$ rpki-client -vvf rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft File: 9gKmKT9-ZJIHfntNYBYwftEsHDE.mft (raw, json) Hash identifier: Jwp99m+hE9pYJ2w2ZD6qADdaz/QEJ5B3zyiz4QlgeoI= Subject key identifier: 99:B6:07:AD:4B:8D:B2:BA:C3:3B:D7:51:A6:27:1C:98:73:1A:CB:9A Authority key identifier: F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31 Certificate issuer: /CN=A911E74F/serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31 Certificate serial: 02C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft Manifest number: 02B2 Signing time: Wed 01 Jul 2026 02:39:14 +0000 Manifest this update: Wed 01 Jul 2026 02:39:14 +0000 Manifest next update: Wed 08 Jul 2026 02:39:14 +0000 Files and hashes: 1: 9gKmKT9-ZJIHfntNYBYwftEsHDE.crl (hash: xgJyn5FJ7c1BGqU2/j9AL8kCQVhNj8B5JXAlvx1ipJc=) 2: 5D4A59E22A9F11F1B6C16D449B833773.roa (hash: ef1Pzkd6YyMYPgvb+0QvXOJe09TY7pC/OEUwYAQF7Qw=) 3: 748DB0E603F711F18E6BFAB3133D8C67.roa (hash: cWPvgLzM0wrI0AI0yO5bwCGuSadpiApmv3awAQWzSA4=) 4: C41C3B7C2A9F11F1AEE17D7A9B833773.roa (hash: BaPq5hdUUw6M/UYNr2TfdFGU9d7sgsjjuYBYSErSa0E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 Jul 2026 02:39:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 709 (0x2c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E74F, serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31 Validity Not Before: Jul 1 02:39:14 2026 GMT Not After : Jul 8 02:39:14 2026 GMT Subject: CN=6a447dd2-1886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f8:4e:83:e3:8a:a5:c6:77:ef:59:d8:87:88: 5e:08:f3:48:22:0d:a8:28:e4:de:4c:98:93:ca:d5: b3:73:5b:09:f5:61:96:f2:e2:96:ea:a8:39:ff:8f: c5:71:41:1d:87:50:18:e5:78:9a:b1:fe:34:5f:17: f3:f9:e9:12:8a:f2:52:77:f3:09:97:5b:95:a0:50: 4b:92:05:82:a7:de:36:39:dc:90:1b:98:8a:98:e7: 29:72:c1:5c:f0:35:65:56:66:70:09:8b:3d:b0:77: 3f:03:44:b5:e8:0b:37:f7:b4:1b:2a:bc:79:56:fc: 7f:55:23:71:3c:44:5b:64:cd:5a:18:4b:13:ac:5a: 77:d0:78:26:67:00:a7:57:cc:16:40:03:0b:28:ae: 0b:2d:ce:72:24:55:ec:09:7e:64:ec:31:fe:4d:6c: c3:d6:6e:61:c6:45:38:8a:cc:61:39:1d:bc:dd:b9: b4:8b:97:d6:13:e9:a4:0c:97:8e:61:f6:6a:ed:39: 0f:6e:45:b7:35:aa:50:3d:3d:95:21:d7:86:e3:0d: 06:6d:a4:d9:f2:98:e2:25:2f:2a:70:e5:77:25:35: 3d:a7:0d:66:a8:27:68:bc:7c:12:07:11:b9:6a:53: c2:e1:17:aa:64:a2:34:40:3d:73:cc:7f:37:bf:ae: 26:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:B6:07:AD:4B:8D:B2:BA:C3:3B:D7:51:A6:27:1C:98:73:1A:CB:9A X509v3 Authority Key Identifier: