$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AFC/410B6534104411F1AFDB1FAC1F3D8C67/k8AZv9YHmdc2IsEYX0o5ul9fkhc.mft File: k8AZv9YHmdc2IsEYX0o5ul9fkhc.mft (raw, json) Hash identifier: 3TscqQa2RFU1/GW24uw1pf8AzbPl9uTTaRZRwr5QdCI= Subject key identifier: C9:0E:52:3A:B9:80:61:AA:4C:52:80:BF:D9:AD:D3:B3:29:54:68:E7 Authority key identifier: 93:C0:19:BF:D6:07:99:D7:36:22:C1:18:5F:4A:39:BA:5F:5F:92:17 Certificate issuer: /CN=A9178AFC/serialNumber=93C019BFD60799D73622C1185F4A39BA5F5F9217 Certificate serial: 47 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/k8AZv9YHmdc2IsEYX0o5ul9fkhc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178AFC/410B6534104411F1AFDB1FAC1F3D8C67/k8AZv9YHmdc2IsEYX0o5ul9fkhc.mft Manifest number: 40 Signing time: Fri 05 Jun 2026 09:00:02 +0000 Manifest this update: Fri 05 Jun 2026 09:00:01 +0000 Manifest next update: Fri 12 Jun 2026 09:00:01 +0000 Files and hashes: 1: k8AZv9YHmdc2IsEYX0o5ul9fkhc.crl (hash: zSU/EjuzXzULuO1C0ZCuCOhblJ6INn5BP9+uUiDzO7Q=) 2: 28E7910A1FC911F19CD315063A3D8C67.roa (hash: R2AlqbhHVnfmyAFdsG6D/MvPgbamdWxUkMT2LqjIQUA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178AFC/410B6534104411F1AFDB1FAC1F3D8C67/k8AZv9YHmdc2IsEYX0o5ul9fkhc.crl rsync://rpki.apnic.net/member_repository/A9178AFC/410B6534104411F1AFDB1FAC1F3D8C67/k8AZv9YHmdc2IsEYX0o5ul9fkhc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/k8AZv9YHmdc2IsEYX0o5ul9fkhc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178AFC, serialNumber=93C019BFD60799D73622C1185F4A39BA5F5F9217 Validity Not Before: Jun 5 09:00:01 2026 GMT Not After : Jun 12 09:00:01 2026 GMT Subject: CN=6a229011-852a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:92:94:82:22:9e:f5:a4:43:81:3d:9c:3f:af: 66:d0:22:88:58:8a:f8:1e:e5:11:1d:d3:df:5b:93: 86:a2:f2:24:25:bc:7c:96:bb:f3:a4:f0:b5:47:72: de:b3:c6:6c:83:78:d3:bb:94:7e:fe:0f:58:eb:fc: 87:b0:a4:13:30:25:76:79:88:8a:85:b7:5a:74:4d: 1e:07:72:3f:1e:40:36:1c:0b:6a:5b:df:24:2b:9b: d5:ce:20:e2:43:64:52:21:6f:e4:32:4a:1a:b7:e1: 9b:57:d7:86:7c:db:04:2a:bf:6e:d9:6d:04:3a:41: f3:e5:29:a1:d2:84:0c:85:c2:7a:62:3d:56:c0:e4: 3a:ca:94:f7:e9:db:39:43:4e:cb:b9:32:91:9c:2c: 97:e1:41:14:f2:79:41:07:ff:1e:4b:50:58:d6:f9: 23:64:4f:9f:b0:d3:e6:5d:b0:33:73:22:c4:fb:87: bd:63:8d:f4:66:9a:91:75:0a:8b:1a:7d:2e:b8:5f: 91:35:2a:2d:42:24:58:04:80:63:95:e2:bc:9b:42: 2f:29:50:fb:12:2e:e7:16:36:ec:4c:57:22:90:20: 76:f4:bc:89:a6:07:b8:7b:95:b1:80:31:f8:d5:4d: 83:b6:9a:eb:87:9a:33:13:1e:25:cf:6d:53:df:a0: cd:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:0E:52:3A:B9:80:61:AA:4C:52:80:BF:D9:AD:D3:B3:29:54:68:E7 X509v3 Authority Key Identifier: keyid:93:C0:19:BF:D6:07:99:D7:36:22:C1:18:5F:4A:39:BA:5F:5F:92:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178AFC/410B6534104411F1AFDB1FAC1F3D8C67/k8AZv9YHmdc2IsEYX0o5ul9fkhc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/k8AZv9YHmdc2IsEYX0o5ul9fkhc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AFC/410B6534104411F1AFDB1FAC1F3D8C67/k8AZv9YHmdc2IsEYX0o5ul9fkhc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:d8:6c:4a:b1:46:c4:54:65:1d:cf:cf:73:53:2c:de:04:6c: a1:70:7c:4d:d2:6d:33:70:e5:69:7e:5f:fc:63:df:2e:97:dc: a8:0c:92:46:6b:ca:8c:08:66:da:36:df:93:cb:bd:85:9c:49: b9:bd:9f:60:cf:a6:32:14:71:b6:7c:2b:58:fe:f2:3e:e6:0d: db:c1:cc:41:aa:e4:ca:5a:51:e8:7f:a0:7a:b0:6d:dc:00:fc: be:b2:61:16:e3:11:da:5f:ec:dc:f6:65:91:52:a8:02:81:79: af:fa:49:ab:0e:91:53:9c:f0:d6:d9:24:f3:11:06:ad:25:a7: 02:79:cd:0a:70:18:da:52:69:fe:d1:82:24:f5:6c:63:ff:20: d0:62:da:93:d7:1a:41:d3:5c:79:97:a0:0d:94:9c:e4:f7:65: da:1e:42:01:f1:50:4c:4a:0e:21:6e:6e:cc:a3:a7:dc:76:52: 40:b4:75:12:fb:a0:9e:a0:f6:43:15:5b:46:b4:94:c4:a2:bc: d3:66:7f:94:70:de:c1:5e:2b:5f:76:c6:01:92:db:35:09:e8: 07:27:93:9e:ec:eb:7d:08:5a:64:fb:4c:a2:0f:99:b7:c2:ee: 3c:b1:77:d8:06:26:b9:2d:34:15:ec:e2:2a:18:e8:a9:1a:5e: 76:31:27:f4 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 OEFGQzExMC8GA1UEBRMoOTNDMDE5QkZENjA3OTlENzM2MjJDMTE4NUY0QTM5QkE1 RjVGOTIxNzAeFw0yNjA2MDUwOTAwMDFaFw0yNjA2MTIwOTAwMDFaMBgxFjAUBgNV BAMTDTZhMjI5MDExLTg1MmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCekpSCIp71pEOBPZw/r2bQIohYivge5REd099bk4ai8iQlvHyWu/Ok8LVHct6z xmyDeNO7lH7+D1jr/IewpBMwJXZ5iIqFt1p0TR4Hcj8eQDYcC2pb3yQrm9XOIOJD ZFIhb+QyShq34ZtX14Z82wQqv27ZbQQ6QfPlKaHShAyFwnpiPVbA5DrKlPfp2zlD Tsu5MpGcLJfhQRTyeUEH/x5LUFjW+SNkT5+w0+ZdsDNzIsT7h71jjfRmmpF1Cosa fS64X5E1Ki1CJFgEgGOV4rybQi8pUPsSLucWNuxMVyKQIHb0vImmB7h7lbGAMfjV TYO2muuHmjMTHiXPbVPfoM2BAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUyQ5SOrmA YapMUoC/2a3TsylUaOcwHwYDVR0jBBgwFoAUk8AZv9YHmdc2IsEYX0o5ul9fkhcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4QUZDLzQxMEI2NTM0MTA0 NDExRjFBRkRCMUZBQzFGM0Q4QzY3L2s4QVp2OVlIbWRjMklzRVlYMG81dWw5Zmto Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvazhBWnY5WUhtZGMySXNFWVgwbzV1bDlma2hjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4 QUZDLzQxMEI2NTM0MTA0NDExRjFBRkRCMUZBQzFGM0Q4QzY3L2s4QVp2OVlIbWRj MklzRVlYMG81dWw5ZmtoYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBW2GxKsUbEVGUdz89zUyzeBGyhcHxN0m0zcOVpfl/8Y98ul9yoDJJGa8qMCGba Nt+Ty72FnEm5vZ9gz6YyFHG2fCtY/vI+5g3bwcxBquTKWlHof6B6sG3cAPy+smEW 4xHaX+zc9mWRUqgCgXmv+kmrDpFTnPDW2STzEQatJacCec0KcBjaUmn+0YIk9Wxj /yDQYtqT1xpB01x5l6ANlJzk92XaHkIB8VBMSg4hbm7Mo6fcdlJAtHUS+6CeoPZD FVtGtJTEorzTZn+UcN7BXitfdsYBkts1CegHJ5Oe7Ot9CFpk+0yiD5m3wu48sXfY Bia5LTQV7OIqGOipGl52MSf0 -----END CERTIFICATE-----Generated at Sat Jun 6 12:08:01 2026 by rpki-client