$ rpki-client -vvf rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft File: dmXig10WAIXjHsJFIi1LL35IRAk.mft (raw, json) Hash identifier: VdalKeoMq1FU+xWnTHcrHNAhU9OqKqP1GLQ9n7CQIy8= Subject key identifier: DE:29:FF:D6:1C:0D:C9:77:CE:C0:49:62:A4:38:34:BD:7F:20:E8:FB Authority key identifier: 76:65:E2:83:5D:16:00:85:E3:1E:C2:45:22:2D:4B:2F:7E:48:44:09 Certificate issuer: /CN=A911DFC9/serialNumber=7665E2835D160085E31EC245222D4B2F7E484409 Certificate serial: F8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft Manifest number: D0 Signing time: Sat 13 Jun 2026 06:52:24 +0000 Manifest this update: Sat 13 Jun 2026 06:52:24 +0000 Manifest next update: Sat 20 Jun 2026 06:52:24 +0000 Files and hashes: 1: dmXig10WAIXjHsJFIi1LL35IRAk.crl (hash: cu4oRqgA9JyCogbRmpyIJJ2NKsNXR9+0xZ0pZd656fs=) 2: CB4E186A30E111F09B76D311C4F9AE02.roa (hash: iU6Wj2L6dhe3grsmDUQsEWobs2LTk0gYMSSAmstcjt8=) 3: CBDD09E430E111F09B76D311C4F9AE02.roa (hash: sY7EBkThUecrfKfG+kSCpuHCSj6wPtVy9PUYEZdqikI=) 4: CAE10F4030E111F09B76D311C4F9AE02.roa (hash: juMHvZUG78CclBXRyslR4dpbF0KFYZrW0WvDaAAud4k=) 5: CA5B991430E111F09B76D311C4F9AE02.roa (hash: eRx8bbJu6in61S4okIsK48ZlBXinhwSR62SelJS9cC8=) 6: CC3E7A3A30E111F09B76D311C4F9AE02.roa (hash: 4VQy2uTuYmBTt5p4bl4BylIiGQ88q1IjeeXSwehmuI0=) 7: 570B12E0562611F09F085F44C4F9AE02.roa (hash: /sJ2zjbBJwvHhohFygkIyei7pdLWS58sUBWjkvmnlA4=) 8: E73A5E40A28C11F0A6491A72C4F9AE02.roa (hash: is4OaleIvjgTfkRN81esClK4/HDDPHdtSZTyTH+9VPs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.crl rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 06:52:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 248 (0xf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DFC9, serialNumber=7665E2835D160085E31EC245222D4B2F7E484409 Validity Not Before: Jun 13 06:52:24 2026 GMT Not After : Jun 20 06:52:24 2026 GMT Subject: CN=6a2cfe28-6cca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a1:59:73:1d:12:4f:15:bf:87:b1:1a:bd:dc: bc:03:17:b8:d2:a3:1c:1c:f6:3e:0a:af:0f:08:a1: de:bb:1a:e7:b4:6a:e8:1d:e5:c8:e1:83:1f:cd:19: 45:70:cf:a4:3d:b3:12:3e:ea:38:95:c6:c1:18:64: 59:c1:b6:52:d7:85:c3:d4:58:77:61:b5:d4:86:59: f4:50:f4:d7:fe:0a:6e:7f:5e:93:b9:f4:fa:43:cd: 49:b8:6d:d2:0a:94:70:db:87:67:9c:32:3c:54:49: a5:78:ca:92:d2:9c:ca:90:91:11:ad:27:c8:a4:80: fb:26:77:77:4d:1a:89:e6:a3:ec:0a:ca:7c:61:de: 08:b6:10:25:d0:c0:f2:5d:6c:10:dc:f4:d8:74:5d: 44:91:9b:e8:33:de:91:71:c7:8b:3c:99:9b:05:66: 92:3d:cb:a5:9d:d4:e3:de:8b:46:27:56:a3:54:8a: 61:d4:b4:bc:0f:e6:ac:79:13:9e:ee:03:2c:3d:49: 3b:5c:61:17:55:19:07:cf:b0:a6:1f:3e:af:3e:37: 78:79:36:3a:b8:cb:e3:c3:f2:6a:49:34:e2:89:4a: fc:ca:a6:c7:5e:a1:04:12:3c:b5:1c:21:2c:e5:4e: 