$ rpki-client -vvf rpki.apnic.net/member_repository/A917C09A/BB673F3EEAD711F0B9CBFBE6646F56BC/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.mft File: Dztf8VRQUpFAjEhAsQNtkqkwTtQ.mft (raw, json) Hash identifier: R833BqxaRhRaqzjATACFyyId9jru0Vef1R7Mb5vYVZg= Subject key identifier: 19:A2:ED:05:EA:AC:66:7D:5A:55:EE:E1:5A:A4:94:44:FA:1E:F6:33 Authority key identifier: 0F:3B:5F:F1:54:50:52:91:40:8C:48:40:B1:03:6D:92:A9:30:4E:D4 Certificate issuer: /CN=A917C09A/serialNumber=0F3B5FF154505291408C4840B1036D92A9304ED4 Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C09A/BB673F3EEAD711F0B9CBFBE6646F56BC/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.mft Manifest number: 59 Signing time: Tue 23 Jun 2026 08:24:01 +0000 Manifest this update: Tue 23 Jun 2026 08:24:00 +0000 Manifest next update: Tue 30 Jun 2026 08:24:00 +0000 Files and hashes: 1: Dztf8VRQUpFAjEhAsQNtkqkwTtQ.crl (hash: WadOdyVXG5EEVlBwcOPJOw5w7oRrraXXuM9RNqmWBwY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C09A/BB673F3EEAD711F0B9CBFBE6646F56BC/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.crl rsync://rpki.apnic.net/member_repository/A917C09A/BB673F3EEAD711F0B9CBFBE6646F56BC/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jun 2026 08:24:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C09A, serialNumber=0F3B5FF154505291408C4840B1036D92A9304ED4 Validity Not Before: Jun 23 08:24:00 2026 GMT Not After : Jun 30 08:24:00 2026 GMT Subject: CN=6a3a42a1-603b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5c:33:fd:07:40:62:e2:3d:d7:e5:dd:6a:55: b8:7b:62:3b:e8:16:86:1f:6f:bd:31:9a:06:17:bb: ff:13:42:73:21:fa:ff:b6:8a:ec:97:5a:47:4d:17: 91:e2:3a:06:11:c0:e4:64:b4:e5:0a:3d:79:fd:8c: f6:45:9f:8c:1d:10:b5:1a:36:f7:af:92:da:d4:7c: 55:a6:dd:d7:64:02:e2:76:58:e7:e3:a0:af:61:99: 02:ac:cb:0b:42:46:14:6d:ee:58:ea:59:9c:58:cf: a1:64:ce:0e:a3:f2:0b:46:a6:09:ae:51:02:6b:13: ac:81:02:a5:f1:d0:2a:9e:e4:34:f2:14:88:54:d1: 59:fd:82:68:f3:a1:69:02:cf:71:96:10:a5:c4:cc: 04:89:f9:2f:2b:f6:fd:69:70:2d:52:c3:8e:41:aa: 89:29:de:df:54:73:8e:23:ab:8e:e8:76:96:bc:9f: 76:c9:cb:35:71:93:87:eb:11:a3:4c:fb:be:4a:0d: 1c:87:20:01:76:42:f9:76:a5:48:49:a6:92:3a:9f: e7:41:8d:a2:79:c2:75:56:71:3e:ae:95:3c:28:89: 6d:73:96:4b:6d:55:9c:6c:46:07:ba:2c:e0:2d:e6: b9:08:9a:1c:88:db:47:b4:f3:33:7a:ed:23:5f:cf: 2f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:A2:ED:05:EA:AC:66:7D:5A:55:EE:E1:5A:A4:94:44:FA:1E:F6:33 X509v3 Authority Key Identifier: keyid:0F:3B:5F:F1:54:50:52:91:40:8C:48:40:B1:03:6D:92:A9:30:4E:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C09A/BB673F3EEAD711F0B9CBFBE6646F56BC/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C09A/BB673F3EEAD711F0B9CBFBE6646F56BC/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:5f:44:1d:6a:9a:79:92:d5:9d:61:86:f2:38:e9:6d:ba:66: 69:0b:da:85:9d:3a:2b:34:1e:59:3a:6c:6a:af:bb:cb:8e:fa: 84:76:90:73:f3:10:4b:08:76:9f:1e:92:ad:10:26:03:c5:9f: 31:d8:28:45:ac:d4:39:7d:72:d0:d3:df:3f:40:1c:72:75:ad: b4:87:e0:3e:a8:60:49:5e:f3:ba:91:7b:a3:e2:ac:6e:0a:5a: f4:0a:c7:ce:93:f8:02:02:58:21:a6:a8:57:10:51:f8:40:fb: af:41:ea:47:5b:82:6d:d9:d9:19:37:39:0a:7d:69:6d:f0:c5: 40:04:e6:21:4f:fe:fb:05:a9:e3:64:ca:d5:9d:48:66:f8:08: bb:c8:fb:9d:e0:6a:ee:48:9b:1b:7f:c7:e2:6b:5b:7d:1a:c4: e2:84:c1:94:fd:67:89:5a:87:d4:d6:be:9b:53:70:9c:3d:28: 6a:84:98:3f:04:67:2d:1d:ce:b7:38:75:0a:bc:e9:f7:da:e2: e6:e1:1a:96:51:12:57:66:41:32:fd:61:96:14:f3:5b:71:7e: 6f:a6:b7:79:d8:19:c0:78:24:3f:1b:58:4c:e2:26:22:47:3a: b7:ad:de:42:27:45:a8:d0:1e:45:1d:50:74:a1:0a:18:86:af: ad:07:56:c2 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QzA5QTExMC8GA1UEBRMoMEYzQjVGRjE1NDUwNTI5MTQwOEM0ODQwQjEwMzZEOTJB OTMwNEVENDAeFw0yNjA2MjMwODI0MDBaFw0yNjA2MzAwODI0MDBaMBgxFjAUBgNV BAMTDTZhM2E0MmExLTYwM2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9XDP9B0Bi4j3X5d1qVbh7YjvoFoYfb70xmgYXu/8TQnMh+v+2iuyXWkdNF5Hi OgYRwORktOUKPXn9jPZFn4wdELUaNvevktrUfFWm3ddkAuJ2WOfjoK9hmQKsywtC RhRt7ljqWZxYz6Fkzg6j8gtGpgmuUQJrE6yBAqXx0Cqe5DTyFIhU0Vn9gmjzoWkC z3GWEKXEzASJ+S8r9v1pcC1Sw45Bqokp3t9Uc44jq47odpa8n3bJyzVxk4frEaNM +75KDRyHIAF2Qvl2pUhJppI6n+dBjaJ5wnVWcT6ulTwoiW1zlkttVZxsRge6LOAt 5rkImhyI20e08zN67SNfzy+/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUGaLtBeqs Zn1aVe7hWqSURPoe9jMwHwYDVR0jBBgwFoAUDztf8VRQUpFAjEhAsQNtkqkwTtQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDMDlBL0JCNjczRjNFRUFE NzExRjBCOUNCRkJFNjY0NkY1NkJDL0R6dGY4VlJRVXBGQWpFaEFzUU50a3Frd1R0 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRHp0ZjhWUlFVcEZBakVoQXNRTnRrcWt3VHRRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdD MDlBL0JCNjczRjNFRUFENzExRjBCOUNCRkJFNjY0NkY1NkJDL0R6dGY4VlJRVXBG QWpFaEFzUU50a3Frd1R0US5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBTX0Qdapp5ktWdYYbyOOltumZpC9qFnTorNB5ZOmxqr7vLjvqEdpBz8xBLCHaf HpKtECYDxZ8x2ChFrNQ5fXLQ098/QBxyda20h+A+qGBJXvO6kXuj4qxuClr0CsfO k/gCAlghpqhXEFH4QPuvQepHW4Jt2dkZNzkKfWlt8MVABOYhT/77BanjZMrVnUhm +Ai7yPud4GruSJsbf8fia1t9GsTihMGU/WeJWofU1r6bU3CcPShqhJg/BGctHc63 OHUKvOn32uLm4RqWURJXZkEy/WGWFPNbcX5vprd52BnAeCQ/G1hM4iYiRzq3rd5C J0Wo0B5FHVB0oQoYhq+tB1bC -----END CERTIFICATE-----Generated at Wed Jun 24 11:27:41 2026 by rpki-client