$ rpki-client -vvf rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft File: 9mSsAmv09HwIdXzefyHsPPKk5k4.mft (raw, json) Hash identifier: TTeH30jE2PHgmaGkOxa9vHealWS/rRijVzUfcvoO4Og= Subject key identifier: 1B:CA:00:82:76:62:EC:B5:3C:BD:93:F1:94:84:AD:0A:7B:A2:CF:F6 Authority key identifier: F6:64:AC:02:6B:F4:F4:7C:08:75:7C:DE:7F:21:EC:3C:F2:A4:E6:4E Certificate issuer: /CN=A9153AE1/serialNumber=F664AC026BF4F47C08757CDE7F21EC3CF2A4E64E Certificate serial: 19FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft Manifest number: 19B8 Signing time: Tue 30 Jun 2026 16:35:27 +0000 Manifest this update: Tue 30 Jun 2026 16:35:26 +0000 Manifest next update: Tue 07 Jul 2026 16:35:26 +0000 Files and hashes: 1: 9mSsAmv09HwIdXzefyHsPPKk5k4.crl (hash: nnsmGJr3DgYoSPRsrx8kGxH8AXpSLy8bwoI+yBcU7lc=) 2: 118F422C816F11EF9ACB654AC4F9AE02.roa (hash: IRYVPGA8ipv1w1qXIOL0KZhl8fU2bAJ37nHpErWKNVo=) 3: 6314B0DEEAE411F0958BAC9D686F56BC.roa (hash: Kks/aY+pGXLNCd8X8RTgkkIIrtndgVhFfWnvMcGZU7Y=) 4: 0333AD1461FE11ECBD833921C4F9AE02.roa (hash: 7a0c+0EHIoNbcnSaK8IXQEcApv+y2zuHAQ6u946vC8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.crl rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 Jul 2026 16:35:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6651 (0x19fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153AE1, serialNumber=F664AC026BF4F47C08757CDE7F21EC3CF2A4E64E Validity Not Before: Jun 30 16:35:26 2026 GMT Not After : Jul 7 16:35:26 2026 GMT Subject: CN=6a43f04f-532b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0c:a7:d2:44:c8:58:a8:2f:6d:c3:bb:27:c5: 85:9c:1d:3f:88:3e:3a:a9:2a:1d:33:d5:f3:c2:86: a5:33:6f:3a:25:37:e3:fb:99:92:b5:d9:d3:4c:65: 67:b2:f3:39:f1:02:a3:7b:fd:e8:3f:9f:f0:e0:41: f7:21:a8:af:77:a9:f6:68:46:ee:64:84:36:14:25: c9:28:23:2d:8f:a3:97:83:b1:3f:4d:9a:1b:1c:a4: e4:88:35:2b:9a:71:a5:a6:09:9a:9f:1b:f8:5d:d6: 96:4e:f9:16:fc:82:e8:a5:1c:d6:13:38:31:07:74: c3:bf:61:f2:b1:b3:25:49:13:f1:e6:e7:b2:92:57: 05:27:94:15:ec:07:44:6b:5a:bc:31:80:86:52:77: 06:b8:a7:d1:0a:a0:68:44:7e:26:c4:b4:fa:d5:59: d4:3d:3f:17:65:76:53:19:93:29:72:dd:84:01:9d: 34:e4:02:19:4b:2b:aa:d9:13:00:ab:24:a9:17:74: d1:81:ca:ed:f3:5a:a1:fd:4d:71:26:b3:0a:d2:65: 0f:ff:00:77:46:fc:8e:9f:11:6b:48:30:c9:16:09: e6:22:7c:81:b4:ff:7a:e1:28:25:f7:8f:4f:58:d7: a1:f7:03:0f:de:21:3d:5b:2a:e7:b7:05:ef:dc:3a: 72:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:CA:00:82:76:62:EC:B5:3C:BD:93:F1:94:84:AD:0A:7B:A2:CF:F6 X509v3 Authority Key Identifier: keyid:F6:64:AC:02:6B:F4:F4:7C:08:75:7C:DE:7F:21:EC:3C:F2:A4:E6:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:53:1e:b8:3f:91:ad:1d:12:cd:72:00:8f:fc:59:6c:5e:63: a7:35:9e:50:9e:fa:00:fa:a8:99:cd:86:f2:88:ad:d2:a9:9b: 78:9c:8f:ec:16:b4:ab:59:fd:57:40:95:ef:ea:85:4c:3a:22: 46:3b:b3:29:9f:ff:d6:e2:96:89:f1:b0:69:51:e0:38:bf:b4: 78:fa:9c:30:a8:0c:89:d0:1c:b9:21:9e:19:7a:f9:e6:65:72: 80:18:da:ba:ef:b7:fa:8a:60:dc:9b:83:ec:1b:9d:90:03:a5: cf:6a:1e:03:55:7d:92:c5:ff:c4:19:93:10:9b:29:f7:a6:d0: 55:38:fe:16:3f:ec:08:6c:52:cc:7c:ee:ae:76:ff:41:f5:a4: f2:97:e1:cc:34:f3:47:77:87:5c:51:0a:8c:c9:a0:f8:00:87: 21:61:88:e2:2f:fb:1a:38:34:73:44:90:d9:3d:fd:03:e9:ab: c6:0c:01:6a:49:56:ee:fb:ab:4c:25:7d:ad:65:09:55:be:bb: 16:34:6c:b5:c8:c5:0c:26:90:90:4c:fe:c7:b3:fe:ef:af:29: cb:4e:2b:13:1a:1a:14:77:f1:38:4c:3c:33:4d:ad:6e:c6:d0: 9c:e8:3b:37:73:3a:02:e7:cb:da:0a:26:e7:a1:33:f8:e5:b1: 5d:29:8a:9b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNBRTExMTAvBgNVBAUTKEY2NjRBQzAyNkJGNEY0N0MwODc1N0NERTdGMjFFQzND RjJBNEU2NEUwHhcNMjYwNjMwMTYzNTI2WhcNMjYwNzA3MTYzNTI2WjAYMRYwFAYD VQQDEw02YTQzZjA0Zi01MzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAogyn0kTIWKgvbcO7J8WFnB0/iD46qSodM9XzwoalM286JTfj+5mStdnTTGVn svM58QKje/3oP5/w4EH3Iaivd6n2aEbuZIQ2FCXJKCMtj6OXg7E/TZobHKTkiDUr mnGlpgmanxv4XdaWTvkW/ILopRzWEzgxB3TDv2HysbMlSRPx5ueyklcFJ5QV7AdE a1q8MYCGUncGuKfRCqBoRH4mxLT61VnUPT8XZXZTGZMpct2EAZ005AIZSyuq2RMA qySpF3TRgcrt81qh/U1xJrMK0mUP/wB3RvyOnxFrSDDJFgnmInyBtP964Sgl949P WNeh9wMP3iE9WyrntwXv3DpydQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBvKAIJ2 Yuy1PL2T8ZSErQp7os/2MB8GA1UdIwQYMBaAFPZkrAJr9PR8CHV83n8h7DzypOZO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0FFMS82Mzg0M0VEMDk0 NDAxMUU3QkM5OUMxMUFDNEY5QUUwMi85bVNzQW12MDlId0lkWHplZnlIc1BQS2s1 azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzltU3NBbXYwOUh3SWRYemVmeUhzUFBLazVrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0FFMS82Mzg0M0VEMDk0NDAxMUU3QkM5OUMxMUFDNEY5QUUwMi85bVNzQW12MDlI d0lkWHplZnlIc1BQS2s1azQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAp1MeuD+RrR0SzXIAj/xZbF5jpzWeUJ76APqomc2G8oit0qmbeJyP7Ba0q1n9 V0CV7+qFTDoiRjuzKZ//1uKWifGwaVHgOL+0ePqcMKgMidAcuSGeGXr55mVygBja uu+3+opg3JuD7BudkAOlz2oeA1V9ksX/xBmTEJsp96bQVTj+Fj/sCGxSzHzurnb/ QfWk8pfhzDTzR3eHXFEKjMmg+ACHIWGI4i/7Gjg0c0SQ2T39A+mrxgwBaklW7vur TCV9rWUJVb67FjRstcjFDCaQkEz+x7P+768py04rExoaFHfxOEw8M02tbsbQnOg7 N3M6AufL2gom56Ez+OWxXSmKmw== -----END CERTIFICATE-----Generated at Tue Jun 30 23:19:28 2026 by rpki-client