$ rpki-client -vvf rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft File: o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft (raw, json) Hash identifier: IwPQYeA0S1OsXXzaKzzg/VXC24DSaXJVaNYC4Jo1ox8= Subject key identifier: FA:51:83:E0:6C:6E:46:C8:CC:48:73:65:CC:26:D4:B1:54:05:6D:77 Authority key identifier: A3:D0:06:26:C2:F9:B4:62:C5:50:7F:F1:80:C3:6D:E9:C3:39:9C:B2 Certificate issuer: /CN=A9172878/serialNumber=A3D00626C2F9B462C5507FF180C36DE9C3399CB2 Certificate serial: 35DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft Manifest number: 358A Signing time: Mon 22 Jun 2026 14:32:46 +0000 Manifest this update: Mon 22 Jun 2026 14:32:45 +0000 Manifest next update: Mon 29 Jun 2026 14:32:45 +0000 Files and hashes: 1: o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl (hash: FnEBHm7OvCydP5jezZ7gA/A+qE5JWX0CP8LhreOJ/uQ=) 2: C552F48EC80011EAAD578B77C4F9AE02.roa (hash: jXl+86vCs3KiG7eJ3MpATQjLUSqhs8yk2VzZe0i6DIs=) 3: 8D2DEDF4C2A811EBA79A7055C4F9AE02.roa (hash: ATzhpEQ3sWsRctxwBO/oEigCG80DEQbCszCIkMpVBHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Jun 2026 14:32:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13791 (0x35df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172878, serialNumber=A3D00626C2F9B462C5507FF180C36DE9C3399CB2 Validity Not Before: Jun 22 14:32:45 2026 GMT Not After : Jun 29 14:32:45 2026 GMT Subject: CN=6a39478e-ab39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ac:91:54:94:0d:ff:ae:03:7b:e0:d2:61:7d: f2:d1:83:22:ee:ad:b3:04:98:fb:18:49:96:98:46: d8:5c:f2:07:4d:ba:56:17:c2:81:c1:ea:fe:77:de: 27:f9:39:7a:84:03:6d:a9:8d:3f:8d:9b:7a:b1:f6: 33:ee:5c:68:0d:55:6f:09:1b:fa:4e:dd:56:24:e9: cf:4b:3f:40:ef:fc:d7:83:81:1b:84:34:64:c6:a3: 04:4d:c1:f7:39:95:3f:fd:7b:4e:a6:30:86:33:e6: e3:53:af:49:c4:b8:cf:33:f3:16:88:09:c1:72:a2: 9b:9b:b8:a7:8c:c2:97:dc:e9:06:07:cd:3d:e9:3c: 04:e7:d6:75:c2:56:67:f4:87:e0:80:96:80:fa:84: b4:52:68:42:fb:e0:7a:0d:ef:5a:a1:e0:72:7a:b9: df:47:af:18:84:40:18:ff:13:c0:1f:6e:ec:28:5a: dd:9f:63:cf:9b:19:4b:6f:eb:2c:27:fc:b2:df:72: 31:9e:ee:4f:da:b2:d4:1e:77:87:b2:c9:dc:10:e4: 4c:1f:8a:95:ae:6e:4d:b4:4f:c2:b2:e9:b9:42:cb: 90:94:83:b1:95:4d:57:df:7a:b0:82:be:93:90:89: e1:e8:0d:5d:07:7e:f5:0b:a1:0a:bc:9b:8e:22:bd: a5:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:51:83:E0:6C:6E:46:C8:CC:48:73:65:CC:26:D4:B1:54:05:6D:77 X509v3 Authority Key Identifier: keyid:A3:D0:06:26:C2:F9:B4:62:C5:50:7F:F1:80:C3:6D:E9:C3:39:9C:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:61:37:2c:d6:b3:9f:a7:ee:dc:ae:4a:b6:b3:b3:1d:40:fe: ce:23:59:72:8c:0e:a3:0f:ef:0c:d6:76:81:37:f6:8a:6d:ae: 30:9d:ea:0d:b1:5f:96:2a:51:67:83:74:ae:9e:d1:be:a8:dd: fb:b5:43:91:df:98:11:81:5c:a8:b6:25:74:fa:1a:ea:c1:56: b5:ec:7d:5a:a9:ce:f3:8b:0c:47:96:3d:89:d1:d8:0f:d7:e8: f0:a8:56:34:3a:19:64:5a:81:71:aa:60:c0:65:fe:44:e9:2b: 41:14:48:18:fd:26:cd:71:4b:fa:71:b4:83:66:43:04:a8:a2: 94:ca:29:ae:eb:cb:c7:6c:2c:d9:6a:85:71:c7:cc:b7:88:ef: ba:2b:fa:09:d7:4c:16:7f:25:52:67:2b:c7:9f:65:2d:38:80: 1b:f6:8f:9a:0a:92:d6:29:30:75:69:94:1d:41:c4:e7:91:3e: 16:99:90:1c:a3:03:2e:c0:35:d7:e4:97:97:55:61:04:35:ac: a3:c0:90:ca:41:05:54:19:ea:5b:5d:31:18:79:02:09:e3:99: 0e:3e:ff:eb:11:cb:3c:5a:ed:67:76:a1:62:69:2f:73:af:84: eb:d8:a7:50:3e:81:81:bc:9a:7c:ec:6b:62:1d:33:bf:36:8a: 5a:00:a7:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI4NzgxMTAvBgNVBAUTKEEzRDAwNjI2QzJGOUI0NjJDNTUwN0ZGMTgwQzM2REU5 QzMzOTlDQjIwHhcNMjYwNjIyMTQzMjQ1WhcNMjYwNjI5MTQzMjQ1WjAYMRYwFAYD VQQDEw02YTM5NDc4ZS1hYjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ayRVJQN/64De+DSYX3y0YMi7q2zBJj7GEmWmEbYXPIHTbpWF8KBwer+d94n +Tl6hANtqY0/jZt6sfYz7lxoDVVvCRv6Tt1WJOnPSz9A7/zXg4EbhDRkxqMETcH3 OZU//XtOpjCGM+bjU69JxLjPM/MWiAnBcqKbm7injMKX3OkGB8096TwE59Z1wlZn 9IfggJaA+oS0UmhC++B6De9aoeByernfR68YhEAY/xPAH27sKFrdn2PPmxlLb+ss J/yy33Ixnu5P2rLUHneHssncEORMH4qVrm5NtE/Csum5QsuQlIOxlU1X33qwgr6T kInh6A1dB371C6EKvJuOIr2lRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPpRg+Bs bkbIzEhzZcwm1LFUBW13MB8GA1UdIwQYMBaAFKPQBibC+bRixVB/8YDDbenDOZyy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjg3OC80Qzk5OEEzNjFE OEExMUUyOEExRjIzRTQwOEIwMkNEMi9vOUFHSnNMNXRHTEZVSF94Z01OdDZjTTVu TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL285QUdKc0w1dEdMRlVIX3hnTU50NmNNNW5MSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjg3OC80Qzk5OEEzNjFEOEExMUUyOEExRjIzRTQwOEIwMkNEMi9vOUFHSnNMNXRH TEZVSF94Z01OdDZjTTVuTEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAH2E3LNazn6fu3K5KtrOzHUD+ziNZcowOow/vDNZ2gTf2im2uMJ3qDbFflipR Z4N0rp7Rvqjd+7VDkd+YEYFcqLYldPoa6sFWtex9WqnO84sMR5Y9idHYD9fo8KhW NDoZZFqBcapgwGX+ROkrQRRIGP0mzXFL+nG0g2ZDBKiilMopruvLx2ws2WqFccfM t4jvuiv6CddMFn8lUmcrx59lLTiAG/aPmgqS1ikwdWmUHUHE55E+FpmQHKMDLsA1 1+SXl1VhBDWso8CQykEFVBnqW10xGHkCCeOZDj7/6xHLPFrtZ3ahYmkvc6+E69in UD6BgbyafOxrYh0zvzaKWgCnRw== -----END CERTIFICATE-----Generated at Wed Jun 24 11:20:05 2026 by rpki-client