$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft File: F9X-Mj6_2ajTROd7c3majnViQ1I.mft (raw, json) Hash identifier: nB5X5Gg1DAr3c7ActQv+T0Gd45qzKJs/sGTaaRzZJho= Subject key identifier: 84:F7:65:76:62:E7:24:7C:24:92:D4:FE:E1:1C:0D:52:54:90:68:52 Authority key identifier: 17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52 Certificate issuer: /CN=A91F2B47/serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352 Certificate serial: 0324 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft Manifest number: 02FA Signing time: Fri 05 Jun 2026 01:27:20 +0000 Manifest this update: Fri 05 Jun 2026 01:27:19 +0000 Manifest next update: Fri 12 Jun 2026 01:27:19 +0000 Files and hashes: 1: F9X-Mj6_2ajTROd7c3majnViQ1I.crl (hash: X1fIR6jMNSO+KNeabGg1UU7nZJluYG0JVxLMKQWsHIE=) 2: 61CC010AE4BA11EE8037FD6DC4F9AE02.roa (hash: 02sqYdbDRE0+Eg/3piDn9CDT+5Zx0sH2Kq685uMN8gM=) 3: F6CCABBA580311F18246AAE39B833773.roa (hash: Sy10tfcnlP/icaTyyPCajx/jJSM+JdeLmpgnQckiwew=) 4: 50AF1E205CD411EEBADBCF7DC4F9AE02.roa (hash: e3yNZFVgkQCVhCm/QmSqoyQKXUJmq53Q3jA7sKU7YTQ=) 5: BEE96BA212A811F1A54B75AE3D3D8C67.roa (hash: /SEWCKuQ68wowgWrkDXt8HCOPB77auVAxoefhm+aSXY=) 6: 1030CBF02BE911F1BE5DE9B7C4833773.roa (hash: EpKA0Qcr8+YCVzQw+n1+P9eI1+6tzWoY6uRcXseyDfg=) 7: 4BBA96965CD511EE9A078180C4F9AE02.roa (hash: WW5v8VEKPHY5cRU6NklWON7UCKUk27Vdm5aFanhH4uA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 01:27:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 804 (0x324) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2B47, serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352 Validity Not Before: Jun 5 01:27:19 2026 GMT Not After : Jun 12 01:27:19 2026 GMT Subject: CN=6a2225f7-430f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:02:bd:68:23:d0:67:ae:62:27:56:0f:f2:45: 5e:9a:ea:65:9e:7a:29:33:55:1c:6d:dc:48:72:77: 91:6e:a0:03:80:c1:f7:55:62:bf:e0:5c:f4:65:ff: 25:1a:b7:ef:51:bb:f5:31:2b:34:eb:04:7b:ef:cf: 30:ea:ae:0d:56:f8:6c:c2:7a:81:96:67:72:30:88: a3:81:2c:e6:c7:7f:5f:d6:19:ed:53:9d:00:10:17: 29:43:60:4a:44:d4:aa:4c:42:70:19:71:70:d3:bf: db:33:fa:3f:7b:64:c8:3c:14:4b:07:7d:30:5d:57: f5:6e:79:bb:ea:ba:c6:b9:ad:cf:65:11:3f:d0:40: 5b:4b:7a:ac:43:d3:09:99:23:77:5e:d1:26:7a:64: 35:f1:c8:da:09:ee:c4:30:a9:f9:7d:9d:c6:35:b7: fd:0e:15:15:6e:e1:2c:b2:0b:d0:14:58:89:ba:c3: 9e:dc:ec:04:b5:70:dc:90:ee:2b:e2:9a:38:9d:ac: 83:d9:df:4a:3c:af:f4:d6:cb:2e:24:23:ea:93:39: 5e:3e:27:e3:31:e4:4f:ce:08:41:c9:ee:41:87:69: d7:e1:7d:dd:d5:ca:d6:5e:69:77:aa:3b:6f:17:ad: de:94:de:8c:80:43:07:a5:2f:2c:2b:1d:09:b5:2e: eb:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:F7:65:76:62:E7:24:7C:24:92:D4:FE:E1:1C:0D:52:54:90:68:52 X509v3 Authority Key Identifier: keyid:17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:de:a9:61:57:b1:54:b8:4b:bc:2d:7b:d1:db:9e:25:70:25: 4a:57:02:f8:ae:18:3e:3d:e3:01:66:4e:f0:b8:31:52:1f:9c: bb:66:34:8c:d3:71:1b:ef:fc:80:4a:65:d9:65:c5:2d:50:3e: 3a:25:6d:d6:f1:18:4b:73:99:bd:39:58:63:c2:67:3e:85:dd: 3e:cb:88:c9:50:e5:51:09:f7:ad:a6:f3:27:c2:d6:f8:40:a7: 55:11:89:66:8f:f1:df:95:8c:c9:e1:2c:f4:c7:67:03:8c:b6: 56:2c:6f:fb:f4:de:99:47:8a:6b:4f:44:90:59:fa:ca:97:05: b0:e0:47:0b:59:13:21:b7:cf:67:b0:cc:67:83:a1:a2:45:d6: 78:42:83:91:5f:34:84:8f:29:87:57:92:81:cb:fb:0f:e8:f1: 57:03:08:30:13:c0:50:b5:0f:2f:68:fc:1b:0a:f6:65:83:be: aa:81:d8:c7:4c:c4:e6:17:48:53:63:2b:ab:48:a9:e4:b6:39: e9:b4:96:0e:29:54:a2:f5:65:6e:f8:9e:37:18:4e:f9:f9:da: d2:58:01:04:0a:ce:78:1f:a4:5a:06:e5:6d:29:05:35:eb:da: 68:92:23:40:2e:03:b0:ca:8a:cc:a0:f4:b7:07:8f:0f:af:bd: 36:b3:23:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAyQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJCNDcxMTAvBgNVBAUTKDE3RDVGRTMyM0VCRkQ5QThEMzQ0RTc3QjczNzk5QThF NzU2MjQzNTIwHhcNMjYwNjA1MDEyNzE5WhcNMjYwNjEyMDEyNzE5WjAYMRYwFAYD VQQDEw02YTIyMjVmNy00MzBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArwK9aCPQZ65iJ1YP8kVemuplnnopM1UcbdxIcneRbqADgMH3VWK/4Fz0Zf8l GrfvUbv1MSs06wR7788w6q4NVvhswnqBlmdyMIijgSzmx39f1hntU50AEBcpQ2BK RNSqTEJwGXFw07/bM/o/e2TIPBRLB30wXVf1bnm76rrGua3PZRE/0EBbS3qsQ9MJ mSN3XtEmemQ18cjaCe7EMKn5fZ3GNbf9DhUVbuEssgvQFFiJusOe3OwEtXDckO4r 4po4nayD2d9KPK/01ssuJCPqkzlePifjMeRPzghBye5Bh2nX4X3d1crWXml3qjtv F63elN6MgEMHpS8sKx0JtS7r8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIT3ZXZi 5yR8JJLU/uEcDVJUkGhSMB8GA1UdIwQYMBaAFBfV/jI+v9mo00Tne3N5mo51YkNS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkI0Ny9FODhFOUM3RTMz QUYxMUVEQjYxMDc0MzRDNEY5QUUwMi9GOVgtTWo2XzJhalRST2Q3YzNtYWpuVmlR MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Y5WC1NajZfMmFqVFJPZDdjM21ham5WaVExSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkI0Ny9FODhFOUM3RTMzQUYxMUVEQjYxMDc0MzRDNEY5QUUwMi9GOVgtTWo2XzJh alRST2Q3YzNtYWpuVmlRMUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACt6pYVexVLhLvC170dueJXAlSlcC+K4YPj3jAWZO8LgxUh+cu2Y0jNNxG+/8 gEpl2WXFLVA+OiVt1vEYS3OZvTlYY8JnPoXdPsuIyVDlUQn3rabzJ8LW+ECnVRGJ Zo/x35WMyeEs9MdnA4y2Vixv+/TemUeKa09EkFn6ypcFsOBHC1kTIbfPZ7DMZ4Oh okXWeEKDkV80hI8ph1eSgcv7D+jxVwMIMBPAULUPL2j8Gwr2ZYO+qoHYx0zE5hdI U2Mrq0ip5LY56bSWDilUovVlbvieNxhO+fna0lgBBArOeB+kWgblbSkFNevaaJIj QC4DsMqKzKD0twePD6+9NrMjgQ== -----END CERTIFICATE-----Generated at Sat Jun 6 13:13:05 2026 by rpki-client