keyid:F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:8b:e9:5b:6d:af:04:fa:4f:9d:c3:c8:6b:d5:64:34:72:96: 93:f3:ac:8c:24:8b:90:1e:da:33:96:bb:8b:fc:c5:2f:34:fc: ed:49:cf:0f:cf:4e:23:fe:9a:4c:74:9c:5a:22:e0:49:89:3c: 8f:57:06:03:ba:f9:65:6f:55:c6:26:07:b8:da:a0:a1:01:e0: 37:c2:39:95:e6:a8:21:54:13:a1:36:50:63:8f:6f:47:6f:9c: d7:88:0c:a3:02:e5:59:82:69:c5:34:68:28:b9:19:56:63:e5: 13:a9:30:de:f7:b7:ed:18:db:51:f9:5a:d4:d1:be:86:1a:84: 87:a7:a6:71:53:f6:b1:c5:2c:e7:5a:47:36:37:e3:8f:7e:df: 3e:bb:b0:ee:a4:f4:e8:26:78:95:6e:24:c3:1a:62:09:93:3c: 91:47:7a:7d:62:27:f7:7d:00:c0:65:31:82:1a:5d:62:9f:53: ff:d7:3d:be:bc:77:58:55:b3:46:47:72:5b:d7:d0:50:30:91: 86:52:f0:47:be:b3:fd:bf:e7:18:3f:ed:02:3b:0b:f1:3b:36: e6:e1:1e:04:32:90:fc:fa:fd:e3:cb:38:b7:30:37:e1:f8:5f: 2f:7b:56:f2:63:81:26:d2:35:ec:67:8a:20:28:a5:3a:82:84: 6e:87:c7:50 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU3NEYxMTAvBgNVBAUTKEY2MDJBNjI5M0Y3RTY0OTIwNzdFN0I0RDYwMTYzMDdF RDEyQzFDMzEwHhcNMjYwNzAxMDIzOTE0WhcNMjYwNzA4MDIzOTE0WjAYMRYwFAYD VQQDEw02YTQ0N2RkMi0xODg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/hOg+OKpcZ371nYh4heCPNIIg2oKOTeTJiTytWzc1sJ9WGW8uKW6qg5/4/F cUEdh1AY5Xiasf40Xxfz+ekSivJSd/MJl1uVoFBLkgWCp942OdyQG5iKmOcpcsFc 8DVlVmZwCYs9sHc/A0S16As397QbKrx5Vvx/VSNxPERbZM1aGEsTrFp30HgmZwCn V8wWQAMLKK4LLc5yJFXsCX5k7DH+TWzD1m5hxkU4isxhOR283bm0i5fWE+mkDJeO YfZq7TkPbkW3NapQPT2VIdeG4w0GbaTZ8pjiJS8qcOV3JTU9pw1mqCdovHwSBxG5 alPC4ReqZKI0QD1zzH83v64m6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJm2B61L jbK6wzvXUaYnHJhzGsuaMB8GA1UdIwQYMBaAFPYCpik/fmSSB357TWAWMH7RLBwx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTc0Ri8xRTE1NzAzODYz OEIxMUVEQjEwM0MwMkNDNEY5QUUwMi85Z0ttS1Q5LVpKSUhmbnROWUJZd2Z0RXNI REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlnS21LVDktWkpJSGZudE5ZQll3ZnRFc0hERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTc0Ri8xRTE1NzAzODYzOEIxMUVEQjEwM0MwMkNDNEY5QUUwMi85Z0ttS1Q5LVpK SUhmbnROWUJZd2Z0RXNIREUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFovpW22vBPpPncPIa9VkNHKWk/OsjCSLkB7aM5a7i/zFLzT87UnPD89OI/6a THScWiLgSYk8j1cGA7r5ZW9VxiYHuNqgoQHgN8I5leaoIVQToTZQY49vR2+c14gM owLlWYJpxTRoKLkZVmPlE6kw3ve37RjbUfla1NG+hhqEh6emcVP2scUs51pHNjfj j37fPruw7qT06CZ4lW4kwxpiCZM8kUd6fWIn930AwGUxghpdYp9T/9c9vrx3WFWz RkdyW9fQUDCRhlLwR76z/b/nGD/tAjsL8Ts25uEeBDKQ/Pr948s4tzA34fhfL3tW 8mOBJtI17GeKICilOoKEbofHUA== -----END CERTIFICATE-----Generated at Wed Jul 1 10:38:59 2026 by rpki-client