$ rpki-client -vvf rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.mft File: G9xHZ6bV6-C--lyhI1MI915IiRo.mft (raw, json) Hash identifier: IUx4DbzSaeJ23GvBjl2ywD9/x3IVvgm5410+umKhhIg= Subject key identifier: 3A:E6:D4:AB:D5:C2:74:B0:28:E5:9F:B9:52:A8:B8:F2:12:24:E4:2B Authority key identifier: 1B:DC:47:67:A6:D5:EB:E0:BE:FA:5C:A1:23:53:08:F7:5E:48:89:1A Certificate issuer: /CN=A9149C2D/serialNumber=1BDC4767A6D5EBE0BEFA5CA1235308F75E48891A Certificate serial: 1C6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9xHZ6bV6-C--lyhI1MI915IiRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.mft Manifest number: 1C5A Signing time: Fri 12 Jun 2026 16:10:33 +0000 Manifest this update: Fri 12 Jun 2026 16:10:32 +0000 Manifest next update: Fri 19 Jun 2026 16:10:32 +0000 Files and hashes: 1: G9xHZ6bV6-C--lyhI1MI915IiRo.crl (hash: iA/Uepa2fdJ8CK12cPgENUh5yqKsJvck2tqzZ8AWA6k=) 2: A607F8965F4611EE80BD8D2DC4F9AE02.roa (hash: fv4oRIQ4Gxh8CoHiTKL/BcGQRnYE0nj0QiSPtWSrjAM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.crl rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9xHZ6bV6-C--lyhI1MI915IiRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 16:10:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7279 (0x1c6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149C2D, serialNumber=1BDC4767A6D5EBE0BEFA5CA1235308F75E48891A Validity Not Before: Jun 12 16:10:32 2026 GMT Not After : Jun 19 16:10:32 2026 GMT Subject: CN=6a2c2f79-f6c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ff:ca:f3:95:84:70:5e:62:de:06:d5:b5:d3: 17:33:4a:aa:a3:76:58:ee:4b:32:93:8d:e7:d9:1e: e0:d4:f0:04:1c:dd:74:cf:08:d7:4c:0d:7b:e4:05: 14:5c:ed:17:75:a7:be:9e:0d:ad:6a:96:62:6a:47: 32:ba:b2:f6:e0:9c:28:5a:48:2d:26:cf:3e:a1:cb: 7a:e9:99:18:19:92:16:96:18:cf:fb:41:e7:64:76: d9:91:02:e5:fb:a5:b0:86:48:ea:5c:34:43:b3:a4: 51:8a:7d:1e:d0:ba:48:78:5a:e0:11:36:e1:77:5c: f5:ba:3a:04:92:7c:c1:b8:0c:76:eb:ad:53:6c:78: 6c:ac:57:c9:81:23:f9:38:d7:05:6b:b1:3d:b3:54: 82:d4:50:24:14:e2:ce:88:88:4b:9c:eb:d2:79:e6: 9c:f2:77:a7:a6:b2:d6:d0:27:91:46:55:35:c1:c4: 5a:1a:a7:08:41:c6:93:b6:9e:7b:fd:45:96:f6:2b: f3:79:9a:5c:8b:8c:18:6b:05:54:67:ca:55:66:1c: 05:25:ed:45:3b:1e:3c:a3:dd:22:e8:05:d8:d2:9d: 66:d0:48:48:f4:10:d0:ec:d6:bf:6f:6f:e6:ae:d4: f0:3f:37:b7:4c:e4:17:42:98:4e:8f:a6:98:a3:4e: d2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:E6:D4:AB:D5:C2:74:B0:28:E5:9F:B9:52:A8:B8:F2:12:24:E4:2B X509v3 Authority Key Identifier: keyid:1B:DC:47:67:A6:D5:EB:E0:BE:FA:5C:A1:23:53:08:F7:5E:48:89:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9xHZ6bV6-C--lyhI1MI915IiRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:39:fd:2a:42:78:a9:87:98:ed:fb:e7:8e:68:08:fc:03:1f: c9:28:e6:8f:8d:b1:51:7b:6d:dc:80:fc:ac:aa:6a:d2:4b:0d: 81:77:b1:eb:5a:07:82:ff:39:f6:52:bf:b7:16:6f:5f:cd:ce: a7:3f:66:88:00:79:21:59:d6:a1:39:db:d5:54:27:eb:bb:d7: 67:cc:cb:4e:45:a3:56:30:99:8a:9c:4d:0a:6c:2b:73:c8:96: 1f:d1:0b:76:57:0d:b8:e3:24:d6:9b:08:c4:66:ea:45:e0:ff: 52:24:3d:24:d6:27:89:3e:d4:02:f0:38:b4:7b:22:f7:11:db: 00:ae:83:e4:7b:10:14:41:06:11:20:c4:fc:eb:3c:f5:8a:73: 3d:08:d0:83:0f:5a:86:52:bd:34:d8:dc:ed:23:be:b3:c2:11: 5d:61:32:2e:d4:86:28:a1:ae:f9:df:99:0d:68:55:55:e8:06: 5e:0b:e8:b3:60:a7:d1:c1:19:5e:b0:4d:31:b3:b7:79:57:e3: aa:db:a0:fc:f9:3c:8f:e4:d3:e1:23:b9:e1:e1:bc:e0:f3:82: 9e:4f:e1:63:c2:2e:72:20:95:28:54:45:36:fc:b1:56:1e:0f: df:c9:2b:68:a4:0d:f3:85:f6:14:3e:08:6c:9f:45:f2:bb:31: 44:f8:88:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlDMkQxMTAvBgNVBAUTKDFCREM0NzY3QTZENUVCRTBCRUZBNUNBMTIzNTMwOEY3 NUU0ODg5MUEwHhcNMjYwNjEyMTYxMDMyWhcNMjYwNjE5MTYxMDMyWjAYMRYwFAYD VQQDEw02YTJjMmY3OS1mNmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtf/K85WEcF5i3gbVtdMXM0qqo3ZY7ksyk43n2R7g1PAEHN10zwjXTA175AUU XO0Xdae+ng2tapZiakcyurL24JwoWkgtJs8+oct66ZkYGZIWlhjP+0HnZHbZkQLl +6WwhkjqXDRDs6RRin0e0LpIeFrgETbhd1z1ujoEknzBuAx2661TbHhsrFfJgSP5 ONcFa7E9s1SC1FAkFOLOiIhLnOvSeeac8nenprLW0CeRRlU1wcRaGqcIQcaTtp57 /UWW9ivzeZpci4wYawVUZ8pVZhwFJe1FOx48o90i6AXY0p1m0EhI9BDQ7Na/b2/m rtTwPze3TOQXQphOj6aYo07SlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDrm1KvV wnSwKOWfuVKouPISJOQrMB8GA1UdIwQYMBaAFBvcR2em1evgvvpcoSNTCPdeSIka MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUMyRC80RDVBNzg4MDA4 NzMxMUU3OUM4MzlCMDlDNEY5QUUwMi9HOXhIWjZiVjYtQy0tbHloSTFNSTkxNUlp Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c5eEhaNmJWNi1DLS1seWhJMU1JOTE1SWlSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUMyRC80RDVBNzg4MDA4NzMxMUU3OUM4MzlCMDlDNEY5QUUwMi9HOXhIWjZiVjYt Qy0tbHloSTFNSTkxNUlpUm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApzn9KkJ4qYeY7fvnjmgI/AMfySjmj42xUXtt3ID8rKpq0ksNgXex61oHgv85 9lK/txZvX83Opz9miAB5IVnWoTnb1VQn67vXZ8zLTkWjVjCZipxNCmwrc8iWH9EL dlcNuOMk1psIxGbqReD/UiQ9JNYniT7UAvA4tHsi9xHbAK6D5HsQFEEGESDE/Os8 9YpzPQjQgw9ahlK9NNjc7SO+s8IRXWEyLtSGKKGu+d+ZDWhVVegGXgvos2Cn0cEZ XrBNMbO3eVfjqtug/Pk8j+TT4SO54eG84POCnk/hY8IuciCVKFRFNvyxVh4P38kr aKQN84X2FD4IbJ9F8rsxRPiInw== -----END CERTIFICATE-----Generated at Sat Jun 13 23:45:43 2026 by rpki-client