$ rpki-client -vvf rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/capYzfG2vXwm5hp1GKTQrSyfGhQ.mft File: capYzfG2vXwm5hp1GKTQrSyfGhQ.mft (raw, json) Hash identifier: Bb9C9xvRDUkEVADCtJOm4r9ibfRlsH4VYoWC1mfF4d0= Subject key identifier: 39:30:FC:30:48:65:37:04:E4:18:D3:23:19:B1:D3:70:D5:25:DA:EC Authority key identifier: 71:AA:58:CD:F1:B6:BD:7C:26:E6:1A:75:18:A4:D0:AD:2C:9F:1A:14 Certificate issuer: /CN=A9165A0B/serialNumber=71AA58CDF1B6BD7C26E61A7518A4D0AD2C9F1A14 Certificate serial: 0981 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/capYzfG2vXwm5hp1GKTQrSyfGhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/capYzfG2vXwm5hp1GKTQrSyfGhQ.mft Manifest number: 094E Signing time: Fri 12 Jun 2026 20:15:11 +0000 Manifest this update: Fri 12 Jun 2026 20:15:11 +0000 Manifest next update: Fri 19 Jun 2026 20:15:11 +0000 Files and hashes: 1: capYzfG2vXwm5hp1GKTQrSyfGhQ.crl (hash: jWSw0vp0PDJVVhJQJ6LYtwUedI9xuS1ns2ApWyGvkGk=) 2: 8C51AEF8C4FB11EAAEAE7C1DC4F9AE02.roa (hash: +PSgrTx8lXFFvvdktY3RXfTL/A83EghlvOOu8ypgZIc=) 3: 8BA9C1CAC4FB11EAAEAE7C1DC4F9AE02.roa (hash: pknh5TpkVdN0wm1/ojQOEGyjuZUBpmr1M782VXIzWZQ=) 4: 90606AD670AA11ED8DAE4C5AC4F9AE02.roa (hash: lmS+7uFn8RH9fc0jbeBbvg4YMmHae9TzPRYAxD2jSss=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/capYzfG2vXwm5hp1GKTQrSyfGhQ.crl rsync://rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/capYzfG2vXwm5hp1GKTQrSyfGhQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/capYzfG2vXwm5hp1GKTQrSyfGhQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 20:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2433 (0x981) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165A0B, serialNumber=71AA58CDF1B6BD7C26E61A7518A4D0AD2C9F1A14 Validity Not Before: Jun 12 20:15:11 2026 GMT Not After : Jun 19 20:15:11 2026 GMT Subject: CN=6a2c68cf-e1aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:31:7c:9b:55:0b:2b:43:3c:44:ef:e8:46:b5: 35:9e:57:fc:89:cc:85:45:30:dc:c3:95:50:af:43: 4e:20:1f:7d:f1:21:7d:c2:27:06:bc:e9:63:0b:6b: f3:cd:42:b2:67:fb:f1:fc:e5:ac:1d:87:e6:35:c9: e3:3b:1d:6f:fd:5d:b7:43:53:dd:53:23:38:ed:ef: a5:9b:80:b1:1a:86:26:49:75:de:63:1f:ba:dc:68: 17:e7:37:d1:d0:7d:d1:48:18:4f:8c:f1:86:35:bf: cd:ed:b2:49:cc:eb:50:d7:03:1f:47:0d:5c:33:88: 45:85:38:f3:da:a1:fd:3c:26:f1:2f:dc:80:d6:25: 61:1d:dc:22:5d:e1:e8:64:cf:aa:69:24:cb:36:0f: fd:7d:54:51:2d:f5:42:14:95:ee:9f:ae:2a:6b:0e: 20:f7:2e:58:66:76:d5:27:0d:64:4f:da:e8:5a:1e: eb:6c:8f:e4:5b:a6:34:93:e3:d9:53:00:fb:3f:4e: d3:92:98:02:8c:df:e0:fd:d3:7b:39:c7:27:55:da: 4e:12:7d:3d:52:bf:e7:11:fc:de:c2:20:3a:9d:0e: b0:70:67:aa:2b:10:b9:8e:a4:ad:62:c1:8d:e5:d6: 55:b7:df:79:b1:c8:70:87:1a:90:32:99:cc:02:02: 4b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:30:FC:30:48:65:37:04:E4:18:D3:23:19:B1:D3:70:D5:25:DA:EC