$ rpki-client -vvf rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft File: -fNN9--KMQSq91p3EaUvfbGlDaQ.mft (raw, json) Hash identifier: tNHuK4mLwtsBtzvGZo4qiJxKvVgdpiwIfR939M9mIGo= Subject key identifier: 60:39:F8:2D:4F:AA:17:0D:7B:25:3E:6C:F3:DC:A4:7E:43:75:11:C6 Authority key identifier: F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4 Certificate issuer: /CN=A9188A06/serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4 Certificate serial: 0D96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft Manifest number: 0D6F Signing time: Thu 02 Jul 2026 18:08:32 +0000 Manifest this update: Thu 02 Jul 2026 18:08:31 +0000 Manifest next update: Thu 09 Jul 2026 18:08:31 +0000 Files and hashes: 1: -fNN9--KMQSq91p3EaUvfbGlDaQ.crl (hash: 0Ml6V4rjve5jJlSBUn/Uy2+G/++LQ88Coe8vw0AmiII=) 2: 23B27B60F68011E982571C3EC4F9AE02.roa (hash: y1B49VYXe0SRw82YvaswxQk2lKZMwXfDS055uUW8x9s=) 3: 4AD97410632C11EE96048122C4F9AE02.roa (hash: mpeuILXtK20evHO15vrz42Wl9KtS1A8R8Bhu34AGTf0=) 4: 0D7B74CACE1111ED8BDB217CC4F9AE02.roa (hash: pMlh6GaUpQCHOF5jp4VeA1i4PMVxZyqL5Xz+a1jzwLQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 Jul 2026 18:08:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3478 (0xd96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188A06, serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4 Validity Not Before: Jul 2 18:08:31 2026 GMT Not After : Jul 9 18:08:31 2026 GMT Subject: CN=6a46a920-70f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:99:cc:83:b5:b8:22:92:44:fa:04:a6:69:bb: c7:94:91:c8:32:f4:10:db:31:e7:f9:ce:57:61:42: 03:21:75:fa:c2:3f:ca:04:a3:f3:e3:36:bd:38:77: 5c:60:68:b3:f4:75:86:76:66:16:e8:57:7f:60:42: af:9a:bd:7e:f0:05:3e:39:11:14:14:56:40:ea:8f: 2c:18:2e:91:ef:9f:1a:03:a5:75:20:09:09:fb:73: f2:94:42:20:da:ca:55:12:c9:e1:19:9f:1f:aa:21: b4:89:d8:9a:e7:d4:c4:c8:cb:27:ca:bb:a2:80:5b: 83:4a:cc:fb:5c:67:2a:cc:e6:01:d9:07:65:51:64: a4:2e:3e:d5:7f:d7:6f:3c:17:52:bb:c1:26:5a:c9: a6:47:ca:37:b2:f9:bf:7e:2d:d6:c6:d2:a2:19:34: f8:c3:d0:2f:b6:1b:df:94:a5:6f:1f:6d:f6:99:67: 1b:f6:14:81:26:30:7c:3e:3a:c7:d7:28:8d:48:3d: d0:39:11:38:7e:c6:3f:1b:b1:18:99:2c:7a:44:11: 20:b5:00:58:bf:09:dc:72:f9:54:2e:a6:8a:b5:50: da:be:4e:99:7e:04:67:5a:e7:33:a3:b3:b4:52:3b: 59:c1:dc:49:4b:49:56:04:58:35:9b:31:a9:63:73: 5b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:39:F8:2D:4F:AA:17:0D:7B:25:3E:6C:F3:DC:A4:7E:43:75:11:C6 X509v3 Authority Key Identifier: