$ rpki-client -vvf rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/d9okgAToxYcr33K6wSIsfMtujjc.mft File: d9okgAToxYcr33K6wSIsfMtujjc.mft (raw, json) Hash identifier: bNTz6YZs+/jKJ4YVYUFqwSug+kg7Ho9NXmISnI7Ob0U= Subject key identifier: 66:8F:FE:CE:B1:95:43:CF:A3:38:2F:19:8C:35:A2:C4:D1:B8:26:A0 Authority key identifier: 77:DA:24:80:04:E8:C5:87:2B:DF:72:BA:C1:22:2C:7C:CB:6E:8E:37 Certificate issuer: /CN=A9156342/serialNumber=77DA248004E8C5872BDF72BAC1222C7CCB6E8E37 Certificate serial: 0A4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d9okgAToxYcr33K6wSIsfMtujjc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/d9okgAToxYcr33K6wSIsfMtujjc.mft Manifest number: 0A24 Signing time: Thu 18 Jun 2026 19:47:03 +0000 Manifest this update: Thu 18 Jun 2026 19:47:02 +0000 Manifest next update: Thu 25 Jun 2026 19:47:02 +0000 Files and hashes: 1: d9okgAToxYcr33K6wSIsfMtujjc.crl (hash: SK/thctgWKAWUJx2dw2s/rjQLaONGmEWNKqqJy/Uh9I=) 2: 3A58D9F499E611EAB3C00943C4F9AE02.roa (hash: Ix/A1HAv4E1o+T96OwAx6diCaMu8Un7l8lL1cR9lZ0I=) 3: 3BABBD7699E611EAB3C00943C4F9AE02.roa (hash: goeW12JBA3cKKGwjatqM92u32XRcfD8Zb78gB6ELWSk=) 4: 3AFD491C99E611EAB3C00943C4F9AE02.roa (hash: hAA41RG01uNOAJq/J2qFIRJdJvtjuAyTCQh8VD7YTr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/d9okgAToxYcr33K6wSIsfMtujjc.crl rsync://rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/d9okgAToxYcr33K6wSIsfMtujjc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d9okgAToxYcr33K6wSIsfMtujjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Jun 2026 19:47:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2635 (0xa4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156342, serialNumber=77DA248004E8C5872BDF72BAC1222C7CCB6E8E37 Validity Not Before: Jun 18 19:47:02 2026 GMT Not After : Jun 25 19:47:02 2026 GMT Subject: CN=6a344b37-51b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:21:81:8c:80:73:f3:b0:c8:8c:07:03:9a:31: e0:a3:1f:88:80:15:fe:45:36:51:3c:e8:fd:6a:bb: 90:8b:c6:b6:d1:a5:fd:69:5e:78:1a:2c:d4:3c:f4: ca:24:75:ff:d3:6d:40:cc:fe:e5:e5:cb:cf:db:d8: 40:31:cf:63:d3:29:25:4c:b5:90:fb:7c:fc:e4:d1: 4f:d6:91:ab:09:87:02:ce:44:13:90:1d:cc:56:5f: 43:c8:9a:2c:8e:34:74:a4:08:7e:32:9a:b7:ff:18: 50:63:c8:17:95:c4:98:4d:6f:d9:9c:1c:8b:06:08: 84:4b:18:e6:09:32:88:00:b8:49:f5:1a:b5:c1:74: 6c:81:a3:69:c3:cf:ae:3c:95:88:ba:25:b3:6a:8d: 3e:f4:09:dd:dc:88:45:7b:49:cf:5b:77:c9:54:d8: 71:a1:25:f1:b4:18:68:a9:57:d2:a9:8c:a8:2c:87: 44:17:eb:d1:2e:5c:b8:2d:42:60:5a:95:b8:32:85: bc:5b:16:e1:96:ba:f7:66:66:a2:07:e8:29:fe:df: 2f:c1:a9:f3:67:78:de:5b:37:47:3a:29:41:d1:f4: a3:d3:d7:93:1e:aa:54:8e:eb:43:1f:20:1e:90:fd: 1f:dc:87:62:8c:7e:17:01:a1:89:80:a6:c7:18:7f: 63:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:8F:FE:CE:B1:95:43:CF:A3:38:2F:19:8C:35:A2:C4:D1:B8:26:A0 