$ rpki-client -vvf rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft File: gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft (raw, json) Hash identifier: aoWOsZV8oKUn9jUXuPtSzN9nmV1FiPAQhcT8EK4601E= Subject key identifier: 39:80:2E:A5:1C:9D:DB:EA:BF:A2:F6:02:B9:81:B1:98:8C:27:5A:EE Authority key identifier: 80:6A:BF:F4:63:59:4C:AA:30:DE:70:A3:11:AE:2F:84:91:89:BC:64 Certificate issuer: /CN=A9111318/serialNumber=806ABFF463594CAA30DE70A311AE2F849189BC64 Certificate serial: 366D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft Manifest number: 35B9 Signing time: Fri 12 Jun 2026 14:43:17 +0000 Manifest this update: Fri 12 Jun 2026 14:43:17 +0000 Manifest next update: Fri 19 Jun 2026 14:43:17 +0000 Files and hashes: 1: gGq_9GNZTKow3nCjEa4vhJGJvGQ.crl (hash: ytFJkklaTzXA/xkd+M2XItMBmlgV2bHswPmioxz3MdY=) 2: 2D954C6C5A5511F183A61EC6B3833773.roa (hash: rElfqdRGN29qxIjELniN/ns6Di2jBGzrKAoe/hx+ulg=) 3: A98C92A0340411E9A22CD05CC4F9AE02.roa (hash: NpdXvUi0bOLwAI99mVEhTKoihk55uTCpoGGEQSEc3Es=) 4: AACC7DA6340411E9A22CD05CC4F9AE02.roa (hash: k0uZVX0nsDGgLqmDvVfTLTs9cFGF738mh3IkZuFo3ak=) 5: 7E04A27C33F911E98674843BC4F9AE02.roa (hash: 3i0z2osisz1IhAHAtFccv5uOaN5Ra1G9W/L98klGlE8=) 6: 26CCB614E0D011E9B0E8C36FC4F9AE02.roa (hash: Hj19lbwQkmgXh2lmPzGWYqIUEUY+YjAHDJo8DvWnQhg=) 7: A8ED77E2340411E9A22CD05CC4F9AE02.roa (hash: QUkQde57UWEId07KtM6ohSI0mt86ITfJmEc6feUVNtI=) 8: AA2A006C340411E9A22CD05CC4F9AE02.roa (hash: d2KcEJoKGoHbLyeqM22p8xGAN7ehyctRiL8Waj0Hz9E=) 9: 8C7BC30E5B7E11F0AA42172EC4F9AE02.roa (hash: tQ6h5U80hViApEcolMy8eZlxAFiz9SJZ7qPINPyuZ+w=) 10: 7D883CF033F911E98674843BC4F9AE02.roa (hash: CoasRg2DGu9JMRzgRqeM5/d+mbsPFZm9qeb8r6Sr3XE=) 11: A8689054340411E9A22CD05CC4F9AE02.roa (hash: AZihbaN8E44U2FxVABNpgB/Zu9iqvuTBqyKY3ZPJiVw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.crl rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 14:43:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13933 (0x366d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111318, serialNumber=806ABFF463594CAA30DE70A311AE2F849189BC64 Validity Not Before: Jun 12 14:43:17 2026 GMT Not After : Jun 19 14:43:17 2026 GMT Subject: CN=6a2c1b05-128b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:87:cf:3b:1a:87:9f:a1:be:8d:15:c5:d3:66: 4e:6d:ea:e7:2d:68:b0:d6:2e:eb:fd:73:14:bf:eb: af:8a:7f:1b:bb:fe:d5:be:17:92:2b:c4:dc:8e:04: b5:12:79:51:cf:e6:eb:96:f6:cc:7f:b8:8b:4a:25: c4:f0:f2:10:77:a3:b3:ab:fa:d5:f4:0b:96:a9:fe: c6:6d:30:da:62:23:07:2c:71:39:f0:43:08:25:0f: 74:4e:0d:df:9e:e0:c9:28:d2:e6:ee:c1:18:b5:f7: e3:70:40:7a:d4:ec:5e:b4:d6:e7:b2:92:62:ba:92: 77:b8:75:f4:67:ad:a0:32:de:34:ba:96:9f:f9:37: a8:22:03:2a:03:95:f1:b4:e3:82:a7:2f:fe:f5:00: 94:99:71:3c:59:87:f3:25:8c:33:21:0d:a7:a2:59: 21:a7:5f:10:41:4a:13:d5:ed:1e:db:6e:f6:04:2d: ef:4d:9b:9b:e6:00:02:b4:af:06:8b:ab:d8:c5:77: 