$ rpki-client -vvf rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/kRUqIeAuqRr6tsrcHXefkmdRUg0.mft File: kRUqIeAuqRr6tsrcHXefkmdRUg0.mft (raw, json) Hash identifier: NwlXm9w4Qt31vBciCcZT0G8aixrpVOacHQ7wTNJ++DA= Subject key identifier: 2E:B7:04:DC:37:6F:1A:60:6A:E6:6C:3D:47:FC:52:62:05:27:2A:43 Authority key identifier: 91:15:2A:21:E0:2E:A9:1A:FA:B6:CA:DC:1D:77:9F:92:67:51:52:0D Certificate issuer: /CN=A9165C34/serialNumber=91152A21E02EA91AFAB6CADC1D779F926751520D Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kRUqIeAuqRr6tsrcHXefkmdRUg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/kRUqIeAuqRr6tsrcHXefkmdRUg0.mft Manifest number: 14 Signing time: Sat 13 Jun 2026 09:09:18 +0000 Manifest this update: Sat 13 Jun 2026 09:09:17 +0000 Manifest next update: Sat 20 Jun 2026 09:09:17 +0000 Files and hashes: 1: kRUqIeAuqRr6tsrcHXefkmdRUg0.crl (hash: VWeH95BXIsX6SW1XlLAC0tiSkWjhnZoUYwGmFFoc4os=) 2: DDFBF53064F811F18CD9A2CE7647A888.roa (hash: qQJZK5DFPG0io6YNv45bEjgk/qh3wGUrSQbYNODneBQ=) 3: 9406AE42640911F1AA2EE0C79847A888.roa (hash: URhXPUIM7GJfpUTTHwvVKbze/Hu+Q4nnT4oxJlCcfKk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/kRUqIeAuqRr6tsrcHXefkmdRUg0.crl rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/kRUqIeAuqRr6tsrcHXefkmdRUg0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kRUqIeAuqRr6tsrcHXefkmdRUg0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 09:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165C34, serialNumber=91152A21E02EA91AFAB6CADC1D779F926751520D Validity Not Before: Jun 13 09:09:17 2026 GMT Not After : Jun 20 09:09:17 2026 GMT Subject: CN=6a2d1e3e-9fa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1c:a8:a2:07:97:02:dd:fb:29:a8:f2:99:0e: 5a:0e:27:93:6b:3f:8c:f0:2c:e0:bc:f8:08:a4:d9: 45:03:60:c6:bc:0a:8b:3b:47:c1:f8:74:bf:2a:2d: d4:51:81:b4:32:bf:bc:a0:2d:81:c6:a9:07:e2:01: ea:5b:56:30:57:ed:c8:2a:46:84:1b:c1:3f:47:2b: 97:88:b7:42:91:e5:ca:38:a3:68:17:83:a0:4c:1a: 3a:07:60:7c:67:fb:63:6f:73:9b:8b:d1:83:ba:8b: a2:2b:43:1d:ab:37:f8:58:8f:8d:72:c0:e6:f5:9f: f3:15:ad:26:5e:72:aa:92:28:82:26:8f:0b:72:14: f6:7c:8e:c8:37:7b:c7:ac:b5:db:8b:55:1e:00:a9: 54:28:42:a9:1a:1e:71:c6:56:10:59:ab:f3:2c:20: f7:bc:46:ac:67:bb:6f:db:e2:9f:01:e8:6c:ca:1b: e2:e2:e4:13:d7:23:33:5e:8b:bb:32:d3:28:43:78: 0a:5e:ed:b3:ba:2e:1a:d0:97:22:86:ad:41:dd:55: d5:3b:bd:36:a9:16:ba:79:a0:dd:91:79:6e:f0:d1: 0d:36:49:fa:fb:4d:f7:3a:24:15:42:bb:ca:91:8f: 98:b2:d2:06:59:80:48:b5:d3:1e:9e:54:f0:a3:0f: c7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:B7:04:DC:37:6F:1A:60:6A:E6:6C:3D:47:FC:52:62:05:27:2A:43 X509v3 Authority Key Identifier: keyid:91:15:2A:21:E0:2E:A9:1A:FA:B6:CA:DC:1D:77:9F:92:67:51:52:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/kRUqIeAuqRr6tsrcHXefkmdRUg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kRUqIeAuqRr6tsrcHXefkmdRUg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/kRUqIeAuqRr6tsrcHXefkmdRUg0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:20:b6:46:e3:cb:d3:cc:5a:63:47:16:5d:a9:3c:77:64:07: d1:2f:5a:8d:29:83:52:2e:1a:12:ad:d1:89:cd:2a:a8:5d:97: c8:bc:d2:ec:bb:2b:15:bc:78:e2:7f:eb:d7:ff:11:58:35:24: 02:a2:d1:86:ef:e0:be:af:64:79:f8:76:3e:1a:8c:47:38:80: 17:c1:0b:18:2e:dc:7f:48:08:5b:b0:68:e8:be:b4:a3:c0:a7: 08:6f:95:61:29:b0:84:d2:5a:59:de:72:11:f0:1d:a6:a7:34: df:b8:ad:65:e9:24:11:93:11:0d:1f:94:9d:35:ac:ea:3d:af: a6:96:d7:49:5b:0f:89:16:c7:ba:a0:0f:4e:d1:98:a7:db:29: 30:58:2f:49:cf:3c:2e:4e:1e:2e:76:97:ff:e1:2b:e9:a7:f2: 28:ad:44:a3:11:10:39:f6:e9:d1:f0:60:9d:e2:ed:9b:45:31: 88:4a:c2:e9:b5:81:57:a5:c9:01:a9:69:f3:69:2e:13:b3:4c: 70:87:70:c9:f6:04:ec:e5:95:00:68:11:30:c7:b9:56:66:69: a1:31:51:89:47:0e:09:35:7d:10:b4:b3:d3:4b:ad:d9:84:d5: 5b:99:b5:85:6b:ac:c0:98:0c:4d:32:a1:41:78:04:ef:59:f1: 77:22:4a:b5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NUMzNDExMC8GA1UEBRMoOTExNTJBMjFFMDJFQTkxQUZBQjZDQURDMUQ3NzlGOTI2 NzUxNTIwRDAeFw0yNjA2MTMwOTA5MTdaFw0yNjA2MjAwOTA5MTdaMBgxFjAUBgNV BAMTDTZhMmQxZTNlLTlmYTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCcHKiiB5cC3fspqPKZDloOJ5NrP4zwLOC8+Aik2UUDYMa8Cos7R8H4dL8qLdRR gbQyv7ygLYHGqQfiAepbVjBX7cgqRoQbwT9HK5eIt0KR5co4o2gXg6BMGjoHYHxn +2Nvc5uL0YO6i6IrQx2rN/hYj41ywOb1n/MVrSZecqqSKIImjwtyFPZ8jsg3e8es tduLVR4AqVQoQqkaHnHGVhBZq/MsIPe8Rqxnu2/b4p8B6GzKG+Li5BPXIzNei7sy 0yhDeApe7bO6LhrQlyKGrUHdVdU7vTapFrp5oN2ReW7w0Q02Sfr7Tfc6JBVCu8qR j5iy0gZZgEi10x6eVPCjD8chAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQULrcE3Ddv GmBq5mw9R/xSYgUnKkMwHwYDVR0jBBgwFoAUkRUqIeAuqRr6tsrcHXefkmdRUg0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1QzM0LzIwRUQxMkI0NEZB QzExRjE5MTY0MzI5NzlFODMzNzczL2tSVXFJZUF1cVJyNnRzcmNIWGVma21kUlVn MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIva1JVcUllQXVxUnI2dHNyY0hYZWZrbWRSVWcwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1 QzM0LzIwRUQxMkI0NEZBQzExRjE5MTY0MzI5NzlFODMzNzczL2tSVXFJZUF1cVJy NnRzcmNIWGVma21kUlVnMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCzILZG48vTzFpjRxZdqTx3ZAfRL1qNKYNSLhoSrdGJzSqoXZfIvNLsuysVvHji f+vX/xFYNSQCotGG7+C+r2R5+HY+GoxHOIAXwQsYLtx/SAhbsGjovrSjwKcIb5Vh KbCE0lpZ3nIR8B2mpzTfuK1l6SQRkxENH5SdNazqPa+mltdJWw+JFse6oA9O0Zin 2ykwWC9JzzwuTh4udpf/4Svpp/IorUSjERA59unR8GCd4u2bRTGISsLptYFXpckB qWnzaS4Ts0xwh3DJ9gTs5ZUAaBEwx7lWZmmhMVGJRw4JNX0QtLPTS63ZhNVbmbWF a6zAmAxNMqFBeATvWfF3Ikq1 -----END CERTIFICATE-----Generated at Sun Jun 14 00:12:00 2026 by rpki-client