$ rpki-client -vvf rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft File: x2h2G8gatP5_1EAVSCYcuocge-o.mft (raw, json) Hash identifier: g3zivYQQ8n+lY8jMouBmC7m2QOUrTd/JszrBhEj6a10= Subject key identifier: 97:29:F8:E6:D7:C6:7D:5E:2B:30:CA:8B:5B:7D:A0:F6:A6:5E:2E:65 Authority key identifier: C7:68:76:1B:C8:1A:B4:FE:7F:D4:40:15:48:26:1C:BA:87:20:7B:EA Certificate issuer: /CN=A9118022/serialNumber=C768761BC81AB4FE7FD4401548261CBA87207BEA Certificate serial: 0EFE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft Manifest number: 0ECA Signing time: Fri 12 Jun 2026 17:39:08 +0000 Manifest this update: Fri 12 Jun 2026 17:39:07 +0000 Manifest next update: Fri 19 Jun 2026 17:39:07 +0000 Files and hashes: 1: x2h2G8gatP5_1EAVSCYcuocge-o.crl (hash: idg+URVBR6KH/u6mJoedocGIg4uGf69hC14RPRxMRzk=) 2: 670DF186232111EB9896B783C4F9AE02.roa (hash: JDnnr+gXElLZfFNqxroiEtHe91q0ZicgMHi1XY427Ss=) 3: 1BBE249C21D911EB85DAFE71C4F9AE02.roa (hash: IJy6vq3u18sfK/PaqQ4HkbGHvtQ0+WpPPGjw18M6VWY=) 4: 1C99C7E021D911EB85DAFE71C4F9AE02.roa (hash: bKvSPuftAoTubmq1z1G2lBaSXWyaRfT8vN+YYMv11yI=) 5: 127D33EC027011EB98FEC44BC4F9AE02.roa (hash: xo+tt5lov3udnd3XAOiK90QcwkAcxMUW1iuUC+4M+z8=) 6: 1D93B82C21D911EB85DAFE71C4F9AE02.roa (hash: E+4UeHlGnBHL9IRmWm+TexcyHwom9b/OOAx0STjQIo0=) 7: 1609CE067A4A11EB99C11F5FC4F9AE02.roa (hash: jPTrigcWq4coxSH4UL7oP5hGP5jZz/yTxLEnnmOBFlo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.crl rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 17:39:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3838 (0xefe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118022, serialNumber=C768761BC81AB4FE7FD4401548261CBA87207BEA Validity Not Before: Jun 12 17:39:07 2026 GMT Not After : Jun 19 17:39:07 2026 GMT Subject: CN=6a2c443c-115b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8a:e9:f1:68:f6:ec:a1:8e:a7:81:2c:2c:88: 52:bf:46:11:97:e1:ed:6f:e5:b3:bc:8c:a7:8b:38: 4f:b2:7f:55:82:e9:d5:0d:71:63:0a:7d:d1:27:b8: b1:25:62:24:bd:a8:72:30:14:5c:c3:20:b4:72:13: c0:29:ce:d4:88:b6:b3:9f:69:78:4c:6b:48:db:8a: 78:37:6a:86:46:eb:09:48:42:67:b7:e7:eb:c3:f1: c3:18:57:f0:c7:2e:1f:4c:1d:04:1b:97:a2:a0:18: 2e:3e:9c:01:89:a2:98:62:d8:9c:df:72:a0:bb:77: 16:55:8f:3a:40:c7:46:58:bc:48:bd:b8:e3:72:37: 0d:10:28:39:7e:c4:cb:8b:f3:13:b8:5e:32:eb:f8: 05:b6:c5:56:27:68:80:af:12:b3:6d:7c:d3:96:48: 04:ac:99:7f:54:3f:d8:7d:9c:ef:1d:12:49:19:07: 72:39:ea:f7:08:01:05:4c:bd:b4:c5:36:2e:de:48: 15:c5:be:4d:cf:d8:fa:f2:a4:ba:b7:0d:05:50:d6: cf:b0:f6:33:bc:89:8e:95:3b:33:61:d3:f4:4c:db: ef:b4:94:45:90:ac:6f:56:d6:35:7e:84:6b:13:bf: 3c:e5:41:fd:da:78:e5:75:23:17:90:cd:dd:a2:cd: 