$ rpki-client -vvf rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft File: rwJRH3yA38Do7VBvZjD2e9ZADgk.mft (raw, json) Hash identifier: fPyO5y3NFbj/EpupSdwDceUUyf55FYRuYd3VFFjk6Uc= Subject key identifier: 2B:37:18:13:80:89:5C:19:63:4B:7C:97:6E:F7:E4:AA:9B:4B:EE:3F Authority key identifier: AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09 Certificate issuer: /CN=A9168B4A/serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09 Certificate serial: 1509 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft Manifest number: 14DC Signing time: Thu 18 Jun 2026 16:48:41 +0000 Manifest this update: Thu 18 Jun 2026 16:48:41 +0000 Manifest next update: Thu 25 Jun 2026 16:48:41 +0000 Files and hashes: 1: rwJRH3yA38Do7VBvZjD2e9ZADgk.crl (hash: t83ys6k+lN+eN0zzg/634vPaVTqGoze/poQNPQrQ8bM=) 2: 97A9C872450611F093EC3A65C4F9AE02.roa (hash: MmIdcidip9wfZBZNyWLT9cL4eJ3yTZtCyba7+5jHe8E=) 3: A83ECFAE791B11F0B7D48969C4F9AE02.roa (hash: mUJCyq9Quz8XTmFeT3HrV8pJ/1hf+u+XYqhrbRQjU3c=) 4: 4C6227D2B69B11EFA181E00AC4F9AE02.roa (hash: gIriR3eH5k3pAT0NnJ+OPQQKfKfiZEc9fhp0R9U18R0=) 5: 7F444842C3A411ED8EFA6F13C4F9AE02.roa (hash: UX+Z+m5y60d6ZGNGCzFSXggUSxqmAM8xUHETNR0GgzI=) 6: 983A5536450611F093EC3A65C4F9AE02.roa (hash: ijwzgpsaKu/9677qc+bwpPEiLD74pnpjkFQugVrQBxM=) 7: 26F19BD2EFFE11EDA34BD84DC4F9AE02.roa (hash: /dfSFFokCqZHKPcfVIUa5saL4zfwsMCEJvMbseXpy4U=) 8: 7EA2ADC0C3A411ED8EFA6F13C4F9AE02.roa (hash: Lqak49Os9Ya4UTOEGKBzKyCOhe/2umYec1RSzQZJSpk=) 9: 98A0F2BE450611F093EC3A65C4F9AE02.roa (hash: Wopqvhkb24wEJCTtlFgfkTquZwIEfGbCSBar+r2PsA0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Jun 2026 16:48:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5385 (0x1509) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168B4A, serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09 Validity Not Before: Jun 18 16:48:41 2026 GMT Not After : Jun 25 16:48:41 2026 GMT Subject: CN=6a342169-d385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:49:90:c3:0c:76:65:00:e2:5f:90:76:f1:59: 63:3d:f7:22:21:e2:08:83:b7:69:5d:8c:70:a9:9d: c3:5d:20:4c:63:75:49:45:16:e4:22:d4:7b:71:be: 08:1e:16:01:fb:c7:1f:97:d9:8d:cb:2e:03:be:0a: 4d:31:a0:9d:50:0f:04:ed:b3:4c:62:e4:98:26:12: d3:83:10:80:52:7b:46:b2:7b:24:df:a6:e7:06:f8: 4f:20:4d:d3:e0:94:82:65:c7:bf:fa:41:fd:d3:3c: c0:5b:ca:ec:42:ba:2a:01:d1:03:87:e2:92:b8:c6: b2:bf:c0:d7:bb:e3:ca:97:28:0e:55:11:fa:ac:e5: 65:88:56:a8:b6:91:6b:9d:32:6d:de:78:f6:7c:9b: a0:1b:9d:25:af:fe:b2:14:fe:60:cb:03:22:8b:79: 6e:42:e6:a2:7a:a1:9c:29:41:67:14:3e:cb:fe:a7: 69:95:dc:62:34:98:98:40:ec:cc:d6:aa:1a:85:ed: 4d:88:e4:4e:b1:09:83:7f:35:22:8c:41:8e:64:64: 29:72:f7:eb:b9:aa:8d:51:84:bc:26:24:19:23:41: 