$ rpki-client -vvf rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.mft File: S9XCMYZ-JzlRVcAceEizsByGBvI.mft (raw, json) Hash identifier: ACdY214zmfTiggy9V8/Il+a9d2+KBjTnaP7LArUwxcM= Subject key identifier: 51:DE:13:D7:06:85:EA:66:7A:CC:F6:AE:C7:94:96:AB:F6:4B:F9:78 Authority key identifier: 4B:D5:C2:31:86:7E:27:39:51:55:C0:1C:78:48:B3:B0:1C:86:06:F2 Certificate issuer: /CN=A914BBE1/serialNumber=4BD5C231867E27395155C01C7848B3B01C8606F2 Certificate serial: 04A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9XCMYZ-JzlRVcAceEizsByGBvI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.mft Manifest number: 04A1 Signing time: Tue 23 Jun 2026 00:02:05 +0000 Manifest this update: Tue 23 Jun 2026 00:02:05 +0000 Manifest next update: Tue 30 Jun 2026 00:02:05 +0000 Files and hashes: 1: S9XCMYZ-JzlRVcAceEizsByGBvI.crl (hash: RTSG70TcDcOVwsOt5vYWrtBpkPGI4jvlErtjpfQlTa8=) 2: 24C0E7A684C911EC8CE1246BC4F9AE02.roa (hash: 8e29YKH9OC4F44m19NG7u8QMBSSDUe5BupTd2yMwpBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.crl rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9XCMYZ-JzlRVcAceEizsByGBvI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jun 2026 00:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1193 (0x4a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BBE1, serialNumber=4BD5C231867E27395155C01C7848B3B01C8606F2 Validity Not Before: Jun 23 00:02:05 2026 GMT Not After : Jun 30 00:02:05 2026 GMT Subject: CN=6a39ccfd-117f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fa:f1:1f:d7:35:f9:d9:1f:ef:e5:16:91:73: 67:b2:ac:e9:68:f5:ef:a5:38:4c:34:29:66:98:4c: 51:aa:03:43:6c:55:9c:90:2f:24:14:2a:c9:98:0a: d5:8f:fa:21:a9:32:4b:93:af:72:e8:8f:6d:cc:05: 29:69:8c:2e:9f:01:4e:6c:13:e3:86:fa:80:51:b5: 5d:87:9e:2b:31:b7:e5:c0:b3:fe:d5:ae:2d:f7:d1: f3:26:43:f7:36:e3:b7:e9:90:de:ef:f5:5d:f0:85: b3:ce:67:e9:4a:34:d2:ac:da:2f:a5:53:f8:cd:71: 6f:46:51:7d:d4:76:a0:eb:e2:92:44:14:48:08:6c: a6:ee:44:a8:29:3c:34:19:fa:0c:6b:cd:cf:42:d1: ad:3e:97:b0:c1:db:26:42:a2:35:19:cf:7c:ad:08: 88:5f:40:4f:d3:5e:40:79:7a:7e:83:3d:b3:98:29: ed:fb:67:d2:7e:43:21:35:06:fa:c8:a8:50:36:df: 18:69:b7:b6:43:22:fc:69:af:57:f6:cc:c1:f0:39: 0c:cd:2d:01:af:dc:42:33:40:21:3f:f0:ee:24:15: 73:21:23:b7:69:b2:78:ab:b5:64:86:37:6a:66:f1: 35:a7:bf:85:1b:a5:fe:3b:8f:5b:13:73:6d:54:13: a0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:DE:13:D7:06:85:EA:66:7A:CC:F6:AE:C7:94:96:AB:F6:4B:F9:78 X509v3 Authority Key Identifier: keyid:4B:D5:C2:31:86:7E:27:39:51:55:C0:1C:78:48:B3:B0:1C:86:06:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9XCMYZ-JzlRVcAceEizsByGBvI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:bc:0c:3b:1a:59:57:06:2c:d5:f2:48:fb:1a:1f:af:84:b3: cb:a4:3e:4a:d8:42:6e:4b:3d:57:83:80:eb:ad:cf:f0:5e:71: 06:ee:5c:37:15:69:76:98:18:66:54:9e:11:04:39:49:8e:ef: e7:ba:2e:64:c1:3d:09:07:b4:b6:37:ab:6b:60:a8:1f:8e:85: 01:59:5d:4e:b2:c9:8d:86:cd:46:34:82:27:9c:d7:cd:24:24: 43:8d:cb:9a:fc:2d:c3:17:d7:0a:b3:40:c1:8f:53:fb:5b:74: fb:e7:b0:65:9a:a6:85:f0:6a:d1:82:4d:01:b3:d1:15:df:7e: d2:93:82:1a:60:ce:70:0d:21:14:ba:2e:56:fb:42:d2:08:ad: ef:89:f0:c6:19:97:f4:40:84:57:4b:b3:9c:14:db:45:dc:f4: ac:71:37:6b:ac:31:4f:f4:0b:80:73:62:98:48:f9:06:25:80: 42:84:77:1c:80:91:12:d1:70:db:86:23:ea:59:27:18:85:fa: ff:87:9c:bb:a0:14:e2:48:5c:c9:2f:e2:0c:f7:0d:e0:63:45: cb:4c:7e:5d:2d:b1:b7:df:2d:f4:95:f4:9b:cb:ed:8f:91:a0: 9a:2a:c7:d0:0f:cf:b8:3c:c2:5a:28:2c:64:49:d9:a9:43:e8: 23:a6:16:65 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJCRTExMTAvBgNVBAUTKDRCRDVDMjMxODY3RTI3Mzk1MTU1QzAxQzc4NDhCM0Iw MUM4NjA2RjIwHhcNMjYwNjIzMDAwMjA1WhcNMjYwNjMwMDAwMjA1WjAYMRYwFAYD VQQDEw02YTM5Y2NmZC0xMTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApPrxH9c1+dkf7+UWkXNnsqzpaPXvpThMNClmmExRqgNDbFWckC8kFCrJmArV j/ohqTJLk69y6I9tzAUpaYwunwFObBPjhvqAUbVdh54rMbflwLP+1a4t99HzJkP3 NuO36ZDe7/Vd8IWzzmfpSjTSrNovpVP4zXFvRlF91Hag6+KSRBRICGym7kSoKTw0 GfoMa83PQtGtPpewwdsmQqI1Gc98rQiIX0BP015AeXp+gz2zmCnt+2fSfkMhNQb6 yKhQNt8Yabe2QyL8aa9X9szB8DkMzS0Br9xCM0AhP/DuJBVzISO3abJ4q7Vkhjdq ZvE1p7+FG6X+O49bE3NtVBOgZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFHeE9cG hepmesz2rseUlqv2S/l4MB8GA1UdIwQYMBaAFEvVwjGGfic5UVXAHHhIs7Achgby MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkJFMS85RTY2MDM0Qzg0 QzUxMUVDQTk4NjE1NjRDNEY5QUUwMi9TOVhDTVlaLUp6bFJWY0FjZUVpenNCeUdC dkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1M5WENNWVotSnpsUlZjQWNlRWl6c0J5R0J2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkJFMS85RTY2MDM0Qzg0QzUxMUVDQTk4NjE1NjRDNEY5QUUwMi9TOVhDTVlaLUp6 bFJWY0FjZUVpenNCeUdCdkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg7wMOxpZVwYs1fJI+xofr4Szy6Q+SthCbks9V4OA663P8F5xBu5cNxVpdpgY ZlSeEQQ5SY7v57ouZME9CQe0tjera2CoH46FAVldTrLJjYbNRjSCJ5zXzSQkQ43L mvwtwxfXCrNAwY9T+1t0++ewZZqmhfBq0YJNAbPRFd9+0pOCGmDOcA0hFLouVvtC 0git74nwxhmX9ECEV0uznBTbRdz0rHE3a6wxT/QLgHNimEj5BiWAQoR3HICREtFw 24Yj6lknGIX6/4ecu6AU4khcyS/iDPcN4GNFy0x+XS2xt98t9JX0m8vtj5GgmirH 0A/PuDzCWigsZEnZqUPoI6YWZQ== -----END CERTIFICATE-----Generated at Wed Jun 24 11:30:01 2026 by rpki-client