$ rpki-client -vvf rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.mft File: ShUjM8QF9WZCwv0DscDx5R97ZNY.mft (raw, json) Hash identifier: x7XC735mKySFbzjE2bQNY4mX9z/x4Gu8L3+PZzv0ToI= Subject key identifier: 14:2A:59:AC:DC:00:FF:36:AD:48:AB:2D:4F:30:25:2F:AD:0C:23:7A Authority key identifier: 4A:15:23:33:C4:05:F5:66:42:C2:FD:03:B1:C0:F1:E5:1F:7B:64:D6 Certificate issuer: /CN=A9173BC9/serialNumber=4A152333C405F56642C2FD03B1C0F1E51F7B64D6 Certificate serial: 0D00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShUjM8QF9WZCwv0DscDx5R97ZNY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.mft Manifest number: 0CD9 Signing time: Sat 04 Jul 2026 18:33:23 +0000 Manifest this update: Sat 04 Jul 2026 18:33:22 +0000 Manifest next update: Sat 11 Jul 2026 18:33:22 +0000 Files and hashes: 1: ShUjM8QF9WZCwv0DscDx5R97ZNY.crl (hash: KardnG+F6/yeL7aYuspaiGPQF+3Mw73vVg3FWZf4HRM=) 2: 2A9AFB320BC911EBBA11562FC4F9AE02.roa (hash: pUo1M6Sm4lp9c2XrgF+LDSj3mLXP2pG6wm3MhRuMa6w=) 3: EF14DD34B6E211EAB3BA9536C4F9AE02.roa (hash: 4GtPeohLS8OTUPDc8RgozS35ewcE3lUXQAukx2eqQRw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.crl rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShUjM8QF9WZCwv0DscDx5R97ZNY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Jul 2026 18:33:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3328 (0xd00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173BC9, serialNumber=4A152333C405F56642C2FD03B1C0F1E51F7B64D6 Validity Not Before: Jul 4 18:33:22 2026 GMT Not After : Jul 11 18:33:22 2026 GMT Subject: CN=6a4951f3-5f42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:73:dc:41:8c:5f:bb:a3:2f:31:1d:18:18:72: 77:1c:39:65:49:98:91:d1:ee:a4:c7:6d:be:d1:61: da:4b:c5:01:d0:e8:ad:65:82:e2:86:e2:14:5a:cb: 6b:e7:4f:7b:7c:ec:fc:73:c7:69:6e:e4:a9:87:57: 96:3a:7b:8f:b9:ca:41:f2:33:24:4c:b9:45:7d:8d: ae:fc:72:be:21:fb:6b:d5:2f:06:c6:7d:78:ff:90: 20:50:b9:f9:f6:4d:79:35:a0:76:c0:5f:e1:61:e3: a4:c0:ea:6e:14:6c:8b:6a:59:c0:0c:f3:ae:a5:79: 55:f4:59:63:4a:92:8e:73:07:68:5d:ed:20:c6:74: 8b:32:b0:d2:dd:41:ac:83:86:1c:99:9b:79:6c:c8: 24:da:4f:87:78:6b:9c:33:25:b9:bd:06:3c:e8:c9: a7:b0:dd:8e:45:f4:61:59:65:2b:22:36:85:21:91: d4:7a:9c:ce:05:85:41:bc:5d:aa:e1:ab:8f:39:fa: e6:83:43:a6:dc:fa:bc:8f:09:2c:18:fa:e4:38:3c: 88:55:d0:11:03:73:c3:9e:f1:b1:3e:47:13:9b:c8: a0:aa:95:16:00:d6:50:f8:68:bd:b9:db:4e:68:3f: a3:2b:d3:6e:e7:36:d9:68:fa:4d:4c:68:8a:b8:fb: 08:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:2A:59:AC:DC:00:FF:36:AD:48:AB:2D:4F:30:25:2F:AD:0C:23:7A X509v3 Authority Key Identifier: keyid:4A:15:23:33:C4:05:F5:66:42:C2:FD:03:B1:C0:F1:E5:1F:7B:64:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShUjM8QF9WZCwv0DscDx5R97ZNY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:b9:9d:cf:5e:e4:72:aa:ee:6f:a1:6d:e1:59:be:82:e3:f6: 1a:c7:e7:16:cb:dc:d6:58:99:0d:e8:f5:51:8a:68:98:5c:0a: 86:d9:23:e3:6b:39:38:44:05:61:a3:d0:74:b7:55:de:e4:f8: 76:a1:82:d0:8b:63:41:ff:d5:6f:f6:cc:90:c5:b0:1b:05:4d: 9f:c2:8e:47:f8:fc:1a:e5:03:27:f7:7c:01:40:64:f0:ac:7c: ac:84:a8:ca:d4:26:c1:6f:93:f4:19:c6:aa:e2:cc:89:d7:14: 80:af:04:8c:2a:f5:35:80:9b:1b:18:df:be:08:4b:61:d0:8b: 6f:c2:4f:8d:6d:05:63:a6:c0:42:33:fc:49:cc:42:00:9f:3c: 1a:d7:80:5e:aa:55:5b:63:78:84:b1:df:8b:3a:db:0d:b3:4b: e5:1d:47:fe:3b:76:70:85:7d:6d:1b:89:92:cc:93:f5:95:03: 2c:b2:e8:57:f9:0e:d1:53:19:e8:f1:93:d8:1f:11:98:30:7e: 71:8b:2f:b8:48:b6:4a:cb:c3:fd:94:1d:74:b3:81:cf:0d:cf: d8:9f:ee:79:90:6d:a3:88:ed:91:15:a7:e2:c0:d5:69:4c:e6: 13:78:e9:4c:42:86:8d:cc:42:c7:99:e2:6a:ee:df:de:41:98: 3e:f6:46:ce -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNCQzkxMTAvBgNVBAUTKDRBMTUyMzMzQzQwNUY1NjY0MkMyRkQwM0IxQzBGMUU1 MUY3QjY0RDYwHhcNMjYwNzA0MTgzMzIyWhcNMjYwNzExMTgzMzIyWjAYMRYwFAYD VQQDEw02YTQ5NTFmMy01ZjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXPcQYxfu6MvMR0YGHJ3HDllSZiR0e6kx22+0WHaS8UB0OitZYLihuIUWstr 5097fOz8c8dpbuSph1eWOnuPucpB8jMkTLlFfY2u/HK+Iftr1S8Gxn14/5AgULn5 9k15NaB2wF/hYeOkwOpuFGyLalnADPOupXlV9FljSpKOcwdoXe0gxnSLMrDS3UGs g4YcmZt5bMgk2k+HeGucMyW5vQY86MmnsN2ORfRhWWUrIjaFIZHUepzOBYVBvF2q 4auPOfrmg0Om3Pq8jwksGPrkODyIVdARA3PDnvGxPkcTm8igqpUWANZQ+Gi9udtO aD+jK9Nu5zbZaPpNTGiKuPsIlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBQqWazc AP82rUirLU8wJS+tDCN6MB8GA1UdIwQYMBaAFEoVIzPEBfVmQsL9A7HA8eUfe2TW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0JDOS9DNUM4M0NBRTEz QTAxMUVBOTNFRUVGNjVDNEY5QUUwMi9TaFVqTThRRjlXWkN3djBEc2NEeDVSOTda TlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NoVWpNOFFGOVdaQ3d2MERzY0R4NVI5N1pOWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0JDOS9DNUM4M0NBRTEzQTAxMUVBOTNFRUVGNjVDNEY5QUUwMi9TaFVqTThRRjlX WkN3djBEc2NEeDVSOTdaTlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm7mdz17kcqrub6Ft4Vm+guP2GsfnFsvc1liZDej1UYpomFwKhtkj42s5OEQF YaPQdLdV3uT4dqGC0ItjQf/Vb/bMkMWwGwVNn8KOR/j8GuUDJ/d8AUBk8Kx8rISo ytQmwW+T9BnGquLMidcUgK8EjCr1NYCbGxjfvghLYdCLb8JPjW0FY6bAQjP8ScxC AJ88GteAXqpVW2N4hLHfizrbDbNL5R1H/jt2cIV9bRuJksyT9ZUDLLLoV/kO0VMZ 6PGT2B8RmDB+cYsvuEi2SsvD/ZQddLOBzw3P2J/ueZBto4jtkRWn4sDVaUzmE3jp TEKGjcxCx5niau7f3kGYPvZGzg== -----END CERTIFICATE-----Generated at Sun Jul 5 17:20:44 2026 by rpki-client