$ rpki-client -vvf rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.mft File: lyuQ2cUZIlatlkdbOSurGnp5zC0.mft (raw, json) Hash identifier: 2gVDKfawl8flkcxSLkJnuBy58m0A4VTagh42upuucoQ= Subject key identifier: AB:95:76:44:C8:5C:37:8B:60:61:A3:6B:B6:41:C3:C2:6F:D6:73:3A Authority key identifier: 97:2B:90:D9:C5:19:22:56:AD:96:47:5B:39:2B:AB:1A:7A:79:CC:2D Certificate issuer: /CN=A9132FD9/serialNumber=972B90D9C5192256AD96475B392BAB1A7A79CC2D Certificate serial: D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lyuQ2cUZIlatlkdbOSurGnp5zC0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.mft Manifest number: D3 Signing time: Sat 13 Jun 2026 06:50:26 +0000 Manifest this update: Sat 13 Jun 2026 06:50:26 +0000 Manifest next update: Sat 20 Jun 2026 06:50:26 +0000 Files and hashes: 1: lyuQ2cUZIlatlkdbOSurGnp5zC0.crl (hash: 0PXVQICktTU7NXp1Pp37GK/h9Ipk7zdX52X4Psuux6U=) 2: DCC2224A313011F0BE214A64C4F9AE02.roa (hash: Yx+85CHClvGSKZhhotbyNhG5+qEsDCcgpA+sR6zn7rc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.crl rsync://rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lyuQ2cUZIlatlkdbOSurGnp5zC0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 06:50:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132FD9, serialNumber=972B90D9C5192256AD96475B392BAB1A7A79CC2D Validity Not Before: Jun 13 06:50:26 2026 GMT Not After : Jun 20 06:50:26 2026 GMT Subject: CN=6a2cfdb2-084a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ab:9d:c1:cf:58:a3:c5:63:f6:74:45:57:02: 44:9b:64:ca:52:2c:8a:7b:1e:06:df:8d:d0:2b:e5: 25:fc:bc:78:86:9f:78:f9:b5:9b:4c:bc:62:bf:c8: ed:3d:98:ae:24:2c:0e:11:7c:d2:76:43:ce:bc:ef: 26:54:ba:7f:fe:29:c6:24:2b:cf:bc:7b:a1:23:fe: 50:b6:bc:16:50:80:06:4d:6d:db:a4:2b:8d:67:f4: e1:98:05:be:44:ff:47:b7:29:97:84:cd:81:fd:68: 3f:b7:6e:64:a9:e6:6c:57:4a:c1:b2:36:3c:8e:e0: f6:f6:5f:4e:f7:b3:12:b9:1e:49:ba:90:2d:e6:c5: 1c:4d:a7:62:f5:50:1b:13:7c:91:b4:b7:28:fc:4a: 7a:6e:75:20:fb:ca:c3:b5:8a:37:e1:61:f2:ea:55: 3f:52:94:62:ca:40:c4:f1:03:4c:fd:bf:60:8c:56: 4a:b4:a4:56:6e:6b:a4:1a:07:6e:ac:c2:90:8e:f6: fa:34:97:c1:5e:f3:7c:93:a7:28:5b:6d:1c:f8:d0: d7:d1:2e:5e:f1:e6:0e:3b:3a:0a:c5:44:24:72:89: 32:66:e6:a3:1b:93:92:2f:0b:c4:b4:92:07:80:d5: d2:0e:20:af:f2:3f:c5:32:6c:21:80:75:cb:8e:61: 76:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:95:76:44:C8:5C:37:8B:60:61:A3:6B:B6:41:C3:C2:6F:D6:73:3A X509v3 Authority Key Identifier: keyid:97:2B:90:D9:C5:19:22:56:AD:96:47:5B:39:2B:AB:1A:7A:79:CC:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lyuQ2cUZIlatlkdbOSurGnp5zC0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:d7:6e:c8:bf:21:9c:2f:7d:8a:c7:44:38:32:fa:8f:25:56: 7a:0f:00:f8:a1:53:48:f5:fa:c5:2f:1f:60:05:a8:e2:ac:a1: 4d:e1:3e:05:e8:44:0b:81:77:c5:c8:a0:77:5c:19:b7:37:05: f2:b6:b1:66:38:98:0f:70:94:31:db:3c:63:68:9a:8b:fb:3d: 83:04:4b:d4:6c:a2:31:6f:38:d5:4a:ce:2d:5d:1e:9e:a2:46: 79:34:4e:f5:16:bf:a6:b4:19:1c:98:ca:02:61:2d:89:7d:c4: c4:e5:87:06:3d:08:42:b2:f2:16:08:86:bc:e5:d5:96:39:da: 89:89:91:0a:1e:61:c3:93:62:ea:bc:90:84:88:d6:e0:7c:60: 1a:2f:65:64:c0:ee:8b:97:1d:f8:ac:94:1d:7e:b7:57:2f:57: 84:56:1f:c2:a2:0c:57:cc:af:89:fd:99:e6:59:e9:fd:53:5f: f6:23:6a:86:56:da:32:b7:a7:26:8a:fe:30:d0:91:ac:b2:11: 1f:48:c6:ff:28:e1:84:a3:c2:38:3d:6f:9f:ff:38:ac:05:df: 04:e8:aa:5b:88:12:0b:e9:74:b5:77:1a:24:7f:96:0b:3b:50: ef:77:48:40:c1:27:c1:f5:7a:d5:23:fe:b5:3e:9d:41:0f:ba: fa:25:5f:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJGRDkxMTAvBgNVBAUTKDk3MkI5MEQ5QzUxOTIyNTZBRDk2NDc1QjM5MkJBQjFB N0E3OUNDMkQwHhcNMjYwNjEzMDY1MDI2WhcNMjYwNjIwMDY1MDI2WjAYMRYwFAYD VQQDEw02YTJjZmRiMi0wODRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkKudwc9Yo8Vj9nRFVwJEm2TKUiyKex4G343QK+Ul/Lx4hp94+bWbTLxiv8jt PZiuJCwOEXzSdkPOvO8mVLp//inGJCvPvHuhI/5QtrwWUIAGTW3bpCuNZ/ThmAW+ RP9HtymXhM2B/Wg/t25kqeZsV0rBsjY8juD29l9O97MSuR5JupAt5sUcTadi9VAb E3yRtLco/Ep6bnUg+8rDtYo34WHy6lU/UpRiykDE8QNM/b9gjFZKtKRWbmukGgdu rMKQjvb6NJfBXvN8k6coW20c+NDX0S5e8eYOOzoKxUQkcokyZuajG5OSLwvEtJIH gNXSDiCv8j/FMmwhgHXLjmF2AwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKuVdkTI XDeLYGGja7ZBw8Jv1nM6MB8GA1UdIwQYMBaAFJcrkNnFGSJWrZZHWzkrqxp6ecwt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkZEOS83RjlBNzAzNDJC QjUxMUYwOURFNUJBNEVDNEY5QUUwMi9seXVRMmNVWklsYXRsa2RiT1N1ckducDV6 QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x5dVEyY1VaSWxhdGxrZGJPU3VyR25wNXpDMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkZEOS83RjlBNzAzNDJCQjUxMUYwOURFNUJBNEVDNEY5QUUwMi9seXVRMmNVWkls YXRsa2RiT1N1ckducDV6QzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqtduyL8hnC99isdEODL6jyVWeg8A+KFTSPX6xS8fYAWo4qyhTeE+BehEC4F3 xcigd1wZtzcF8raxZjiYD3CUMds8Y2iai/s9gwRL1GyiMW841UrOLV0enqJGeTRO 9Ra/prQZHJjKAmEtiX3ExOWHBj0IQrLyFgiGvOXVljnaiYmRCh5hw5Ni6ryQhIjW 4HxgGi9lZMDui5cd+KyUHX63Vy9XhFYfwqIMV8yvif2Z5lnp/VNf9iNqhlbaMren Jor+MNCRrLIRH0jG/yjhhKPCOD1vn/84rAXfBOiqW4gSC+l0tXcaJH+WCztQ73dI QMEnwfV61SP+tT6dQQ+6+iVf1g== -----END CERTIFICATE-----Generated at Sat Jun 13 14:12:42 2026 by rpki-client