11:c8:49:40:84:9f:e5:1a:50:d8:77:43:95:52:9b: 7f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:29:FF:D6:1C:0D:C9:77:CE:C0:49:62:A4:38:34:BD:7F:20:E8:FB X509v3 Authority Key Identifier: keyid:76:65:E2:83:5D:16:00:85:E3:1E:C2:45:22:2D:4B:2F:7E:48:44:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:a8:ac:08:1c:05:b7:e9:5b:46:67:37:6e:33:2b:08:1d:c1: fe:08:84:87:1e:e4:23:8a:b9:70:68:c4:6c:b8:8c:a4:00:36: 99:e1:b3:a0:12:da:38:73:25:8b:b3:7b:a6:f9:97:38:7b:8a: 40:00:f4:a0:95:e7:4e:68:06:bb:4e:5a:41:39:81:42:c2:4d: e7:99:42:ec:d6:86:69:e5:a6:1c:1b:3a:55:63:92:d4:0c:3d: f2:d5:8b:32:eb:a4:7b:8a:31:16:f3:d0:b0:cd:83:18:30:3d: 4d:91:1e:21:f5:0f:64:82:51:8f:c3:64:37:b9:bb:6b:6d:d7: 62:86:e1:53:18:12:b3:39:df:f9:46:f8:6b:c0:d7:bf:d9:51: 75:49:81:c2:ce:9e:42:fa:ab:22:84:86:cc:b0:ce:dd:4e:ef: d9:f0:e9:55:b0:65:d0:49:18:9f:c5:ab:49:23:38:cf:d2:d4: 12:d8:3e:b9:d7:d3:f9:55:a4:ec:cb:5e:f1:2e:b3:ca:04:34: e4:dd:c1:85:b0:6e:cf:da:d0:90:c3:d6:4d:c4:19:36:ec:59: 46:b0:ff:3a:a5:48:4e:18:98:e2:cd:5d:ff:76:d1:90:c6:6e: 3f:f4:24:57:73:bf:35:cc:84:6d:8f:11:06:b6:7f:00:7c:b3: 48:cb:10:71 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURGQzkxMTAvBgNVBAUTKDc2NjVFMjgzNUQxNjAwODVFMzFFQzI0NTIyMkQ0QjJG N0U0ODQ0MDkwHhcNMjYwNjEzMDY1MjI0WhcNMjYwNjIwMDY1MjI0WjAYMRYwFAYD VQQDEw02YTJjZmUyOC02Y2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxaFZcx0STxW/h7Eavdy8Axe40qMcHPY+Cq8PCKHeuxrntGroHeXI4YMfzRlF cM+kPbMSPuo4lcbBGGRZwbZS14XD1Fh3YbXUhln0UPTX/gpuf16TufT6Q81JuG3S CpRw24dnnDI8VEmleMqS0pzKkJERrSfIpID7Jnd3TRqJ5qPsCsp8Yd4IthAl0MDy XWwQ3PTYdF1EkZvoM96RcceLPJmbBWaSPculndTj3otGJ1ajVIph1LS8D+aseROe 7gMsPUk7XGEXVRkHz7CmHz6vPjd4eTY6uMvjw/JqSTTiiUr8yqbHXqEEEjy1HCEs 5U4RyElAhJ/lGlDYd0OVUpt/+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN4p/9Yc Dcl3zsBJYqQ4NL1/IOj7MB8GA1UdIwQYMBaAFHZl4oNdFgCF4x7CRSItSy9+SEQJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREZDOS84RDM1RTgyRTMw MkMxMUYwODc3NjRBMkJDNEY5QUUwMi9kbVhpZzEwV0FJWGpIc0pGSWkxTEwzNUlS QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RtWGlnMTBXQUlYakhzSkZJaTFMTDM1SVJBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REZDOS84RDM1RTgyRTMwMkMxMUYwODc3NjRBMkJDNEY5QUUwMi9kbVhpZzEwV0FJ WGpIc0pGSWkxTEwzNUlSQWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAD6isCBwFt+lbRmc3bjMrCB3B/giEhx7kI4q5cGjEbLiMpAA2meGzoBLaOHMl i7N7pvmXOHuKQAD0oJXnTmgGu05aQTmBQsJN55lC7NaGaeWmHBs6VWOS1Aw98tWL Muuke4oxFvPQsM2DGDA9TZEeIfUPZIJRj8NkN7m7a23XYobhUxgSsznf+Ub4a8DX v9lRdUmBws6eQvqrIoSGzLDO3U7v2fDpVbBl0EkYn8WrSSM4z9LUEtg+udfT+VWk 7Mte8S6zygQ05N3BhbBuz9rQkMPWTcQZNuxZRrD/OqVIThiY4s1d/3bRkMZuP/Qk V3O/NcyEbY8RBrZ/AHyzSMsQcQ== -----END CERTIFICATE-----Generated at Sat Jun 13 14:31:31 2026 by rpki-client