$ rpki-client -vvf rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.mft File: X2mHOU7ukmatexkjRBv29RNP-VA.mft (raw, json) Hash identifier: 58dVDCYla9sbPc2wzSzy8ScvuT2XalIptA1/rGbshOw= Subject key identifier: 00:56:F1:46:6E:0E:DE:90:30:50:BB:BA:04:43:C4:06:7F:0F:24:4C Authority key identifier: 5F:69:87:39:4E:EE:92:66:AD:7B:19:23:44:1B:F6:F5:13:4F:F9:50 Certificate issuer: /CN=A9147241/serialNumber=5F6987394EEE9266AD7B1923441BF6F5134FF950 Certificate serial: 08B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mHOU7ukmatexkjRBv29RNP-VA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.mft Manifest number: 08A7 Signing time: Thu 04 Jun 2026 20:35:09 +0000 Manifest this update: Thu 04 Jun 2026 20:35:08 +0000 Manifest next update: Thu 11 Jun 2026 20:35:08 +0000 Files and hashes: 1: X2mHOU7ukmatexkjRBv29RNP-VA.crl (hash: ymGc6ShXXkrMhRMqYI/ElujMwSWNVVb79xs8ndjH2P4=) 2: F69648C2ECF211EABBFDDD24C4F9AE02.roa (hash: cf4yHcoutqovI1dQvoBzonoaRmnFgyfFyjHSp2dFK4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.crl rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mHOU7ukmatexkjRBv29RNP-VA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 20:35:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2226 (0x8b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147241, serialNumber=5F6987394EEE9266AD7B1923441BF6F5134FF950 Validity Not Before: Jun 4 20:35:08 2026 GMT Not After : Jun 11 20:35:08 2026 GMT Subject: CN=6a21e17c-2eed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:85:de:58:9a:f1:30:32:24:63:f9:bd:88:28: 17:88:01:2f:5c:39:a6:05:cf:ea:00:d8:6c:24:93: 8a:90:bc:d1:23:2e:a5:6d:a3:3d:fe:b2:62:54:3c: b4:01:ff:7e:d9:e7:f3:7a:ab:f5:d2:98:dc:60:bf: 9e:5e:33:a6:fc:a8:55:0c:be:31:d1:d9:eb:f6:49: 23:a2:ac:e1:d5:71:85:82:71:8a:a6:42:f6:cb:9f: 39:03:3c:0e:01:a2:85:b7:3b:be:ed:85:b2:a8:46: 1f:66:3b:b4:46:aa:84:76:2b:61:51:9f:67:64:25: 9d:47:4d:cd:95:9a:18:2e:b5:5a:c9:cf:bb:f1:7c: 23:a6:07:f7:42:48:94:29:5e:d0:1e:1b:08:83:9e: c8:9a:61:f7:ac:fe:8d:c6:e8:07:c3:0d:07:35:73: f0:ef:4c:7f:6d:25:19:be:c2:13:aa:3f:ca:d3:c9: 35:bd:c4:3c:ad:94:56:8b:47:fa:bc:80:21:37:e3: c5:a1:15:0c:4c:3d:02:87:1e:99:7c:53:f2:78:8c: d6:bd:ce:2e:cb:cf:1c:dc:eb:bd:7a:cb:76:d8:5e: c8:d3:19:28:26:3c:22:61:67:5b:71:3e:47:14:e3: bb:6f:cb:b2:43:01:cf:e2:7e:d4:10:8c:18:c0:75: 1e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:56:F1:46:6E:0E:DE:90:30:50:BB:BA:04:43:C4:06:7F:0F:24:4C X509v3 Authority Key Identifier: keyid:5F:69:87:39:4E:EE:92:66:AD:7B:19:23:44:1B:F6:F5:13:4F:F9:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mHOU7ukmatexkjRBv29RNP-VA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:fa:f0:cb:08:6e:43:c3:6a:f2:b0:e1:66:5a:5e:6f:a4:e7: 14:d1:31:eb:e5:33:cb:07:e5:31:77:dc:ec:b5:90:34:f0:23: 39:a5:1d:ca:8d:df:34:87:3b:a9:42:3e:0e:26:76:4b:2f:07: 46:11:4a:6d:f4:01:5c:04:0f:c9:e8:1d:cd:67:5e:29:11:6b: d7:e3:29:fb:28:fb:97:ac:9b:b4:a4:9b:90:66:ab:1c:f7:bc: 73:02:bc:da:ce:c2:2c:9c:52:0f:59:77:72:0b:82:1c:33:ee: 5e:b7:4d:93:9f:46:2f:72:5e:6a:01:77:0a:9d:96:e1:dd:a5: ca:44:be:e6:81:39:9e:29:21:db:b9:cc:ba:6f:13:c8:dc:da: 0e:94:80:95:7d:62:f5:e1:b7:92:f4:e1:51:9f:99:5d:e4:87: 68:89:a5:79:8e:7a:1a:6d:3a:8f:94:20:6b:79:dc:8a:5e:d2: a4:00:ff:86:c7:d4:8a:6d:e2:ad:b7:5e:08:8e:81:ab:46:3b: 99:87:4f:cb:52:4c:06:5f:39:b0:bc:4a:6b:ad:b2:e1:cf:e3: db:2b:b9:84:55:92:7d:a6:d7:5f:cf:e8:50:e1:61:f6:a6:1e: c3:be:2e:8f:f7:56:d3:68:0c:50:f3:e0:f8:21:0d:ff:ee:64: bc:9d:13:48 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDcyNDExMTAvBgNVBAUTKDVGNjk4NzM5NEVFRTkyNjZBRDdCMTkyMzQ0MUJGNkY1 MTM0RkY5NTAwHhcNMjYwNjA0MjAzNTA4WhcNMjYwNjExMjAzNTA4WjAYMRYwFAYD VQQDEw02YTIxZTE3Yy0yZWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA14XeWJrxMDIkY/m9iCgXiAEvXDmmBc/qANhsJJOKkLzRIy6lbaM9/rJiVDy0 Af9+2efzeqv10pjcYL+eXjOm/KhVDL4x0dnr9kkjoqzh1XGFgnGKpkL2y585AzwO AaKFtzu+7YWyqEYfZju0RqqEdithUZ9nZCWdR03NlZoYLrVayc+78Xwjpgf3QkiU KV7QHhsIg57ImmH3rP6NxugHww0HNXPw70x/bSUZvsITqj/K08k1vcQ8rZRWi0f6 vIAhN+PFoRUMTD0Chx6ZfFPyeIzWvc4uy88c3Ou9est22F7I0xkoJjwiYWdbcT5H FOO7b8uyQwHP4n7UEIwYwHUebwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFABW8UZu Dt6QMFC7ugRDxAZ/DyRMMB8GA1UdIwQYMBaAFF9phzlO7pJmrXsZI0Qb9vUTT/lQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzI0MS82MkJCNUM3NEVD RjExMUVBQTM5RDU3MjJDNEY5QUUwMi9YMm1IT1U3dWttYXRleGtqUkJ2MjlSTlAt VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gybUhPVTd1a21hdGV4a2pSQnYyOVJOUC1WQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzI0MS82MkJCNUM3NEVDRjExMUVBQTM5RDU3MjJDNEY5QUUwMi9YMm1IT1U3dWtt YXRleGtqUkJ2MjlSTlAtVkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJPrwywhuQ8Nq8rDhZlpeb6TnFNEx6+UzywflMXfc7LWQNPAjOaUdyo3fNIc7 qUI+DiZ2Sy8HRhFKbfQBXAQPyegdzWdeKRFr1+Mp+yj7l6ybtKSbkGarHPe8cwK8 2s7CLJxSD1l3cguCHDPuXrdNk59GL3JeagF3Cp2W4d2lykS+5oE5nikh27nMum8T yNzaDpSAlX1i9eG3kvThUZ+ZXeSHaImleY56Gm06j5Qga3ncil7SpAD/hsfUim3i rbdeCI6Bq0Y7mYdPy1JMBl85sLxKa62y4c/j2yu5hFWSfabXX8/oUOFh9qYew74u j/dW02gMUPPg+CEN/+5kvJ0TSA== -----END CERTIFICATE-----Generated at Sat Jun 6 13:21:25 2026 by rpki-client