$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft File: 788TGtZIDR3QTx1EduNZVFL_RBw.mft (raw, json) Hash identifier: iAYMIkN1CxOKgXw/WMk5/AcR+W9o7V6NLN3GzOlvCjQ= Subject key identifier: F9:11:D8:6F:F8:D7:24:02:F4:CA:E5:F1:CF:80:AE:54:75:B0:A6:46 Authority key identifier: EF:CF:13:1A:D6:48:0D:1D:D0:4F:1D:44:76:E3:59:54:52:FF:44:1C Certificate issuer: /CN=A9140D20/serialNumber=EFCF131AD6480D1DD04F1D4476E3595452FF441C Certificate serial: 08ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft Manifest number: 08DE Signing time: Mon 22 Jun 2026 20:25:24 +0000 Manifest this update: Mon 22 Jun 2026 20:25:23 +0000 Manifest next update: Mon 29 Jun 2026 20:25:23 +0000 Files and hashes: 1: 788TGtZIDR3QTx1EduNZVFL_RBw.crl (hash: Z8vDCS+XwhbYTcgBcnwtSsSzZBMAg+mnwYLjp9Fp2O0=) 2: 01E652108F4F11EEA2E9CA7DC4F9AE02.roa (hash: yZtWfMF7pmNFTR+kKQnF17mRloCfv5aI0+tF3Sx3gqw=) 3: 5E4A01CA941111EE84D37717C4F9AE02.roa (hash: zxnU04Q4bb1lJGkT9VOzuX1RdTtK4DGbDTsvDe9EOa8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.crl rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Jun 2026 20:25:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2285 (0x8ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140D20, serialNumber=EFCF131AD6480D1DD04F1D4476E3595452FF441C Validity Not Before: Jun 22 20:25:23 2026 GMT Not After : Jun 29 20:25:23 2026 GMT Subject: CN=6a399a33-854c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:49:b3:c9:a8:98:1a:9b:c9:41:07:4f:6c:13: 96:95:60:d0:db:79:3d:0c:07:2f:2c:38:93:64:be: 76:fa:f6:c7:6e:77:73:8c:fb:7b:be:95:72:34:db: 55:7b:39:26:5e:3b:f9:e2:03:02:41:5c:5c:83:b7: 20:0c:4a:75:d1:16:fc:20:b3:1f:d3:6b:0a:08:fc: ce:24:24:e4:f4:50:bc:c1:11:ac:1f:1b:f8:fd:af: 99:88:d8:a3:40:9b:e1:f9:41:6b:94:fa:a5:4a:9c: 2f:eb:57:3d:9b:15:7a:63:8b:dd:97:5d:51:ad:01: ba:6e:d6:dc:ff:7d:94:f5:2a:05:ba:cc:fe:d4:0e: 88:4e:33:19:81:a8:18:88:89:d3:d4:b4:b2:41:3d: 63:ab:9f:4d:96:15:fa:60:71:e2:ec:f7:25:85:e3: 65:97:14:ce:eb:51:3c:41:7c:44:68:00:51:a4:9b: 8d:2e:d5:99:d9:07:aa:f4:3d:82:d0:47:79:08:8d: 72:a2:cf:2e:8a:e7:d3:07:31:af:b7:02:67:70:57: 9c:fd:62:3e:31:1c:22:b9:44:b8:51:72:d5:ae:d8: 8f:38:61:ba:8b:e9:23:e9:5b:b3:57:ac:4a:61:36: 82:c2:51:1c:da:5c:6c:c9:1e:24:33:de:8a:1a:3e: e7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:11:D8:6F:F8:D7:24:02:F4:CA:E5:F1:CF:80:AE:54:75:B0:A6:46 X509v3 Authority Key Identifier: keyid:EF:CF:13:1A:D6:48:0D:1D:D0:4F:1D:44:76:E3:59:54:52:FF:44:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:5d:49:30:5b:dd:75:81:8c:5c:e0:33:75:9f:06:cb:1b:2a: 10:26:17:f4:f4:01:ef:bb:c6:82:3f:82:b5:46:e8:70:dd:18: 52:2a:f0:23:8c:18:20:9d:00:03:79:e5:2d:03:b6:59:c7:bb: 7c:e6:14:e1:5a:d5:fa:b7:db:aa:83:a1:a2:b5:d4:bf:d3:d3: 3c:f3:99:9e:8e:f1:18:4b:0c:09:57:c3:e7:ac:63:90:d8:df: 1b:ab:38:a3:ec:d5:b1:25:6b:48:e0:21:05:0e:f3:4a:32:9a: 68:8c:02:c1:52:a8:d0:6e:58:0b:7b:1f:82:91:2e:00:dc:c4: 4e:ed:2a:4b:45:4a:fe:5d:df:36:ef:e7:dd:6f:26:e0:a3:f7: 7c:c2:7c:fb:f3:a4:68:b4:54:70:73:53:87:c6:3b:ef:52:bd: 45:e9:38:e4:d3:6c:06:5f:95:f3:08:23:92:a2:54:58:07:07: d3:e0:9a:73:c7:c0:fa:47:55:74:85:8b:38:eb:02:4d:6a:1a: 7f:11:61:9c:a7:0b:c2:98:c4:c4:8d:7d:f8:00:ce:76:66:23: cc:62:38:5e:17:28:7c:28:c8:b8:bd:52:52:91:c6:b0:07:06: b3:d3:1e:ec:b3:a9:62:01:6d:c6:15:fd:2a:f1:ce:46:c6:d3: 6f:9c:0e:63 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBEMjAxMTAvBgNVBAUTKEVGQ0YxMzFBRDY0ODBEMUREMDRGMUQ0NDc2RTM1OTU0 NTJGRjQ0MUMwHhcNMjYwNjIyMjAyNTIzWhcNMjYwNjI5MjAyNTIzWjAYMRYwFAYD VQQDEw02YTM5OWEzMy04NTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8UmzyaiYGpvJQQdPbBOWlWDQ23k9DAcvLDiTZL52+vbHbndzjPt7vpVyNNtV ezkmXjv54gMCQVxcg7cgDEp10Rb8ILMf02sKCPzOJCTk9FC8wRGsHxv4/a+ZiNij QJvh+UFrlPqlSpwv61c9mxV6Y4vdl11RrQG6btbc/32U9SoFusz+1A6ITjMZgagY iInT1LSyQT1jq59NlhX6YHHi7PclheNllxTO61E8QXxEaABRpJuNLtWZ2Qeq9D2C 0Ed5CI1yos8uiufTBzGvtwJncFec/WI+MRwiuUS4UXLVrtiPOGG6i+kj6VuzV6xK YTaCwlEc2lxsyR4kM96KGj7nZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPkR2G/4 1yQC9Mrl8c+ArlR1sKZGMB8GA1UdIwQYMBaAFO/PExrWSA0d0E8dRHbjWVRS/0Qc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEQyMC9EOTQzQTQ1QURC REExMUVBQTJDQzJCNDFDNEY5QUUwMi83ODhUR3RaSURSM1FUeDFFZHVOWlZGTF9S QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc4OFRHdFpJRFIzUVR4MUVkdU5aVkZMX1JCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEQyMC9EOTQzQTQ1QURCREExMUVBQTJDQzJCNDFDNEY5QUUwMi83ODhUR3RaSURS M1FUeDFFZHVOWlZGTF9SQncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUl1JMFvddYGMXOAzdZ8GyxsqECYX9PQB77vGgj+CtUbocN0YUirwI4wYIJ0A A3nlLQO2Wce7fOYU4VrV+rfbqoOhorXUv9PTPPOZno7xGEsMCVfD56xjkNjfG6s4 o+zVsSVrSOAhBQ7zSjKaaIwCwVKo0G5YC3sfgpEuANzETu0qS0VK/l3fNu/n3W8m 4KP3fMJ8+/OkaLRUcHNTh8Y771K9Rek45NNsBl+V8wgjkqJUWAcH0+Cac8fA+kdV dIWLOOsCTWoafxFhnKcLwpjExI19+ADOdmYjzGI4XhcofCjIuL1SUpHGsAcGs9Me 7LOpYgFtxhX9KvHORsbTb5wOYw== -----END CERTIFICATE-----Generated at Wed Jun 24 11:26:13 2026 by rpki-client