7c:e7:20:b8:30:c0:65:17:1b:7a:16:bd:82:37:c4: e9:e2:8e:69:b2:dd:9a:5e:24:6b:af:17:14:8f:17: bd:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:37:18:13:80:89:5C:19:63:4B:7C:97:6E:F7:E4:AA:9B:4B:EE:3F X509v3 Authority Key Identifier: keyid:AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:4d:6b:50:6e:34:3b:ff:62:36:a8:df:ef:35:07:7e:2b:08: 61:95:5e:a6:a3:6e:c6:82:8b:7b:61:34:24:78:6e:9c:6d:79: 91:84:35:32:e1:e8:f2:46:85:8f:d5:2c:de:28:77:ed:fe:9e: d4:64:0a:df:62:73:63:08:00:d1:5f:05:61:c5:42:0f:7c:bd: 9d:43:86:3d:0e:75:73:24:3d:6d:4c:99:45:aa:0e:6a:da:27: 81:ca:05:f6:bd:b3:da:12:7f:63:77:2b:a0:ac:c8:a0:23:e7: 79:fe:1b:59:41:29:84:b8:ea:db:9d:ee:43:c2:b1:75:00:6c: db:b3:62:f4:26:dc:fc:4b:88:31:9a:4b:40:f5:0f:97:fc:37: 11:8e:9c:2e:39:13:02:96:31:cc:55:69:3d:40:2a:0a:72:31: 20:c8:c8:28:99:14:9e:33:a1:37:e7:f4:a4:96:df:dc:b5:68: e5:16:f1:4a:05:15:3d:a1:d5:4a:f1:63:57:73:13:1f:0c:98: 94:02:72:8e:f4:27:3f:99:d8:d9:45:aa:45:0d:10:39:c0:8d: 59:8a:0f:c0:76:a7:7c:82:49:af:f3:61:0f:45:99:7d:4a:33: bd:b3:3d:29:94:2b:77:bc:78:8d:5a:df:49:a0:25:d2:d9:e0: 08:23:50:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhCNEExMTAvBgNVBAUTKEFGMDI1MTFGN0M4MERGQzBFOEVENTA2RjY2MzBGNjdC RDY0MDBFMDkwHhcNMjYwNjE4MTY0ODQxWhcNMjYwNjI1MTY0ODQxWjAYMRYwFAYD VQQDEw02YTM0MjE2OS1kMzg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlUmQwwx2ZQDiX5B28VljPfciIeIIg7dpXYxwqZ3DXSBMY3VJRRbkItR7cb4I HhYB+8cfl9mNyy4DvgpNMaCdUA8E7bNMYuSYJhLTgxCAUntGsnsk36bnBvhPIE3T 4JSCZce/+kH90zzAW8rsQroqAdEDh+KSuMayv8DXu+PKlygOVRH6rOVliFaotpFr nTJt3nj2fJugG50lr/6yFP5gywMii3luQuaieqGcKUFnFD7L/qdpldxiNJiYQOzM 1qoahe1NiOROsQmDfzUijEGOZGQpcvfruaqNUYS8JiQZI0F85yC4MMBlFxt6Fr2C N8Tp4o5pst2aXiRrrxcUjxe92QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCs3GBOA iVwZY0t8l2735KqbS+4/MB8GA1UdIwQYMBaAFK8CUR98gN/A6O1Qb2Yw9nvWQA4J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEI0QS8wQURCMTdDMDgw MEExMUU4OUI0ODNFN0NDNEY5QUUwMi9yd0pSSDN5QTM4RG83VkJ2WmpEMmU5WkFE Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3J3SlJIM3lBMzhEbzdWQnZaakQyZTlaQURnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEI0QS8wQURCMTdDMDgwMEExMUU4OUI0ODNFN0NDNEY5QUUwMi9yd0pSSDN5QTM4 RG83VkJ2WmpEMmU5WkFEZ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeE1rUG40O/9iNqjf7zUHfisIYZVepqNuxoKLe2E0JHhunG15kYQ1MuHo8kaF j9Us3ih37f6e1GQK32JzYwgA0V8FYcVCD3y9nUOGPQ51cyQ9bUyZRaoOatongcoF 9r2z2hJ/Y3croKzIoCPnef4bWUEphLjq253uQ8KxdQBs27Ni9Cbc/EuIMZpLQPUP l/w3EY6cLjkTApYxzFVpPUAqCnIxIMjIKJkUnjOhN+f0pJbf3LVo5RbxSgUVPaHV SvFjV3MTHwyYlAJyjvQnP5nY2UWqRQ0QOcCNWYoPwHanfIJJr/NhD0WZfUozvbM9 KZQrd7x4jVrfSaAl0tngCCNQIg== -----END CERTIFICATE-----Generated at Sat Jun 20 11:58:18 2026 by rpki-client