$ rpki-client -vvf rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft File: E4zRCkd43g41kR6cnJRPSyHE2wk.mft (raw, json) Hash identifier: bXMwlt9gWsRgjlnLCA+cFGWSMipqhWhcPj4SajAEIlk= Subject key identifier: 3B:6B:8B:A9:AE:AC:DE:45:0E:1A:43:34:85:A5:AF:9B:F2:89:27:2D Authority key identifier: 13:8C:D1:0A:47:78:DE:0E:35:91:1E:9C:9C:94:4F:4B:21:C4:DB:09 Certificate issuer: /CN=A9130F9C/serialNumber=138CD10A4778DE0E35911E9C9C944F4B21C4DB09 Certificate serial: 0D84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft Manifest number: 0D5F Signing time: Wed 10 Jun 2026 18:03:38 +0000 Manifest this update: Wed 10 Jun 2026 18:03:38 +0000 Manifest next update: Wed 17 Jun 2026 18:03:38 +0000 Files and hashes: 1: E4zRCkd43g41kR6cnJRPSyHE2wk.crl (hash: H9Tf5m3ABGSftHVgt3Ami2ka2w+JbVoE4BztDHuJEA0=) 2: CA0AB7D0539811F19275B1E8AE833773.roa (hash: RJS1Q5SyoLw5kpGy0JR6IuXz+7wLlZLltCqEB6vPsmA=) 3: 41CBB5B87F7611ECAD50FA4EC4F9AE02.roa (hash: 8NBaU/JePJQ6/F/3cS0V0StpNvCdrumDQrFWu6BjRDk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.crl rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 18:03:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3460 (0xd84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130F9C, serialNumber=138CD10A4778DE0E35911E9C9C944F4B21C4DB09 Validity Not Before: Jun 10 18:03:38 2026 GMT Not After : Jun 17 18:03:38 2026 GMT Subject: CN=6a29a6fa-c666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:00:20:e1:dd:97:fb:d7:6b:6e:44:10:3a:89: 6e:94:c9:ea:34:bd:3a:58:72:e0:18:ae:bb:dc:9a: 43:a6:5b:d9:f6:5b:4d:af:85:6f:5c:da:2f:47:1f: ab:3d:f6:c8:f6:ef:30:97:20:b4:92:83:77:42:62: 4b:3a:4a:e5:7a:11:6e:55:79:8b:db:1c:f5:e0:f2: 67:52:65:8f:d0:24:10:f0:84:61:da:01:75:22:5d: c2:b3:33:0b:8e:8f:05:45:fd:59:c6:54:fd:1d:84: de:c7:81:9f:b3:57:6c:2c:71:82:19:25:f8:84:5d: 1e:2a:0c:1e:f9:a2:57:eb:0f:9b:c8:e9:de:e6:be: 4f:61:27:6f:96:2f:4b:e1:c0:46:54:48:6c:fe:a1: d8:bd:e8:32:29:aa:e7:91:3c:6b:ea:74:bb:7e:a7: 63:27:70:5a:f2:a5:87:82:a0:b3:40:ba:b7:cb:e3: 19:ef:56:2e:32:02:3f:9f:f4:a8:d8:28:4b:63:25: 7d:32:fa:81:8e:74:75:a5:a7:f2:d8:5a:d6:1b:b5: 24:a4:bb:b7:14:bb:1e:c3:ad:aa:55:d6:26:77:a2: c1:d4:7d:b4:43:7f:03:c2:93:1e:ac:85:70:7e:36: 97:bc:d0:ba:5e:ba:53:48:be:a5:23:38:eb:29:64: 83:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:6B:8B:A9:AE:AC:DE:45:0E:1A:43:34:85:A5:AF:9B:F2:89:27:2D X509v3 Authority Key Identifier: keyid:13:8C:D1:0A:47:78:DE:0E:35:91:1E:9C:9C:94:4F:4B:21:C4:DB:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:3b:a8:36:30:d7:02:62:96:99:19:61:41:f2:eb:20:76:44: 74:77:25:df:39:33:b5:63:5b:3f:06:6f:d9:9b:3d:1d:d3:d7: 7a:7c:e3:de:e3:14:63:95:95:56:22:23:c2:78:a8:68:af:82: 19:0b:6b:4a:72:7e:9c:7b:c5:ee:bd:8e:09:f8:78:a8:07:d9: 25:42:c1:ba:3b:2a:e1:95:0d:66:81:71:28:cc:19:e0:90:e6: 1b:a4:e7:31:0b:21:e1:8b:0d:fd:7c:0c:72:6b:c9:90:58:ad: 9e:0c:e4:ca:64:2d:ef:da:e6:fd:35:0a:0f:58:43:44:94:30: 71:eb:de:06:fb:39:ef:98:99:51:82:f7:1d:62:2c:2b:b1:10: af:09:b7:0f:5c:43:4c:ae:54:b3:ad:67:8b:f7:40:0f:0e:7a: 78:8b:e3:83:fa:4c:ab:59:f7:09:82:94:b0:ff:29:f3:45:a8: 07:9c:10:cc:01:44:cd:9b:2d:3f:04:99:6a:70:df:80:9f:40: 04:03:6d:60:8c:28:a6:7f:bb:7c:73:c4:15:fa:0c:3a:a6:12: d8:71:6f:de:70:81:fd:f3:45:e4:85:d8:a8:5e:cf:b8:94:51: f2:15:c5:23:66:0d:a7:dd:ab:97:99:6b:9f:3e:e5:9c:fc:61: b7:60:b5:d7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBGOUMxMTAvBgNVBAUTKDEzOENEMTBBNDc3OERFMEUzNTkxMUU5QzlDOTQ0RjRC MjFDNERCMDkwHhcNMjYwNjEwMTgwMzM4WhcNMjYwNjE3MTgwMzM4WjAYMRYwFAYD VQQDEw02YTI5YTZmYS1jNjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjwAg4d2X+9drbkQQOolulMnqNL06WHLgGK673JpDplvZ9ltNr4VvXNovRx+r PfbI9u8wlyC0koN3QmJLOkrlehFuVXmL2xz14PJnUmWP0CQQ8IRh2gF1Il3CszML jo8FRf1ZxlT9HYTex4Gfs1dsLHGCGSX4hF0eKgwe+aJX6w+byOne5r5PYSdvli9L 4cBGVEhs/qHYvegyKarnkTxr6nS7fqdjJ3Ba8qWHgqCzQLq3y+MZ71YuMgI/n/So 2ChLYyV9MvqBjnR1pafy2FrWG7UkpLu3FLsew62qVdYmd6LB1H20Q38DwpMerIVw fjaXvNC6XrpTSL6lIzjrKWSD2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDtri6mu rN5FDhpDNIWlr5vyiSctMB8GA1UdIwQYMBaAFBOM0QpHeN4ONZEenJyUT0shxNsJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEY5Qy8yOUNCMDIwRUZB MEIxMUU5OTc4QjBBMzJDNEY5QUUwMi9FNHpSQ2tkNDNnNDFrUjZjbkpSUFN5SEUy d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U0elJDa2Q0M2c0MWtSNmNuSlJQU3lIRTJ3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEY5Qy8yOUNCMDIwRUZBMEIxMUU5OTc4QjBBMzJDNEY5QUUwMi9FNHpSQ2tkNDNn NDFrUjZjbkpSUFN5SEUyd2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvjuoNjDXAmKWmRlhQfLrIHZEdHcl3zkztWNbPwZv2Zs9HdPXenzj3uMUY5WV ViIjwnioaK+CGQtrSnJ+nHvF7r2OCfh4qAfZJULBujsq4ZUNZoFxKMwZ4JDmG6Tn MQsh4YsN/XwMcmvJkFitngzkymQt79rm/TUKD1hDRJQwceveBvs575iZUYL3HWIs K7EQrwm3D1xDTK5Us61ni/dADw56eIvjg/pMq1n3CYKUsP8p80WoB5wQzAFEzZst PwSZanDfgJ9ABANtYIwopn+7fHPEFfoMOqYS2HFv3nCB/fNF5IXYqF7PuJRR8hXF I2YNp92rl5lrnz7lnPxht2C11w== -----END CERTIFICATE-----Generated at Fri Jun 12 19:12:35 2026 by rpki-client