2f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:29:F8:E6:D7:C6:7D:5E:2B:30:CA:8B:5B:7D:A0:F6:A6:5E:2E:65 X509v3 Authority Key Identifier: keyid:C7:68:76:1B:C8:1A:B4:FE:7F:D4:40:15:48:26:1C:BA:87:20:7B:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:0c:fe:d9:fe:4e:4e:df:39:9b:78:88:ac:99:5b:72:5f:76: bb:bf:10:19:f3:03:16:2c:67:eb:14:71:47:99:85:45:6e:d1: 30:b9:2e:f2:90:79:09:2a:18:41:f2:4b:99:52:d0:1c:06:05: dc:0e:33:72:41:61:33:86:b6:93:f6:6d:dc:13:76:7c:fc:85: 27:b0:94:01:12:75:77:06:45:2b:e4:45:fe:fa:38:82:c1:b9: 33:83:ff:be:6a:eb:95:87:f4:52:fa:9c:c4:dd:14:31:c2:dc: cc:7b:f2:b5:9f:c6:9c:eb:b3:2a:35:b0:01:6b:7b:47:99:15: 63:00:7d:f0:6e:33:59:0e:23:49:53:ff:9d:1a:13:83:7c:18: 9d:a2:78:ea:ea:5e:cf:ae:a9:8b:67:18:53:de:b6:b5:64:e7: cb:2b:36:2a:a5:29:1e:b1:ba:67:a8:c2:1d:7f:c7:74:a7:fc: 5d:75:19:db:92:cd:c3:00:ae:d4:d2:00:d5:ab:1b:d6:91:92: d9:8c:5a:67:64:a5:de:bc:56:00:5d:1e:d2:8b:37:a5:38:3a: 52:15:0a:3e:37:ff:f7:b9:25:65:d7:62:70:ad:0b:4a:02:a0: b6:38:6e:35:c1:4e:b6:96:b6:bb:42:57:2b:a3:47:85:d8:03: 27:5b:43:5b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDv4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgwMjIxMTAvBgNVBAUTKEM3Njg3NjFCQzgxQUI0RkU3RkQ0NDAxNTQ4MjYxQ0JB ODcyMDdCRUEwHhcNMjYwNjEyMTczOTA3WhcNMjYwNjE5MTczOTA3WjAYMRYwFAYD VQQDEw02YTJjNDQzYy0xMTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr4rp8Wj27KGOp4EsLIhSv0YRl+Htb+WzvIynizhPsn9VgunVDXFjCn3RJ7ix JWIkvahyMBRcwyC0chPAKc7UiLazn2l4TGtI24p4N2qGRusJSEJnt+frw/HDGFfw xy4fTB0EG5eioBguPpwBiaKYYtic33Kgu3cWVY86QMdGWLxIvbjjcjcNECg5fsTL i/MTuF4y6/gFtsVWJ2iArxKzbXzTlkgErJl/VD/YfZzvHRJJGQdyOer3CAEFTL20 xTYu3kgVxb5Nz9j68qS6tw0FUNbPsPYzvImOlTszYdP0TNvvtJRFkKxvVtY1foRr E7885UH92njldSMXkM3dos0v+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJcp+ObX xn1eKzDKi1t9oPamXi5lMB8GA1UdIwQYMBaAFMdodhvIGrT+f9RAFUgmHLqHIHvq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODAyMi9DNjFDMjU2QUFE Q0MxMUU5QUM2NzJGNEJDNEY5QUUwMi94MmgyRzhnYXRQNV8xRUFWU0NZY3VvY2dl LW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gyaDJHOGdhdFA1XzFFQVZTQ1ljdW9jZ2Utby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODAyMi9DNjFDMjU2QUFEQ0MxMUU5QUM2NzJGNEJDNEY5QUUwMi94MmgyRzhnYXRQ NV8xRUFWU0NZY3VvY2dlLW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFgz+2f5OTt85m3iIrJlbcl92u78QGfMDFixn6xRxR5mFRW7RMLku8pB5CSoY QfJLmVLQHAYF3A4zckFhM4a2k/Zt3BN2fPyFJ7CUARJ1dwZFK+RF/vo4gsG5M4P/ vmrrlYf0UvqcxN0UMcLczHvytZ/GnOuzKjWwAWt7R5kVYwB98G4zWQ4jSVP/nRoT g3wYnaJ46upez66pi2cYU962tWTnyys2KqUpHrG6Z6jCHX/HdKf8XXUZ25LNwwCu 1NIA1asb1pGS2YxaZ2Sl3rxWAF0e0os3pTg6UhUKPjf/97klZddicK0LSgKgtjhu NcFOtpa2u0JXK6NHhdgDJ1tDWw== -----END CERTIFICATE-----Generated at Sat Jun 13 14:28:59 2026 by rpki-client