$ rpki-client -vvf rpki.apnic.net/member_repository/A915D062/B1B8BEA6DB9911F090A4BCD166D3641D/R9ff9rQb1GjB8MnQTF6F4MM_n6s.mft File: R9ff9rQb1GjB8MnQTF6F4MM_n6s.mft (raw, json) Hash identifier: llMsbac2p0/IIZGMEf93b3pfMx+mQSjFNsaYuZFoNGg= Subject key identifier: 9E:5B:6C:C6:99:99:9C:AD:7F:F4:C5:B1:CA:FA:B3:96:5F:3F:B5:CA Authority key identifier: 47:D7:DF:F6:B4:1B:D4:68:C1:F0:C9:D0:4C:5E:85:E0:C3:3F:9F:AB Certificate issuer: /CN=A915D062/serialNumber=47D7DFF6B41BD468C1F0C9D04C5E85E0C33F9FAB Certificate serial: 5D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R9ff9rQb1GjB8MnQTF6F4MM_n6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D062/B1B8BEA6DB9911F090A4BCD166D3641D/R9ff9rQb1GjB8MnQTF6F4MM_n6s.mft Manifest number: 5A Signing time: Mon 01 Jun 2026 08:59:08 +0000 Manifest this update: Mon 01 Jun 2026 08:59:08 +0000 Manifest next update: Mon 08 Jun 2026 08:59:08 +0000 Files and hashes: 1: R9ff9rQb1GjB8MnQTF6F4MM_n6s.crl (hash: JeH74xdbKrZDLB2HxJtXeUq/m4DSTP/S3mArDKiMxXI=) 2: 709A2E7CDB9A11F0BFEA763F67D3641D.roa (hash: /7uGSz2004/QvinO+aiI/2uroEEvFBnQnqFbErCydxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D062/B1B8BEA6DB9911F090A4BCD166D3641D/R9ff9rQb1GjB8MnQTF6F4MM_n6s.crl rsync://rpki.apnic.net/member_repository/A915D062/B1B8BEA6DB9911F090A4BCD166D3641D/R9ff9rQb1GjB8MnQTF6F4MM_n6s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R9ff9rQb1GjB8MnQTF6F4MM_n6s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 08:59:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D062, serialNumber=47D7DFF6B41BD468C1F0C9D04C5E85E0C33F9FAB Validity Not Before: Jun 1 08:59:08 2026 GMT Not After : Jun 8 08:59:08 2026 GMT Subject: CN=6a1d49dc-95c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ff:ea:fa:53:60:d6:de:5e:49:b4:4f:00:b3: b3:53:cd:5d:38:14:fe:4f:da:50:38:71:4f:1e:c1: de:d7:ce:c5:f7:a5:ea:7e:8d:2f:da:c5:4b:ea:6f: 17:1a:4d:c8:40:df:83:da:a8:a2:e3:b4:33:08:b3: 4e:7c:4b:ea:e2:2e:2d:15:48:2e:4d:23:78:18:7a: 8f:fd:c3:c8:59:9e:99:ae:9a:93:e9:2e:38:d9:e7: 41:5e:7c:70:7b:89:c8:9e:55:d8:72:9a:53:b8:7b: c3:28:ab:36:16:52:7e:6b:04:88:15:0d:ad:7c:ad: 95:a8:9f:86:d6:4b:a0:74:18:ab:6b:00:29:c3:eb: c3:a3:bb:e6:82:3d:4d:09:49:1f:8c:3e:03:76:b3: e2:84:75:5b:27:fa:80:0e:ae:43:2c:eb:0b:a9:e9: 8e:27:4b:8a:90:95:63:b8:b1:da:f4:9e:f8:89:4a: 77:c4:ae:68:3c:40:05:36:70:30:ca:3b:01:ef:8e: f0:23:99:71:23:e1:48:b6:64:2f:1f:fd:09:ed:e6: 28:09:64:4d:1a:32:5d:47:98:61:08:91:82:85:63: 99:3f:cb:b8:43:6f:00:b9:8d:63:88:e3:53:2e:e6: 25:61:28:63:1d:5e:cc:5a:69:ce:cc:0b:b3:65:9f: 6a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:5B:6C:C6:99:99:9C:AD:7F:F4:C5:B1:CA:FA:B3:96:5F:3F:B5:CA X509v3 Authority Key Identifier: keyid:47:D7:DF:F6:B4:1B:D4:68:C1:F0:C9:D0:4C:5E:85:E0:C3:3F:9F:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D062/B1B8BEA6DB9911F090A4BCD166D3641D/R9ff9rQb1GjB8MnQTF6F4MM_n6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R9ff9rQb1GjB8MnQTF6F4MM_n6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D062/B1B8BEA6DB9911F090A4BCD166D3641D/R9ff9rQb1GjB8MnQTF6F4MM_n6s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:8e:d9:04:e6:29:fd:35:dc:67:19:90:62:1f:47:5c:6d:28: 27:e3:3e:59:bd:1d:72:d1:48:01:01:8d:a4:b5:e9:9d:55:55: 42:df:f9:b1:94:7b:6d:3e:2c:ea:01:e9:e6:72:df:22:28:57: 59:f9:84:27:54:bb:04:be:1e:86:38:36:86:46:9d:e7:9a:86: 83:a4:71:39:26:4c:d5:3a:f1:98:a3:ef:ae:6f:ee:ad:36:ff: 58:d7:2d:9f:a0:a6:4b:8f:26:34:a8:7a:56:36:b3:ff:25:ba: f4:79:e7:16:07:e7:4e:1d:99:d0:7a:47:20:8b:91:10:57:0c: 7d:b5:94:0b:18:62:b4:36:04:16:a6:44:da:c8:95:5d:9b:e2: ed:ca:81:61:dd:dc:89:0f:61:3e:1d:a0:48:5a:b3:61:60:7e: 30:64:86:b2:37:f4:03:47:e0:7d:e3:07:e7:02:3c:05:bc:d4: d5:45:eb:f4:e2:2f:f3:a9:80:e0:79:42:d2:b4:48:a4:a5:39: 3f:1b:24:2f:ea:48:60:16:21:ef:2b:c8:ff:d4:62:12:91:21: a8:bc:00:04:ad:72:50:0d:7c:ce:16:5d:07:ea:f9:0a:b1:9f: 2f:7c:0b:8c:2d:24:23:0a:b6:bb:d0:09:c6:e2:8e:5d:76:44: 6f:de:3d:dc -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RDA2MjExMC8GA1UEBRMoNDdEN0RGRjZCNDFCRDQ2OEMxRjBDOUQwNEM1RTg1RTBD MzNGOUZBQjAeFw0yNjA2MDEwODU5MDhaFw0yNjA2MDgwODU5MDhaMBgxFjAUBgNV BAMTDTZhMWQ0OWRjLTk1YzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCx/+r6U2DW3l5JtE8As7NTzV04FP5P2lA4cU8ewd7XzsX3pep+jS/axUvqbxca TchA34PaqKLjtDMIs058S+riLi0VSC5NI3gYeo/9w8hZnpmumpPpLjjZ50FefHB7 icieVdhymlO4e8MoqzYWUn5rBIgVDa18rZWon4bWS6B0GKtrACnD68Oju+aCPU0J SR+MPgN2s+KEdVsn+oAOrkMs6wup6Y4nS4qQlWO4sdr0nviJSnfErmg8QAU2cDDK OwHvjvAjmXEj4Ui2ZC8f/Qnt5igJZE0aMl1HmGEIkYKFY5k/y7hDbwC5jWOI41Mu 5iVhKGMdXsxaac7MC7Nln2ovAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUnltsxpmZ nK1/9MWxyvqzll8/tcowHwYDVR0jBBgwFoAUR9ff9rQb1GjB8MnQTF6F4MM/n6sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVEMDYyL0IxQjhCRUE2REI5 OTExRjA5MEE0QkNEMTY2RDM2NDFEL1I5ZmY5clFiMUdqQjhNblFURjZGNE1NX242 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUjlmZjlyUWIxR2pCOE1uUVRGNkY0TU1fbjZzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVE MDYyL0IxQjhCRUE2REI5OTExRjA5MEE0QkNEMTY2RDM2NDFEL1I5ZmY5clFiMUdq QjhNblFURjZGNE1NX242cy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBtjtkE5in9NdxnGZBiH0dcbSgn4z5ZvR1y0UgBAY2ktemdVVVC3/mxlHttPizq Aenmct8iKFdZ+YQnVLsEvh6GODaGRp3nmoaDpHE5JkzVOvGYo++ub+6tNv9Y1y2f oKZLjyY0qHpWNrP/Jbr0eecWB+dOHZnQekcgi5EQVwx9tZQLGGK0NgQWpkTayJVd m+LtyoFh3dyJD2E+HaBIWrNhYH4wZIayN/QDR+B94wfnAjwFvNTVRev04i/zqYDg eULStEikpTk/GyQv6khgFiHvK8j/1GISkSGovAAErXJQDXzOFl0H6vkKsZ8vfAuM LSQjCra70AnG4o5ddkRv3j3c -----END CERTIFICATE-----Generated at Tue Jun 2 21:20:08 2026 by rpki-client