$ rpki-client -vvf rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/z7B65d0AqScU2zWnIQRdnS644xc.mft File: z7B65d0AqScU2zWnIQRdnS644xc.mft (raw, json) Hash identifier: 2+KtKmbAU21xJiqjYH3FJsiR450G+fZFbTvLMoPqyv4= Subject key identifier: A3:6F:A1:0F:C7:AF:94:CF:9B:D7:1B:A8:D5:0C:74:B6:06:F1:88:BF Authority key identifier: CF:B0:7A:E5:DD:00:A9:27:14:DB:35:A7:21:04:5D:9D:2E:B8:E3:17 Certificate issuer: /CN=A9189A9F/serialNumber=CFB07AE5DD00A92714DB35A721045D9D2EB8E317 Certificate serial: D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7B65d0AqScU2zWnIQRdnS644xc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/z7B65d0AqScU2zWnIQRdnS644xc.mft Manifest number: 055D Signing time: Tue 23 Jun 2026 00:05:12 +0000 Manifest this update: Tue 23 Jun 2026 00:05:12 +0000 Manifest next update: Tue 30 Jun 2026 00:05:12 +0000 Files and hashes: 1: z7B65d0AqScU2zWnIQRdnS644xc.crl (hash: viE8MTeHKVXlXb4CKs6Li+0xDCAATOIAPEr4T+38IlA=) 2: 42A92B3C3BAC11F0882B5B62C4F9AE02.roa (hash: Ldtk1QgKSc4JP0Q3siQTv93L/D7QNMS7/sCdcQDy9Co=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/z7B65d0AqScU2zWnIQRdnS644xc.crl rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/z7B65d0AqScU2zWnIQRdnS644xc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7B65d0AqScU2zWnIQRdnS644xc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jun 2026 00:05:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 208 (0xd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189A9F, serialNumber=CFB07AE5DD00A92714DB35A721045D9D2EB8E317 Validity Not Before: Jun 23 00:05:12 2026 GMT Not After : Jun 30 00:05:12 2026 GMT Subject: CN=6a39cdb8-e9ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:47:a6:54:6b:0f:60:16:de:0c:db:4e:cc:c3: 7a:72:09:b2:12:a4:dc:a6:d2:c8:f7:c5:e5:a0:bc: f0:44:17:47:f8:31:f6:bf:9b:b5:c1:33:23:0e:5c: a8:6f:ed:62:6e:02:be:57:d9:fe:78:3c:41:fc:f5: 0d:e9:d8:df:89:fb:63:a3:2d:0a:26:20:4a:2c:61: 04:d7:11:81:4e:57:19:7d:5c:dc:30:2b:83:97:f7: 40:c4:87:53:d1:8a:af:ed:e5:75:b3:75:07:65:c7: b1:36:6d:37:00:c1:bc:a7:99:3a:92:3e:d9:12:c6: e8:fb:f6:e7:5a:b3:d7:b8:4e:d6:e4:74:b8:92:2b: 23:79:4d:46:36:65:2c:fa:b9:c3:bc:9e:99:8c:10: 25:58:16:bd:9b:44:d5:9b:c7:07:52:6e:b6:3d:6c: a7:73:4a:83:c3:a1:4a:34:84:ca:09:99:cd:8c:3e: 28:47:c9:25:2c:28:21:e6:0f:91:f1:85:b7:df:05: 63:3e:c7:c7:59:70:1e:ab:a8:44:4e:28:88:22:4e: 5a:7b:dc:45:8d:6a:d9:8b:b6:d1:9e:fc:28:c2:c0: 7b:91:db:ff:9d:69:9a:ff:6a:b8:37:39:86:66:ec: 06:6c:be:a9:65:cf:c6:1f:e5:70:34:36:44:b2:e4: c0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:6F:A1:0F:C7:AF:94:CF:9B:D7:1B:A8:D5:0C:74:B6:06:F1:88:BF X509v3 Authority Key Identifier: keyid:CF:B0:7A:E5:DD:00:A9:27:14:DB:35:A7:21:04:5D:9D:2E:B8:E3:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/z7B65d0AqScU2zWnIQRdnS644xc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7B65d0AqScU2zWnIQRdnS644xc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/z7B65d0AqScU2zWnIQRdnS644xc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:ce:a8:f2:a1:44:3d:3a:8d:71:8e:fc:49:af:3a:63:47:ec: 27:26:b5:50:80:b4:2b:b1:e0:4c:51:a0:0c:b0:87:ad:6b:dc: f6:d1:39:b0:fc:39:4f:c5:8c:0e:44:f1:c1:62:ca:91:2b:68: 46:7d:96:10:23:0f:a8:be:d6:58:eb:0f:97:75:78:0e:c2:0d: e3:7e:af:87:76:81:b7:c0:d4:9a:8f:f0:17:72:a1:3e:0b:4b: 82:ea:e9:04:02:e0:01:df:86:5f:d3:a5:71:cf:40:8b:f8:dc: 3c:82:3e:02:2a:c9:81:d9:19:46:a8:d4:ce:46:6c:a2:55:7c: a3:a0:5e:75:35:b7:b1:8a:e4:93:79:a7:53:27:d7:21:06:bc: c2:58:8a:c9:7e:bc:a6:d5:1e:10:4a:ed:92:3f:96:c4:c3:cf: ad:77:62:c6:41:6b:7d:83:80:aa:6e:13:38:80:01:8d:f7:bb: 04:4d:27:4b:fd:4e:1f:62:fd:37:a1:d7:6c:50:f0:b0:62:d0: 21:ac:1a:b8:d5:cf:fb:d7:94:bd:e9:f1:54:3c:3f:d0:1a:87: 8c:2e:b8:7a:5d:c6:87:5e:d1:a0:50:e6:e3:5e:14:04:97:1f: 6b:47:ee:a4:8a:1c:6f:a6:12:16:82:7f:58:bc:af:74:35:14: 51:d9:ef:42 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlBOUYxMTAvBgNVBAUTKENGQjA3QUU1REQwMEE5MjcxNERCMzVBNzIxMDQ1RDlE MkVCOEUzMTcwHhcNMjYwNjIzMDAwNTEyWhcNMjYwNjMwMDAwNTEyWjAYMRYwFAYD VQQDEw02YTM5Y2RiOC1lOWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApEemVGsPYBbeDNtOzMN6cgmyEqTcptLI98XloLzwRBdH+DH2v5u1wTMjDlyo b+1ibgK+V9n+eDxB/PUN6djfiftjoy0KJiBKLGEE1xGBTlcZfVzcMCuDl/dAxIdT 0Yqv7eV1s3UHZcexNm03AMG8p5k6kj7ZEsbo+/bnWrPXuE7W5HS4kisjeU1GNmUs +rnDvJ6ZjBAlWBa9m0TVm8cHUm62PWync0qDw6FKNITKCZnNjD4oR8klLCgh5g+R 8YW33wVjPsfHWXAeq6hETiiIIk5ae9xFjWrZi7bRnvwowsB7kdv/nWma/2q4NzmG ZuwGbL6pZc/GH+VwNDZEsuTAfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKNvoQ/H r5TPm9cbqNUMdLYG8Yi/MB8GA1UdIwQYMBaAFM+weuXdAKknFNs1pyEEXZ0uuOMX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUE5Ri84MDU2QkE1NjhB OTAxMUVDOEMxQjBEMjJDNEY5QUUwMi96N0I2NWQwQXFTY1UyelduSVFSZG5TNjQ0 eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3o3QjY1ZDBBcVNjVTJ6V25JUVJkblM2NDR4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUE5Ri84MDU2QkE1NjhBOTAxMUVDOEMxQjBEMjJDNEY5QUUwMi96N0I2NWQwQXFT Y1UyelduSVFSZG5TNjQ0eGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACs6o8qFEPTqNcY78Sa86Y0fsJya1UIC0K7HgTFGgDLCHrWvc9tE5sPw5T8WM DkTxwWLKkStoRn2WECMPqL7WWOsPl3V4DsIN436vh3aBt8DUmo/wF3KhPgtLgurp BALgAd+GX9Olcc9Ai/jcPII+AirJgdkZRqjUzkZsolV8o6BedTW3sYrkk3mnUyfX IQa8wliKyX68ptUeEErtkj+WxMPPrXdixkFrfYOAqm4TOIABjfe7BE0nS/1OH2L9 N6HXbFDwsGLQIawauNXP+9eUvenxVDw/0BqHjC64el3Gh17RoFDm414UBJcfa0fu pIocb6YSFoJ/WLyvdDUUUdnvQg== -----END CERTIFICATE-----Generated at Wed Jun 24 11:27:07 2026 by rpki-client