$ rpki-client -vvf rpki.apnic.net/member_repository/A9166D4A/AD1737A25B8111F1A8E84177A7833773/2hAmH-_a0BGsriMnCqa_jEHeQpI.mft File: 2hAmH-_a0BGsriMnCqa_jEHeQpI.mft (raw, json) Hash identifier: l0JSb3ZCsiCaXe5h3nK/GlM79a61l/vOsEN9tukdtww= Subject key identifier: 3E:DF:57:1D:BF:E9:BA:E2:01:85:89:B4:FC:5A:0B:B3:29:90:AF:80 Authority key identifier: DA:10:26:1F:EF:DA:D0:11:AC:AE:23:27:0A:A6:BF:8C:41:DE:42:92 Certificate issuer: /CN=A9166D4A/serialNumber=DA10261FEFDAD011ACAE23270AA6BF8C41DE4292 Certificate serial: 06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2hAmH-_a0BGsriMnCqa_jEHeQpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166D4A/AD1737A25B8111F1A8E84177A7833773/2hAmH-_a0BGsriMnCqa_jEHeQpI.mft Manifest number: 05 Signing time: Mon 01 Jun 2026 10:02:04 +0000 Manifest this update: Mon 01 Jun 2026 10:02:03 +0000 Manifest next update: Mon 08 Jun 2026 10:02:03 +0000 Files and hashes: 1: 2hAmH-_a0BGsriMnCqa_jEHeQpI.crl (hash: C6aMRWzZTMuGyo9IdNXFXsJ+n7EhYNDPiZxVlNLK114=) 2: 4B17E2545C0811F1B8292F4090833773.roa (hash: ZHRlNcAYAA1IcJM0xFQys5A4K8yg67YwwMJ4ch/a0ZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166D4A/AD1737A25B8111F1A8E84177A7833773/2hAmH-_a0BGsriMnCqa_jEHeQpI.crl rsync://rpki.apnic.net/member_repository/A9166D4A/AD1737A25B8111F1A8E84177A7833773/2hAmH-_a0BGsriMnCqa_jEHeQpI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2hAmH-_a0BGsriMnCqa_jEHeQpI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 10:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166D4A, serialNumber=DA10261FEFDAD011ACAE23270AA6BF8C41DE4292 Validity Not Before: Jun 1 10:02:03 2026 GMT Not After : Jun 8 10:02:03 2026 GMT Subject: CN=6a1d589c-79df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0f:27:9b:0f:34:49:46:b9:89:2c:a1:1d:0c: a0:c3:99:a1:e5:73:84:b5:c5:fa:2f:b7:c3:24:b1: d1:b9:fc:b2:4f:97:43:8d:4d:54:c1:20:a3:e5:6f: 2e:6e:29:c1:5b:68:53:20:e5:d8:7b:59:9e:2e:de: 21:db:c4:b7:0a:4c:70:27:ed:e2:ca:be:a7:10:92: aa:fb:67:dd:28:58:1a:67:8b:a7:eb:15:a6:21:df: 40:cb:53:2e:32:e8:e4:f4:15:b0:7e:03:3f:7f:cf: 12:ff:3d:c2:18:4e:05:f6:be:9d:db:6b:79:75:98: e5:bc:76:5c:30:b3:c8:15:54:7d:c0:f2:c1:f6:af: 28:8c:2a:16:39:e7:b9:71:03:07:85:b8:70:93:e6: f9:8d:6d:53:61:a5:8e:16:33:1d:8d:b1:23:0d:0b: fc:ae:79:82:4c:4c:b6:90:07:45:ca:1c:b2:c7:72: 66:12:9a:55:44:d5:64:7c:2f:2f:e8:be:91:56:f1: 99:ef:33:79:6a:4a:70:c6:ef:c4:78:b2:89:c3:52: 99:d6:a1:9e:ff:9e:94:de:29:9c:96:55:e4:3a:a1: 99:59:03:5c:8d:35:e1:18:fc:bd:ac:b0:47:99:6f: 9e:ec:92:03:e0:d8:f0:3c:62:41:9a:50:92:1e:f2: d6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:DF:57:1D:BF:E9:BA:E2:01:85:89:B4:FC:5A:0B:B3:29:90:AF:80 X509v3 Authority Key Identifier: keyid:DA:10:26:1F:EF:DA:D0:11:AC:AE:23:27:0A:A6:BF:8C:41:DE:42:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166D4A/AD1737A25B8111F1A8E84177A7833773/2hAmH-_a0BGsriMnCqa_jEHeQpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2hAmH-_a0BGsriMnCqa_jEHeQpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166D4A/AD1737A25B8111F1A8E84177A7833773/2hAmH-_a0BGsriMnCqa_jEHeQpI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:11:94:82:31:ed:08:df:d0:e9:f6:fa:e3:36:11:a1:8a:19: 1d:b5:82:b4:9b:f5:ae:02:0e:fb:df:4b:52:40:2e:27:c9:b9: fa:41:b0:26:42:60:91:6b:71:86:d2:f2:49:fb:59:a8:a6:99: cf:b3:ca:40:63:3f:ca:4c:67:11:89:2b:1e:26:73:ff:f1:8a: 3f:2e:2a:ed:69:0e:f1:cb:12:40:07:ae:4b:44:1e:40:9e:be: f5:56:13:ee:d9:f0:d0:5d:59:cc:ce:90:90:bd:4f:89:01:68: ea:9f:b1:c5:bd:db:b1:b5:26:ef:fc:68:ac:3c:d7:a2:7f:ae: d3:ab:0b:6b:ac:dd:7d:9f:21:74:a8:fa:ce:bd:5a:f4:e0:58: cc:60:3a:32:45:aa:f2:10:7c:13:75:00:bd:64:46:34:4d:80: 3e:b3:c3:6c:06:23:06:ac:f6:84:db:21:3f:45:eb:35:b9:b8: fc:44:4f:fc:60:c2:80:f2:03:23:f7:8a:4b:53:c8:88:11:db: 3f:68:12:d7:8f:4f:3b:07:59:cb:ce:d1:c3:31:07:15:fa:93: ff:76:7b:d9:9a:fc:42:3c:91:e0:f0:12:18:12:16:12:e1:3a: 6a:90:05:7a:34:34:62:e6:1d:c2:09:63:dc:21:49:96:48:0a: 54:13:16:b0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NkQ0QTExMC8GA1UEBRMoREExMDI2MUZFRkRBRDAxMUFDQUUyMzI3MEFBNkJGOEM0 MURFNDI5MjAeFw0yNjA2MDExMDAyMDNaFw0yNjA2MDgxMDAyMDNaMBgxFjAUBgNV BAMTDTZhMWQ1ODljLTc5ZGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClDyebDzRJRrmJLKEdDKDDmaHlc4S1xfovt8MksdG5/LJPl0ONTVTBIKPlby5u KcFbaFMg5dh7WZ4u3iHbxLcKTHAn7eLKvqcQkqr7Z90oWBpni6frFaYh30DLUy4y 6OT0FbB+Az9/zxL/PcIYTgX2vp3ba3l1mOW8dlwws8gVVH3A8sH2ryiMKhY557lx AweFuHCT5vmNbVNhpY4WMx2NsSMNC/yueYJMTLaQB0XKHLLHcmYSmlVE1WR8Ly/o vpFW8ZnvM3lqSnDG78R4sonDUpnWoZ7/npTeKZyWVeQ6oZlZA1yNNeEY/L2ssEeZ b57skgPg2PA8YkGaUJIe8tYDAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUPt9XHb/p uuIBhYm0/FoLsymQr4AwHwYDVR0jBBgwFoAU2hAmH+/a0BGsriMnCqa/jEHeQpIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY2RDRBL0FEMTczN0EyNUI4 MTExRjFBOEU4NDE3N0E3ODMzNzczLzJoQW1ILV9hMEJHc3JpTW5DcWFfakVIZVFw SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMmhBbUgtX2EwQkdzcmlNbkNxYV9qRUhlUXBJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY2 RDRBL0FEMTczN0EyNUI4MTExRjFBOEU4NDE3N0E3ODMzNzczLzJoQW1ILV9hMEJH c3JpTW5DcWFfakVIZVFwSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA4EZSCMe0I39Dp9vrjNhGhihkdtYK0m/WuAg7730tSQC4nybn6QbAmQmCRa3GG 0vJJ+1moppnPs8pAYz/KTGcRiSseJnP/8Yo/LirtaQ7xyxJAB65LRB5Anr71VhPu 2fDQXVnMzpCQvU+JAWjqn7HFvduxtSbv/GisPNeif67TqwtrrN19nyF0qPrOvVr0 4FjMYDoyRaryEHwTdQC9ZEY0TYA+s8NsBiMGrPaE2yE/Res1ubj8RE/8YMKA8gMj 94pLU8iIEds/aBLXj087B1nLztHDMQcV+pP/dnvZmvxCPJHg8BIYEhYS4TpqkAV6 NDRi5h3CCWPcIUmWSApUExaw -----END CERTIFICATE-----Generated at Tue Jun 2 21:47:02 2026 by rpki-client