62:f8:a3:57:f6:32:74:4c:01:fe:0d:c4:6e:14:90: 92:b2:0a:33:fa:90:ec:90:eb:2c:34:3e:6e:28:c9: e3:7e:2b:6a:4d:c3:e4:57:de:3f:b0:c2:d8:c2:bc: 63:23:b5:7d:0f:c4:ca:62:72:f7:4e:db:da:bb:8a: f8:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:80:2E:A5:1C:9D:DB:EA:BF:A2:F6:02:B9:81:B1:98:8C:27:5A:EE X509v3 Authority Key Identifier: keyid:80:6A:BF:F4:63:59:4C:AA:30:DE:70:A3:11:AE:2F:84:91:89:BC:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:5b:de:4a:38:d5:97:8c:55:4f:fc:ff:55:d8:64:bf:48:05: 9d:d7:17:e3:cc:ad:db:72:49:bf:81:75:cd:d4:fd:70:20:e9: e0:26:41:2a:40:da:95:89:18:01:b7:e0:dc:9d:da:26:de:45: 2e:dd:62:52:42:8e:28:8b:2b:f6:55:3b:57:90:e9:88:3a:1f: a7:da:f5:0f:9a:fb:2d:b7:65:52:dd:ac:63:82:36:2d:b7:bf: c1:b2:00:3f:e8:c0:2d:a0:f0:d2:39:18:c6:2f:24:7d:91:72: 1b:a1:f6:b3:58:d9:f2:0d:e4:5d:a5:a1:b7:ac:30:9a:db:21: 4d:da:03:7e:88:27:ad:1e:14:b9:4c:f7:1c:7f:ee:af:80:dc: 2a:2d:69:97:df:c7:33:57:5a:f7:0b:2f:b3:98:b6:fe:3d:47: bd:59:ed:50:88:48:e3:6f:1b:84:94:92:b7:20:00:b1:fb:82: 27:f2:12:36:b4:b5:fa:a9:44:d7:68:d8:55:98:a1:a4:22:74: 8a:aa:0f:45:34:98:13:65:67:55:62:ef:a0:b7:4d:c7:af:86: 1e:59:9c:bb:78:1f:5a:58:97:e6:19:79:3f:f3:b3:21:28:2b: d7:1c:2b:c9:8e:6c:f1:8b:4b:ba:36:82:b8:fc:c2:a9:45:a5: 9b:dc:7c:4d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEzMTgxMTAvBgNVBAUTKDgwNkFCRkY0NjM1OTRDQUEzMERFNzBBMzExQUUyRjg0 OTE4OUJDNjQwHhcNMjYwNjEyMTQ0MzE3WhcNMjYwNjE5MTQ0MzE3WjAYMRYwFAYD VQQDEw02YTJjMWIwNS0xMjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwofPOxqHn6G+jRXF02ZObernLWiw1i7r/XMUv+uvin8bu/7VvheSK8TcjgS1 EnlRz+brlvbMf7iLSiXE8PIQd6Ozq/rV9AuWqf7GbTDaYiMHLHE58EMIJQ90Tg3f nuDJKNLm7sEYtffjcEB61OxetNbnspJiupJ3uHX0Z62gMt40upaf+TeoIgMqA5Xx tOOCpy/+9QCUmXE8WYfzJYwzIQ2nolkhp18QQUoT1e0e2272BC3vTZub5gACtK8G i6vYxXdi+KNX9jJ0TAH+DcRuFJCSsgoz+pDskOssND5uKMnjfitqTcPkV94/sMLY wrxjI7V9D8TKYnL3Ttvau4r4CwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDmALqUc ndvqv6L2ArmBsZiMJ1ruMB8GA1UdIwQYMBaAFIBqv/RjWUyqMN5woxGuL4SRibxk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTMxOC9EQzc0NTFGMjFE OTExMUUyOThFNzQ2RjQwOEIwMkNEMi9nR3FfOUdOWlRLb3czbkNqRWE0dmhKR0p2 R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dHcV85R05aVEtvdzNuQ2pFYTR2aEpHSnZHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTMxOC9EQzc0NTFGMjFEOTExMUUyOThFNzQ2RjQwOEIwMkNEMi9nR3FfOUdOWlRL b3czbkNqRWE0dmhKR0p2R1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAq1veSjjVl4xVT/z/Vdhkv0gFndcX48yt23JJv4F1zdT9cCDp4CZBKkDalYkY Abfg3J3aJt5FLt1iUkKOKIsr9lU7V5DpiDofp9r1D5r7LbdlUt2sY4I2Lbe/wbIA P+jALaDw0jkYxi8kfZFyG6H2s1jZ8g3kXaWht6wwmtshTdoDfognrR4UuUz3HH/u r4DcKi1pl9/HM1da9wsvs5i2/j1HvVntUIhI428bhJSStyAAsfuCJ/ISNrS1+qlE 12jYVZihpCJ0iqoPRTSYE2VnVWLvoLdNx6+GHlmcu3gfWliX5hl5P/OzISgr1xwr yY5s8YtLujaCuPzCqUWlm9x8TQ== -----END CERTIFICATE-----Generated at Sat Jun 13 21:46:19 2026 by rpki-client