$ rpki-client -vvf rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft File: ecf8XRpe7wspjgByMmq3Noa9_ng.mft (raw, json) Hash identifier: 21OCDa0I5biLrZFmPe1PZUXdvXDvgiYSR5Wf4WgQvV4= Subject key identifier: 99:14:5A:70:CA:1C:7A:12:2A:E6:85:54:43:D5:D5:B4:23:3D:54:B3 Authority key identifier: 79:C7:FC:5D:1A:5E:EF:0B:29:8E:00:72:32:6A:B7:36:86:BD:FE:78 Certificate issuer: /CN=A9123918/serialNumber=79C7FC5D1A5EEF0B298E0072326AB73686BDFE78 Certificate serial: 0126 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft Manifest number: 011C Signing time: Mon 01 Jun 2026 06:41:15 +0000 Manifest this update: Mon 01 Jun 2026 06:41:14 +0000 Manifest next update: Mon 08 Jun 2026 06:41:14 +0000 Files and hashes: 1: ecf8XRpe7wspjgByMmq3Noa9_ng.crl (hash: noiUORlcj+yDBy2ch3lXAzm8XfrB+kJ4Je1QBGjPhvo=) 2: 345F7BDCF80C11EF831DA737C4F9AE02.roa (hash: j5AEAb8kY5M3sbYrBrlhwU1t8O30/erdyML6Xz5HVZk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.crl rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 06:41:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 294 (0x126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123918, serialNumber=79C7FC5D1A5EEF0B298E0072326AB73686BDFE78 Validity Not Before: Jun 1 06:41:14 2026 GMT Not After : Jun 8 06:41:14 2026 GMT Subject: CN=6a1d298b-8250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:72:27:c4:7d:03:ee:73:5f:7e:64:f8:f4:31: ed:ad:c1:7b:70:c4:f0:85:7c:2b:24:f1:f0:79:a5: 8b:7e:01:f1:4b:62:65:84:c0:33:a1:e2:ac:c8:b6: 98:a2:7a:4c:c0:ad:f8:63:33:37:6d:6b:b9:5c:fb: d6:6a:3d:b8:bd:d3:3f:52:e0:62:78:c1:89:97:ce: 4b:5c:8b:ce:a0:c3:6e:83:04:eb:76:c7:ce:d7:fd: c2:29:7b:94:ba:6e:d9:74:f8:fa:66:b5:36:ac:f1: 9a:dc:08:38:9f:21:c9:2e:dc:64:3c:3e:c7:f8:5e: 27:ad:d3:93:b5:79:d3:3c:91:f0:6d:4b:b5:2e:ed: 1f:b6:2d:4d:36:0b:ff:a5:8d:75:7c:a4:a4:48:47: b7:5a:b8:79:68:0f:86:5f:34:52:83:1c:b0:8d:a8: 3a:68:72:1a:ec:ea:c8:2f:07:7b:ac:fd:7e:4a:fd: 64:97:87:c5:32:8e:59:92:02:4a:c3:6e:f0:07:8d: 92:86:15:d8:fc:4e:87:fa:37:85:ef:0a:4d:69:b9: 19:48:f3:9a:1c:50:1a:34:c7:2a:68:29:e2:21:bb: f3:fe:8b:74:bb:01:f4:3c:04:d2:52:99:6a:b6:8f: 7a:e7:72:67:1f:36:7f:66:4a:8e:86:9d:5f:56:0f: 3e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:14:5A:70:CA:1C:7A:12:2A:E6:85:54:43:D5:D5:B4:23:3D:54:B3 X509v3 Authority Key Identifier: keyid:79:C7:FC:5D:1A:5E:EF:0B:29:8E:00:72:32:6A:B7:36:86:BD:FE:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:df:62:10:eb:13:bc:a0:78:f3:c5:4e:75:d9:df:36:5b:8b: f7:a0:77:b3:93:a6:11:2a:b2:db:23:ed:51:a8:ed:05:68:85: 2b:e2:a4:b5:41:3a:f3:aa:21:9f:cc:73:8b:3a:bb:ad:ea:fb: 97:46:11:d7:c1:d7:5a:68:65:4a:31:05:82:04:ae:2c:e0:20: 5a:87:ce:ff:5e:8e:d5:52:3e:34:69:1b:22:7f:ad:53:88:2a: 42:c2:73:26:ac:84:b6:39:20:69:94:92:72:c2:f6:87:ff:af: 9a:0f:71:0d:bc:31:5b:73:5d:6d:fe:06:52:73:de:0e:ce:69: e5:da:19:88:05:94:4c:e2:75:df:a4:e1:24:d1:ad:4a:61:b4: 21:a7:c3:85:72:d6:c0:22:9c:53:4d:20:53:79:b5:05:1d:34: 1f:73:51:a8:59:0a:bf:af:fe:ed:a5:c5:d6:46:47:43:f9:85: 8d:59:37:5d:0a:85:a0:86:57:a4:87:d4:e4:1d:9f:6e:b3:6b: e6:da:77:2e:0c:ba:fb:16:e6:f8:14:4a:3b:39:75:dc:fc:22: 4c:25:d7:79:06:9f:3a:f3:8d:a6:c5:0c:26:5b:ea:46:8a:37: 9f:ed:1b:01:cd:20:2c:c1:36:7c:ed:7c:25:6b:fc:fc:5f:1c: 57:55:6b:ee -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM5MTgxMTAvBgNVBAUTKDc5QzdGQzVEMUE1RUVGMEIyOThFMDA3MjMyNkFCNzM2 ODZCREZFNzgwHhcNMjYwNjAxMDY0MTE0WhcNMjYwNjA4MDY0MTE0WjAYMRYwFAYD VQQDEw02YTFkMjk4Yi04MjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz3InxH0D7nNffmT49DHtrcF7cMTwhXwrJPHweaWLfgHxS2JlhMAzoeKsyLaY onpMwK34YzM3bWu5XPvWaj24vdM/UuBieMGJl85LXIvOoMNugwTrdsfO1/3CKXuU um7ZdPj6ZrU2rPGa3Ag4nyHJLtxkPD7H+F4nrdOTtXnTPJHwbUu1Lu0fti1NNgv/ pY11fKSkSEe3Wrh5aA+GXzRSgxywjag6aHIa7OrILwd7rP1+Sv1kl4fFMo5ZkgJK w27wB42ShhXY/E6H+jeF7wpNabkZSPOaHFAaNMcqaCniIbvz/ot0uwH0PATSUplq to9653JnHzZ/ZkqOhp1fVg8+7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJkUWnDK HHoSKuaFVEPV1bQjPVSzMB8GA1UdIwQYMBaAFHnH/F0aXu8LKY4AcjJqtzaGvf54 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzkxOC84RUU3MTQ4NkI2 QzQxMUVGQjEwRURFNThDNEY5QUUwMi9lY2Y4WFJwZTd3c3BqZ0J5TW1xM05vYTlf bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VjZjhYUnBlN3dzcGpnQnlNbXEzTm9hOV9uZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzkxOC84RUU3MTQ4NkI2QzQxMUVGQjEwRURFNThDNEY5QUUwMi9lY2Y4WFJwZTd3 c3BqZ0J5TW1xM05vYTlfbmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK99iEOsTvKB488VOddnfNluL96B3s5OmESqy2yPtUajtBWiFK+KktUE686oh n8xzizq7rer7l0YR18HXWmhlSjEFggSuLOAgWofO/16O1VI+NGkbIn+tU4gqQsJz JqyEtjkgaZSScsL2h/+vmg9xDbwxW3Ndbf4GUnPeDs5p5doZiAWUTOJ136ThJNGt SmG0IafDhXLWwCKcU00gU3m1BR00H3NRqFkKv6/+7aXF1kZHQ/mFjVk3XQqFoIZX pIfU5B2fbrNr5tp3Lgy6+xbm+BRKOzl13PwiTCXXeQafOvONpsUMJlvqRoo3n+0b Ac0gLME2fO18JWv8/F8cV1Vr7g== -----END CERTIFICATE-----Generated at Tue Jun 2 21:30:23 2026 by rpki-client