$ rpki-client -vvf rpki.apnic.net/member_repository/A9147750/4C7E0FAA272F11F1843252FEAB833773/r1aOvCaxTBKB6BKDd4a1o4vHi4c.mft File: r1aOvCaxTBKB6BKDd4a1o4vHi4c.mft (raw, json) Hash identifier: p/Lc08Crp/9aTVn+qKZGgC3SSTtzRq/X678QA96CHPw= Subject key identifier: 3B:23:16:D2:B9:62:D8:45:C9:9C:9D:41:CE:38:D6:63:0B:40:FE:AF Authority key identifier: AF:56:8E:BC:26:B1:4C:12:81:E8:12:83:77:86:B5:A3:8B:C7:8B:87 Certificate issuer: /CN=A9147750/serialNumber=AF568EBC26B14C1281E812837786B5A38BC78B87 Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1aOvCaxTBKB6BKDd4a1o4vHi4c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147750/4C7E0FAA272F11F1843252FEAB833773/r1aOvCaxTBKB6BKDd4a1o4vHi4c.mft Manifest number: 2A Signing time: Thu 11 Jun 2026 11:06:56 +0000 Manifest this update: Thu 11 Jun 2026 11:06:56 +0000 Manifest next update: Thu 18 Jun 2026 11:06:56 +0000 Files and hashes: 1: r1aOvCaxTBKB6BKDd4a1o4vHi4c.crl (hash: xUh2FIv9zHvIxEF/E/iZDi4cExgXTqkVexcdcwgm4No=) 2: C6185536273011F1A8149F74AC833773.roa (hash: XZNI2I+TEYcAvEVGQBDMHCtqr9clDTEVottNypWj6ow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147750/4C7E0FAA272F11F1843252FEAB833773/r1aOvCaxTBKB6BKDd4a1o4vHi4c.crl rsync://rpki.apnic.net/member_repository/A9147750/4C7E0FAA272F11F1843252FEAB833773/r1aOvCaxTBKB6BKDd4a1o4vHi4c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1aOvCaxTBKB6BKDd4a1o4vHi4c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 11:06:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147750, serialNumber=AF568EBC26B14C1281E812837786B5A38BC78B87 Validity Not Before: Jun 11 11:06:56 2026 GMT Not After : Jun 18 11:06:56 2026 GMT Subject: CN=6a2a96d0-9353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9e:0d:0e:b2:a1:82:59:eb:09:4b:ba:43:5d: e9:62:d4:45:2b:3d:c3:05:21:3d:01:ce:35:ca:2e: 57:0a:03:aa:f1:0c:4f:ad:28:89:36:e5:db:70:73: 0c:b6:9e:e5:d0:ef:f0:fd:64:85:c8:5f:ce:80:c6: 8f:48:e4:5e:4d:2f:c4:15:a5:f9:d4:88:db:c1:ca: 21:00:1f:02:b1:90:a5:e9:b6:3c:93:69:3b:b4:8a: 38:c1:0a:9c:d6:fc:c0:4f:99:71:e9:d0:5e:f1:b9: 1d:bd:62:b7:11:7b:d6:d2:31:21:e6:16:b6:44:69: 10:3e:b1:43:8e:47:df:7e:cc:66:41:65:5c:cc:fa: 70:04:7a:57:7e:b5:d0:56:87:6e:68:4d:c6:50:1c: 6e:05:16:3a:c7:09:e8:f1:66:e4:5b:8e:59:15:22: d9:d1:72:b3:21:81:46:ee:57:21:c3:f0:bc:9e:5e: 95:23:25:7d:2f:ea:56:70:46:44:d3:ae:c5:4e:c0: 4d:4e:eb:94:3f:c1:73:a6:fc:8b:de:6f:f5:c1:79: 1f:d4:1d:ad:9a:ad:37:e3:bb:8f:fb:31:bc:66:5f: 93:b2:27:07:5c:c9:e6:f5:a0:c1:f8:7e:6c:0a:e8: 40:2c:d5:93:91:a1:6a:7b:8d:95:aa:52:e2:43:38: 42:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:23:16:D2:B9:62:D8:45:C9:9C:9D:41:CE:38:D6:63:0B:40:FE:AF X509v3 Authority Key Identifier: keyid:AF:56:8E:BC:26:B1:4C:12:81:E8:12:83:77:86:B5:A3:8B:C7:8B:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147750/4C7E0FAA272F11F1843252FEAB833773/r1aOvCaxTBKB6BKDd4a1o4vHi4c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1aOvCaxTBKB6BKDd4a1o4vHi4c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147750/4C7E0FAA272F11F1843252FEAB833773/r1aOvCaxTBKB6BKDd4a1o4vHi4c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:d4:44:c4:42:1d:3d:3a:77:d4:8a:d7:5c:da:fc:b6:35:c9: 20:38:7e:57:12:b6:33:98:c5:07:c4:67:ad:8f:f3:e1:b5:74: 42:d0:df:b0:8f:34:49:9c:d5:c5:8e:1b:46:d7:83:1c:2e:10: af:69:0e:be:71:4d:c0:cf:29:d5:8b:0b:6d:94:8c:32:6c:2a: 9b:fe:24:63:a8:ac:2b:3b:ba:d7:1c:08:b7:36:b3:71:7d:08: 5c:c9:38:35:5a:52:50:b1:a1:82:8b:fc:a4:29:12:33:d9:5e: c6:54:87:d1:32:06:0f:11:1f:05:87:c4:84:b0:c0:12:f9:23: 07:af:3e:8a:05:69:c6:e7:76:05:a7:fe:55:cd:3b:e6:d4:21: 02:46:73:62:8b:fa:23:3a:73:34:6e:4f:f6:f8:ab:bd:f0:35: 53:6d:eb:83:9e:f8:b6:10:76:d6:46:40:9e:7e:4c:14:9c:3a: ce:3c:ef:03:9e:c3:75:f2:43:e1:6e:c6:93:62:85:9f:f8:f4: 40:1f:eb:63:60:27:fa:8f:83:48:9f:3f:bf:0a:9a:5a:7f:06: 06:81:51:88:71:4a:2a:69:f4:36:31:64:03:85:c0:1a:d0:71: ff:45:00:d6:b1:cf:32:66:00:29:83:f2:d5:65:a9:c1:12:3c: fe:68:67:34 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 Nzc1MDExMC8GA1UEBRMoQUY1NjhFQkMyNkIxNEMxMjgxRTgxMjgzNzc4NkI1QTM4 QkM3OEI4NzAeFw0yNjA2MTExMTA2NTZaFw0yNjA2MTgxMTA2NTZaMBgxFjAUBgNV BAMTDTZhMmE5NmQwLTkzNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvng0OsqGCWesJS7pDXeli1EUrPcMFIT0BzjXKLlcKA6rxDE+tKIk25dtwcwy2 nuXQ7/D9ZIXIX86Axo9I5F5NL8QVpfnUiNvByiEAHwKxkKXptjyTaTu0ijjBCpzW /MBPmXHp0F7xuR29YrcRe9bSMSHmFrZEaRA+sUOOR99+zGZBZVzM+nAEeld+tdBW h25oTcZQHG4FFjrHCejxZuRbjlkVItnRcrMhgUbuVyHD8LyeXpUjJX0v6lZwRkTT rsVOwE1O65Q/wXOm/Iveb/XBeR/UHa2arTfju4/7MbxmX5OyJwdcyeb1oMH4fmwK 6EAs1ZORoWp7jZWqUuJDOEKxAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUOyMW0rli 2EXJnJ1BzjjWYwtA/q8wHwYDVR0jBBgwFoAUr1aOvCaxTBKB6BKDd4a1o4vHi4cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3NzUwLzRDN0UwRkFBMjcy RjExRjE4NDMyNTJGRUFCODMzNzczL3IxYU92Q2F4VEJLQjZCS0RkNGExbzR2SGk0 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcjFhT3ZDYXhUQktCNkJLRGQ0YTFvNHZIaTRjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 NzUwLzRDN0UwRkFBMjcyRjExRjE4NDMyNTJGRUFCODMzNzczL3IxYU92Q2F4VEJL QjZCS0RkNGExbzR2SGk0Yy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAC1ETEQh09OnfUitdc2vy2NckgOH5XErYzmMUHxGetj/PhtXRC0N+wjzRJnNXF jhtG14McLhCvaQ6+cU3AzynViwttlIwybCqb/iRjqKwrO7rXHAi3NrNxfQhcyTg1 WlJQsaGCi/ykKRIz2V7GVIfRMgYPER8Fh8SEsMAS+SMHrz6KBWnG53YFp/5VzTvm 1CECRnNii/ojOnM0bk/2+Ku98DVTbeuDnvi2EHbWRkCefkwUnDrOPO8DnsN18kPh bsaTYoWf+PRAH+tjYCf6j4NInz+/CppafwYGgVGIcUoqafQ2MWQDhcAa0HH/RQDW sc8yZgApg/LVZanBEjz+aGc0 -----END CERTIFICATE-----Generated at Sat Jun 13 10:02:26 2026 by rpki-client