:69:cb:b4:3d:a6:13:d3:79:a5:7a:83:4c:4c: 88:1e:1d:27:51:42:e5:5c:a4:17:b2:14:9a:39:47: d5:a7:19:74:61:74:2a:6f:65:71:8d:8f:76:ff:0d: 95:d1:a4:5c:ca:90:2f:a7:df:6f:93:45:ad:33:44: 70:54:c7:be:02:8f:7a:77:aa:a2:bc:fe:4b:8f:4a: 87:e1:e8:1f:55:5d:88:b4:38:a4:3c:f5:5f:5c:49: 89:90:f2:27:41:0f:ef:89:7d:bc:89:b7:22:55:20: 51:6b:eb:51:6e:46:bf:d1:79:3f:1a:5c:56:a2:a4: 02:4f:ea:75:fc:fa:3c:7a:b5:52:a6:77:d2:1a:f2: 35:35:bf:69:61:79:9b:59:e9:24:20:8a:52:43:2d: da:83:4c:f3:2b:fb:24:21:92:98:1d:ac:5c:e2:02: 7e:f5:29:29:57:f8:3c:ce:d5:67:84:1a:0e:27:37: 44:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:CC:82:25:BD:53:B1:94:76:8C:2D:83:F9:C7:EE:3E:6C:A4:B9:91 X509v3 Authority Key Identifier: keyid:80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:ad:92:6a:f9:d9:1e:30:b6:3c:6a:15:4c:f2:1f:ad:0f:eb: ed:eb:9f:0b:f8:71:04:99:8c:59:94:ca:c6:c7:ca:04:5f:61: be:83:b2:b7:ba:23:57:3d:37:6c:0f:28:22:f5:d5:de:ec:3a: 3c:f6:5d:ba:de:73:d8:d2:45:ec:63:a1:d3:87:bc:07:84:63: 56:a9:5e:35:51:6e:2b:2a:dc:21:90:0f:1a:aa:ae:5c:7b:68: 88:7c:67:de:74:06:64:f8:ab:6f:3c:1e:ac:4c:b5:d6:3f:27: 29:ef:f2:c1:2e:30:4d:06:df:8a:a4:17:97:38:4a:c6:a6:d4: a8:a2:73:93:4f:6c:f2:11:53:71:07:ba:18:ce:1d:00:31:a4: 04:d1:59:f7:98:13:cb:1a:07:3d:0f:db:f0:8e:87:47:da:ad: a3:d8:fb:25:48:1e:fd:48:f5:57:e6:5e:f8:9e:7f:b7:2c:be: 30:08:97:28:8c:58:c3:d5:4d:b8:3f:6e:a9:75:82:c8:1d:c9: 59:b4:ee:75:3c:34:cf:24:b1:d9:32:9f:b8:9d:56:dc:6d:13: d2:91:19:f6:92:62:78:25:34:ae:6e:d0:42:41:4a:6e:28:d0: 8e:ca:4d:64:5d:09:61:4d:c3:64:34:41:4c:69:3d:e2:45:38: 94:25:e0:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFFOEIxMTAvBgNVBAUTKDgwMkM3NTFGQTk4NDM0N0RGOUM5M0NFREI5N0VEOTUx QTk1MjgyODYwHhcNMjYwNjEwMTc1NDMzWhcNMjYwNjE3MTc1NDMzWjAYMRYwFAYD VQQDEw02YTI5YTRkOS1iYjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8p+jKD08Nb1FZp66QoLvLYMLaCdxa+vX+T9j7ZLeAX7POw1+zdtbYGm5NDK8 /Xuror/CXSshAK5TOgmksMoeuyF04NwE7rPKFVsGfWnLtD2mE9N5pXqDTEyIHh0n UULlXKQXshSaOUfVpxl0YXQqb2VxjY92/w2V0aRcypAvp99vk0WtM0RwVMe+Ao96 d6qivP5Lj0qH4egfVV2ItDikPPVfXEmJkPInQQ/viX28ibciVSBRa+tRbka/0Xk/ GlxWoqQCT+p1/Po8erVSpnfSGvI1Nb9pYXmbWekkIIpSQy3ag0zzK/skIZKYHaxc 4gJ+9SkpV/g8ztVnhBoOJzdEiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFLMgiW9 U7GUdowtg/nH7j5spLmRMB8GA1UdIwQYMBaAFIAsdR+phDR9+ck87bl+2VGpUoKG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUU4Qi9FQzI1N0NDNkUw MjUxMUU5OTFBOTc3NERDNEY5QUUwMi9nQ3gxSDZtRU5IMzV5VHp0dVg3WlVhbFNn b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dDeDFINm1FTkgzNXlUenR1WDdaVWFsU2dvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUU4Qi9FQzI1N0NDNkUwMjUxMUU5OTFBOTc3NERDNEY5QUUwMi9nQ3gxSDZtRU5I MzV5VHp0dVg3WlVhbFNnb1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADq2SavnZHjC2PGoVTPIfrQ/r7eufC/hxBJmMWZTKxsfKBF9hvoOyt7ojVz03 bA8oIvXV3uw6PPZdut5z2NJF7GOh04e8B4RjVqleNVFuKyrcIZAPGqquXHtoiHxn 3nQGZPirbzwerEy11j8nKe/ywS4wTQbfiqQXlzhKxqbUqKJzk09s8hFTcQe6GM4d ADGkBNFZ95gTyxoHPQ/b8I6HR9qto9j7JUge/Uj1V+Ze+J5/tyy+MAiXKIxYw9VN uD9uqXWCyB3JWbTudTw0zySx2TKfuJ1W3G0T0pEZ9pJieCU0rm7QQkFKbijQjspN ZF0JYU3DZDRBTGk94kU4lCXgpA== -----END CERTIFICATE-----Generated at Thu Jun 11 20:33:35 2026 by rpki-client