$ rpki-client -vvf rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft File: 2CKi28iCNPgPcORngrLU2c0_m9w.mft (raw, json) Hash identifier: X3JhW2+wcAusyCfGsZD0RXeG9LZXNz5ol8i2jFW5Cwo= Subject key identifier: A1:BA:B6:23:A5:D9:15:19:77:F0:45:C2:0C:CE:CC:D8:C5:59:A6:9F Authority key identifier: D8:22:A2:DB:C8:82:34:F8:0F:70:E4:67:82:B2:D4:D9:CD:3F:9B:DC Certificate issuer: /CN=A9176B32/serialNumber=D822A2DBC88234F80F70E46782B2D4D9CD3F9BDC Certificate serial: 02F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft Manifest number: 02E6 Signing time: Mon 01 Jun 2026 02:02:26 +0000 Manifest this update: Mon 01 Jun 2026 02:02:25 +0000 Manifest next update: Mon 08 Jun 2026 02:02:25 +0000 Files and hashes: 1: 2CKi28iCNPgPcORngrLU2c0_m9w.crl (hash: AgWOUwWJrtVE1CFikfcgI6qDixU1UO0S5XqPd8AGUFc=) 2: C3A9035CC8FF11F0BE76E779C4F9AE02.roa (hash: Qq87SJXaEP4qrP/T3bWQOCeWogcPQnVi06inH60FBfo=) 3: C4149072C8FF11F0AC8AE779C4F9AE02.roa (hash: e26HjI6IThHSTcyiS5wewUgNVLH1ZtA87nwKAQOfEN8=) 4: 3A281348C8FF11F0A8BC2876C4F9AE02.roa (hash: qmW4boAu4mPyTeZ/1TM4f4A59PHbYduM7lK03RYvMz8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.crl rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 02:02:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 756 (0x2f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176B32, serialNumber=D822A2DBC88234F80F70E46782B2D4D9CD3F9BDC Validity Not Before: Jun 1 02:02:25 2026 GMT Not After : Jun 8 02:02:25 2026 GMT Subject: CN=6a1ce831-6d79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:06:bc:91:57:0b:1c:5a:29:12:21:14:c0:c0: 19:8f:ec:c2:47:e9:1c:93:29:93:20:e4:5c:bb:9c: aa:90:31:a5:71:fc:db:1a:f8:9c:7c:45:12:7a:59: 86:bf:38:2b:9d:95:f1:70:a8:95:8d:c6:9a:30:d6: 25:c2:e2:fe:cf:a7:be:6b:ee:5f:d8:8c:63:80:b6: ac:c2:8f:31:0a:6d:28:c2:25:b5:94:24:4a:5d:16: 02:51:45:78:22:8f:16:ef:ce:57:bc:8c:63:34:d3: b0:23:bf:62:85:e3:00:82:1b:fd:c9:c0:9c:7d:49: 68:11:b6:b9:98:9e:cf:22:10:13:72:1e:ff:c3:2c: 74:ba:4e:aa:8d:de:1f:9a:08:8c:e8:a1:9c:4c:69: 63:b3:70:90:72:53:2a:f5:61:43:0e:f8:79:b7:12: 4e:d7:a1:be:c4:cf:b7:0a:3a:2a:12:1a:3b:f9:26: f7:e1:08:b9:e8:3f:56:95:43:0f:41:34:df:5d:13: 39:d4:75:7e:0e:9e:86:eb:57:bd:1f:3d:5f:ea:02: 80:f8:55:95:71:86:4d:f9:38:ca:e5:6c:fb:b9:f2: fe:de:c5:d7:78:df:56:34:dc:57:62:2c:26:8c:da: 2e:d4:da:74:9c:3f:24:79:ca:37:1a:63:d3:2c:2b: 81:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:BA:B6:23:A5:D9:15:19:77:F0:45:C2:0C:CE:CC:D8:C5:59:A6:9F X509v3 Authority Key Identifier: keyid:D8:22:A2:DB:C8:82:34:F8:0F:70:E4:67:82:B2:D4:D9:CD:3F:9B:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:84:54:cc:a6:91:a3:00:63:42:b1:4a:83:ff:14:f2:17:dc: 62:0a:9a:53:11:14:db:cf:ec:dd:b3:b4:c8:ae:79:e8:b6:0d: b5:97:be:86:49:01:45:23:39:bd:e8:b0:e1:9c:a8:08:6c:b9: 9b:63:3b:e3:e2:cd:c1:82:70:e7:a4:ca:82:f1:e7:96:ea:87: d0:b5:1a:c4:a5:21:6f:cf:e1:c3:8e:e5:ec:0a:b4:11:73:99: 6c:08:b1:f1:ca:fd:fd:10:b6:2d:7a:20:b2:d5:cc:4b:74:c6: a0:f4:fa:4b:b8:1a:27:5d:10:88:15:f0:bd:ad:df:3e:bf:4b: bc:3f:36:18:69:04:e7:36:7f:48:68:fb:1f:4f:23:71:c5:9b: a9:e4:bd:32:b0:9d:12:06:66:14:26:38:9e:63:c7:7b:de:5b: 4d:d2:a2:f3:bf:a2:37:b8:a4:8c:dc:d8:88:98:42:b7:ab:e0: 7f:93:ec:5c:17:ff:b4:18:19:7b:eb:ee:50:47:52:3c:85:16: b2:c2:e5:4d:01:76:e2:57:6b:55:cc:51:23:ff:33:53:61:ab: ac:69:a0:14:27:31:63:d3:52:03:23:f4:3c:a0:b6:39:a3:7d: 17:2e:d5:ee:de:bc:1c:02:ac:be:85:aa:0b:1c:7b:45:f1:34: 19:01:1b:46 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAvQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzZCMzIxMTAvBgNVBAUTKEQ4MjJBMkRCQzg4MjM0RjgwRjcwRTQ2NzgyQjJENEQ5 Q0QzRjlCREMwHhcNMjYwNjAxMDIwMjI1WhcNMjYwNjA4MDIwMjI1WjAYMRYwFAYD VQQDEw02YTFjZTgzMS02ZDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtAa8kVcLHFopEiEUwMAZj+zCR+kckymTIORcu5yqkDGlcfzbGvicfEUSelmG vzgrnZXxcKiVjcaaMNYlwuL+z6e+a+5f2IxjgLaswo8xCm0owiW1lCRKXRYCUUV4 Io8W785XvIxjNNOwI79iheMAghv9ycCcfUloEba5mJ7PIhATch7/wyx0uk6qjd4f mgiM6KGcTGljs3CQclMq9WFDDvh5txJO16G+xM+3CjoqEho7+Sb34Qi56D9WlUMP QTTfXRM51HV+Dp6G61e9Hz1f6gKA+FWVcYZN+TjK5Wz7ufL+3sXXeN9WNNxXYiwm jNou1Np0nD8keco3GmPTLCuB1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKG6tiOl 2RUZd/BFwgzOzNjFWaafMB8GA1UdIwQYMBaAFNgiotvIgjT4D3DkZ4Ky1NnNP5vc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkIzMi83Mzg3OTYxODJG MzgxMUVEOUU3RTAyN0RDNEY5QUUwMi8yQ0tpMjhpQ05QZ1BjT1JuZ3JMVTJjMF9t OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJDS2kyOGlDTlBnUGNPUm5nckxVMmMwX205dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NkIzMi83Mzg3OTYxODJGMzgxMUVEOUU3RTAyN0RDNEY5QUUwMi8yQ0tpMjhpQ05Q Z1BjT1JuZ3JMVTJjMF9tOXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANIRUzKaRowBjQrFKg/8U8hfcYgqaUxEU28/s3bO0yK556LYNtZe+hkkBRSM5 veiw4ZyoCGy5m2M74+LNwYJw56TKgvHnluqH0LUaxKUhb8/hw47l7Aq0EXOZbAix 8cr9/RC2LXogstXMS3TGoPT6S7gaJ10QiBXwva3fPr9LvD82GGkE5zZ/SGj7H08j ccWbqeS9MrCdEgZmFCY4nmPHe95bTdKi87+iN7ikjNzYiJhCt6vgf5PsXBf/tBgZ e+vuUEdSPIUWssLlTQF24ldrVcxRI/8zU2GrrGmgFCcxY9NSAyP0PKC2OaN9Fy7V 7t68HAKsvoWqCxx7RfE0GQEbRg== -----END CERTIFICATE-----Generated at Tue Jun 2 21:57:35 2026 by rpki-client