$ rpki-client -vvf rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft File: Cr_XemhpLv60MkAP_d3XrhsjvCc.mft (raw, json) Hash identifier: G3Pa2BA+9D6mHxQ79RGlqdIy73u+w2FbMqsjtxocDFk= Subject key identifier: D0:94:99:BF:1E:C4:CF:DA:1B:ED:B5:3D:CD:50:E5:A0:5E:83:45:80 Authority key identifier: 0A:BF:D7:7A:68:69:2E:FE:B4:32:40:0F:FD:DD:D7:AE:1B:23:BC:27 Certificate issuer: /CN=A9194A8C/serialNumber=0ABFD77A68692EFEB432400FFDDDD7AE1B23BC27 Certificate serial: 0588 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cr_XemhpLv60MkAP_d3XrhsjvCc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft Manifest number: 07A5 Signing time: Mon 22 Jun 2026 23:18:55 +0000 Manifest this update: Mon 22 Jun 2026 23:18:55 +0000 Manifest next update: Mon 29 Jun 2026 23:18:55 +0000 Files and hashes: 1: Cr_XemhpLv60MkAP_d3XrhsjvCc.crl (hash: gIfok8k9Ph54T3vQT5KtEMjqObsqYDGInfnwV6E9KfU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.crl rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cr_XemhpLv60MkAP_d3XrhsjvCc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Jun 2026 23:18:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1416 (0x588) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194A8C, serialNumber=0ABFD77A68692EFEB432400FFDDDD7AE1B23BC27 Validity Not Before: Jun 22 23:18:55 2026 GMT Not After : Jun 29 23:18:55 2026 GMT Subject: CN=6a39c2df-74ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:89:19:c8:35:0c:69:a7:2c:76:c2:77:31:72: f7:b9:a3:f5:f3:19:4f:cd:81:eb:20:a4:5b:32:1c: e5:50:00:e7:9f:0a:e7:e6:bb:3f:ff:25:30:1e:4e: 06:ba:9c:35:06:0c:d0:f4:77:ee:6a:bf:37:1f:77: 78:d6:ca:19:fc:49:98:23:2c:bb:f5:4e:ed:5f:76: f1:24:bc:79:ba:7f:49:d9:c7:c8:0e:25:52:81:19: 3b:4c:60:39:8c:7d:29:9c:0c:87:e6:41:ec:77:29: 63:a9:d4:ff:ee:e9:bb:24:7d:35:33:43:16:d2:a8: 84:d7:60:12:6d:aa:72:95:fe:db:00:f4:42:82:c6: 1a:33:22:cc:d7:a7:d3:b1:2a:ee:0a:82:5f:15:e2: e5:69:26:9c:62:5c:3d:9e:02:b3:3d:97:87:79:65: cc:a0:5f:18:11:91:ac:cc:83:95:ea:c1:49:ff:e7: bf:16:59:9e:c5:2f:ae:62:37:e4:b5:cb:92:26:03: b8:64:81:a8:90:86:30:d5:6e:13:99:a6:59:33:0a: 90:bd:e0:45:7c:6d:20:b7:05:dd:eb:0a:89:47:28: 85:34:67:f4:29:c0:78:2a:d5:70:3d:41:77:49:64: 30:cb:83:98:dc:68:c0:69:b8:fb:c7:c5:49:9e:9d: ac:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:94:99:BF:1E:C4:CF:DA:1B:ED:B5:3D:CD:50:E5:A0:5E:83:45:80 X509v3 Authority Key Identifier: keyid:0A:BF:D7:7A:68:69:2E:FE:B4:32:40:0F:FD:DD:D7:AE:1B:23:BC:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cr_XemhpLv60MkAP_d3XrhsjvCc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:c1:fe:46:39:56:4e:0a:bd:40:11:a5:a1:26:e9:5e:cc:8c: d8:e6:88:6e:e0:82:89:e1:f1:b9:9d:ad:2f:03:04:f7:65:ed: 81:36:d5:29:83:35:88:a0:2c:8b:51:85:5b:dc:97:9f:d4:d4: 24:b5:d3:b4:c1:6a:20:68:64:68:ad:76:59:15:e6:6c:5f:ca: cb:09:80:83:d2:9f:39:c4:ef:8d:32:63:90:e0:c6:8d:ad:c0: 2e:68:c1:a8:eb:cb:ce:e4:72:c8:a8:a1:f3:07:13:3a:62:fe: 09:d9:04:84:36:7d:9e:c8:ca:8d:5d:d5:6b:79:4d:ec:21:cd: 9e:49:95:1e:5e:5d:e4:dd:74:0e:ce:ed:12:f9:2d:98:c8:fb: 01:1e:2c:60:4f:61:05:46:76:07:a7:2a:86:07:5a:8b:77:98: 82:c1:f8:ba:ec:30:b8:49:58:cc:74:8c:83:c0:07:80:e9:83: fe:7d:c9:88:7e:8e:1d:73:42:97:de:65:eb:10:22:45:b6:65: 49:43:7d:a4:fd:e7:46:b2:61:71:43:6c:a4:bb:36:68:65:4b: f4:67:c5:9d:f1:00:af:46:4b:11:9c:7d:b9:75:d1:79:32:d6: 01:07:28:e1:3e:4d:38:b3:6b:85:f3:1d:c7:04:5b:51:f6:1c: 81:89:b9:86 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRBOEMxMTAvBgNVBAUTKDBBQkZENzdBNjg2OTJFRkVCNDMyNDAwRkZEREREN0FF MUIyM0JDMjcwHhcNMjYwNjIyMjMxODU1WhcNMjYwNjI5MjMxODU1WjAYMRYwFAYD VQQDEw02YTM5YzJkZi03NGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoYkZyDUMaacsdsJ3MXL3uaP18xlPzYHrIKRbMhzlUADnnwrn5rs//yUwHk4G upw1BgzQ9Hfuar83H3d41soZ/EmYIyy79U7tX3bxJLx5un9J2cfIDiVSgRk7TGA5 jH0pnAyH5kHsdyljqdT/7um7JH01M0MW0qiE12ASbapylf7bAPRCgsYaMyLM16fT sSruCoJfFeLlaSacYlw9ngKzPZeHeWXMoF8YEZGszIOV6sFJ/+e/FlmexS+uYjfk tcuSJgO4ZIGokIYw1W4TmaZZMwqQveBFfG0gtwXd6wqJRyiFNGf0KcB4KtVwPUF3 SWQwy4OY3GjAabj7x8VJnp2sdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNCUmb8e xM/aG+21Pc1Q5aBeg0WAMB8GA1UdIwQYMBaAFAq/13poaS7+tDJAD/3d164bI7wn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEE4Qy85RTY3MTFBNDJC MUMxMUVDOTU5OTc0MDlDNEY5QUUwMi9Dcl9YZW1ocEx2NjBNa0FQX2QzWHJoc2p2 Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyX1hlbWhwTHY2ME1rQVBfZDNYcmhzanZDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEE4Qy85RTY3MTFBNDJCMUMxMUVDOTU5OTc0MDlDNEY5QUUwMi9Dcl9YZW1ocEx2 NjBNa0FQX2QzWHJoc2p2Q2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWsH+RjlWTgq9QBGloSbpXsyM2OaIbuCCieHxuZ2tLwME92XtgTbVKYM1iKAs i1GFW9yXn9TUJLXTtMFqIGhkaK12WRXmbF/KywmAg9KfOcTvjTJjkODGja3ALmjB qOvLzuRyyKih8wcTOmL+CdkEhDZ9nsjKjV3Va3lN7CHNnkmVHl5d5N10Ds7tEvkt mMj7AR4sYE9hBUZ2B6cqhgdai3eYgsH4uuwwuElYzHSMg8AHgOmD/n3JiH6OHXNC l95l6xAiRbZlSUN9pP3nRrJhcUNspLs2aGVL9GfFnfEAr0ZLEZx9uXXReTLWAQco 4T5NOLNrhfMdxwRbUfYcgYm5hg== -----END CERTIFICATE-----Generated at Wed Jun 24 11:26:12 2026 by rpki-client