$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft File: UylwC03drZ4_zcMnP00Y0-MEXcA.mft (raw, json) Hash identifier: L1Wa4wTesoXSSY4wNO7u8g97UJFz62e+hBUCxqL5qK8= Subject key identifier: 39:8F:50:E2:3B:71:5D:1A:38:9E:8B:E9:00:A6:E3:FC:0A:B0:5C:1A Authority key identifier: 53:29:70:0B:4D:DD:AD:9E:3F:CD:C3:27:3F:4D:18:D3:E3:04:5D:C0 Certificate issuer: /CN=A9143B09/serialNumber=5329700B4DDDAD9E3FCDC3273F4D18D3E3045DC0 Certificate serial: 099E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft Manifest number: 1AB2 Signing time: Mon 22 Jun 2026 17:12:51 +0000 Manifest this update: Mon 22 Jun 2026 17:12:51 +0000 Manifest next update: Mon 29 Jun 2026 17:12:51 +0000 Files and hashes: 1: UylwC03drZ4_zcMnP00Y0-MEXcA.crl (hash: Sj7lbCddl0bW2RYr0CxE/2PC7vRISR1s26E8fw0cEVQ=) 2: D9B56C8A7AB211EB99DAFE83C4F9AE02.roa (hash: leVQ3s1GExMxigU8EEYZc0TFMeUDxFJChsNZNDW6QyI=) 3: 31414558B0D511EFB17B942FC4F9AE02.roa (hash: TPRC+7x5lgG5CgncwF7KDW3EDTJUB3LlrULYz9MveMM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.crl rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Jun 2026 17:12:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2462 (0x99e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143B09, serialNumber=5329700B4DDDAD9E3FCDC3273F4D18D3E3045DC0 Validity Not Before: Jun 22 17:12:51 2026 GMT Not After : Jun 29 17:12:51 2026 GMT Subject: CN=6a396d13-50e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:60:9d:39:d9:3e:62:5b:f6:bd:42:02:b3:ef: 14:e6:e9:b3:5f:a4:94:57:3d:04:33:6a:97:cb:e3: aa:9e:ec:ff:41:d3:72:b9:8b:c0:0c:ec:8a:59:65: 2a:9b:45:8b:41:cc:38:37:f3:f4:38:20:84:70:1b: 71:cc:09:56:93:56:40:70:9e:4c:97:1b:fe:32:78: 35:20:0e:72:3c:7b:d2:68:98:bd:ee:73:d6:9d:f6: 18:a1:8a:f0:ad:4c:d2:3c:63:73:cc:a8:c7:5a:35: d8:39:62:93:6d:9c:d0:47:fc:45:7b:20:a0:d7:6c: 35:3b:46:73:8c:12:55:07:ce:5b:13:ab:02:36:84: db:d7:07:2f:31:d3:81:23:5f:1e:49:c5:8b:eb:c6: c2:ce:55:3f:dd:c9:cb:cc:06:11:98:4e:31:c6:e9: 0f:4b:a0:ca:9a:8f:b9:a9:fb:40:60:95:2f:10:a2: 73:3c:78:54:2b:15:9d:19:ce:57:c7:85:18:37:0f: 43:eb:e4:97:54:42:dd:c7:18:77:fc:c9:49:b5:38: b7:3b:77:6e:31:b5:61:95:71:40:55:f8:25:a8:e7: 5f:c8:ea:d4:12:9b:26:3c:11:9f:cf:03:12:57:7a: 2d:b2:d0:63:fe:29:1c:d9:66:6a:3c:de:21:fb:f6: da:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:8F:50:E2:3B:71:5D:1A:38:9E:8B:E9:00:A6:E3:FC:0A:B0:5C:1A X509v3 Authority Key Identifier: keyid:53:29:70:0B:4D:DD:AD:9E:3F:CD:C3:27:3F:4D:18:D3:E3:04:5D:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:9b:b9:b8:ef:95:79:c9:24:c2:ef:29:7a:b9:c3:48:af:4e: 46:13:e5:62:e0:c5:f0:a3:00:09:b3:90:09:d1:e9:f9:c1:47: 2a:b3:34:a8:35:f6:43:38:d6:f8:6f:5b:97:09:09:2d:2d:03: e1:1b:ce:8f:ef:09:ce:f8:78:1b:26:35:35:ae:cf:3d:a0:0a: 5a:00:ed:25:65:55:26:5e:2b:c6:32:b4:d6:76:ce:18:37:45: 9d:33:15:c2:45:39:2e:d4:ed:97:24:65:2e:81:ca:8b:f4:05: cd:da:a0:47:34:a7:96:9e:7b:9d:c1:f7:3f:15:67:1b:2d:ae: 66:21:09:f7:6a:fb:06:ec:92:6c:1a:b0:00:85:40:1d:f2:bd: c3:95:f0:80:c6:a3:74:06:d6:28:fd:99:06:23:af:f4:0d:6a: 0f:0e:8d:50:ca:2a:ce:9e:8c:95:27:30:7e:22:ca:1a:54:28: 22:56:d7:35:60:cd:b2:eb:70:49:05:f7:5f:27:38:dd:2d:08: 05:0e:7e:37:3d:d7:35:5e:b4:c5:8a:b1:9c:5e:c5:a0:dd:09: 37:d0:cc:db:b0:17:96:b0:8b:cb:4a:d5:18:30:50:a4:83:f8: 22:98:a5:10:41:d4:6f:6c:85:5c:d4:c5:fb:66:c9:d5:80:78: 82:d7:b8:53 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNCMDkxMTAvBgNVBAUTKDUzMjk3MDBCNEREREFEOUUzRkNEQzMyNzNGNEQxOEQz RTMwNDVEQzAwHhcNMjYwNjIyMTcxMjUxWhcNMjYwNjI5MTcxMjUxWjAYMRYwFAYD VQQDEw02YTM5NmQxMy01MGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlWCdOdk+Ylv2vUICs+8U5umzX6SUVz0EM2qXy+Oqnuz/QdNyuYvADOyKWWUq m0WLQcw4N/P0OCCEcBtxzAlWk1ZAcJ5Mlxv+Mng1IA5yPHvSaJi97nPWnfYYoYrw rUzSPGNzzKjHWjXYOWKTbZzQR/xFeyCg12w1O0ZzjBJVB85bE6sCNoTb1wcvMdOB I18eScWL68bCzlU/3cnLzAYRmE4xxukPS6DKmo+5qftAYJUvEKJzPHhUKxWdGc5X x4UYNw9D6+SXVELdxxh3/MlJtTi3O3duMbVhlXFAVfglqOdfyOrUEpsmPBGfzwMS V3otstBj/ikc2WZqPN4h+/baSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDmPUOI7 cV0aOJ6L6QCm4/wKsFwaMB8GA1UdIwQYMBaAFFMpcAtN3a2eP83DJz9NGNPjBF3A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0IwOS8zQjM2N0JDRTMz QjcxMUU5QUQwRjU4N0FDNEY5QUUwMi9VeWx3QzAzZHJaNF96Y01uUDAwWTAtTUVY Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V5bHdDMDNkclo0X3pjTW5QMDBZMC1NRVhjQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0IwOS8zQjM2N0JDRTMzQjcxMUU5QUQwRjU4N0FDNEY5QUUwMi9VeWx3QzAzZHJa NF96Y01uUDAwWTAtTUVYY0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMJu5uO+Veckkwu8pernDSK9ORhPlYuDF8KMACbOQCdHp+cFHKrM0qDX2QzjW +G9blwkJLS0D4RvOj+8Jzvh4GyY1Na7PPaAKWgDtJWVVJl4rxjK01nbOGDdFnTMV wkU5LtTtlyRlLoHKi/QFzdqgRzSnlp57ncH3PxVnGy2uZiEJ92r7BuySbBqwAIVA HfK9w5XwgMajdAbWKP2ZBiOv9A1qDw6NUMoqzp6MlScwfiLKGlQoIlbXNWDNsutw SQX3Xyc43S0IBQ5+Nz3XNV60xYqxnF7FoN0JN9DM27AXlrCLy0rVGDBQpIP4Ipil EEHUb2yFXNTF+2bJ1YB4gte4Uw== -----END CERTIFICATE-----Generated at Wed Jun 24 11:25:32 2026 by rpki-client