$ rpki-client -vvf rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft File: -cNjgFn4ZOhK479Q2qwHnGhGPqc.mft (raw, json) Hash identifier: bJvWmiLTqI70R5ZF1Z1dm7fEDQ6AOmvyO10Us6EGqyA= Subject key identifier: 75:AA:94:CC:14:5E:B9:F4:50:6E:95:C2:04:73:52:0D:F9:86:DB:3B Authority key identifier: F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7 Certificate issuer: /CN=A919DB2F/serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7 Certificate serial: 0602 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft Manifest number: 05E8 Signing time: Thu 18 Jun 2026 23:05:01 +0000 Manifest this update: Thu 18 Jun 2026 23:05:00 +0000 Manifest next update: Thu 25 Jun 2026 23:05:00 +0000 Files and hashes: 1: -cNjgFn4ZOhK479Q2qwHnGhGPqc.crl (hash: XXOK3s+G9osDwoj1d/cVczBTLbVg2dUHGLKoFzlu0nM=) 2: E0A5F584DFAC11EE8C281B42C4F9AE02.roa (hash: ACH95SwjT1YpCDpkqchyYu/Flaw3KUpz5N98U+Lw/tY=) 3: F307B7F4912A11F0B418B448C4F9AE02.roa (hash: Sn67Wsq1d2oCfy6pDGrSn0YDKV0xfK/wnuR+TWYyUN0=) 4: 27023558912A11F09F7D4044C4F9AE02.roa (hash: OMLVMbADMiWDue7ZTRWxAOooyihp025Pd2cOw63qWcY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Jun 2026 23:05:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1538 (0x602) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DB2F, serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7 Validity Not Before: Jun 18 23:05:00 2026 GMT Not After : Jun 25 23:05:00 2026 GMT Subject: CN=6a34799d-54c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8f:22:eb:9f:ff:79:51:b0:d1:70:93:3f:3a: b1:7a:b6:2e:94:91:09:48:7b:1c:10:a6:e3:40:1d: 6a:e1:26:3d:ea:ed:04:b6:24:48:95:3d:1a:07:77: a7:ed:d3:2e:2a:e5:b8:e1:b2:96:8c:d2:2b:43:bf: 7b:eb:38:a6:5a:3f:00:ac:f6:b1:95:ee:ba:b3:89: 5e:4d:e5:b4:ae:b9:0d:91:22:d1:df:27:8d:a8:75: 71:bc:c3:95:b0:8f:ae:ce:01:27:51:0c:18:cb:dd: 63:47:45:01:66:34:e7:85:de:78:d6:a1:5c:6c:67: 44:cf:58:fc:69:96:11:ec:2e:5f:fd:4c:1c:e1:12: 7b:11:4b:65:df:23:79:31:a3:23:9b:97:47:95:ca: a6:09:55:ec:27:ad:cc:3e:16:ca:14:c1:84:25:92: 08:fa:9f:56:9a:a1:77:ce:c5:83:e3:4a:88:e4:5f: 56:cf:e4:b1:a7:9e:44:36:2e:c2:80:a2:0f:a6:13: 0f:4c:2e:cc:73:fd:4f:88:18:a0:71:0a:c0:9a:d2: 5e:f2:c9:a0:6c:c4:82:46:81:ba:60:4b:dd:20:ff: 55:7f:94:48:9f:c6:08:22:b9:d6:69:cb:4b:dd:a5: 08:20:08:03:56:5f:6b:df:3c:89:16:a8:1d:cf:23: 4c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:AA:94:CC:14:5E:B9:F4:50:6E:95:C2:04:73:52:0D:F9:86:DB:3B X509v3 Authority Key Identifier: