$ rpki-client -vvf rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.mft File: 2CIvXKRzliJE_BNBFXEOvtXjlWA.mft (raw, json) Hash identifier: rRLce3i/hpu1sQrjvYRE4HQ5UhpLC14B8/QD6mIRrvs= Subject key identifier: 0F:A8:4C:38:91:52:97:A8:04:C0:3B:7E:06:F8:2E:7F:FB:B1:21:79 Authority key identifier: D8:22:2F:5C:A4:73:96:22:44:FC:13:41:15:71:0E:BE:D5:E3:95:60 Certificate issuer: /CN=A9119624/serialNumber=D8222F5CA473962244FC134115710EBED5E39560 Certificate serial: 0CD3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2CIvXKRzliJE_BNBFXEOvtXjlWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.mft Manifest number: 0CCA Signing time: Fri 12 Jun 2026 17:48:23 +0000 Manifest this update: Fri 12 Jun 2026 17:48:23 +0000 Manifest next update: Fri 19 Jun 2026 17:48:23 +0000 Files and hashes: 1: 2CIvXKRzliJE_BNBFXEOvtXjlWA.crl (hash: Od9eLID/QXpn1RUU2w/IRIjtzNoxvh0M+Ws6zhToDz0=) 2: A4049C06213E11EAAA89A95DC4F9AE02.roa (hash: UbwOi9U9kZof7b43F/HRMpxGF4fX5ioRAi/qvaW/Bgw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.crl rsync://rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2CIvXKRzliJE_BNBFXEOvtXjlWA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 17:48:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3283 (0xcd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119624, serialNumber=D8222F5CA473962244FC134115710EBED5E39560 Validity Not Before: Jun 12 17:48:23 2026 GMT Not After : Jun 19 17:48:23 2026 GMT Subject: CN=6a2c4667-2035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f2:ed:f0:a2:05:d0:e7:1a:e6:f7:55:b8:16: 7f:e1:e0:44:98:3c:2e:d3:a2:8f:61:61:ad:12:67: f0:9f:ef:ee:9b:8e:50:c7:a5:64:60:53:52:df:b4: 74:86:82:2e:e3:fd:d9:a6:e0:08:ca:3c:d8:1d:3b: 82:65:76:6d:8a:8e:39:a8:ea:06:9e:25:3c:da:c2: 0d:b5:5c:ae:1a:dd:1c:65:bd:68:e2:2d:93:42:35: 77:18:1d:af:23:ce:65:da:71:d2:eb:89:53:df:c2: d9:d1:ad:f4:0d:81:6f:49:9d:bd:ec:12:9f:f1:53: 20:a0:a4:6f:a7:08:a0:85:88:df:c7:04:2a:b9:b4: 9b:cc:60:01:3a:fe:54:85:a0:4d:fc:a7:16:9c:2e: a7:87:94:8d:c2:b2:d4:fe:de:0d:ec:c4:8f:19:ae: b2:a0:2a:3b:61:30:2d:5c:86:af:1a:30:c2:7f:08: 9a:d8:3a:1f:9a:f2:6d:74:72:08:78:8e:6c:bc:e6: b1:3b:a9:17:9c:18:54:9e:fb:6f:07:42:87:fa:ff: 67:ba:33:d1:70:a2:70:d7:7d:05:c8:1f:18:db:ce: fd:74:a0:f4:e8:67:a1:bf:f1:a1:e8:68:44:0f:2c: 5e:1a:b7:f0:53:8b:5f:8a:9e:c2:dc:da:b5:73:dd: 21:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:A8:4C:38:91:52:97:A8:04:C0:3B:7E:06:F8:2E:7F:FB:B1:21:79 X509v3 Authority Key Identifier: keyid:D8:22:2F:5C:A4:73:96:22:44:FC:13:41:15:71:0E:BE:D5:E3:95:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2CIvXKRzliJE_BNBFXEOvtXjlWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:bb:d7:20:c6:36:38:70:c8:18:e5:89:4b:2e:34:c7:89:c6: 40:91:c2:f3:46:cb:21:5c:ee:71:d7:89:17:14:1d:56:11:e3: 92:d9:51:30:c1:1c:40:b5:8e:17:83:da:17:22:52:2c:14:49: 3f:e8:85:be:13:63:30:6e:1c:45:f9:ea:1c:5a:35:0d:05:8c: 3a:ba:5e:d8:83:d6:e2:84:a7:32:79:3e:06:3d:f5:61:bd:56: e8:23:19:b1:3b:3c:21:2b:3b:aa:86:3b:10:0c:cd:5f:fc:90: e3:19:c7:7d:f2:a2:35:b4:f2:2c:01:2d:f3:1a:96:c7:be:df: 6c:5a:f9:2b:ea:69:60:2e:35:60:60:c4:49:e2:1d:88:d2:50: 90:ae:8a:a2:dc:8d:9a:6d:56:ac:b3:dc:a0:78:cc:1f:9c:82: 5d:9f:79:f2:84:4f:e8:59:bf:2f:87:e7:0d:25:f2:36:0e:ba: 4a:83:90:f3:4e:7b:04:86:5a:1a:5e:1a:0b:94:2e:8d:6b:7d: 9f:a0:92:0e:d5:d5:f2:f6:b9:ff:16:46:c8:5c:c0:39:9f:0c: e9:95:d0:70:a0:89:d5:d7:9c:e2:37:e7:c5:bb:ba:43:6b:9a: 2e:84:a5:0b:4d:67:5a:8d:f2:77:3f:b8:60:a8:11:9c:b3:80: 6f:af:a7:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk2MjQxMTAvBgNVBAUTKEQ4MjIyRjVDQTQ3Mzk2MjI0NEZDMTM0MTE1NzEwRUJF RDVFMzk1NjAwHhcNMjYwNjEyMTc0ODIzWhcNMjYwNjE5MTc0ODIzWjAYMRYwFAYD VQQDEw02YTJjNDY2Ny0yMDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmfLt8KIF0Oca5vdVuBZ/4eBEmDwu06KPYWGtEmfwn+/um45Qx6VkYFNS37R0 hoIu4/3ZpuAIyjzYHTuCZXZtio45qOoGniU82sINtVyuGt0cZb1o4i2TQjV3GB2v I85l2nHS64lT38LZ0a30DYFvSZ297BKf8VMgoKRvpwighYjfxwQqubSbzGABOv5U haBN/KcWnC6nh5SNwrLU/t4N7MSPGa6yoCo7YTAtXIavGjDCfwia2DofmvJtdHII eI5svOaxO6kXnBhUnvtvB0KH+v9nujPRcKJw130FyB8Y2879dKD06Gehv/Gh6GhE DyxeGrfwU4tfip7C3Nq1c90hRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA+oTDiR UpeoBMA7fgb4Ln/7sSF5MB8GA1UdIwQYMBaAFNgiL1ykc5YiRPwTQRVxDr7V45Vg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTYyNC9DNjk0ODIzNjEw RTAxMUVBOUJEMUE1NURDNEY5QUUwMi8yQ0l2WEtSemxpSkVfQk5CRlhFT3Z0WGps V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJDSXZYS1J6bGlKRV9CTkJGWEVPdnRYamxXQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTYyNC9DNjk0ODIzNjEwRTAxMUVBOUJEMUE1NURDNEY5QUUwMi8yQ0l2WEtSemxp SkVfQk5CRlhFT3Z0WGpsV0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcLvXIMY2OHDIGOWJSy40x4nGQJHC80bLIVzucdeJFxQdVhHjktlRMMEcQLWO F4PaFyJSLBRJP+iFvhNjMG4cRfnqHFo1DQWMOrpe2IPW4oSnMnk+Bj31Yb1W6CMZ sTs8ISs7qoY7EAzNX/yQ4xnHffKiNbTyLAEt8xqWx77fbFr5K+ppYC41YGDESeId iNJQkK6KotyNmm1WrLPcoHjMH5yCXZ958oRP6Fm/L4fnDSXyNg66SoOQ8057BIZa Gl4aC5QujWt9n6CSDtXV8va5/xZGyFzAOZ8M6ZXQcKCJ1dec4jfnxbu6Q2uaLoSl C01nWo3ydz+4YKgRnLOAb6+nqw== -----END CERTIFICATE-----Generated at Sun Jun 14 02:18:36 2026 by rpki-client