$ rpki-client -vvf rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft File: 8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft (raw, json) Hash identifier: Jnah6UxatOPaZUAdz5RYndNh1SsDYcirfnIuL8OaKYM= Subject key identifier: 31:46:F0:EF:C6:4F:DD:F9:D1:D1:6F:6B:6D:03:68:DD:0B:34:27:82 Authority key identifier: F1:99:8A:47:5E:92:DE:8A:6C:7D:40:94:55:6A:0D:A6:7D:5D:4D:0E Certificate issuer: /CN=A9118CA7/serialNumber=F1998A475E92DE8A6C7D4094556A0DA67D5D4D0E Certificate serial: 0A20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft Manifest number: 09FE Signing time: Fri 12 Jun 2026 19:52:39 +0000 Manifest this update: Fri 12 Jun 2026 19:52:39 +0000 Manifest next update: Fri 19 Jun 2026 19:52:39 +0000 Files and hashes: 1: 8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl (hash: 091w2b0ejQ+Y5Obj/jp6cUVi4FnuS11DfoUMuDLyyaQ=) 2: E76F99C60FDB11ED9718606AC4F9AE02.roa (hash: jPruOReU41tiy9WKYUDnZKPfOqm/FjV3E9pMcApFq0A=) 3: FFFE56DEDEF111EF8EE4AE37C4F9AE02.roa (hash: 0FWKl6V2UsAeRLSYgRMr9fF+nuXljQkdSIOnzl7uC2U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 19:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2592 (0xa20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118CA7, serialNumber=F1998A475E92DE8A6C7D4094556A0DA67D5D4D0E Validity Not Before: Jun 12 19:52:39 2026 GMT Not After : Jun 19 19:52:39 2026 GMT Subject: CN=6a2c6387-0131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8a:bc:d4:ae:ed:fc:16:7a:34:96:6d:ef:fb: 3f:c3:ec:28:b6:0d:d9:56:fe:91:a5:dd:4b:17:e2: 9b:8b:8e:35:a9:c2:fc:22:10:9c:9e:47:b5:29:2d: ff:52:f7:1e:a7:62:44:e5:67:d6:9b:a7:ad:c5:62: ba:84:3b:7f:c0:d5:b5:b4:38:70:ee:b8:9c:45:5c: 88:60:fb:69:11:64:09:c5:b8:16:be:bd:f6:96:99: 0b:e0:60:e9:6d:94:42:ec:86:5e:c0:1c:63:98:3a: 93:57:12:c8:ac:c8:a4:fa:3a:af:ed:8b:d9:da:ba: e6:da:b3:6a:8a:eb:d2:7f:4b:5c:d1:19:6c:6f:85: 72:0e:b0:56:c2:d9:f6:5b:2a:ba:78:12:fb:9e:cc: cc:4b:cd:74:3e:b2:d3:10:c7:3f:01:22:c0:32:3e: 27:a5:c6:90:41:dd:3b:a8:46:27:6b:10:b9:22:28: 5c:50:0e:df:c6:95:fd:f2:d9:46:48:f4:ee:12:78: 6d:56:b2:5f:78:1d:4f:c4:70:22:6d:df:8c:bf:98: 17:97:70:7f:ea:4b:e6:fd:81:89:3d:81:71:ad:a2: 5a:ef:c7:ac:82:b8:a1:c2:db:84:ee:c6:f6:17:7c: 5c:e6:79:45:f5:a3:f1:1a:d4:37:56:c3:f5:7d:fa: 67:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:46:F0:EF:C6:4F:DD:F9:D1:D1:6F:6B:6D:03:68:DD:0B:34:27:82 X509v3 Authority Key Identifier: keyid:F1:99:8A:47:5E:92:DE:8A:6C:7D:40:94:55:6A:0D:A6:7D:5D:4D:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:25:43:b7:02:04:8b:dd:2e:1a:97:e4:8b:59:a0:53:3c:f0: cd:29:0f:de:b1:25:c7:11:ee:e6:74:98:46:22:16:72:6b:24: fa:06:a1:32:0f:77:43:ae:e5:ec:2c:73:40:38:c5:f3:fe:45: f2:42:47:88:5e:05:10:67:3a:37:ab:b9:e3:8a:9c:95:20:eb: 5d:33:11:c3:c8:09:f5:c9:4a:24:86:ff:45:68:3d:6f:86:a8: b0:14:84:5c:d4:66:f9:0c:83:9e:a7:a5:d4:4b:e9:41:47:d7: 9d:d4:8f:c6:48:8f:55:1b:30:f4:90:d8:1c:89:33:db:94:1a: 3d:92:a2:6a:ed:83:55:3d:55:45:f7:7a:29:63:52:3e:cc:6f: 03:ff:98:b2:8e:01:54:a2:a5:9f:d2:b6:3a:37:d1:57:74:e8: be:b7:3e:de:ed:7f:4e:64:41:f3:43:b0:c9:e5:8f:b8:eb:ed: 16:3a:fb:ba:68:4d:c6:05:03:f5:3a:2d:f0:87:55:03:d9:a1: f9:6a:36:f9:56:b4:ce:52:3a:39:5e:7c:5b:c9:73:34:66:d4: 86:0b:f1:6c:43:7f:72:94:ec:cf:c7:48:66:57:fc:88:d8:19: 1b:2c:1e:02:83:4a:0d:98:e4:bd:3a:32:3d:81:67:97:89:5a: 76:9f:71:60 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThDQTcxMTAvBgNVBAUTKEYxOTk4QTQ3NUU5MkRFOEE2QzdENDA5NDU1NkEwREE2 N0Q1RDREMEUwHhcNMjYwNjEyMTk1MjM5WhcNMjYwNjE5MTk1MjM5WjAYMRYwFAYD VQQDEw02YTJjNjM4Ny0wMTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Iq81K7t/BZ6NJZt7/s/w+wotg3ZVv6Rpd1LF+Kbi441qcL8IhCcnke1KS3/ Uvcep2JE5WfWm6etxWK6hDt/wNW1tDhw7ricRVyIYPtpEWQJxbgWvr32lpkL4GDp bZRC7IZewBxjmDqTVxLIrMik+jqv7YvZ2rrm2rNqiuvSf0tc0Rlsb4VyDrBWwtn2 Wyq6eBL7nszMS810PrLTEMc/ASLAMj4npcaQQd07qEYnaxC5IihcUA7fxpX98tlG SPTuEnhtVrJfeB1PxHAibd+Mv5gXl3B/6kvm/YGJPYFxraJa78esgrihwtuE7sb2 F3xc5nlF9aPxGtQ3VsP1ffpnIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDFG8O/G T9350dFva20DaN0LNCeCMB8GA1UdIwQYMBaAFPGZikdekt6KbH1AlFVqDaZ9XU0O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOENBNy8yRkM3MEEyNEEw RDUxMUVBQTdGRkRGMjlDNEY5QUUwMi84Wm1LUjE2UzNvcHNmVUNVVldvTnBuMWRU UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhabUtSMTZTM29wc2ZVQ1VWV29OcG4xZFRRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OENBNy8yRkM3MEEyNEEwRDUxMUVBQTdGRkRGMjlDNEY5QUUwMi84Wm1LUjE2UzNv cHNmVUNVVldvTnBuMWRUUTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACSVDtwIEi90uGpfki1mgUzzwzSkP3rElxxHu5nSYRiIWcmsk+gahMg93Q67l 7CxzQDjF8/5F8kJHiF4FEGc6N6u544qclSDrXTMRw8gJ9clKJIb/RWg9b4aosBSE XNRm+QyDnqel1EvpQUfXndSPxkiPVRsw9JDYHIkz25QaPZKiau2DVT1VRfd6KWNS PsxvA/+Yso4BVKKln9K2OjfRV3Tovrc+3u1/TmRB80OwyeWPuOvtFjr7umhNxgUD 9Tot8IdVA9mh+Wo2+Va0zlI6OV58W8lzNGbUhgvxbEN/cpTsz8dIZlf8iNgZGywe AoNKDZjkvToyPYFnl4ladp9xYA== -----END CERTIFICATE-----Generated at Sun Jun 14 09:56:05 2026 by rpki-client