$ rpki-client -vvf rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft File: -XyNrMJ-n8zTOuuFNQsmpIFfELc.mft (raw, json) Hash identifier: Kp9UOC7YMPv5n3zlkX5B9x/UjgqgbXstUiHZ3mlWIao= Subject key identifier: 3F:81:3E:9D:FA:DF:72:A9:34:A7:A9:6D:24:D7:17:68:61:F2:E4:EC Authority key identifier: F9:7C:8D:AC:C2:7E:9F:CC:D3:3A:EB:85:35:0B:26:A4:81:5F:10:B7 Certificate issuer: /CN=A9196BD8/serialNumber=F97C8DACC27E9FCCD33AEB85350B26A4815F10B7 Certificate serial: 241D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft Manifest number: 23FD Signing time: Tue 02 Jun 2026 15:48:50 +0000 Manifest this update: Tue 02 Jun 2026 15:48:50 +0000 Manifest next update: Tue 09 Jun 2026 15:48:50 +0000 Files and hashes: 1: -XyNrMJ-n8zTOuuFNQsmpIFfELc.crl (hash: zINmYrnqHStX8M3p6o8jlBxv/umaIPbbIv8Me3rUt5k=) 2: C73BE8A654F311E7AC64ED3AC4F9AE02.roa (hash: X4uS0rI/nqhGkS7n3+3yxAC8v3e2kcE3Z3BQmxfknoQ=) 3: A768E6B6FB0811ED860A5143C4F9AE02.roa (hash: aqWngdjtRLqUSkhygiAXUU1YJGxW+DXL13gbX9vTVWo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.crl rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Jun 2026 15:18:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9245 (0x241d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196BD8, serialNumber=F97C8DACC27E9FCCD33AEB85350B26A4815F10B7 Validity Not Before: Jun 2 15:48:50 2026 GMT Not After : Jun 9 15:48:50 2026 GMT Subject: CN=6a1efb62-b624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:71:a6:a4:1c:ee:89:e0:bd:7d:bf:93:16:67: dc:65:71:ac:ce:3e:d9:74:48:91:7d:84:90:cf:fe: 5a:7c:46:34:70:a8:88:66:fd:d5:8c:c1:b3:c2:48: 1b:e2:21:92:7c:fe:d8:1f:3b:d1:e8:aa:4c:09:a0: 53:f2:26:16:a3:23:59:aa:c6:57:07:a2:9d:5e:e4: 01:81:b8:26:c9:5f:0c:2b:2f:28:49:62:18:9a:d1: 33:61:f7:92:e1:aa:49:bb:c9:38:c8:a2:b4:49:f6: a9:45:c0:cc:02:72:76:6f:32:da:2f:c8:07:21:11: 04:2d:a5:af:b4:54:5a:30:b5:fa:63:68:84:1d:6a: df:07:b1:8a:9e:7d:81:60:32:2f:79:c6:85:9a:87: 4d:b0:fe:fa:7c:91:47:2a:67:35:d1:b5:38:bc:eb: d7:3d:50:13:3f:8a:b7:44:f2:a5:c3:a6:f5:a7:7b: dd:0a:3d:ff:3a:5c:61:8b:ac:9f:35:0b:f0:3f:d8: 1e:a9:2d:06:9d:1e:c1:33:10:ca:d5:af:36:7c:3c: 3b:5c:d5:43:b8:b1:a2:08:ee:73:01:ad:e0:ae:42: 6c:72:4e:1d:ea:16:0a:e6:4a:d4:30:b5:7b:3b:df: b6:c6:79:43:8a:d8:c6:17:b9:2a:e0:7e:66:cf:64: b1:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:81:3E:9D:FA:DF:72:A9:34:A7:A9:6D:24:D7:17:68:61:F2:E4:EC X509v3 Authority Key Identifier: keyid:F9:7C:8D:AC:C2:7E:9F:CC:D3:3A:EB:85:35:0B:26:A4:81:5F:10:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:8f:22:9c:31:da:ba:65:76:29:b0:4c:e0:8e:2b:5f:37:6c: 51:fb:59:e7:9f:eb:6d:a0:e4:2c:2b:7e:af:18:34:99:09:06: 19:28:87:24:26:da:06:28:3a:0b:e5:fb:66:be:c1:84:91:68: ac:11:8b:f8:f5:9a:0f:5a:b1:f8:69:84:8e:74:40:2e:00:7b: 5b:e7:71:5d:13:02:f7:fd:2d:9d:f7:07:b2:20:65:d6:f1:90: 69:f8:bd:aa:d3:93:f8:c7:b7:8b:66:d3:d1:7e:02:6f:59:2f: 09:79:6d:18:b5:63:a5:05:f9:d8:81:73:a0:11:9c:bf:36:95: cc:61:a1:2c:38:14:f0:09:aa:b9:6e:39:df:ea:95:29:a0:ee: 79:5a:b7:f8:25:9e:14:a0:cf:1d:76:52:cc:59:a5:30:9b:9f: a3:29:10:39:4f:b6:d6:5b:7c:a3:fb:98:4c:1f:55:58:fe:70: cd:c9:f9:dd:ad:51:2a:f5:15:2a:3f:24:71:61:13:b0:4a:0c: c9:8c:7c:bf:f5:6e:9b:9b:98:52:7e:70:ad:fb:73:3b:54:b9: 67:07:e6:d3:ab:a7:8f:12:c6:cf:1e:be:f1:01:bb:1f:c4:85: 8e:85:74:4b:1d:03:65:e6:5e:63:aa:6b:b4:f3:de:ee:0f:2b: 68:dc:91:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJB0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZCRDgxMTAvBgNVBAUTKEY5N0M4REFDQzI3RTlGQ0NEMzNBRUI4NTM1MEIyNkE0 ODE1RjEwQjcwHhcNMjYwNjAyMTU0ODUwWhcNMjYwNjA5MTU0ODUwWjAYMRYwFAYD VQQDEw02YTFlZmI2Mi1iNjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx3GmpBzuieC9fb+TFmfcZXGszj7ZdEiRfYSQz/5afEY0cKiIZv3VjMGzwkgb 4iGSfP7YHzvR6KpMCaBT8iYWoyNZqsZXB6KdXuQBgbgmyV8MKy8oSWIYmtEzYfeS 4apJu8k4yKK0SfapRcDMAnJ2bzLaL8gHIREELaWvtFRaMLX6Y2iEHWrfB7GKnn2B YDIvecaFmodNsP76fJFHKmc10bU4vOvXPVATP4q3RPKlw6b1p3vdCj3/Olxhi6yf NQvwP9geqS0GnR7BMxDK1a82fDw7XNVDuLGiCO5zAa3grkJsck4d6hYK5krUMLV7 O9+2xnlDitjGF7kq4H5mz2SxOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD+BPp36 33KpNKepbSTXF2hh8uTsMB8GA1UdIwQYMBaAFPl8jazCfp/M0zrrhTULJqSBXxC3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkJEOC9DNTgzRDIzMjg3 QTIxMUU1OUU1MUYyNTFDNEY5QUUwMi8tWHlOck1KLW44elRPdXVGTlFzbXBJRmZF TGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YeU5yTUotbjh6VE91dUZOUXNtcElGZkVMYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkJEOC9DNTgzRDIzMjg3QTIxMUU1OUU1MUYyNTFDNEY5QUUwMi8tWHlOck1KLW44 elRPdXVGTlFzbXBJRmZFTGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnI8inDHaumV2KbBM4I4rXzdsUftZ55/rbaDkLCt+rxg0mQkGGSiHJCbaBig6 C+X7Zr7BhJForBGL+PWaD1qx+GmEjnRALgB7W+dxXRMC9/0tnfcHsiBl1vGQafi9 qtOT+Me3i2bT0X4Cb1kvCXltGLVjpQX52IFzoBGcvzaVzGGhLDgU8AmquW453+qV KaDueVq3+CWeFKDPHXZSzFmlMJufoykQOU+21lt8o/uYTB9VWP5wzcn53a1RKvUV Kj8kcWETsEoMyYx8v/Vum5uYUn5wrftzO1S5Zwfm06unjxLGzx6+8QG7H8SFjoV0 Sx0DZeZeY6prtPPe7g8raNyR2w== -----END CERTIFICATE-----Generated at Tue Jun 2 22:17:22 2026 by rpki-client