$ rpki-client -vvf rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft File: HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft (raw, json) Hash identifier: BXbfkk7TE47m1KQc/g8WTBkXkyXQNwJIEqL1sk6kYww= Subject key identifier: 88:24:1D:FF:3D:4C:F0:A3:EE:06:AF:74:0C:BD:5E:DB:08:F6:CD:70 Authority key identifier: 1C:42:2B:B1:FC:96:FE:60:D4:B2:FF:5F:6C:12:45:0E:CC:9E:E9:6C Certificate issuer: /CN=A9163609/serialNumber=1C422BB1FC96FE60D4B2FF5F6C12450ECC9EE96C Certificate serial: 028E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HEIrsfyW_mDUsv9fbBJFDsye6Ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft Manifest number: 0288 Signing time: Tue 23 Jun 2026 01:57:05 +0000 Manifest this update: Tue 23 Jun 2026 01:57:04 +0000 Manifest next update: Tue 30 Jun 2026 01:57:04 +0000 Files and hashes: 1: HEIrsfyW_mDUsv9fbBJFDsye6Ww.crl (hash: JIwwaqKxpu8QcwXdQXt7yDzLRijsarA+EgXmkvPHSxg=) 2: F2AB2F288FE011EDA9919C57C4F9AE02.roa (hash: KTnG5DXA4ykdIF+F6HQFhuSS9PnoKt4qehFaA66nt4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.crl rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HEIrsfyW_mDUsv9fbBJFDsye6Ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jun 2026 01:57:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 654 (0x28e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163609, serialNumber=1C422BB1FC96FE60D4B2FF5F6C12450ECC9EE96C Validity Not Before: Jun 23 01:57:04 2026 GMT Not After : Jun 30 01:57:04 2026 GMT Subject: CN=6a39e7f1-f026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f7:73:f0:dd:79:84:3b:08:bb:82:ee:9d:e7: 89:66:23:48:37:b8:fc:20:7a:2e:a4:16:cb:64:22: 41:fe:1c:0f:78:b5:24:54:f3:c3:11:53:e4:67:19: 34:4d:bb:ca:f7:a3:e4:64:13:71:b6:6e:ba:c3:33: 53:0c:f2:49:3d:1c:60:7c:4a:ba:24:5e:3a:93:cc: 6e:bc:63:3b:a2:3e:5b:0f:f9:5f:8b:16:89:57:fc: 8a:86:a0:1f:ac:2f:0d:f7:04:a9:78:af:e2:bd:e2: 45:7d:8a:e3:42:cf:38:c6:5c:8e:9b:2d:f0:7e:8f: d4:5e:69:0b:23:99:12:27:0e:df:06:90:36:9a:45: aa:cb:ff:d5:fa:eb:4c:57:e7:80:fd:9b:5f:8e:be: fd:7b:f3:79:1d:f8:bc:63:59:15:b0:3c:1c:12:8d: e3:84:f8:85:c8:66:13:a4:a4:53:80:f9:00:0d:6b: 5a:5d:76:51:b2:21:71:2d:2a:45:e3:96:4b:b8:11: e9:4c:dd:86:e0:21:a2:f8:de:2a:fb:9a:02:a1:d8: 14:d6:80:4d:6a:cc:3f:7e:51:5a:37:c6:b6:b1:58: 69:1f:6a:c0:e1:2b:3b:f9:99:2e:76:2a:b4:ca:6c: 30:15:d0:ca:12:b3:b2:01:fe:d9:bc:c6:48:17:70: ed:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:24:1D:FF:3D:4C:F0:A3:EE:06:AF:74:0C:BD:5E:DB:08:F6:CD:70 X509v3 Authority Key Identifier: keyid:1C:42:2B:B1:FC:96:FE:60:D4:B2:FF:5F:6C:12:45:0E:CC:9E:E9:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HEIrsfyW_mDUsv9fbBJFDsye6Ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:68:35:35:00:40:10:c8:7c:2b:60:61:6c:43:f1:26:63:13: 1f:f9:e6:a9:bc:ef:0b:ec:66:8a:4c:4c:93:77:ec:e5:54:75: 38:5b:e4:c8:14:9c:63:d2:09:e7:75:b5:be:52:5a:0c:55:41: 11:04:63:0a:c3:0d:35:09:04:62:4c:98:e0:f5:b9:95:3f:96: 2a:61:d4:28:cd:10:ed:78:99:a6:0f:8e:50:c9:4b:a6:78:ae: 5c:ee:19:a0:5d:ad:c0:97:47:db:48:e6:ed:83:05:52:88:7b: ff:fb:29:30:e4:1a:5e:85:3a:2b:8b:b0:2d:c3:56:c3:25:ee: ad:d9:77:b4:83:09:34:74:03:80:06:3f:e6:71:ad:75:43:c5: 0a:51:f1:8c:3e:1e:79:f6:7c:59:d2:c5:e4:39:61:6c:fe:06: 82:e9:6f:de:e4:7c:ef:9f:02:43:70:a3:42:6e:51:6c:31:62: cb:f6:39:01:5d:27:5b:cd:01:fc:20:4c:a2:f4:2f:30:9f:c9: 87:8c:e3:8b:3f:b3:4c:81:e1:54:13:c2:dd:41:e0:94:54:86: f9:30:13:b9:71:4a:3b:98:32:90:d3:cd:a0:7b:e2:6b:eb:fd: 8d:6e:c8:29:9c:cb:74:19:6c:a0:b4:54:a5:f2:59:66:4e:a9: f5:65:2e:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM2MDkxMTAvBgNVBAUTKDFDNDIyQkIxRkM5NkZFNjBENEIyRkY1RjZDMTI0NTBF Q0M5RUU5NkMwHhcNMjYwNjIzMDE1NzA0WhcNMjYwNjMwMDE1NzA0WjAYMRYwFAYD VQQDEw02YTM5ZTdmMS1mMDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzfdz8N15hDsIu4LuneeJZiNIN7j8IHoupBbLZCJB/hwPeLUkVPPDEVPkZxk0 TbvK96PkZBNxtm66wzNTDPJJPRxgfEq6JF46k8xuvGM7oj5bD/lfixaJV/yKhqAf rC8N9wSpeK/iveJFfYrjQs84xlyOmy3wfo/UXmkLI5kSJw7fBpA2mkWqy//V+utM V+eA/Ztfjr79e/N5Hfi8Y1kVsDwcEo3jhPiFyGYTpKRTgPkADWtaXXZRsiFxLSpF 45ZLuBHpTN2G4CGi+N4q+5oCodgU1oBNasw/flFaN8a2sVhpH2rA4Ss7+Zkudiq0 ymwwFdDKErOyAf7ZvMZIF3Dt/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIgkHf89 TPCj7gavdAy9XtsI9s1wMB8GA1UdIwQYMBaAFBxCK7H8lv5g1LL/X2wSRQ7Mnuls MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzYwOS8yM0Y5RThCQThG REUxMUVEQUUzNjlBNTNDNEY5QUUwMi9IRUlyc2Z5V19tRFVzdjlmYkJKRkRzeWU2 V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hFSXJzZnlXX21EVXN2OWZiQkpGRHN5ZTZXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzYwOS8yM0Y5RThCQThGREUxMUVEQUUzNjlBNTNDNEY5QUUwMi9IRUlyc2Z5V19t RFVzdjlmYkJKRkRzeWU2V3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAb2g1NQBAEMh8K2BhbEPxJmMTH/nmqbzvC+xmikxMk3fs5VR1OFvkyBScY9IJ 53W1vlJaDFVBEQRjCsMNNQkEYkyY4PW5lT+WKmHUKM0Q7XiZpg+OUMlLpniuXO4Z oF2twJdH20jm7YMFUoh7//spMOQaXoU6K4uwLcNWwyXurdl3tIMJNHQDgAY/5nGt dUPFClHxjD4eefZ8WdLF5DlhbP4Ggulv3uR8758CQ3CjQm5RbDFiy/Y5AV0nW80B /CBMovQvMJ/Jh4zjiz+zTIHhVBPC3UHglFSG+TATuXFKO5gykNPNoHvia+v9jW7I KZzLdBlsoLRUpfJZZk6p9WUuqw== -----END CERTIFICATE-----Generated at Wed Jun 24 15:33:15 2026 by rpki-client