keyid:F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:fb:16:bc:47:aa:4d:da:8d:c6:11:f3:86:46:37:0a:e7:03: 2c:04:32:50:7c:02:89:7e:24:18:ea:65:f6:ff:db:78:e7:6e: 66:4f:0b:5a:52:7e:92:05:d3:5d:92:1d:bd:ac:9f:f2:70:2d: 4b:ad:cd:5e:7d:a7:91:2e:14:6f:b6:a2:8e:a9:4c:af:9b:23: 98:fd:2f:9d:47:28:8b:fa:fa:2b:34:98:8c:da:b0:20:50:e6: 87:ab:dd:52:c0:66:1b:66:45:9b:e2:e2:a5:68:f0:c9:1a:71: f5:14:a3:a2:bb:69:4e:0b:a8:a4:a0:3f:de:4b:9b:10:7e:c2: 92:9f:b7:aa:b0:89:c4:8b:83:0d:d6:95:2f:96:1f:91:a1:f6: 5e:7e:24:fb:84:3d:36:9f:11:ae:d8:cb:9b:ad:27:50:1b:2e: 14:9b:31:19:a1:08:08:fd:a5:f9:2b:83:37:57:81:66:3b:29: 2d:3a:b8:04:47:e7:69:e1:1a:9f:77:60:19:dc:7c:b8:e4:20: 3e:20:af:9e:f8:2a:d3:96:05:b1:6a:c5:86:f3:71:aa:57:a0: 2a:94:01:f9:bd:fc:34:60:32:05:ca:e0:63:45:4c:3b:58:82: 8e:30:20:76:8d:24:0e:be:be:31:e2:a4:cf:8c:fd:97:ad:27: 53:6f:c1:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURCMkYxMTAvBgNVBAUTKEY5QzM2MzgwNTlGODY0RTg0QUUzQkY1MERBQUMwNzlD Njg0NjNFQTcwHhcNMjYwNjE4MjMwNTAwWhcNMjYwNjI1MjMwNTAwWjAYMRYwFAYD VQQDEw02YTM0Nzk5ZC01NGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAto8i65//eVGw0XCTPzqxerYulJEJSHscEKbjQB1q4SY96u0EtiRIlT0aB3en 7dMuKuW44bKWjNIrQ7976zimWj8ArPaxle66s4leTeW0rrkNkSLR3yeNqHVxvMOV sI+uzgEnUQwYy91jR0UBZjTnhd541qFcbGdEz1j8aZYR7C5f/Uwc4RJ7EUtl3yN5 MaMjm5dHlcqmCVXsJ63MPhbKFMGEJZII+p9WmqF3zsWD40qI5F9Wz+Sxp55ENi7C gKIPphMPTC7Mc/1PiBigcQrAmtJe8smgbMSCRoG6YEvdIP9Vf5RIn8YIIrnWactL 3aUIIAgDVl9r3zyJFqgdzyNMJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHWqlMwU Xrn0UG6VwgRzUg35hts7MB8GA1UdIwQYMBaAFPnDY4BZ+GToSuO/UNqsB5xoRj6n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REIyRi9FRjU5Q0VDNDBB REExMUVDOTVGNUY2NzhDNEY5QUUwMi8tY05qZ0ZuNFpPaEs0NzlRMnF3SG5HaEdQ cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1jTmpnRm40Wk9oSzQ3OVEycXdIbkdoR1BxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REIyRi9FRjU5Q0VDNDBBREExMUVDOTVGNUY2NzhDNEY5QUUwMi8tY05qZ0ZuNFpP aEs0NzlRMnF3SG5HaEdQcWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG/sWvEeqTdqNxhHzhkY3CucDLAQyUHwCiX4kGOpl9v/beOduZk8LWlJ+kgXT XZIdvayf8nAtS63NXn2nkS4Ub7aijqlMr5sjmP0vnUcoi/r6KzSYjNqwIFDmh6vd UsBmG2ZFm+LipWjwyRpx9RSjortpTguopKA/3kubEH7Ckp+3qrCJxIuDDdaVL5Yf kaH2Xn4k+4Q9Np8RrtjLm60nUBsuFJsxGaEICP2l+SuDN1eBZjspLTq4BEfnaeEa n3dgGdx8uOQgPiCvnvgq05YFsWrFhvNxqlegKpQB+b38NGAyBcrgY0VMO1iCjjAg do0kDr6+MeKkz4z9l60nU2/Bpg== -----END CERTIFICATE-----Generated at Sat Jun 20 13:11:40 2026 by rpki-client