$ rpki-client -vvf rpki.apnic.net/member_repository/A9147CA8/6A9E915C6EE911F0B301F667C4F9AE02/3SgIKP8JlqjL7ym_DZFN8lLfHL0.mft File: 3SgIKP8JlqjL7ym_DZFN8lLfHL0.mft (raw, json) Hash identifier: AAxrkGvCCZiY1sCcg02EMUMWT4RfyS/cmByzifzYOmM= Subject key identifier: D5:CF:75:DD:E3:FC:AA:B4:D0:2B:18:15:D5:CB:5B:93:63:5A:9D:79 Authority key identifier: DD:28:08:28:FF:09:96:A8:CB:EF:29:BF:0D:91:4D:F2:52:DF:1C:BD Certificate issuer: /CN=A9147CA8/serialNumber=DD280828FF0996A8CBEF29BF0D914DF252DF1CBD Certificate serial: AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SgIKP8JlqjL7ym_DZFN8lLfHL0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147CA8/6A9E915C6EE911F0B301F667C4F9AE02/3SgIKP8JlqjL7ym_DZFN8lLfHL0.mft Manifest number: A8 Signing time: Sat 13 Jun 2026 07:22:32 +0000 Manifest this update: Sat 13 Jun 2026 07:22:31 +0000 Manifest next update: Sat 20 Jun 2026 07:22:31 +0000 Files and hashes: 1: 3SgIKP8JlqjL7ym_DZFN8lLfHL0.crl (hash: Ii/GAd430px/LoC22/l04zUcACARpOdJZj2gNNxreZA=) 2: 18DC6A2602A311F188F4114D3A3D8C67.roa (hash: t3GNpUerhP0cJPbY48i/kbcLRCBSWRa0pQ+pR8/EBR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147CA8/6A9E915C6EE911F0B301F667C4F9AE02/3SgIKP8JlqjL7ym_DZFN8lLfHL0.crl rsync://rpki.apnic.net/member_repository/A9147CA8/6A9E915C6EE911F0B301F667C4F9AE02/3SgIKP8JlqjL7ym_DZFN8lLfHL0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SgIKP8JlqjL7ym_DZFN8lLfHL0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 07:22:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147CA8, serialNumber=DD280828FF0996A8CBEF29BF0D914DF252DF1CBD Validity Not Before: Jun 13 07:22:31 2026 GMT Not After : Jun 20 07:22:31 2026 GMT Subject: CN=6a2d0538-5a44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:99:65:0f:bf:49:d3:1f:fb:66:01:a7:63:e8: 93:4e:e8:e7:e3:c5:02:16:a9:72:50:f9:6a:39:99: 15:72:a5:63:7a:08:36:12:1d:df:32:c4:e3:74:e7: a5:2a:32:55:3c:f0:57:0a:80:94:93:7e:0b:1c:91: f2:7a:db:a3:f7:5f:70:50:95:c7:d7:3c:09:06:b0: a2:a5:f0:14:f4:57:b0:ab:c3:e9:1c:e8:15:f4:22: 51:59:df:e5:4f:e2:58:98:a3:1a:5e:a2:8b:9e:04: 64:b9:42:0e:a5:d0:72:78:fd:bd:bf:9b:a2:e5:12: b9:34:9c:50:08:c9:19:0e:1a:9a:62:c4:93:54:7d: 1e:93:f7:0a:bb:bf:e2:53:6f:92:c4:0f:20:3a:3e: ed:be:27:ac:b0:33:14:2b:f6:33:07:e5:8c:bf:c3: 9b:6c:aa:b3:37:45:34:cb:7a:f0:44:25:32:43:37: 34:65:e8:e6:87:68:6c:07:0b:64:82:a8:4a:15:52: 45:b5:f8:f5:73:65:ee:9b:e0:3b:12:10:50:da:19: b7:04:e1:a0:44:3d:42:40:74:44:63:fe:10:75:24: 3a:4d:d2:61:ca:4c:42:c6:af:7e:ff:d0:02:c2:7e: 17:9d:52:e0:15:2d:5d:e4:df:61:4c:bf:00:3d:da: 15:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:CF:75:DD:E3:FC:AA:B4:D0:2B:18:15:D5:CB:5B:93:63:5A:9D:79 X509v3 Authority Key Identifier: keyid:DD:28:08:28:FF:09:96:A8:CB:EF:29:BF:0D:91:4D:F2:52:DF:1C:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147CA8/6A9E915C6EE911F0B301F667C4F9AE02/3SgIKP8JlqjL7ym_DZFN8lLfHL0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SgIKP8JlqjL7ym_DZFN8lLfHL0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147CA8/6A9E915C6EE911F0B301F667C4F9AE02/3SgIKP8JlqjL7ym_DZFN8lLfHL0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:ed:b1:08:41:b7:7a:6f:57:97:f9:37:f3:7b:06:e6:0e:03: ee:c6:58:ea:5a:cd:68:62:e0:80:96:bb:96:0c:c7:86:99:fe: b5:3a:e2:f2:14:37:92:32:68:31:bc:92:7b:4d:c6:56:c0:c2: 3a:96:eb:dc:5c:0f:03:3f:5c:a0:96:7f:36:6c:76:25:fc:b7: 18:e1:62:5b:8a:6a:eb:4c:c8:27:d1:c8:16:1f:6d:fd:d9:92: 24:22:be:d6:68:c5:52:7a:f3:42:83:e1:39:63:86:d2:74:af: fe:26:88:a8:0c:5d:8d:48:58:c1:54:9c:9b:f9:95:ab:e2:b9: 34:57:75:28:3b:54:ab:98:61:aa:01:d9:ad:48:e7:9c:73:fb: 2a:84:70:8b:b7:49:67:ff:97:3f:94:e0:5f:7a:a9:32:1e:2c: 03:f4:5c:4d:02:65:b5:5a:9e:10:8d:85:ea:26:f7:3c:e4:d5: 27:24:e8:8f:5f:81:84:77:2a:9f:d9:ff:ff:bc:7b:fa:01:b4: 40:63:66:74:1c:31:bb:3a:6a:b6:bc:f7:d8:5f:d1:89:cd:89: 49:51:6b:82:7b:28:1c:c9:70:bf:25:74:61:64:29:53:f3:c2: 23:92:8c:fa:b8:f8:a9:d8:da:7e:fa:f9:89:ed:80:5d:c1:92: ec:87:2b:6f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdDQTgxMTAvBgNVBAUTKEREMjgwODI4RkYwOTk2QThDQkVGMjlCRjBEOTE0REYy NTJERjFDQkQwHhcNMjYwNjEzMDcyMjMxWhcNMjYwNjIwMDcyMjMxWjAYMRYwFAYD VQQDEw02YTJkMDUzOC01YTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs5llD79J0x/7ZgGnY+iTTujn48UCFqlyUPlqOZkVcqVjegg2Eh3fMsTjdOel KjJVPPBXCoCUk34LHJHyetuj919wUJXH1zwJBrCipfAU9Fewq8PpHOgV9CJRWd/l T+JYmKMaXqKLngRkuUIOpdByeP29v5ui5RK5NJxQCMkZDhqaYsSTVH0ek/cKu7/i U2+SxA8gOj7tviessDMUK/YzB+WMv8ObbKqzN0U0y3rwRCUyQzc0Zejmh2hsBwtk gqhKFVJFtfj1c2Xum+A7EhBQ2hm3BOGgRD1CQHREY/4QdSQ6TdJhykxCxq9+/9AC wn4XnVLgFS1d5N9hTL8APdoVCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNXPdd3j /Kq00CsYFdXLW5NjWp15MB8GA1UdIwQYMBaAFN0oCCj/CZaoy+8pvw2RTfJS3xy9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0NBOC82QTlFOTE1QzZF RTkxMUYwQjMwMUY2NjdDNEY5QUUwMi8zU2dJS1A4Smxxakw3eW1fRFpGTjhsTGZI TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNTZ0lLUDhKbHFqTDd5bV9EWkZOOGxMZkhMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0NBOC82QTlFOTE1QzZFRTkxMUYwQjMwMUY2NjdDNEY5QUUwMi8zU2dJS1A4Smxx akw3eW1fRFpGTjhsTGZITDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh+2xCEG3em9Xl/k383sG5g4D7sZY6lrNaGLggJa7lgzHhpn+tTri8hQ3kjJo MbySe03GVsDCOpbr3FwPAz9coJZ/Nmx2Jfy3GOFiW4pq60zIJ9HIFh9t/dmSJCK+ 1mjFUnrzQoPhOWOG0nSv/iaIqAxdjUhYwVScm/mVq+K5NFd1KDtUq5hhqgHZrUjn nHP7KoRwi7dJZ/+XP5TgX3qpMh4sA/RcTQJltVqeEI2F6ib3POTVJyToj1+BhHcq n9n//7x7+gG0QGNmdBwxuzpqtrz32F/Ric2JSVFrgnsoHMlwvyV0YWQpU/PCI5KM +rj4qdjafvr5ie2AXcGS7Icrbw== -----END CERTIFICATE-----Generated at Sat Jun 13 20:21:25 2026 by rpki-client