$ rpki-client -vvf rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft File: af9o05rBdz4oqFeFx5G0qNmzhIY.mft (raw, json) Hash identifier: BFD6Scm+klmWMWwtCBeNXbu1f3qnH2ll+C2K4B4k3qI= Subject key identifier: EF:E5:46:F6:B9:1A:C4:05:F3:4F:98:99:31:5D:0D:B2:5D:9F:F9:38 Authority key identifier: 69:FF:68:D3:9A:C1:77:3E:28:A8:57:85:C7:91:B4:A8:D9:B3:84:86 Certificate issuer: /CN=A9148D61/serialNumber=69FF68D39AC1773E28A85785C791B4A8D9B38486 Certificate serial: 02BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft Manifest number: 02A7 Signing time: Sat 13 Jun 2026 01:34:21 +0000 Manifest this update: Sat 13 Jun 2026 01:34:21 +0000 Manifest next update: Sat 20 Jun 2026 01:34:21 +0000 Files and hashes: 1: af9o05rBdz4oqFeFx5G0qNmzhIY.crl (hash: WifJI5X46Ie9hiwCElSPmvJeTP3anqUQBZr7DLfwSKk=) 2: 34386BAAB90A11EF97D24653C4F9AE02.roa (hash: 8a9pl0B9WRoV/I8zbYuLrKWiJVi0iu0Y5myQD63MtCk=) 3: 35ADE898B90A11EF97D24653C4F9AE02.roa (hash: j4HW8v+J9rL2PkNopASjMuegUlrtdhRwhQv/dAW6LJM=) 4: 349D4A7AB90A11EF97D24653C4F9AE02.roa (hash: gj01DmJfEaGsSpp5tjGsusN7Thz10FKLT4wU37QzljM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.crl rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 01:34:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 702 (0x2be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148D61, serialNumber=69FF68D39AC1773E28A85785C791B4A8D9B38486 Validity Not Before: Jun 13 01:34:21 2026 GMT Not After : Jun 20 01:34:21 2026 GMT Subject: CN=6a2cb39d-2972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:0d:9d:6a:08:d7:81:cf:b8:26:26:33:c8:85: 91:e4:4d:4c:32:41:48:a1:b6:25:4a:e4:ff:d6:52: 93:73:a8:b7:a9:2c:a6:91:a2:ba:07:89:42:55:a5: 50:44:00:86:f3:a9:5c:80:bf:55:81:28:d8:ff:eb: 2d:1d:9b:bb:a4:19:ca:e3:2b:31:3b:34:46:54:7e: 85:07:f4:d2:be:0a:6e:17:44:18:a7:e1:0b:78:bd: c6:d9:e9:77:0a:f0:d6:2a:47:54:82:1f:e8:ce:71: 6a:00:91:30:a6:29:9b:bd:62:80:08:34:41:e6:cb: 7e:82:02:85:55:d0:53:42:bd:61:a0:0d:54:27:b4: 5e:0b:a3:94:94:8b:93:6d:0e:6f:c1:43:a7:70:38: 92:2d:80:0a:ac:46:97:d8:34:0c:9c:28:96:cf:b3: 4c:16:3a:24:2d:e0:ce:b1:67:29:6e:24:0b:6d:d6: 68:b1:89:2e:6d:92:77:2d:a6:10:af:2f:d4:df:43: b9:c2:5f:39:4d:d8:8d:41:7d:cd:1d:c6:64:f9:d6: 97:a3:8f:e8:35:8b:9d:8c:bd:2e:c7:02:70:e1:af: 8a:f7:9c:72:ad:fb:5e:74:57:73:86:fe:f3:6e:f3: 17:76:d9:82:3c:54:96:ea:ec:1f:c6:55:15:3d:99: 4b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:E5:46:F6:B9:1A:C4:05:F3:4F:98:99:31:5D:0D:B2:5D:9F:F9:38 X509v3 Authority Key Identifier: keyid:69:FF:68:D3:9A:C1:77:3E:28:A8:57:85:C7:91:B4:A8:D9:B3:84:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:6f:c1:08:5d:b2:e5:09:23:09:16:b8:71:aa:00:dd:ad:a9: 7e:34:c1:01:f6:1f:75:29:b8:64:85:b7:35:55:5e:cf:38:08: ac:ba:42:4d:bf:1b:b6:3e:ef:e4:1c:ce:0f:68:80:40:25:2d: 6d:97:93:60:d2:15:82:6d:20:c7:d9:7d:94:46:b0:7c:37:48: 49:2f:2c:9d:4c:5c:e4:e9:e7:eb:68:56:1e:f1:98:e5:ab:01: 90:ce:66:13:15:b5:1d:a0:91:02:a8:38:5a:f6:b7:13:8a:3b: 9d:c3:b6:9b:55:1b:71:95:3f:93:e6:20:08:b8:f0:bc:35:ec: 4e:3e:ba:be:5d:74:98:9b:e8:02:50:f3:93:fe:f5:3c:f2:aa: 14:90:9b:80:e9:01:98:17:df:57:9f:72:e8:25:a3:90:69:90: 05:e9:27:25:7c:87:9a:17:0b:cf:59:6d:24:4d:ce:e0:bd:d5: 22:cf:ac:e0:7a:b2:f2:df:db:47:80:08:09:98:18:ed:e5:a6: 43:71:7e:cb:bb:08:16:e9:72:89:3c:09:52:f0:ba:c6:71:70: 2a:eb:06:e3:a2:34:a2:66:f6:98:b2:a9:fb:4d:a5:b7:7c:6c: f2:56:67:9d:45:8f:60:8a:f2:45:7b:00:f5:fa:27:35:d0:bd: 9d:77:52:fc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAr4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhENjExMTAvBgNVBAUTKDY5RkY2OEQzOUFDMTc3M0UyOEE4NTc4NUM3OTFCNEE4 RDlCMzg0ODYwHhcNMjYwNjEzMDEzNDIxWhcNMjYwNjIwMDEzNDIxWjAYMRYwFAYD VQQDEw02YTJjYjM5ZC0yOTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2w2dagjXgc+4JiYzyIWR5E1MMkFIobYlSuT/1lKTc6i3qSymkaK6B4lCVaVQ RACG86lcgL9VgSjY/+stHZu7pBnK4ysxOzRGVH6FB/TSvgpuF0QYp+ELeL3G2el3 CvDWKkdUgh/oznFqAJEwpimbvWKACDRB5st+ggKFVdBTQr1hoA1UJ7ReC6OUlIuT bQ5vwUOncDiSLYAKrEaX2DQMnCiWz7NMFjokLeDOsWcpbiQLbdZosYkubZJ3LaYQ ry/U30O5wl85TdiNQX3NHcZk+daXo4/oNYudjL0uxwJw4a+K95xyrftedFdzhv7z bvMXdtmCPFSW6uwfxlUVPZlLSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO/lRva5 GsQF80+YmTFdDbJdn/k4MB8GA1UdIwQYMBaAFGn/aNOawXc+KKhXhceRtKjZs4SG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEQ2MS8yOTVFNEM3NjYw MUIxMUVEQTVDNzI3NkVDNEY5QUUwMi9hZjlvMDVyQmR6NG9xRmVGeDVHMHFObXpo SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FmOW8wNXJCZHo0b3FGZUZ4NUcwcU5temhJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEQ2MS8yOTVFNEM3NjYwMUIxMUVEQTVDNzI3NkVDNEY5QUUwMi9hZjlvMDVyQmR6 NG9xRmVGeDVHMHFObXpoSVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZW/BCF2y5QkjCRa4caoA3a2pfjTBAfYfdSm4ZIW3NVVezzgIrLpCTb8btj7v 5BzOD2iAQCUtbZeTYNIVgm0gx9l9lEawfDdISS8snUxc5Onn62hWHvGY5asBkM5m ExW1HaCRAqg4Wva3E4o7ncO2m1UbcZU/k+YgCLjwvDXsTj66vl10mJvoAlDzk/71 PPKqFJCbgOkBmBffV59y6CWjkGmQBeknJXyHmhcLz1ltJE3O4L3VIs+s4Hqy8t/b R4AICZgY7eWmQ3F+y7sIFulyiTwJUvC6xnFwKusG46I0omb2mLKp+02lt3xs8lZn nUWPYIryRXsA9fonNdC9nXdS/A== -----END CERTIFICATE-----Generated at Sat Jun 13 22:17:23 2026 by rpki-client