$ rpki-client -vvf rpki.apnic.net/member_repository/A9141B4C/A0B579B207E211F18C562569213D8C67/-7tvOPZwPQLXJu3kYjmzvtih8eQ.mft File: -7tvOPZwPQLXJu3kYjmzvtih8eQ.mft (raw, json) Hash identifier: VqpU3xbknzleCzXip19ReSERCr2LV8pBxY7YuseTgJs= Subject key identifier: 5F:A1:AB:11:D3:65:3F:A9:D3:0A:C3:3D:A6:3F:5B:3B:CA:0D:34:25 Authority key identifier: FB:BB:6F:38:F6:70:3D:02:D7:26:ED:E4:62:39:B3:BE:D8:A1:F1:E4 Certificate issuer: /CN=A9141B4C/serialNumber=FBBB6F38F6703D02D726EDE46239B3BED8A1F1E4 Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-7tvOPZwPQLXJu3kYjmzvtih8eQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141B4C/A0B579B207E211F18C562569213D8C67/-7tvOPZwPQLXJu3kYjmzvtih8eQ.mft Manifest number: 3F Signing time: Mon 01 Jun 2026 09:21:21 +0000 Manifest this update: Mon 01 Jun 2026 09:21:21 +0000 Manifest next update: Mon 08 Jun 2026 09:21:21 +0000 Files and hashes: 1: -7tvOPZwPQLXJu3kYjmzvtih8eQ.crl (hash: FiAMQc777BhQs211+G9fGbd33VsvWE257wM/wr195+E=) 2: A8CF90D807E711F1BD5B02F0213D8C67.roa (hash: hV/y2S97hrz2Q67W/IE/R1j506bwev+zG5Z7LB9xvfE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141B4C/A0B579B207E211F18C562569213D8C67/-7tvOPZwPQLXJu3kYjmzvtih8eQ.crl rsync://rpki.apnic.net/member_repository/A9141B4C/A0B579B207E211F18C562569213D8C67/-7tvOPZwPQLXJu3kYjmzvtih8eQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-7tvOPZwPQLXJu3kYjmzvtih8eQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 09:21:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141B4C, serialNumber=FBBB6F38F6703D02D726EDE46239B3BED8A1F1E4 Validity Not Before: Jun 1 09:21:21 2026 GMT Not After : Jun 8 09:21:21 2026 GMT Subject: CN=6a1d4f11-720f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c2:b2:33:8c:4f:66:19:f9:d0:57:80:05:aa: 8e:5b:f8:ab:57:07:40:aa:3c:04:32:96:5b:a7:ae: 40:34:6a:81:f8:46:82:b7:e6:99:ff:c4:f7:60:96: ff:a5:c5:dd:f8:70:b6:25:f8:be:0e:e0:27:00:61: fe:13:61:8b:b4:f1:61:fa:44:e0:5d:47:92:fb:c8: e0:7d:db:32:7a:b2:a4:04:f6:fe:9a:6c:03:da:f9: 63:24:08:1f:c1:4e:ce:46:cc:d5:f9:6a:f2:ec:41: 7d:1e:cc:bc:3d:be:a2:ec:46:66:4e:a8:90:f7:53: 0f:6a:3f:de:73:b6:c5:48:9e:58:3c:ab:0c:56:2a: 8d:ff:e0:ea:13:e7:48:01:e0:4c:50:29:56:44:19: 2d:1d:31:14:48:11:8a:ec:f0:77:05:0d:3e:7a:06: 4e:97:66:ae:c7:a8:88:a7:68:fd:4e:a9:78:8b:68: e1:9e:80:4c:07:cc:3f:57:50:30:5d:c8:19:9f:78: 1a:2c:3b:05:77:da:9d:14:76:20:57:59:fa:57:df: 50:c0:8c:5f:d1:b2:a0:f6:a9:bb:5f:df:11:03:e2: 06:b6:6b:65:4f:50:1e:8d:eb:f3:fc:1a:5c:a4:9b: 10:8a:33:d4:6b:63:45:5e:a8:bd:85:3c:88:0b:e4: 9e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:A1:AB:11:D3:65:3F:A9:D3:0A:C3:3D:A6:3F:5B:3B:CA:0D:34:25 X509v3 Authority Key Identifier: keyid:FB:BB:6F:38:F6:70:3D:02:D7:26:ED:E4:62:39:B3:BE:D8:A1:F1:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141B4C/A0B579B207E211F18C562569213D8C67/-7tvOPZwPQLXJu3kYjmzvtih8eQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-7tvOPZwPQLXJu3kYjmzvtih8eQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141B4C/A0B579B207E211F18C562569213D8C67/-7tvOPZwPQLXJu3kYjmzvtih8eQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:0c:c5:b4:b8:94:6d:a6:ca:4c:66:93:1d:58:4d:e2:46:00: 4b:58:0b:bb:d9:67:8d:93:4d:36:83:9b:6a:bb:a2:e1:c4:04: f0:e9:8f:19:0e:9b:79:eb:b1:00:6e:12:6d:47:32:99:53:32: 45:e8:87:30:35:71:2b:88:87:c4:c6:c4:b9:9e:b7:f6:c0:ce: a6:30:fc:ab:15:b9:96:ab:d2:a7:1a:9c:39:aa:2f:f1:50:af: dd:c6:20:78:db:d7:9c:44:db:26:20:b8:e5:48:3f:2a:11:f5: 12:e5:76:b5:03:77:9d:26:18:e6:05:17:bf:99:e7:96:99:3d: 8c:f8:f3:b2:7e:b3:9a:c1:50:8a:58:06:ee:af:13:a6:df:bd: 63:af:c3:96:c4:59:bd:bb:f2:8c:e9:ad:c4:59:51:77:8a:c0: cb:dd:41:e1:ad:60:8a:89:49:4c:b8:84:a5:af:17:4b:c9:ef: c6:09:27:e0:2b:55:ed:e0:b3:9f:d6:21:22:71:7a:58:19:c0: 16:ed:a6:f0:60:18:3a:ce:84:fa:34:79:c9:15:e8:d3:81:9d: 62:e7:31:1f:a2:65:1d:45:33:4a:73:11:b1:f1:c8:a9:3f:c4: a1:d8:fc:cb:1f:8b:68:92:8b:35:2b:b6:9a:99:68:1c:a1:45: 8b:65:33:27 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MUI0QzExMC8GA1UEBRMoRkJCQjZGMzhGNjcwM0QwMkQ3MjZFREU0NjIzOUIzQkVE OEExRjFFNDAeFw0yNjA2MDEwOTIxMjFaFw0yNjA2MDgwOTIxMjFaMBgxFjAUBgNV BAMTDTZhMWQ0ZjExLTcyMGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzwrIzjE9mGfnQV4AFqo5b+KtXB0CqPAQyllunrkA0aoH4RoK35pn/xPdglv+l xd34cLYl+L4O4CcAYf4TYYu08WH6ROBdR5L7yOB92zJ6sqQE9v6abAPa+WMkCB/B Ts5GzNX5avLsQX0ezLw9vqLsRmZOqJD3Uw9qP95ztsVInlg8qwxWKo3/4OoT50gB 4ExQKVZEGS0dMRRIEYrs8HcFDT56Bk6XZq7HqIinaP1OqXiLaOGegEwHzD9XUDBd yBmfeBosOwV32p0UdiBXWfpX31DAjF/RsqD2qbtf3xED4ga2a2VPUB6N6/P8Glyk mxCKM9RrY0VeqL2FPIgL5J5XAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUX6GrEdNl P6nTCsM9pj9bO8oNNCUwHwYDVR0jBBgwFoAU+7tvOPZwPQLXJu3kYjmzvtih8eQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxQjRDL0EwQjU3OUIyMDdF MjExRjE4QzU2MjU2OTIxM0Q4QzY3Ly03dHZPUFp3UFFMWEp1M2tZam16dnRpaDhl US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvLTd0dk9QWndQUUxYSnUza1lqbXp2dGloOGVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQx QjRDL0EwQjU3OUIyMDdFMjExRjE4QzU2MjU2OTIxM0Q4QzY3Ly03dHZPUFp3UFFM WEp1M2tZam16dnRpaDhlUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAoDMW0uJRtpspMZpMdWE3iRgBLWAu72WeNk002g5tqu6LhxATw6Y8ZDpt567EA bhJtRzKZUzJF6IcwNXEriIfExsS5nrf2wM6mMPyrFbmWq9KnGpw5qi/xUK/dxiB4 29ecRNsmILjlSD8qEfUS5Xa1A3edJhjmBRe/meeWmT2M+POyfrOawVCKWAburxOm 371jr8OWxFm9u/KM6a3EWVF3isDL3UHhrWCKiUlMuISlrxdLye/GCSfgK1Xt4LOf 1iEicXpYGcAW7abwYBg6zoT6NHnJFejTgZ1i5zEfomUdRTNKcxGx8cipP8Sh2PzL H4tokos1K7aamWgcoUWLZTMn -----END CERTIFICATE-----Generated at Tue Jun 2 21:20:00 2026 by rpki-client