X509v3 Authority Key Identifier: keyid:71:AA:58:CD:F1:B6:BD:7C:26:E6:1A:75:18:A4:D0:AD:2C:9F:1A:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/capYzfG2vXwm5hp1GKTQrSyfGhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/capYzfG2vXwm5hp1GKTQrSyfGhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/capYzfG2vXwm5hp1GKTQrSyfGhQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:b8:00:44:1f:c1:02:77:53:43:f1:23:d5:b7:b4:55:3b:9e: 2d:9f:d0:fa:4d:a7:8c:e4:05:ea:ef:89:df:9e:0b:c7:00:61: 73:4e:a8:b7:59:75:da:17:12:ab:85:61:90:f7:4e:a6:58:7b: 15:3d:b1:04:7d:f7:de:96:cc:a9:bb:70:23:a9:1d:b5:f8:68: 6a:16:79:33:72:40:b2:88:37:b5:85:81:c5:bf:0c:68:63:d4: 0c:b4:51:67:de:0f:dd:e5:8b:ac:08:94:8f:5e:12:e8:52:e4: 86:50:af:60:4e:b5:4d:ac:e6:68:8c:a2:50:d3:cf:91:d0:b3: fd:38:38:b5:6b:da:d9:65:db:2a:f8:e3:14:f6:24:2b:3f:c5: f2:c2:d6:ad:70:ab:44:ca:90:38:c5:5d:ad:14:9a:4a:1c:06: 72:f1:34:2b:b1:dc:72:b0:2d:39:48:96:4e:fa:08:7d:0f:13: f2:f0:0e:72:69:36:a0:fb:3d:52:bc:3e:a8:0f:6a:19:0a:da: 43:f4:3e:34:67:f7:23:bd:bb:2e:3a:6c:7d:83:b1:b1:ce:ef: 54:aa:88:42:01:97:77:1a:5b:69:8c:12:62:13:df:53:88:3b: 6c:86:c8:0a:b4:5b:a4:7b:5d:9a:d7:74:a5:51:26:c0:aa:b1: 54:90:fb:71 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVBMEIxMTAvBgNVBAUTKDcxQUE1OENERjFCNkJEN0MyNkU2MUE3NTE4QTREMEFE MkM5RjFBMTQwHhcNMjYwNjEyMjAxNTExWhcNMjYwNjE5MjAxNTExWjAYMRYwFAYD VQQDEw02YTJjNjhjZi1lMWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtTF8m1ULK0M8RO/oRrU1nlf8icyFRTDcw5VQr0NOIB998SF9wicGvOljC2vz zUKyZ/vx/OWsHYfmNcnjOx1v/V23Q1PdUyM47e+lm4CxGoYmSXXeYx+63GgX5zfR 0H3RSBhPjPGGNb/N7bJJzOtQ1wMfRw1cM4hFhTjz2qH9PCbxL9yA1iVhHdwiXeHo ZM+qaSTLNg/9fVRRLfVCFJXun64qaw4g9y5YZnbVJw1kT9roWh7rbI/kW6Y0k+PZ UwD7P07TkpgCjN/g/dN7OccnVdpOEn09Ur/nEfzewiA6nQ6wcGeqKxC5jqStYsGN 5dZVt995schwhxqQMpnMAgJLfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDkw/DBI ZTcE5BjTIxmx03DVJdrsMB8GA1UdIwQYMBaAFHGqWM3xtr18JuYadRik0K0snxoU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUEwQi8xNTU4NkY0MkM0 RjgxMUVBOEI5QjRDMTNDNEY5QUUwMi9jYXBZemZHMnZYd201aHAxR0tUUXJTeWZH aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NhcFl6Zkcydlh3bTVocDFHS1RRclN5ZkdoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUEwQi8xNTU4NkY0MkM0RjgxMUVBOEI5QjRDMTNDNEY5QUUwMi9jYXBZemZHMnZY d201aHAxR0tUUXJTeWZHaFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAargARB/BAndTQ/Ej1be0VTueLZ/Q+k2njOQF6u+J354LxwBhc06ot1l12hcS q4VhkPdOplh7FT2xBH333pbMqbtwI6kdtfhoahZ5M3JAsog3tYWBxb8MaGPUDLRR Z94P3eWLrAiUj14S6FLkhlCvYE61TazmaIyiUNPPkdCz/Tg4tWva2WXbKvjjFPYk Kz/F8sLWrXCrRMqQOMVdrRSaShwGcvE0K7HccrAtOUiWTvoIfQ8T8vAOcmk2oPs9 Urw+qA9qGQraQ/Q+NGf3I727LjpsfYOxsc7vVKqIQgGXdxpbaYwSYhPfU4g7bIbI CrRbpHtdmtd0pVEmwKqxVJD7cQ== -----END CERTIFICATE-----Generated at Sat Jun 13 17:38:33 2026 by rpki-client