X509v3 Authority Key Identifier: keyid:77:DA:24:80:04:E8:C5:87:2B:DF:72:BA:C1:22:2C:7C:CB:6E:8E:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/d9okgAToxYcr33K6wSIsfMtujjc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d9okgAToxYcr33K6wSIsfMtujjc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/d9okgAToxYcr33K6wSIsfMtujjc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:12:7f:87:bc:eb:7c:d6:a2:b7:64:c1:42:93:00:dd:b7:e2: 30:23:29:3e:8c:7f:25:c3:9d:f7:dc:25:df:1f:1c:fd:5a:09: 82:e3:5c:06:1c:df:49:b4:71:30:a6:88:62:8a:bb:e7:8e:ef: 50:38:c5:75:08:ac:19:8a:8b:8a:ab:d5:3a:a4:90:a4:ae:39: 4e:e9:2c:57:a9:20:39:5c:2a:d0:76:ae:fa:0b:6e:5e:1f:47: be:08:eb:7f:e5:28:ed:26:91:39:0a:e7:b5:53:23:93:e2:b5: 92:d8:0c:6c:6e:da:25:21:82:e7:37:7b:62:3a:d0:77:f4:20: 92:ba:e5:b4:00:ee:c8:67:18:c6:eb:84:0e:35:f1:d5:c4:b7: 43:b8:b4:6d:3a:d0:78:ed:f7:8b:10:94:75:8c:b6:6e:1d:0c: eb:fb:13:67:8c:b3:99:0f:ea:fe:82:14:a1:d1:88:a4:a4:18: 14:48:29:05:6f:fa:84:78:20:ae:66:6b:2e:f6:2e:f0:5c:3f: 69:c8:74:49:55:3e:bb:e8:c8:32:a6:4d:23:f8:15:59:8b:83: 7c:13:10:e9:b7:bc:f9:b2:84:9c:25:84:71:9d:3a:cc:b2:c0: 24:81:86:f0:1d:03:bd:18:61:c1:da:d1:25:99:f5:a0:26:c4: 05:73:66:7f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYzNDIxMTAvBgNVBAUTKDc3REEyNDgwMDRFOEM1ODcyQkRGNzJCQUMxMjIyQzdD Q0I2RThFMzcwHhcNMjYwNjE4MTk0NzAyWhcNMjYwNjI1MTk0NzAyWjAYMRYwFAYD VQQDEw02YTM0NGIzNy01MWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnSGBjIBz87DIjAcDmjHgox+IgBX+RTZRPOj9aruQi8a20aX9aV54GizUPPTK JHX/021AzP7l5cvP29hAMc9j0yklTLWQ+3z85NFP1pGrCYcCzkQTkB3MVl9DyJos jjR0pAh+Mpq3/xhQY8gXlcSYTW/ZnByLBgiESxjmCTKIALhJ9Rq1wXRsgaNpw8+u PJWIuiWzao0+9And3IhFe0nPW3fJVNhxoSXxtBhoqVfSqYyoLIdEF+vRLly4LUJg WpW4MoW8Wxbhlrr3ZmaiB+gp/t8vwanzZ3jeWzdHOilB0fSj09eTHqpUjutDHyAe kP0f3IdijH4XAaGJgKbHGH9jjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGaP/s6x lUPPozgvGYw1osTRuCagMB8GA1UdIwQYMBaAFHfaJIAE6MWHK99yusEiLHzLbo43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjM0Mi9CREY4OTA4MDk5 RTQxMUVBODlBNEMyNDBDNEY5QUUwMi9kOW9rZ0FUb3hZY3IzM0s2d1NJc2ZNdHVq amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q5b2tnQVRveFljcjMzSzZ3U0lzZk10dWpqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjM0Mi9CREY4OTA4MDk5RTQxMUVBODlBNEMyNDBDNEY5QUUwMi9kOW9rZ0FUb3hZ Y3IzM0s2d1NJc2ZNdHVqamMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZhJ/h7zrfNait2TBQpMA3bfiMCMpPox/JcOd99wl3x8c/VoJguNcBhzfSbRx MKaIYoq7547vUDjFdQisGYqLiqvVOqSQpK45TuksV6kgOVwq0Hau+gtuXh9Hvgjr f+Uo7SaROQrntVMjk+K1ktgMbG7aJSGC5zd7YjrQd/QgkrrltADuyGcYxuuEDjXx 1cS3Q7i0bTrQeO33ixCUdYy2bh0M6/sTZ4yzmQ/q/oIUodGIpKQYFEgpBW/6hHgg rmZrLvYu8Fw/ach0SVU+u+jIMqZNI/gVWYuDfBMQ6be8+bKEnCWEcZ06zLLAJIGG 8B0DvRhhwdrRJZn1oCbEBXNmfw== -----END CERTIFICATE-----Generated at Sat Jun 20 09:41:13 2026 by rpki-client