$ rpki-client -vvf rpki.apnic.net/member_repository/A9180DA4/473C64501D8F11E28E913DEE08B02CD2/40IvTt5eaM7JqqfjxuMnjHMOHnw.mft File: 40IvTt5eaM7JqqfjxuMnjHMOHnw.mft (raw, json) Hash identifier: z56XR9X6JF37pxUlRl7PbUd41gndqIUO+yvmZWI1ltc= Subject key identifier: 8C:89:4B:2F:80:08:DE:AD:CD:2F:8B:28:14:12:6A:A1:B4:CB:C5:44 Authority key identifier: E3:42:2F:4E:DE:5E:68:CE:C9:AA:A7:E3:C6:E3:27:8C:73:0E:1E:7C Certificate issuer: /CN=A9180DA4/serialNumber=E3422F4EDE5E68CEC9AAA7E3C6E3278C730E1E7C Certificate serial: 354D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40IvTt5eaM7JqqfjxuMnjHMOHnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180DA4/473C64501D8F11E28E913DEE08B02CD2/40IvTt5eaM7JqqfjxuMnjHMOHnw.mft Manifest number: 354D Signing time: Mon 22 Jun 2026 14:40:03 +0000 Manifest this update: Mon 22 Jun 2026 14:40:02 +0000 Manifest next update: Mon 29 Jun 2026 14:40:02 +0000 Files and hashes: 1: 40IvTt5eaM7JqqfjxuMnjHMOHnw.crl (hash: WFf1TeEnGxj6W7OP/VUcTnUJU/SxZvSR1zgB9Xq0ucU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180DA4/473C64501D8F11E28E913DEE08B02CD2/40IvTt5eaM7JqqfjxuMnjHMOHnw.crl rsync://rpki.apnic.net/member_repository/A9180DA4/473C64501D8F11E28E913DEE08B02CD2/40IvTt5eaM7JqqfjxuMnjHMOHnw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40IvTt5eaM7JqqfjxuMnjHMOHnw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Jun 2026 14:40:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13645 (0x354d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180DA4, serialNumber=E3422F4EDE5E68CEC9AAA7E3C6E3278C730E1E7C Validity Not Before: Jun 22 14:40:02 2026 GMT Not After : Jun 29 14:40:02 2026 GMT Subject: CN=6a394943-6521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2e:41:1b:7d:b2:7a:18:9b:00:81:c1:34:01: c1:96:78:3f:d7:09:45:39:a2:07:87:c5:78:48:c3: 0c:50:79:bd:27:33:dc:f4:7d:30:1b:63:79:fd:2a: 2a:24:ff:18:48:73:bf:17:a4:a3:67:0a:cf:1f:9a: c3:09:c3:f9:4f:64:c3:4a:88:40:a8:06:33:38:56: be:64:2c:69:54:36:5c:44:64:33:a4:93:0c:6d:db: 39:ce:5a:ca:a8:f4:90:f9:18:c8:35:ef:19:c0:4b: 6a:7e:b7:3a:aa:27:a0:a5:ae:1f:ce:8b:eb:27:d4: f4:dd:3a:b4:20:e0:29:7b:78:e0:18:5f:17:d5:db: b3:a5:4d:73:5f:9c:bc:77:aa:e0:7b:fc:e4:0a:bd: 95:3e:d0:ec:7a:89:7e:05:2f:38:91:5e:d3:c4:8d: 95:1e:fc:6f:91:45:82:cb:85:e9:35:38:84:73:5d: 1b:f0:ff:ea:6a:66:ea:94:c9:b3:27:97:b4:2d:a2: 0f:9b:6b:4b:4a:f9:4b:f7:a2:c4:ea:84:64:bc:6e: e3:31:e6:3c:8d:6e:e5:2e:b3:90:14:be:76:78:b4: fb:b7:7b:db:81:ba:91:07:83:29:4f:05:39:61:95: ba:a0:13:8b:ef:8b:c5:b2:21:4c:51:79:d7:ca:7d: 5f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:89:4B:2F:80:08:DE:AD:CD:2F:8B:28:14:12:6A:A1:B4:CB:C5:44 X509v3 Authority Key Identifier: keyid:E3:42:2F:4E:DE:5E:68:CE:C9:AA:A7:E3:C6:E3:27:8C:73:0E:1E:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180DA4/473C64501D8F11E28E913DEE08B02CD2/40IvTt5eaM7JqqfjxuMnjHMOHnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40IvTt5eaM7JqqfjxuMnjHMOHnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180DA4/473C64501D8F11E28E913DEE08B02CD2/40IvTt5eaM7JqqfjxuMnjHMOHnw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:6b:4a:fe:10:f9:1c:c3:c9:a3:77:59:6c:bb:43:f5:af:7c: 38:16:2f:7e:e4:6a:9f:55:87:c3:8b:32:3e:47:74:f6:59:f4: 4a:d7:bb:11:98:ec:d4:61:2d:9c:b6:fe:99:4b:78:83:f3:78: dc:84:d6:ca:c5:44:09:29:c1:ba:26:51:95:35:03:1d:70:10: a4:3d:8b:09:14:c4:25:dc:66:a6:21:c6:18:22:a8:1e:74:43: f0:22:79:b8:c7:a5:bd:20:93:2c:20:91:c7:cd:22:59:35:5a: 7c:f2:34:39:88:27:90:a1:d8:61:56:fb:d3:25:e0:ad:fb:cc: 34:c6:21:03:17:b9:bb:42:33:29:e0:4e:88:38:af:cb:94:31: c1:5b:2f:2f:d7:a1:51:25:11:83:fb:cb:24:19:96:a3:90:02: b3:6a:92:d6:b5:86:50:a9:1c:51:6a:c5:a3:8d:cf:1f:c3:7b: be:25:b9:77:c9:82:ea:ea:25:f0:b5:65:83:59:97:62:af:50: 91:e6:3d:12:56:0a:d7:2a:f8:a9:75:bd:2b:9d:b5:f7:65:52: 80:f2:50:7c:97:a9:2e:42:09:2b:dc:21:7d:d1:fb:95:e7:c4: 42:a0:82:b9:93:99:58:d4:f5:c0:17:d4:39:0a:af:13:39:e5: 06:59:32:8a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODBEQTQxMTAvBgNVBAUTKEUzNDIyRjRFREU1RTY4Q0VDOUFBQTdFM0M2RTMyNzhD NzMwRTFFN0MwHhcNMjYwNjIyMTQ0MDAyWhcNMjYwNjI5MTQ0MDAyWjAYMRYwFAYD VQQDEw02YTM5NDk0My02NTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyi5BG32yehibAIHBNAHBlng/1wlFOaIHh8V4SMMMUHm9JzPc9H0wG2N5/Soq JP8YSHO/F6SjZwrPH5rDCcP5T2TDSohAqAYzOFa+ZCxpVDZcRGQzpJMMbds5zlrK qPSQ+RjINe8ZwEtqfrc6qiegpa4fzovrJ9T03Tq0IOApe3jgGF8X1duzpU1zX5y8 d6rge/zkCr2VPtDseol+BS84kV7TxI2VHvxvkUWCy4XpNTiEc10b8P/qambqlMmz J5e0LaIPm2tLSvlL96LE6oRkvG7jMeY8jW7lLrOQFL52eLT7t3vbgbqRB4MpTwU5 YZW6oBOL74vFsiFMUXnXyn1f7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIyJSy+A CN6tzS+LKBQSaqG0y8VEMB8GA1UdIwQYMBaAFONCL07eXmjOyaqn48bjJ4xzDh58 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MERBNC80NzNDNjQ1MDFE OEYxMUUyOEU5MTNERUUwOEIwMkNEMi80MEl2VHQ1ZWFNN0pxcWZqeHVNbmpITU9I bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQwSXZUdDVlYU03SnFxZmp4dU1uakhNT0hudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MERBNC80NzNDNjQ1MDFEOEYxMUUyOEU5MTNERUUwOEIwMkNEMi80MEl2VHQ1ZWFN N0pxcWZqeHVNbmpITU9IbncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzmtK/hD5HMPJo3dZbLtD9a98OBYvfuRqn1WHw4syPkd09ln0Ste7EZjs1GEt nLb+mUt4g/N43ITWysVECSnBuiZRlTUDHXAQpD2LCRTEJdxmpiHGGCKoHnRD8CJ5 uMelvSCTLCCRx80iWTVafPI0OYgnkKHYYVb70yXgrfvMNMYhAxe5u0IzKeBOiDiv y5QxwVsvL9ehUSURg/vLJBmWo5ACs2qS1rWGUKkcUWrFo43PH8N7viW5d8mC6uol 8LVlg1mXYq9QkeY9ElYK1yr4qXW9K52192VSgPJQfJepLkIJK9whfdH7lefEQqCC uZOZWNT1wBfUOQqvEznlBlkyig== -----END CERTIFICATE-----Generated at Wed Jun 24 11:26:25 2026 by rpki-client