$ rpki-client -vvf rpki.apnic.net/member_repository/A9173204/C6EB65662B4011F1BAED9A6390833773/Ct3FBPt0MBQrthUUcq0X_PFyMVo.mft File: Ct3FBPt0MBQrthUUcq0X_PFyMVo.mft (raw, json) Hash identifier: 1voz3Cv5gS6aHGpmZvYN2Ou5qK4mZ2yu8LbR/4v0wDg= Subject key identifier: 66:32:BB:F4:62:99:7A:15:1B:A1:76:58:64:33:E4:35:E5:2A:01:A4 Authority key identifier: 0A:DD:C5:04:FB:74:30:14:2B:B6:15:14:72:AD:17:FC:F1:72:31:5A Certificate issuer: /CN=A9173204/serialNumber=0ADDC504FB7430142BB6151472AD17FCF172315A Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ct3FBPt0MBQrthUUcq0X_PFyMVo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173204/C6EB65662B4011F1BAED9A6390833773/Ct3FBPt0MBQrthUUcq0X_PFyMVo.mft Manifest number: 23 Signing time: Mon 01 Jun 2026 09:39:16 +0000 Manifest this update: Mon 01 Jun 2026 09:39:15 +0000 Manifest next update: Mon 08 Jun 2026 09:39:15 +0000 Files and hashes: 1: Ct3FBPt0MBQrthUUcq0X_PFyMVo.crl (hash: 3A2HTgCUV1lnImI77yg2Q15NVP0CQQl8P/eVQphJwPo=) 2: 4E3439122B4111F19D37C4AC90833773.roa (hash: QQvgNRDiPl6A65a2LWGiXcir6fcA9w1PwW/VYZpOkXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173204/C6EB65662B4011F1BAED9A6390833773/Ct3FBPt0MBQrthUUcq0X_PFyMVo.crl rsync://rpki.apnic.net/member_repository/A9173204/C6EB65662B4011F1BAED9A6390833773/Ct3FBPt0MBQrthUUcq0X_PFyMVo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ct3FBPt0MBQrthUUcq0X_PFyMVo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 09:39:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173204, serialNumber=0ADDC504FB7430142BB6151472AD17FCF172315A Validity Not Before: Jun 1 09:39:15 2026 GMT Not After : Jun 8 09:39:15 2026 GMT Subject: CN=6a1d5344-9371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8d:f7:cd:bb:1d:5b:7b:e2:34:ae:06:7b:bf: c8:a9:71:69:06:80:27:2a:11:24:90:8f:4b:c1:85: 63:4e:25:f7:e0:27:91:d0:30:31:13:58:4f:35:14: a6:95:11:37:43:9e:11:c7:54:10:20:93:01:1b:b0: da:d6:21:e7:8d:db:f4:71:3d:ac:82:20:3f:1a:7e: db:43:5e:bb:f5:54:0c:6e:2d:b8:0e:4c:8b:dc:04: c4:31:80:ee:2a:8b:3d:31:b7:6f:b9:a7:e0:ba:d6: 8e:44:e0:ff:fa:00:44:94:03:14:ad:4c:1d:fa:4e: 23:32:ed:a7:00:3e:f8:a7:73:d6:c4:06:57:c2:0f: e9:03:e7:29:ab:76:5e:27:25:fb:4b:da:65:4d:69: 29:81:db:c1:28:60:a9:8c:d5:6c:d1:20:83:4f:8d: f3:62:04:f6:65:4b:36:47:9a:45:1d:b3:cf:61:7d: 30:6a:20:84:bd:a1:22:5a:5d:bf:c1:04:ca:d4:b4: 15:c6:5d:8e:81:e5:bb:ce:42:44:24:77:66:6a:c9: 1c:31:ac:b0:c5:a7:22:54:04:ca:71:76:29:78:cd: 6c:ed:ff:65:73:d3:aa:5f:8b:85:9e:c4:57:0c:7b: 2d:6e:7a:fa:d0:d9:be:5c:18:a7:d4:88:f7:d8:92: 65:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:32:BB:F4:62:99:7A:15:1B:A1:76:58:64:33:E4:35:E5:2A:01:A4 X509v3 Authority Key Identifier: keyid:0A:DD:C5:04:FB:74:30:14:2B:B6:15:14:72:AD:17:FC:F1:72:31:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173204/C6EB65662B4011F1BAED9A6390833773/Ct3FBPt0MBQrthUUcq0X_PFyMVo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ct3FBPt0MBQrthUUcq0X_PFyMVo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173204/C6EB65662B4011F1BAED9A6390833773/Ct3FBPt0MBQrthUUcq0X_PFyMVo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:14:8e:fe:66:18:45:c7:b1:96:5f:84:40:3e:9d:13:e9:86: 26:c8:7a:85:bf:49:8f:8a:fa:85:91:be:e3:3a:52:ca:de:3d: bf:3e:a9:97:89:20:a5:69:9d:69:bc:08:d8:dc:b3:f1:eb:3a: 32:ea:76:5c:f1:f4:9a:cc:65:e2:dd:9d:ad:87:03:f5:79:de: c9:e6:3c:dd:3f:a3:80:b7:f6:2e:5b:9f:64:44:a1:10:de:fb: 69:5b:ef:f7:2c:92:af:2e:22:1e:f8:15:f2:e5:1f:96:71:ad: b5:16:62:0a:03:24:97:14:17:bb:a2:d2:f4:25:30:35:df:d5: 7a:af:36:87:08:b8:92:e8:a8:2c:e8:91:21:dd:79:84:17:88: 61:30:d5:dc:d9:b9:e5:69:b7:92:62:d5:e7:12:5f:9e:4f:64: 60:e8:91:79:fa:42:07:51:5a:c2:f5:7a:0d:75:c1:64:7d:34: 84:bd:a4:24:77:4b:16:02:07:92:f1:b5:87:29:64:a6:4d:4b: 44:2a:42:d0:ea:a2:c0:73:8c:a7:04:41:aa:5f:62:f0:f1:a2: 1b:f4:59:4a:f1:24:4f:18:70:93:cc:ed:d9:b9:1a:c8:38:f2: b5:24:ce:eb:cb:c9:91:dd:64:d6:4a:ea:ac:94:a4:86:1c:31: 50:cc:61:bb -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MzIwNDExMC8GA1UEBRMoMEFEREM1MDRGQjc0MzAxNDJCQjYxNTE0NzJBRDE3RkNG MTcyMzE1QTAeFw0yNjA2MDEwOTM5MTVaFw0yNjA2MDgwOTM5MTVaMBgxFjAUBgNV BAMTDTZhMWQ1MzQ0LTkzNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3jffNux1be+I0rgZ7v8ipcWkGgCcqESSQj0vBhWNOJffgJ5HQMDETWE81FKaV ETdDnhHHVBAgkwEbsNrWIeeN2/RxPayCID8afttDXrv1VAxuLbgOTIvcBMQxgO4q iz0xt2+5p+C61o5E4P/6AESUAxStTB36TiMy7acAPvinc9bEBlfCD+kD5ymrdl4n JftL2mVNaSmB28EoYKmM1WzRIINPjfNiBPZlSzZHmkUds89hfTBqIIS9oSJaXb/B BMrUtBXGXY6B5bvOQkQkd2ZqyRwxrLDFpyJUBMpxdil4zWzt/2Vz06pfi4WexFcM ey1uevrQ2b5cGKfUiPfYkmW1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUZjK79GKZ ehUboXZYZDPkNeUqAaQwHwYDVR0jBBgwFoAUCt3FBPt0MBQrthUUcq0X/PFyMVow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTczMjA0L0M2RUI2NTY2MkI0 MDExRjFCQUVEOUE2MzkwODMzNzczL0N0M0ZCUHQwTUJRcnRoVVVjcTBYX1BGeU1W by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQ3QzRkJQdDBNQlFydGhVVWNxMFhfUEZ5TVZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcz MjA0L0M2RUI2NTY2MkI0MDExRjFCQUVEOUE2MzkwODMzNzczL0N0M0ZCUHQwTUJR cnRoVVVjcTBYX1BGeU1Wby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA3FI7+ZhhFx7GWX4RAPp0T6YYmyHqFv0mPivqFkb7jOlLK3j2/PqmXiSClaZ1p vAjY3LPx6zoy6nZc8fSazGXi3Z2thwP1ed7J5jzdP6OAt/YuW59kRKEQ3vtpW+/3 LJKvLiIe+BXy5R+Wca21FmIKAySXFBe7otL0JTA139V6rzaHCLiS6Kgs6JEh3XmE F4hhMNXc2bnlabeSYtXnEl+eT2Rg6JF5+kIHUVrC9XoNdcFkfTSEvaQkd0sWAgeS 8bWHKWSmTUtEKkLQ6qLAc4ynBEGqX2Lw8aIb9FlK8SRPGHCTzO3ZuRrIOPK1JM7r y8mR3WTWSuqslKSGHDFQzGG7 -----END CERTIFICATE-----Generated at Tue Jun 2 21:20:02 2026 by rpki-client