$ rpki-client -vvf rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.mft File: d0DODmzQVMQy3kbUw-2hT2Qv2hQ.mft (raw, json) Hash identifier: Pq5RuZUoUAYzmj9kxV/WjJAb0I4K3MWcOISkFrtbhVs= Subject key identifier: 45:22:AA:BC:1A:9A:19:B6:F0:6D:B0:E7:49:EC:51:68:BA:A2:5C:F6 Authority key identifier: 77:40:CE:0E:6C:D0:54:C4:32:DE:46:D4:C3:ED:A1:4F:64:2F:DA:14 Certificate issuer: /CN=A9120AC1/serialNumber=7740CE0E6CD054C432DE46D4C3EDA14F642FDA14 Certificate serial: 058A Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.mft Manifest number: 0576 Signing time: Fri 12 Jun 2026 23:21:39 +0000 Manifest this update: Fri 12 Jun 2026 23:21:39 +0000 Manifest next update: Fri 19 Jun 2026 23:21:39 +0000 Files and hashes: 1: d0DODmzQVMQy3kbUw-2hT2Qv2hQ.crl (hash: iQxnGg4EWGt1QLzapbHDQswSwGcVQH8RdgjXHv7PGEs=) 2: 9BBDF5DEFFD611EF9AE4D35EC4F9AE02.roa (hash: Z6zpJNeDiRoumvX5lCIDf2X6SZzpmpEYlhnAJ6yadjo=) 3: EBF4C0063C8811EC889B9D78C4F9AE02.roa (hash: xL18VcZ56ntQg06dxu8mPMsho0DT/fe8AiSvaUT/7NM=) 4: B5AC177E3E0411ECABD9496CC4F9AE02.roa (hash: yeDD3azucqTXwa0Gdb8W5tD9O2qrp+zwpH6Y+zEBWbM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.crl rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 23:21:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1418 (0x58a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120AC1, serialNumber=7740CE0E6CD054C432DE46D4C3EDA14F642FDA14 Validity Not Before: Jun 12 23:21:39 2026 GMT Not After : Jun 19 23:21:39 2026 GMT Subject: CN=6a2c9483-52e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:75:1b:26:70:94:c6:d4:d3:88:ee:64:2a:85: 46:39:5a:ef:08:e0:06:26:9e:6b:d3:7d:2d:6d:ea: 45:ca:82:aa:6a:78:8f:e3:55:83:24:24:11:b8:d5: 28:21:0b:6e:65:86:a6:32:55:79:87:a8:f9:5f:8f: 05:04:f1:80:f6:70:2a:3e:8b:58:0c:fe:f6:9a:45: 7e:76:7d:96:75:54:d9:0f:c8:38:b2:04:b9:0c:d5: 68:b6:9c:49:b6:56:44:6e:92:88:c8:72:0b:47:83: df:4e:c1:e1:f1:d5:8b:6f:c8:f0:ff:0c:b7:8c:8e: df:c8:91:d0:f3:4a:e3:61:c4:d3:7e:66:66:e2:dc: 96:fd:c8:ea:74:f5:e9:b2:9b:37:ee:49:18:73:02: 7c:80:0b:e7:45:c5:ab:0b:ee:0a:fc:92:89:ff:5a: 4b:07:5a:32:fb:57:41:4c:d6:1b:04:41:db:14:78: a0:5a:0c:3e:95:58:28:c2:51:2f:0c:d5:4d:bb:9c: 93:98:c1:fd:d2:d0:47:73:ab:a4:57:77:c3:30:67: 50:66:d4:62:d4:4b:4d:f9:ed:65:73:d7:99:8e:d6: b2:7b:e2:f0:50:46:14:d1:41:d6:d2:43:6d:d9:02: b1:cd:fd:7c:d7:a4:e0:d5:45:70:cb:3e:d8:0c:30: a0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:22:AA:BC:1A:9A:19:B6:F0:6D:B0:E7:49:EC:51:68:BA:A2:5C:F6 X509v3 Authority Key Identifier: keyid:77:40:CE:0E:6C:D0:54:C4:32:DE:46:D4:C3:ED:A1:4F:64:2F:DA:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:bd:71:a1:df:2f:4c:63:0a:25:8f:e2:db:60:6a:05:3c:4d: 03:bd:93:f0:48:fd:99:07:58:9c:45:8b:5e:5d:00:93:34:90: 6f:60:44:05:50:51:df:2e:01:70:0f:f2:7f:03:e8:a2:b9:15: 2f:8d:13:ab:5e:86:c2:02:6b:81:ed:8d:62:44:61:bd:b0:db: bf:55:04:cd:43:6a:89:f0:c4:3c:43:49:24:3e:10:3c:3c:1d: 43:6c:8e:57:39:72:fa:58:ee:39:0d:13:89:6b:ab:e9:a9:60: 94:fa:62:83:98:84:d4:dd:58:e2:d4:8c:20:54:8e:fd:1c:d0: 39:17:f2:db:ca:ce:9f:67:2d:e5:8d:53:20:8e:dd:b7:d1:18: 8f:5c:3f:33:14:00:da:59:3a:31:5b:dd:63:20:c0:9a:fd:d9: 32:b1:0c:d9:07:3c:c6:a1:e0:6d:c1:e6:c0:56:cc:11:df:89: 78:1c:a5:7b:b7:f8:3f:a1:aa:a1:18:76:91:4e:39:7c:c7:d4: b7:44:3a:7a:f5:02:ba:c9:b8:9f:bf:40:6b:50:2d:2a:6f:1c: b0:cc:59:79:ec:40:c0:90:f2:71:75:28:42:7e:28:af:7d:4a: e4:95:65:5c:69:4d:60:1e:1f:f9:fe:6a:23:fa:c9:c1:25:8f: e5:78:27:6f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBBQzExMTAvBgNVBAUTKDc3NDBDRTBFNkNEMDU0QzQzMkRFNDZENEMzRURBMTRG NjQyRkRBMTQwHhcNMjYwNjEyMjMyMTM5WhcNMjYwNjE5MjMyMTM5WjAYMRYwFAYD VQQDEw02YTJjOTQ4My01MmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzXUbJnCUxtTTiO5kKoVGOVrvCOAGJp5r030tbepFyoKqaniP41WDJCQRuNUo IQtuZYamMlV5h6j5X48FBPGA9nAqPotYDP72mkV+dn2WdVTZD8g4sgS5DNVotpxJ tlZEbpKIyHILR4PfTsHh8dWLb8jw/wy3jI7fyJHQ80rjYcTTfmZm4tyW/cjqdPXp sps37kkYcwJ8gAvnRcWrC+4K/JKJ/1pLB1oy+1dBTNYbBEHbFHigWgw+lVgowlEv DNVNu5yTmMH90tBHc6ukV3fDMGdQZtRi1EtN+e1lc9eZjtaye+LwUEYU0UHW0kNt 2QKxzf1816Tg1UVwyz7YDDCg6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEUiqrwa mhm28G2w50nsUWi6olz2MB8GA1UdIwQYMBaAFHdAzg5s0FTEMt5G1MPtoU9kL9oU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEFDMS8zNTkwNjVBNjMw OTcxMUVDQjI4NUE2NEJDNEY5QUUwMi9kMERPRG16UVZNUXkza2JVdy0yaFQyUXYy aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2QwRE9EbXpRVk1ReTNrYlV3LTJoVDJRdjJoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEFDMS8zNTkwNjVBNjMwOTcxMUVDQjI4NUE2NEJDNEY5QUUwMi9kMERPRG16UVZN UXkza2JVdy0yaFQyUXYyaFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXL1xod8vTGMKJY/i22BqBTxNA72T8Ej9mQdYnEWLXl0AkzSQb2BEBVBR3y4B cA/yfwPoorkVL40Tq16GwgJrge2NYkRhvbDbv1UEzUNqifDEPENJJD4QPDwdQ2yO Vzly+ljuOQ0TiWur6alglPpig5iE1N1Y4tSMIFSO/RzQORfy28rOn2ct5Y1TII7d t9EYj1w/MxQA2lk6MVvdYyDAmv3ZMrEM2Qc8xqHgbcHmwFbMEd+JeByle7f4P6Gq oRh2kU45fMfUt0Q6evUCusm4n79Aa1AtKm8csMxZeexAwJDycXUoQn4or31K5JVl XGlNYB4f+f5qI/rJwSWP5Xgnbw== -----END CERTIFICATE-----Generated at Sat Jun 13 15:33:39 2026 by rpki-client