$ rpki-client -vvf rpki.apnic.net/member_repository/A9142706/5C1F7588335611F19DE3316DC8833773/kAQ8QPoof1qqpCX0ZUSFoxEcPVM.mft File: kAQ8QPoof1qqpCX0ZUSFoxEcPVM.mft (raw, json) Hash identifier: z6IwDBl65Xr9CCVGCPhEjOpSlWgGl5zo02m/ZHNOiqM= Subject key identifier: 55:FE:E6:78:8B:93:D9:CB:E6:77:27:83:59:F5:3E:46:02:E1:01:41 Authority key identifier: 90:04:3C:40:FA:28:7F:5A:AA:A4:25:F4:65:44:85:A3:11:1C:3D:53 Certificate issuer: /CN=A9142706/serialNumber=90043C40FA287F5AAAA425F4654485A3111C3D53 Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAQ8QPoof1qqpCX0ZUSFoxEcPVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142706/5C1F7588335611F19DE3316DC8833773/kAQ8QPoof1qqpCX0ZUSFoxEcPVM.mft Manifest number: 21 Signing time: Thu 11 Jun 2026 11:10:58 +0000 Manifest this update: Thu 11 Jun 2026 11:10:57 +0000 Manifest next update: Thu 18 Jun 2026 11:10:57 +0000 Files and hashes: 1: kAQ8QPoof1qqpCX0ZUSFoxEcPVM.crl (hash: j1pUTQHPRTNyJEd3NOAPJZ+KzZruV05O/I9NxfRtLqE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142706/5C1F7588335611F19DE3316DC8833773/kAQ8QPoof1qqpCX0ZUSFoxEcPVM.crl rsync://rpki.apnic.net/member_repository/A9142706/5C1F7588335611F19DE3316DC8833773/kAQ8QPoof1qqpCX0ZUSFoxEcPVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAQ8QPoof1qqpCX0ZUSFoxEcPVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 11:10:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142706, serialNumber=90043C40FA287F5AAAA425F4654485A3111C3D53 Validity Not Before: Jun 11 11:10:57 2026 GMT Not After : Jun 18 11:10:57 2026 GMT Subject: CN=6a2a97c2-5e36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:93:90:df:ee:de:a1:d9:8f:24:7a:e0:df:e5: 4c:ec:6f:44:25:6c:4a:e6:9f:82:0d:a7:8a:cb:8b: 8a:f3:52:b8:df:75:e9:a4:b5:ac:79:c8:16:40:bd: bb:a9:35:40:b6:15:0d:dd:e8:62:76:57:15:3a:b9: 2a:eb:95:32:97:13:7f:20:8e:cb:43:b6:da:c3:e2: d2:e4:59:32:aa:17:f0:76:0e:77:1f:de:71:cc:ec: 45:87:2c:4c:bc:a9:9b:28:b6:30:f9:7a:28:4f:eb: fc:22:de:51:47:7b:62:ad:23:3c:52:a6:b2:9c:f0: ef:f7:42:6f:c3:df:2e:c7:6f:3c:f1:5f:19:68:23: 69:3e:57:9d:8b:e2:13:44:aa:65:01:6e:40:92:a9: 3a:83:09:ae:8a:94:9c:c9:4a:67:e9:a6:21:cf:74: 7a:e4:e9:53:30:e5:c6:2d:8a:ae:2c:d6:f7:18:ce: 9d:a8:a5:11:50:3e:a2:93:73:bf:d3:2b:a0:21:91: bd:06:d2:e7:3e:5a:10:a4:ff:fa:36:a8:40:3d:c0: 40:6e:53:b8:92:06:e6:2b:44:a3:6e:91:48:c6:2d: c8:24:5e:94:33:c2:cc:7d:51:e7:a2:4e:fc:50:28: 40:7c:ee:75:5e:b0:21:95:5f:8c:ce:6a:4c:f3:0d: 7d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:FE:E6:78:8B:93:D9:CB:E6:77:27:83:59:F5:3E:46:02:E1:01:41 X509v3 Authority Key Identifier: keyid:90:04:3C:40:FA:28:7F:5A:AA:A4:25:F4:65:44:85:A3:11:1C:3D:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142706/5C1F7588335611F19DE3316DC8833773/kAQ8QPoof1qqpCX0ZUSFoxEcPVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAQ8QPoof1qqpCX0ZUSFoxEcPVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142706/5C1F7588335611F19DE3316DC8833773/kAQ8QPoof1qqpCX0ZUSFoxEcPVM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:7b:91:a2:a2:41:b3:8a:2c:ab:ce:08:ad:89:f7:dc:c6:d2: 45:2f:81:50:91:7a:cf:ce:76:5f:e1:af:53:ac:59:26:ef:6c: a7:ff:38:12:03:bf:5b:a9:c7:7a:d3:7a:5e:f0:71:39:ee:68: 88:a3:f6:47:2a:92:88:40:05:a3:d0:5d:28:3d:f1:f5:d6:a6: 63:f6:31:01:5d:c0:2f:d5:f2:1b:21:64:c5:21:d7:a2:ec:1e: e5:24:c2:86:c4:27:ae:d1:2b:60:1f:d5:7e:f9:d3:29:da:02: 00:23:0e:7a:bd:7d:06:ca:89:46:fc:61:cd:9c:09:eb:5b:c5: c7:64:74:47:91:dd:74:9e:9b:13:6d:8a:46:25:ae:d0:93:4c: 3b:d0:d5:a1:d1:f6:5c:28:62:5c:36:bb:81:44:a2:65:26:b7: 4f:df:09:a8:99:97:86:d1:74:02:c4:17:80:17:96:32:6b:bf: 06:57:21:b5:e8:54:4a:63:fc:9c:09:c5:cd:ec:03:e7:f1:02: e7:36:36:e9:23:57:5d:0e:d5:01:0d:8d:4a:d0:6b:4a:dc:a9: d1:9d:14:cd:9a:ce:f2:89:70:d1:13:96:6d:15:1d:cb:c4:fa: 53:53:ef:52:e2:98:d8:27:84:ca:12:2c:18:00:b2:91:e3:72: 85:6f:9f:4f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MjcwNjExMC8GA1UEBRMoOTAwNDNDNDBGQTI4N0Y1QUFBQTQyNUY0NjU0NDg1QTMx MTFDM0Q1MzAeFw0yNjA2MTExMTEwNTdaFw0yNjA2MTgxMTEwNTdaMBgxFjAUBgNV BAMTDTZhMmE5N2MyLTVlMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDek5Df7t6h2Y8keuDf5Uzsb0QlbErmn4INp4rLi4rzUrjfdemktax5yBZAvbup NUC2FQ3d6GJ2VxU6uSrrlTKXE38gjstDttrD4tLkWTKqF/B2Dncf3nHM7EWHLEy8 qZsotjD5eihP6/wi3lFHe2KtIzxSprKc8O/3Qm/D3y7HbzzxXxloI2k+V52L4hNE qmUBbkCSqTqDCa6KlJzJSmfppiHPdHrk6VMw5cYtiq4s1vcYzp2opRFQPqKTc7/T K6Ahkb0G0uc+WhCk//o2qEA9wEBuU7iSBuYrRKNukUjGLcgkXpQzwsx9UeeiTvxQ KEB87nVesCGVX4zOakzzDX0BAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUVf7meIuT 2cvmdyeDWfU+RgLhAUEwHwYDVR0jBBgwFoAUkAQ8QPoof1qqpCX0ZUSFoxEcPVMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyNzA2LzVDMUY3NTg4MzM1 NjExRjE5REUzMzE2REM4ODMzNzczL2tBUThRUG9vZjFxcXBDWDBaVVNGb3hFY1BW TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva0FROFFQb29mMXFxcENYMFpVU0ZveEVjUFZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy NzA2LzVDMUY3NTg4MzM1NjExRjE5REUzMzE2REM4ODMzNzczL2tBUThRUG9vZjFx cXBDWDBaVVNGb3hFY1BWTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA0e5GiokGziiyrzgitiffcxtJFL4FQkXrPznZf4a9TrFkm72yn/zgSA79bqcd6 03pe8HE57miIo/ZHKpKIQAWj0F0oPfH11qZj9jEBXcAv1fIbIWTFIdei7B7lJMKG xCeu0StgH9V++dMp2gIAIw56vX0GyolG/GHNnAnrW8XHZHRHkd10npsTbYpGJa7Q k0w70NWh0fZcKGJcNruBRKJlJrdP3wmomZeG0XQCxBeAF5Yya78GVyG16FRKY/yc CcXN7APn8QLnNjbpI1ddDtUBDY1K0GtK3KnRnRTNms7yiXDRE5ZtFR3LxPpTU+9S 4pjYJ4TKEiwYALKR43KFb59P -----END CERTIFICATE-----Generated at Sat Jun 13 09:40:51 2026 by rpki-client