$ rpki-client -vvf rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft File: 09Fa7ppPiuXCgRCKfS062B1Oec0.mft (raw, json) Hash identifier: VgSmP2Px3uxgTMUDcJdQJSn+m/cYhSa33Po6GbXYHqA= Subject key identifier: 5A:E0:BB:E1:FA:2C:02:04:8B:77:E1:73:31:B9:87:8F:9D:1B:D8:04 Authority key identifier: D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD Certificate issuer: /CN=A91397C2/serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD Certificate serial: 08D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft Manifest number: 08A0 Signing time: Thu 04 Jun 2026 20:44:01 +0000 Manifest this update: Thu 04 Jun 2026 20:44:00 +0000 Manifest next update: Thu 11 Jun 2026 20:44:00 +0000 Files and hashes: 1: 09Fa7ppPiuXCgRCKfS062B1Oec0.crl (hash: Z+m2JCDrxZuoKjJOBHO0iAyvt3vKj7NItHFO6/KWCoA=) 2: 29BC840E002711EB8FA6A142C4F9AE02.roa (hash: 1hK6aCJ+7Fb1oUPOZ4u6IyJKzDYRKvTsmB4Y2o3Noe8=) 3: B7AD6F08264611F1A7E2573D9F833773.roa (hash: cAi1E/gIPdIvRZ5EylPtBXr5xfvPwzP6uzvwERgkasg=) 4: 7F9EB0A28CF111F09EC8727CC4F9AE02.roa (hash: gzcB5bzyDXKQ7TWulNDMH2WNKACJo+cBlc1OpEzaIqo=) 5: BE79CDCE16AF11F08B8C4061C4F9AE02.roa (hash: PXtviaHqQJLCMEu9tn+Fq2a2NfU37e2CJGxdPkOxh1g=) 6: 3AA556009A8411EFB791ED77C4F9AE02.roa (hash: 6t+wjHRQ/GqT5IcSFRj+6zc7NKRi89qTochP2LMsRS8=) 7: E4FA38362D2311F1A198B1F8B7833773.roa (hash: AxJKOqSnxksdZpHOPb0q92RjtR735qgr4EIIyE6SdIo=) 8: 0C64C6B2821011F0B329B866C4F9AE02.roa (hash: UuZBWjQy/vvCDj1GH11Ut9+9Pjsx/5KL/8Qu7tKsi7U=) 9: C3738F60A78511F0B1D3342CC4F9AE02.roa (hash: tB/DnIqV82CpIIhO+TP7hcH1C9TgViQTWGZ17z9LsKo=) 10: 931A1664264611F1BB7525369F833773.roa (hash: O+dFRmqz0HLQWE2NlORO6GptWeFGJW4FEbE2GeFkulo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.crl rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 20:43:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2265 (0x8d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91397C2, serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD Validity Not Before: Jun 4 20:44:00 2026 GMT Not After : Jun 11 20:44:00 2026 GMT Subject: CN=6a21e390-ca35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:96:45:4c:1c:48:20:72:53:b8:d9:16:36:66: 9f:bc:cc:3b:07:eb:5f:fc:8d:0b:54:07:b2:92:61: a0:ed:8b:0a:a5:82:d2:f9:d3:f9:36:fb:c7:5a:74: 12:04:1e:e4:a2:67:a3:67:a2:32:d6:9e:ca:d9:28: fc:ee:c0:85:2a:18:ad:61:86:3b:a6:26:a0:e8:6e: 3a:89:4f:04:28:f3:4c:9c:44:bf:46:fa:bf:0e:82: a4:93:d6:55:67:a4:10:ed:c9:40:2b:19:59:e0:cc: 06:61:86:78:38:4f:b8:d0:34:7b:ae:76:2d:b1:6d: f9:f7:69:a5:61:e1:0a:18:18:2e:fb:b4:18:d0:56: 44:3f:f1:7c:1d:e9:9c:2a:68:83:b6:a2:9c:ec:dd: d1:60:95:13:6a:79:f6:e3:ac:a4:49:68:34:63:7c: 97:28:fa:90:7e:67:1f:42:fe:38:9c:12:23:34:f6: 22:2d:b1:94:a2:0a:22:48:41:75:36:49:f0:53:40: 98:62:29:3f:96:5c:c0:b9:99:5a:5f:4a:d0:d2:86: a0:f3:ab:43:f3:30:1f:75:83:b2:c7:19:69:bc:1d: a1:f8:7c:d4:64:96:b7:e2:40:68:ff:d8:3d:05:f4: 59:5f:4e:11:81:f8:8b:15:86:10:95:8f:64:55:31: 67:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E0:BB:E1:FA:2C:02:04:8B:77:E1:73:31:B9:87:8F:9D:1B:D8:04 X509v3 Authority Key Identifier: keyid:D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:1e:ff:a2:bc:8f:b5:ec:b5:4f:4a:5f:b7:cb:ee:c1:c0:85: df:a4:8d:35:c3:a2:bf:e6:f8:aa:ce:56:6d:4a:8c:32:bb:19: 0e:03:c9:a1:a7:ab:82:3f:5f:f0:71:05:a9:32:b5:85:f5:da: b4:62:5d:f9:ff:9f:6f:b0:fe:72:d8:33:45:97:af:75:32:93: 29:48:73:f0:3b:4a:29:11:d0:0c:05:d4:29:d8:a7:83:dd:e7: 14:16:f0:60:27:16:d4:60:13:d4:a5:45:ef:7e:fd:04:71:95: 16:3a:bd:0e:a5:ac:8a:9d:09:4f:0b:80:ce:2e:e5:2a:bf:56: a1:45:19:63:04:12:23:b2:9a:fa:b5:12:5e:36:43:fc:d9:9b: 76:1c:90:c2:e0:43:ba:ff:fc:00:24:a3:fd:bf:aa:78:91:80: fd:38:dd:7f:bd:84:2e:81:21:31:ee:e4:a3:c1:d4:be:40:36: dc:04:b3:aa:a4:2a:ea:0a:55:64:6f:39:c9:e0:01:8d:c3:b8: 97:0c:f7:5c:29:e6:52:0f:e3:3f:ed:dc:0e:80:24:1b:91:6c: 2e:69:bb:75:72:1b:a4:9b:99:1d:6b:1d:1f:76:08:71:f6:7a: cf:5a:9b:15:fc:8a:3d:29:ec:6e:02:85:17:60:c6:e7:b4:07: 3a:60:ce:33 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCNkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk3QzIxMTAvBgNVBAUTKEQzRDE1QUVFOUE0RjhBRTVDMjgxMTA4QTdEMkQzQUQ4 MUQ0RTc5Q0QwHhcNMjYwNjA0MjA0NDAwWhcNMjYwNjExMjA0NDAwWjAYMRYwFAYD VQQDEw02YTIxZTM5MC1jYTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsJZFTBxIIHJTuNkWNmafvMw7B+tf/I0LVAeykmGg7YsKpYLS+dP5NvvHWnQS BB7komejZ6Iy1p7K2Sj87sCFKhitYYY7piag6G46iU8EKPNMnES/Rvq/DoKkk9ZV Z6QQ7clAKxlZ4MwGYYZ4OE+40DR7rnYtsW3592mlYeEKGBgu+7QY0FZEP/F8Hemc KmiDtqKc7N3RYJUTann246ykSWg0Y3yXKPqQfmcfQv44nBIjNPYiLbGUogoiSEF1 NknwU0CYYik/llzAuZlaX0rQ0oag86tD8zAfdYOyxxlpvB2h+HzUZJa34kBo/9g9 BfRZX04RgfiLFYYQlY9kVTFnuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFrgu+H6 LAIEi3fhczG5h4+dG9gEMB8GA1UdIwQYMBaAFNPRWu6aT4rlwoEQin0tOtgdTnnN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTdDMi80RTQyNkRFOEZC RUExMUVBOTQwQTFEMTlDNEY5QUUwMi8wOUZhN3BwUGl1WENnUkNLZlMwNjJCMU9l YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5RmE3cHBQaXVYQ2dSQ0tmUzA2MkIxT2VjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTdDMi80RTQyNkRFOEZCRUExMUVBOTQwQTFEMTlDNEY5QUUwMi8wOUZhN3BwUGl1 WENnUkNLZlMwNjJCMU9lYzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbx7/oryPtey1T0pft8vuwcCF36SNNcOiv+b4qs5WbUqMMrsZDgPJoaergj9f 8HEFqTK1hfXatGJd+f+fb7D+ctgzRZevdTKTKUhz8DtKKRHQDAXUKding93nFBbw YCcW1GAT1KVF7379BHGVFjq9DqWsip0JTwuAzi7lKr9WoUUZYwQSI7Ka+rUSXjZD /NmbdhyQwuBDuv/8ACSj/b+qeJGA/Tjdf72ELoEhMe7ko8HUvkA23ASzqqQq6gpV ZG85yeABjcO4lwz3XCnmUg/jP+3cDoAkG5FsLmm7dXIbpJuZHWsdH3YIcfZ6z1qb FfyKPSnsbgKFF2DG57QHOmDOMw== -----END CERTIFICATE-----Generated at Sat Jun 6 01:07:14 2026 by rpki-client