$ rpki-client -vvf rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.mft File: DHxNa-htVb5Ey0rZZmbBU1GT93I.mft (raw, json) Hash identifier: VsKyVSa0F+yQfSiEOjMRHEuRB1qSXEEtNTrsPZdhxK4= Subject key identifier: 54:C3:CB:2C:27:3F:65:45:C5:0B:A5:5C:73:1F:1F:BE:DC:0E:08:DD Authority key identifier: 0C:7C:4D:6B:E8:6D:55:BE:44:CB:4A:D9:66:66:C1:53:51:93:F7:72 Certificate issuer: /CN=A9123CA4/serialNumber=0C7C4D6BE86D55BE44CB4AD96666C1535193F772 Certificate serial: 01F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHxNa-htVb5Ey0rZZmbBU1GT93I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.mft Manifest number: 01ED Signing time: Tue 23 Jun 2026 03:36:36 +0000 Manifest this update: Tue 23 Jun 2026 03:36:36 +0000 Manifest next update: Tue 30 Jun 2026 03:36:36 +0000 Files and hashes: 1: DHxNa-htVb5Ey0rZZmbBU1GT93I.crl (hash: Z+ubx6UzhB070exEKY9SRXGS5OQ/vyBJpqtBb9vTcyY=) 2: 300438B6C03511EFA42E9085C4F9AE02.roa (hash: bPTiYTxBxLwgfGF9jUdmUbDxjsKoq1F4YRnN4H89Q34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.crl rsync://rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHxNa-htVb5Ey0rZZmbBU1GT93I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jun 2026 03:36:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 501 (0x1f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123CA4, serialNumber=0C7C4D6BE86D55BE44CB4AD96666C1535193F772 Validity Not Before: Jun 23 03:36:36 2026 GMT Not After : Jun 30 03:36:36 2026 GMT Subject: CN=6a39ff44-ea3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:35:56:f2:fe:98:3d:d9:cc:c2:d3:25:81:f9: 61:02:19:8e:ce:7f:69:97:d5:29:d9:33:07:9b:e8: 4e:0a:f3:37:d8:11:3c:45:67:0f:4e:be:1c:41:6c: af:e8:8d:cb:12:1c:bd:95:2e:9c:a2:db:e9:f0:14: ae:cc:46:15:e3:c6:28:1b:6c:5c:8f:6e:ad:e2:06: 88:ff:c5:9c:42:37:4d:28:cd:8e:ad:d9:99:39:61: 03:c0:73:cc:f0:5c:d0:fe:2a:1b:4c:74:0a:a8:76: 29:d7:50:29:0b:b9:9b:e8:2b:61:0f:ef:66:b4:c0: ef:fc:e9:b3:a0:e8:26:01:c7:01:38:f8:47:81:82: 26:f0:00:dd:1d:51:1a:c0:c8:7f:8b:15:e1:bd:ec: 3c:2d:40:e7:5e:ad:e7:9b:90:3c:b3:c3:49:9a:4c: 2e:43:66:6d:09:84:dd:60:5e:3c:4d:6d:6f:e4:50: 2d:e0:55:ae:df:dd:5d:2d:0a:86:a4:d9:5d:c5:ea: 22:ab:91:a4:a7:02:b6:a0:db:48:40:52:a4:9a:20: af:33:53:53:5c:05:a5:72:e4:1a:7b:a2:f7:14:fc: 89:19:03:4c:2b:0d:85:21:8c:3e:c8:98:ef:cf:a4: 6f:93:04:90:a7:60:bd:bf:61:1b:e9:cc:3b:06:ea: 5a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:C3:CB:2C:27:3F:65:45:C5:0B:A5:5C:73:1F:1F:BE:DC:0E:08:DD X509v3 Authority Key Identifier: keyid:0C:7C:4D:6B:E8:6D:55:BE:44:CB:4A:D9:66:66:C1:53:51:93:F7:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHxNa-htVb5Ey0rZZmbBU1GT93I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:9d:60:2b:f9:5f:41:b0:0b:34:c2:5a:30:a1:b5:0e:4b:e5: c4:15:2a:54:71:a9:b8:ee:65:96:31:8a:1a:48:0c:04:2b:e2: b0:d7:73:3e:41:c7:2f:34:2f:bb:51:c8:6b:f4:37:2e:e2:b8: 4f:f1:e6:92:81:c7:54:03:9a:da:ed:52:66:81:a6:a2:a7:d0: 9d:9d:f9:ea:7b:85:9c:4f:4b:e6:84:75:ec:e8:0a:15:bc:ae: 3c:85:ab:da:1f:f7:e7:ca:51:ec:ac:50:e9:b9:ff:5e:7a:d7: 2d:cf:0c:f1:2e:06:d1:c7:c7:86:92:0e:bb:6a:70:a6:38:6c: fe:50:70:71:22:27:16:6b:64:b9:dc:f9:67:09:8f:2f:3c:18: a8:35:c1:8e:1b:f1:9c:ee:2c:20:68:b1:13:c7:de:5a:e7:1a: 73:36:f1:f8:2d:7f:5a:93:be:79:06:6f:01:6f:cc:5b:e3:8f: 22:13:8a:99:0e:04:02:a8:96:05:b4:2c:aa:39:b6:73:74:34: a1:e8:0d:cd:a1:ee:da:db:1e:e0:8f:49:c6:72:cc:b3:78:1a: d6:ce:57:37:de:52:14:ff:b5:48:2e:29:10:e5:69:e4:da:95: 49:71:a0:09:97:3b:9f:c6:64:e2:2f:40:77:e0:8b:21:e2:94: e8:d2:9c:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNDQTQxMTAvBgNVBAUTKDBDN0M0RDZCRTg2RDU1QkU0NENCNEFEOTY2NjZDMTUz NTE5M0Y3NzIwHhcNMjYwNjIzMDMzNjM2WhcNMjYwNjMwMDMzNjM2WjAYMRYwFAYD VQQDEw02YTM5ZmY0NC1lYTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAojVW8v6YPdnMwtMlgflhAhmOzn9pl9Up2TMHm+hOCvM32BE8RWcPTr4cQWyv 6I3LEhy9lS6cotvp8BSuzEYV48YoG2xcj26t4gaI/8WcQjdNKM2OrdmZOWEDwHPM 8FzQ/iobTHQKqHYp11ApC7mb6CthD+9mtMDv/OmzoOgmAccBOPhHgYIm8ADdHVEa wMh/ixXhvew8LUDnXq3nm5A8s8NJmkwuQ2ZtCYTdYF48TW1v5FAt4FWu391dLQqG pNldxeoiq5GkpwK2oNtIQFKkmiCvM1NTXAWlcuQae6L3FPyJGQNMKw2FIYw+yJjv z6RvkwSQp2C9v2Eb6cw7BupalwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFTDyywn P2VFxQulXHMfH77cDgjdMB8GA1UdIwQYMBaAFAx8TWvobVW+RMtK2WZmwVNRk/dy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0NBNC9CNzUxNkIxMDg5 QjYxMUVFOTk1MTJBNkRDNEY5QUUwMi9ESHhOYS1odFZiNUV5MHJaWm1iQlUxR1Q5 M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RIeE5hLWh0VmI1RXkwclpabWJCVTFHVDkzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0NBNC9CNzUxNkIxMDg5QjYxMUVFOTk1MTJBNkRDNEY5QUUwMi9ESHhOYS1odFZi NUV5MHJaWm1iQlUxR1Q5M0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGJ1gK/lfQbALNMJaMKG1DkvlxBUqVHGpuO5lljGKGkgMBCvisNdzPkHHLzQv u1HIa/Q3LuK4T/HmkoHHVAOa2u1SZoGmoqfQnZ356nuFnE9L5oR17OgKFbyuPIWr 2h/358pR7KxQ6bn/XnrXLc8M8S4G0cfHhpIOu2pwpjhs/lBwcSInFmtkudz5ZwmP LzwYqDXBjhvxnO4sIGixE8feWucaczbx+C1/WpO+eQZvAW/MW+OPIhOKmQ4EAqiW BbQsqjm2c3Q0oegNzaHu2tse4I9JxnLMs3ga1s5XN95SFP+1SC4pEOVp5NqVSXGg CZc7n8Zk4i9Ad+CLIeKU6NKcHg== -----END CERTIFICATE-----Generated at Wed Jun 24 11:19:59 2026 by rpki-client