keyid:F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:54:1f:e5:a0:cd:08:53:82:41:77:79:43:dd:3e:34:ba:bf: 5e:6c:e7:27:ed:28:c3:34:65:61:cd:2c:4c:ea:49:a4:70:eb: 81:f8:9c:b9:d4:a2:f6:3f:b0:38:b7:93:73:05:ec:ca:00:d5: 03:95:e9:62:27:b3:44:59:56:95:16:5b:c6:8c:01:9c:31:74: 52:73:00:be:22:68:79:2c:41:09:96:41:44:63:22:3d:bc:01: 5e:10:a4:48:02:04:30:c7:36:7c:6e:85:10:dc:fa:f1:8b:27: 50:6d:cb:ff:77:ff:ff:5a:4d:f1:d6:03:1e:3c:21:8c:21:59: 7b:1e:a8:00:11:0c:8c:97:2c:31:3b:3f:08:a9:62:ee:62:83: 9a:e6:54:64:1e:a7:5b:bf:a5:a4:88:7f:ac:be:74:63:92:2f: 69:07:04:22:8a:a3:02:37:a2:df:93:2d:f0:fe:89:ed:6a:39: 65:1c:ab:4b:d3:bd:e6:42:1b:33:e9:a3:f8:2f:c2:ef:ee:50: 87:64:e6:c1:2d:98:09:b1:25:52:10:95:0e:9f:0d:2c:97:00: 07:cd:86:83:ee:8c:99:b6:e2:89:22:5f:f2:56:92:02:6a:75: 2d:22:84:bf:10:22:3b:3a:73:ae:83:19:69:4d:74:ff:e8:21: b5:a1:a4:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhBMDYxMTAvBgNVBAUTKEY5RjM0REY3RUY4QTMxMDRBQUY3NUE3NzExQTUyRjdE QjFBNTBEQTQwHhcNMjYwNzAyMTgwODMxWhcNMjYwNzA5MTgwODMxWjAYMRYwFAYD VQQDEw02YTQ2YTkyMC03MGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnpnMg7W4IpJE+gSmabvHlJHIMvQQ2zHn+c5XYUIDIXX6wj/KBKPz4za9OHdc YGiz9HWGdmYW6Fd/YEKvmr1+8AU+OREUFFZA6o8sGC6R758aA6V1IAkJ+3PylEIg 2spVEsnhGZ8fqiG0idia59TEyMsnyruigFuDSsz7XGcqzOYB2QdlUWSkLj7Vf9dv PBdSu8EmWsmmR8o3svm/fi3WxtKiGTT4w9AvthvflKVvH232mWcb9hSBJjB8PjrH 1yiNSD3QORE4fsY/G7EYmSx6RBEgtQBYvwnccvlULqaKtVDavk6ZfgRnWuczo7O0 UjtZwdxJS0lWBFg1mzGpY3NbpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGA5+C1P qhcNeyU+bPPcpH5DdRHGMB8GA1UdIwQYMBaAFPnzTffvijEEqvdadxGlL32xpQ2k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEEwNi84MDFDQTU4NEY2 N0YxMUU5QUEzRTcwM0RDNEY5QUUwMi8tZk5OOS0tS01RU3E5MXAzRWFVdmZiR2xE YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1mTk45LS1LTVFTcTkxcDNFYVV2ZmJHbERhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEEwNi84MDFDQTU4NEY2N0YxMUU5QUEzRTcwM0RDNEY5QUUwMi8tZk5OOS0tS01R U3E5MXAzRWFVdmZiR2xEYVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGFQf5aDNCFOCQXd5Q90+NLq/XmznJ+0owzRlYc0sTOpJpHDrgficudSi9j+w OLeTcwXsygDVA5XpYiezRFlWlRZbxowBnDF0UnMAviJoeSxBCZZBRGMiPbwBXhCk SAIEMMc2fG6FENz68YsnUG3L/3f//1pN8dYDHjwhjCFZex6oABEMjJcsMTs/CKli 7mKDmuZUZB6nW7+lpIh/rL50Y5IvaQcEIoqjAjei35Mt8P6J7Wo5ZRyrS9O95kIb M+mj+C/C7+5Qh2TmwS2YCbElUhCVDp8NLJcAB82Gg+6MmbbiiSJf8laSAmp1LSKE vxAiOzpzroMZaU10/+ghtaGkrg== -----END CERTIFICATE-----Generated at Fri Jul 3 21:47:41 2026 by rpki-client