$ rpki-client -vvf rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft File: znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft (raw, json) Hash identifier: KzNIlM/fWOt6loR4JgxO9doucTzQAkeaGdKNairKYgw= Subject key identifier: BE:C6:E2:25:CD:BE:C2:BB:7B:93:FD:64:53:8E:90:A2:D9:D4:D1:32 Authority key identifier: CE:70:3E:4E:F9:DF:2E:BE:38:65:0A:70:4A:4A:01:9C:2A:66:43:50 Certificate issuer: /CN=A9136C5E/serialNumber=CE703E4EF9DF2EBE38650A704A4A019C2A664350 Certificate serial: 0270 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znA-TvnfLr44ZQpwSkoBnCpmQ1A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft Manifest number: 026A Signing time: Sat 13 Jun 2026 02:06:46 +0000 Manifest this update: Sat 13 Jun 2026 02:06:45 +0000 Manifest next update: Sat 20 Jun 2026 02:06:45 +0000 Files and hashes: 1: znA-TvnfLr44ZQpwSkoBnCpmQ1A.crl (hash: S6cN/vfVUxZyjGbgBtlrg4eGFHycICJcI4VyZyveBuM=) 2: 9BCEEFF4BC6911ED9B0FC554C4F9AE02.roa (hash: 0tGrUYawd9sMWVYCt8qeQNs8Dy+OY7IGn4NZ/aaWN2c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.crl rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znA-TvnfLr44ZQpwSkoBnCpmQ1A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 02:06:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 624 (0x270) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136C5E, serialNumber=CE703E4EF9DF2EBE38650A704A4A019C2A664350 Validity Not Before: Jun 13 02:06:45 2026 GMT Not After : Jun 20 02:06:45 2026 GMT Subject: CN=6a2cbb35-431a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d9:c4:85:a0:78:30:69:28:6a:78:c4:75:cc: 41:07:97:a5:4b:b8:a9:fc:93:1b:6c:35:fb:c4:14: 3c:3d:fa:e4:0d:79:00:bd:58:a2:c1:64:0f:61:75: 9d:80:9d:0a:60:0c:aa:70:19:24:d5:5d:37:3e:4f: ba:fe:96:4f:af:96:56:5b:5d:e5:5c:db:40:4a:9e: 14:ce:4a:8a:f9:66:36:18:0d:f3:16:02:30:d0:e9: 1e:6f:a9:ea:d0:2e:8c:90:26:a2:8d:2c:2f:b8:10: 99:25:12:75:1f:fd:30:7e:61:2d:40:3b:9c:a8:bc: 08:ed:fc:05:d8:47:b5:de:52:e8:92:44:e5:01:b2: ba:3d:fc:f0:ff:be:ce:bc:f4:8a:e4:53:a7:0c:dc: 7f:eb:63:a5:d3:db:91:c3:83:b2:f4:3d:f6:fc:57: e9:eb:4c:ed:57:8d:0e:07:1b:1b:bf:fe:8c:e5:86: 8b:97:5e:fe:bb:4b:54:ed:de:e8:fb:d2:ae:5e:72: 88:38:23:cd:f1:fb:a4:15:ab:6d:8c:19:ed:a2:38: 23:99:78:e9:db:4a:d3:57:81:ae:0f:3b:d2:f8:de: 0a:9e:72:9c:07:da:33:10:2e:bd:60:04:7c:28:3f: 1b:1c:19:a6:26:dc:e5:62:be:11:34:a6:cb:da:56: 22:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:C6:E2:25:CD:BE:C2:BB:7B:93:FD:64:53:8E:90:A2:D9:D4:D1:32 X509v3 Authority Key Identifier: