$ rpki-client -vvf rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.mft File: goh6uR0rD2rb_HCyRhnxh7GlPVk.mft (raw, json) Hash identifier: 2+DQ+1zt5jv9n5pEU/vipEFHxm0yBRir5Fj+USEppgI= Subject key identifier: B6:B9:C8:BC:C8:81:C9:3F:15:36:FB:38:FE:BC:A8:C4:14:67:46:44 Authority key identifier: 82:88:7A:B9:1D:2B:0F:6A:DB:FC:70:B2:46:19:F1:87:B1:A5:3D:59 Certificate issuer: /CN=A9159032/serialNumber=82887AB91D2B0F6ADBFC70B24619F187B1A53D59 Certificate serial: 1AEC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goh6uR0rD2rb_HCyRhnxh7GlPVk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.mft Manifest number: 1AD8 Signing time: Thu 04 Jun 2026 16:17:50 +0000 Manifest this update: Thu 04 Jun 2026 16:17:49 +0000 Manifest next update: Thu 11 Jun 2026 16:17:49 +0000 Files and hashes: 1: goh6uR0rD2rb_HCyRhnxh7GlPVk.crl (hash: OAvR2D1XR41Oyj1hkRSzN+BJ5/e7KDr5lzfWebm5TCo=) 2: 326E1852D80B11EC874C9083C4F9AE02.roa (hash: 5qtsq7ia4AOMsTly8sF4e2lBQ7HF32ao+hzi58so/BA=) 3: 8AFD7D885DCE11EEA74FC07DC4F9AE02.roa (hash: 9z91DZp5gGn5objaZcmJRC9eXIJ9vkXiEByHhLrLrmk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.crl rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goh6uR0rD2rb_HCyRhnxh7GlPVk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 16:17:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6892 (0x1aec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159032, serialNumber=82887AB91D2B0F6ADBFC70B24619F187B1A53D59 Validity Not Before: Jun 4 16:17:49 2026 GMT Not After : Jun 11 16:17:49 2026 GMT Subject: CN=6a21a52e-b2d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:11:68:4a:b3:65:aa:e5:72:d3:f7:c5:ed:a2: 07:bd:91:b6:0b:e9:80:f4:12:8a:2d:ae:ae:66:be: ec:c4:1c:51:57:3e:21:8d:b4:2c:36:fc:4e:56:0f: dd:3d:95:25:7e:25:15:db:e1:d2:6d:50:46:3a:2b: ca:fc:e6:5e:29:9e:52:81:98:ec:87:1d:47:34:1f: d9:fd:0e:bd:56:84:84:e1:7f:c3:91:c2:3f:18:c8: af:40:d9:d7:75:ae:23:4b:11:a7:61:89:21:dc:cb: 83:20:cc:1a:e3:2c:d3:08:1e:64:ec:78:97:fc:cc: 7e:ea:35:0f:16:ab:b2:b2:5f:29:d6:c5:c1:42:4a: 24:9c:5b:be:97:d3:04:c6:20:e2:de:b8:27:17:11: 2f:34:34:c2:15:92:1d:69:0b:7f:24:81:e6:da:22: 78:31:7d:6c:27:86:ed:12:9e:7f:7e:05:69:fb:00: 2d:38:c6:9b:0a:63:93:6a:b4:3b:ed:92:2c:5e:3e: 1b:26:6a:2a:c5:79:72:d8:9b:79:b0:61:d8:52:cb: 8a:4e:dc:8b:68:d2:bd:71:e0:eb:af:9f:0a:aa:3f: 09:fa:3f:b0:9d:79:09:8f:23:5a:f1:b9:10:74:e3: 24:b3:c8:71:23:06:f0:e4:14:2a:df:7c:83:42:53: c4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:B9:C8:BC:C8:81:C9:3F:15:36:FB:38:FE:BC:A8:C4:14:67:46:44 X509v3 Authority Key Identifier: keyid:82:88:7A:B9:1D:2B:0F:6A:DB:FC:70:B2:46:19:F1:87:B1:A5:3D:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goh6uR0rD2rb_HCyRhnxh7GlPVk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:2b:e0:a0:28:d5:a7:ad:aa:f4:eb:47:13:c1:46:f6:65:e8: e4:38:20:66:3d:da:11:22:2f:b0:db:c5:3c:64:ee:08:f9:b7: 0c:00:0e:c0:ea:b6:f7:95:c1:9f:87:60:ca:e9:12:91:93:75: ae:97:41:8d:92:d7:af:f8:3a:96:2a:26:fe:b2:49:b3:99:35: 6a:5d:db:4a:3e:68:cc:59:01:af:c2:30:3d:b7:da:2d:19:44: 57:6a:7d:20:90:58:aa:08:ab:7e:14:60:71:32:ca:46:57:3f: c7:8b:b0:62:fb:5f:7f:96:db:c9:a0:9f:33:d1:10:7e:56:87: 31:5d:71:7b:11:76:26:64:f8:21:8f:10:08:34:71:10:18:a5: 04:ff:b8:fb:00:eb:5f:b6:ea:98:0f:87:06:e9:d0:e8:63:ef: c6:ed:3c:98:91:da:bc:fd:1b:2b:b0:88:38:f6:0c:f4:dd:15: 1f:7c:ae:82:af:6e:7e:ee:03:de:90:4e:0f:17:63:b0:2e:90: 58:6d:77:48:2d:c2:2a:d4:66:44:03:1c:59:a2:ab:02:a9:2b: 0b:7d:df:e9:0f:f9:8a:e3:51:af:92:22:0c:cd:48:0a:bd:48: 17:39:51:c3:53:2a:84:1d:70:53:8d:59:39:9c:3f:e5:af:58: ff:14:9c:56 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGuwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkwMzIxMTAvBgNVBAUTKDgyODg3QUI5MUQyQjBGNkFEQkZDNzBCMjQ2MTlGMTg3 QjFBNTNENTkwHhcNMjYwNjA0MTYxNzQ5WhcNMjYwNjExMTYxNzQ5WjAYMRYwFAYD VQQDEw02YTIxYTUyZS1iMmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvxFoSrNlquVy0/fF7aIHvZG2C+mA9BKKLa6uZr7sxBxRVz4hjbQsNvxOVg/d PZUlfiUV2+HSbVBGOivK/OZeKZ5SgZjshx1HNB/Z/Q69VoSE4X/DkcI/GMivQNnX da4jSxGnYYkh3MuDIMwa4yzTCB5k7HiX/Mx+6jUPFquysl8p1sXBQkoknFu+l9ME xiDi3rgnFxEvNDTCFZIdaQt/JIHm2iJ4MX1sJ4btEp5/fgVp+wAtOMabCmOTarQ7 7ZIsXj4bJmoqxXly2Jt5sGHYUsuKTtyLaNK9ceDrr58Kqj8J+j+wnXkJjyNa8bkQ dOMks8hxIwbw5BQq33yDQlPEzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLa5yLzI gck/FTb7OP68qMQUZ0ZEMB8GA1UdIwQYMBaAFIKIerkdKw9q2/xwskYZ8YexpT1Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTAzMi80NUZDRjVFMDRG RUExMUU3OTcxMERFM0VDNEY5QUUwMi9nb2g2dVIwckQycmJfSEN5UmhueGg3R2xQ VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dvaDZ1UjByRDJyYl9IQ3lSaG54aDdHbFBWay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTAzMi80NUZDRjVFMDRGRUExMUU3OTcxMERFM0VDNEY5QUUwMi9nb2g2dVIwckQy cmJfSEN5UmhueGg3R2xQVmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAACvgoCjVp62q9OtHE8FG9mXo5DggZj3aESIvsNvFPGTuCPm3DAAOwOq295XB n4dgyukSkZN1rpdBjZLXr/g6liom/rJJs5k1al3bSj5ozFkBr8IwPbfaLRlEV2p9 IJBYqgirfhRgcTLKRlc/x4uwYvtff5bbyaCfM9EQflaHMV1xexF2JmT4IY8QCDRx EBilBP+4+wDrX7bqmA+HBunQ6GPvxu08mJHavP0bK7CIOPYM9N0VH3yugq9ufu4D 3pBODxdjsC6QWG13SC3CKtRmRAMcWaKrAqkrC33f6Q/5iuNRr5IiDM1ICr1IFzlR w1MqhB1wU41ZOZw/5a9Y/xScVg== -----END CERTIFICATE-----Generated at Sat Jun 6 07:02:39 2026 by rpki-client