$ rpki-client -vvf rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft File: sD57-ytL2vouqlCreZD3T_y8rdc.mft (raw, json) Hash identifier: JFmFl3B2cpVbAcslQWa7S1Gdw/lmsvVzPPlNBlaGHWY= Subject key identifier: 6E:FD:91:7D:84:61:54:CB:5A:8F:47:98:73:A3:07:DF:05:DE:F9:B9 Authority key identifier: B0:3E:7B:FB:2B:4B:DA:FA:2E:AA:50:AB:79:90:F7:4F:FC:BC:AD:D7 Certificate issuer: /CN=A9150CF2/serialNumber=B03E7BFB2B4BDAFA2EAA50AB7990F74FFCBCADD7 Certificate serial: 0D9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft Manifest number: 0D7B Signing time: Thu 02 Jul 2026 18:07:08 +0000 Manifest this update: Thu 02 Jul 2026 18:07:07 +0000 Manifest next update: Thu 09 Jul 2026 18:07:07 +0000 Files and hashes: 1: sD57-ytL2vouqlCreZD3T_y8rdc.crl (hash: oZwh4v5IWEx8QieFYhigJ0G0vviWCVegtJV0w4DSSUU=) 2: 34060B22C2B311EE97B0B776C4F9AE02.roa (hash: Z+WXuAeNXEm2DshVUamhEUi82/2PD1ZlUuuRrwwUJi4=) 3: 029E3ED44ADF11EEB17F2D4CC4F9AE02.roa (hash: CausEKBJvcLCY2g+bHYlOvrLzaOZNNslUPs7u8h+azo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.crl rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 Jul 2026 18:07:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3484 (0xd9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150CF2, serialNumber=B03E7BFB2B4BDAFA2EAA50AB7990F74FFCBCADD7 Validity Not Before: Jul 2 18:07:07 2026 GMT Not After : Jul 9 18:07:07 2026 GMT Subject: CN=6a46a8cc-28fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4d:29:5a:1c:48:c4:f8:45:56:36:1b:71:64: 85:b7:21:fa:59:89:c9:7a:61:29:95:a6:0e:8e:45: 41:18:a8:67:91:0b:32:f5:ff:28:f8:ff:69:27:f1: 5a:c2:6a:d5:f5:29:57:5e:05:d9:a6:53:a0:97:9d: 55:ed:2a:b1:f4:54:75:4a:bb:b6:b5:bd:63:6b:2a: e5:a2:67:a9:4b:08:32:3e:11:4b:a4:32:7a:b8:1c: bb:c5:09:e4:e4:dc:d5:79:8c:7a:88:f8:4b:20:6e: 8d:42:ef:8c:ee:a2:f9:25:7f:74:74:0e:95:2c:f0: b1:38:5d:2e:25:34:95:b1:7c:f5:c7:36:fd:bc:e5: b3:82:88:5a:0a:80:10:cb:52:89:63:24:2b:2a:36: c5:4a:ee:0f:60:d3:ba:09:bd:56:af:fd:90:0b:e2: f6:6a:62:98:7e:cf:17:0b:29:41:6e:14:c8:a8:ac: 3d:ee:3d:ac:ef:95:3c:09:fe:10:89:2b:5e:8b:a4: 17:61:81:3c:57:69:0b:9c:ef:ed:f9:13:dc:74:9b: 02:22:9f:00:5f:06:b8:71:2e:9f:5d:e2:95:3c:da: 15:a5:57:3e:3f:84:f4:27:02:28:c6:90:99:f7:aa: 84:fc:06:14:72:76:58:e2:16:f3:41:a7:b3:b0:a7: 07:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:FD:91:7D:84:61:54:CB:5A:8F:47:98:73:A3:07:DF:05:DE:F9:B9 X509v3 Authority Key Identifier: keyid:B0:3E:7B:FB:2B:4B:DA:FA:2E:AA:50:AB:79:90:F7:4F:FC:BC:AD:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:31:ac:bf:8e:de:8d:91:41:22:2f:d5:8e:b5:5a:5f:fd:9a: 3f:af:46:ce:a3:f6:30:52:14:35:24:de:e9:6a:4e:23:53:5a: 07:b3:1c:8d:d1:ef:bb:b3:b6:62:90:10:6a:b6:d3:0b:ee:c1: 9a:93:f8:26:5a:19:71:34:a9:96:13:dc:0f:6f:af:1f:51:40: 4d:d3:ca:8c:93:0f:8f:c6:b9:87:26:3f:99:78:31:d1:c1:ca: fd:e9:22:99:eb:62:42:81:62:15:ee:06:da:3d:77:33:aa:b8: ea:7d:d7:07:fd:43:69:ae:0a:27:da:fc:4e:ae:ef:f1:b6:73: 9d:19:f4:85:7e:c3:ec:a8:80:88:87:6d:34:4a:36:06:86:28: a0:c6:41:dc:70:48:2d:fe:46:19:fd:cf:fb:b1:e3:7b:5b:fc: f1:6a:65:5f:00:14:45:41:36:ae:fd:4f:14:44:85:d4:e3:a2: 16:18:44:ff:d5:be:f7:dd:a5:4c:21:61:46:fd:3c:f3:01:67: fd:18:f0:5c:ca:41:60:6d:9e:41:0e:8c:4a:74:0b:59:3c:50: 4e:83:39:f5:d4:71:9a:61:c5:e5:14:bf:45:1e:04:d8:7c:52: 3f:40:fa:fa:22:01:24:53:30:e2:4a:3b:98:c3:6a:5d:5b:9c: 17:b8:45:a3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBDRjIxMTAvBgNVBAUTKEIwM0U3QkZCMkI0QkRBRkEyRUFBNTBBQjc5OTBGNzRG RkNCQ0FERDcwHhcNMjYwNzAyMTgwNzA3WhcNMjYwNzA5MTgwNzA3WjAYMRYwFAYD VQQDEw02YTQ2YThjYy0yOGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsE0pWhxIxPhFVjYbcWSFtyH6WYnJemEplaYOjkVBGKhnkQsy9f8o+P9pJ/Fa wmrV9SlXXgXZplOgl51V7Sqx9FR1Sru2tb1jayrlomepSwgyPhFLpDJ6uBy7xQnk 5NzVeYx6iPhLIG6NQu+M7qL5JX90dA6VLPCxOF0uJTSVsXz1xzb9vOWzgohaCoAQ y1KJYyQrKjbFSu4PYNO6Cb1Wr/2QC+L2amKYfs8XCylBbhTIqKw97j2s75U8Cf4Q iStei6QXYYE8V2kLnO/t+RPcdJsCIp8AXwa4cS6fXeKVPNoVpVc+P4T0JwIoxpCZ 96qE/AYUcnZY4hbzQaezsKcHSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG79kX2E YVTLWo9HmHOjB98F3vm5MB8GA1UdIwQYMBaAFLA+e/srS9r6LqpQq3mQ90/8vK3X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MENGMi9EMDBEQjc2RUY0 RUUxMUU5QUVGRUE4MTlDNEY5QUUwMi9zRDU3LXl0TDJ2b3VxbENyZVpEM1RfeThy ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NENTcteXRMMnZvdXFsQ3JlWkQzVF95OHJkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MENGMi9EMDBEQjc2RUY0RUUxMUU5QUVGRUE4MTlDNEY5QUUwMi9zRDU3LXl0TDJ2 b3VxbENyZVpEM1RfeThyZGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgDGsv47ejZFBIi/VjrVaX/2aP69GzqP2MFIUNSTe6WpOI1NaB7McjdHvu7O2 YpAQarbTC+7BmpP4JloZcTSplhPcD2+vH1FATdPKjJMPj8a5hyY/mXgx0cHK/eki metiQoFiFe4G2j13M6q46n3XB/1Daa4KJ9r8Tq7v8bZznRn0hX7D7KiAiIdtNEo2 BoYooMZB3HBILf5GGf3P+7Hje1v88WplXwAURUE2rv1PFESF1OOiFhhE/9W+992l TCFhRv088wFn/RjwXMpBYG2eQQ6MSnQLWTxQToM59dRxmmHF5RS/RR4E2HxSP0D6 +iIBJFMw4ko7mMNqXVucF7hFow== -----END CERTIFICATE-----Generated at Sat Jul 4 12:25:17 2026 by rpki-client