keyid:CE:70:3E:4E:F9:DF:2E:BE:38:65:0A:70:4A:4A:01:9C:2A:66:43:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znA-TvnfLr44ZQpwSkoBnCpmQ1A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:8f:b9:07:5c:f5:42:92:d1:26:82:2f:ff:b8:0e:08:fb:9e: b0:a2:e3:cb:70:5c:bb:e4:9d:00:34:a5:21:26:f2:fd:9d:36: 05:26:92:99:e1:bf:cb:62:32:ed:e9:52:c5:aa:e1:d6:44:ad: 9a:a1:ad:b4:f3:8d:a0:2a:c1:df:38:c5:cd:11:ea:27:5d:7b: d4:b3:11:ee:ba:43:be:61:60:cb:b1:22:44:4b:54:1c:b3:ac: 6e:f9:8e:90:e8:7a:23:70:de:87:96:6e:2d:c8:7e:f8:e6:e9: 52:f9:cf:a5:4d:46:74:20:5c:c7:b9:7a:e6:5c:73:ce:93:75: 75:d3:60:06:cc:97:43:7e:a2:cd:f2:5d:f5:83:2e:a1:ea:f0: a3:32:aa:42:f5:82:12:6b:3a:11:d9:ea:d2:21:06:14:d6:22: 47:f8:3d:81:57:7f:81:37:d2:12:9a:a4:5e:2f:ad:77:e5:94: 84:ac:e4:5e:ef:d7:f7:88:ad:0c:18:1f:78:8a:88:5d:69:da: 3e:95:e1:80:6b:06:0a:21:bd:e4:09:52:4a:5a:5d:ca:0e:92: 8a:c1:7e:d3:c6:ef:ae:03:e1:cc:81:e3:64:9f:42:dd:62:88: ea:c0:67:32:9c:f1:b3:c3:9c:0a:e7:78:c5:46:36:e7:90:a3: 18:e1:b5:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZDNUUxMTAvBgNVBAUTKENFNzAzRTRFRjlERjJFQkUzODY1MEE3MDRBNEEwMTlD MkE2NjQzNTAwHhcNMjYwNjEzMDIwNjQ1WhcNMjYwNjIwMDIwNjQ1WjAYMRYwFAYD VQQDEw02YTJjYmIzNS00MzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdnEhaB4MGkoanjEdcxBB5elS7ip/JMbbDX7xBQ8PfrkDXkAvViiwWQPYXWd gJ0KYAyqcBkk1V03Pk+6/pZPr5ZWW13lXNtASp4UzkqK+WY2GA3zFgIw0Okeb6nq 0C6MkCaijSwvuBCZJRJ1H/0wfmEtQDucqLwI7fwF2Ee13lLokkTlAbK6Pfzw/77O vPSK5FOnDNx/62Ol09uRw4Oy9D32/Ffp60ztV40OBxsbv/6M5YaLl17+u0tU7d7o +9KuXnKIOCPN8fukFattjBntojgjmXjp20rTV4GuDzvS+N4KnnKcB9ozEC69YAR8 KD8bHBmmJtzlYr4RNKbL2lYiBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL7G4iXN vsK7e5P9ZFOOkKLZ1NEyMB8GA1UdIwQYMBaAFM5wPk753y6+OGUKcEpKAZwqZkNQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkM1RS8zRUE2QTI1MEI5 NzAxMUVEODkxODQ2N0NDNEY5QUUwMi96bkEtVHZuZkxyNDRaUXB3U2tvQm5DcG1R MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3puQS1Udm5mTHI0NFpRcHdTa29CbkNwbVExQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkM1RS8zRUE2QTI1MEI5NzAxMUVEODkxODQ2N0NDNEY5QUUwMi96bkEtVHZuZkxy NDRaUXB3U2tvQm5DcG1RMUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA4+5B1z1QpLRJoIv/7gOCPuesKLjy3Bcu+SdADSlISby/Z02BSaSmeG/y2Iy 7elSxarh1kStmqGttPONoCrB3zjFzRHqJ1171LMR7rpDvmFgy7EiREtUHLOsbvmO kOh6I3Deh5ZuLch++ObpUvnPpU1GdCBcx7l65lxzzpN1ddNgBsyXQ36izfJd9YMu oerwozKqQvWCEms6Ednq0iEGFNYiR/g9gVd/gTfSEpqkXi+td+WUhKzkXu/X94it DBgfeIqIXWnaPpXhgGsGCiG95AlSSlpdyg6SisF+08bvrgPhzIHjZJ9C3WKI6sBn Mpzxs8OcCud4xUY255CjGOG1Iw== -----END CERTIFICATE-----Generated at Sun Jun 14 00:23:27 2026 by rpki-client