$ rpki-client -vvf rpki.apnic.net/member_repository/A9170DF0/5DEFACF0364411EEACE5C72EC4F9AE02/AAji7r5sVfJZSUmkd_hne_9Kf-Q.mft File: AAji7r5sVfJZSUmkd_hne_9Kf-Q.mft (raw, json) Hash identifier: QkT8wJFdZh8uiMMqt52sPqoh1dgQv5UK3rxVt3exhqA= Subject key identifier: C5:26:2A:08:E7:C8:C5:2E:D3:1A:67:F6:83:B9:AE:2B:DE:8B:0B:73 Authority key identifier: 00:08:E2:EE:BE:6C:55:F2:59:49:49:A4:77:F8:67:7B:FF:4A:7F:E4 Certificate issuer: /CN=A9170DF0/serialNumber=0008E2EEBE6C55F2594949A477F8677BFF4A7FE4 Certificate serial: 021C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AAji7r5sVfJZSUmkd_hne_9Kf-Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170DF0/5DEFACF0364411EEACE5C72EC4F9AE02/AAji7r5sVfJZSUmkd_hne_9Kf-Q.mft Manifest number: 0217 Signing time: Sat 13 Jun 2026 02:54:08 +0000 Manifest this update: Sat 13 Jun 2026 02:54:07 +0000 Manifest next update: Sat 20 Jun 2026 02:54:07 +0000 Files and hashes: 1: AAji7r5sVfJZSUmkd_hne_9Kf-Q.crl (hash: abF3rdZAcRT76+8t0+UP6E6S1V87ACLeHpnf0m38HGo=) 2: B022AC18368811EEB1BFE56AC4F9AE02.roa (hash: ChPU5idLRzFBAUfZXdVDn4ZS21EQnqWVbj2XL7b56XA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170DF0/5DEFACF0364411EEACE5C72EC4F9AE02/AAji7r5sVfJZSUmkd_hne_9Kf-Q.crl rsync://rpki.apnic.net/member_repository/A9170DF0/5DEFACF0364411EEACE5C72EC4F9AE02/AAji7r5sVfJZSUmkd_hne_9Kf-Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AAji7r5sVfJZSUmkd_hne_9Kf-Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 02:54:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 540 (0x21c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170DF0, serialNumber=0008E2EEBE6C55F2594949A477F8677BFF4A7FE4 Validity Not Before: Jun 13 02:54:07 2026 GMT Not After : Jun 20 02:54:07 2026 GMT Subject: CN=6a2cc650-60a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:53:92:af:08:7f:53:e2:4f:a3:4b:02:94:4e: 17:f3:88:77:72:b9:27:1c:83:65:7a:7d:11:39:dc: c8:7d:f9:22:f0:97:c4:c4:73:b4:d9:dc:a7:5f:c0: 48:c1:a1:08:0e:b4:65:e0:85:9a:eb:d5:8e:a9:74: 10:0f:ba:3a:f7:80:13:5d:e4:ba:5e:47:62:13:7c: af:4c:67:04:fb:fa:08:68:85:21:5b:ca:b0:5b:a2: 73:80:a5:6e:a2:e3:60:d5:2b:d7:8a:87:a6:7a:b0: ae:eb:d7:80:c2:f0:85:cc:22:28:2c:a0:94:f3:b3: 5e:9c:1d:d3:43:51:65:9f:47:bc:ca:c9:47:50:7a: 1b:2e:44:d4:ab:97:ad:8c:64:ce:e4:3e:c3:58:27: d3:d4:ca:fc:a5:f5:69:c2:37:24:22:2d:57:3e:30: d4:d7:78:c3:ef:7d:94:0b:da:5c:8d:68:80:7a:22: 6e:0c:91:8f:17:13:29:ea:5c:cd:5d:15:85:ca:c6: b5:92:33:07:ab:62:0a:6e:e1:6c:b2:5a:99:ad:6b: 83:cc:04:04:42:33:47:73:f9:2b:f1:a4:ef:29:44: 42:cd:42:7c:11:80:99:11:51:de:e4:46:0c:b6:1e: 63:4d:9f:3a:ad:12:37:15:b3:58:57:2c:52:6e:a5: 68:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:26:2A:08:E7:C8:C5:2E:D3:1A:67:F6:83:B9:AE:2B:DE:8B:0B:73 X509v3 Authority Key Identifier: keyid:00:08:E2:EE:BE:6C:55:F2:59:49:49:A4:77:F8:67:7B:FF:4A:7F:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170DF0/5DEFACF0364411EEACE5C72EC4F9AE02/AAji7r5sVfJZSUmkd_hne_9Kf-Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AAji7r5sVfJZSUmkd_hne_9Kf-Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170DF0/5DEFACF0364411EEACE5C72EC4F9AE02/AAji7r5sVfJZSUmkd_hne_9Kf-Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:62:eb:5e:69:f2:97:47:a7:d2:13:5f:6d:cc:03:15:6c:af: a3:75:5a:85:56:4b:6d:96:bf:e3:5d:24:f0:7e:60:21:87:c5: 44:26:bd:dc:80:d9:b6:ad:34:7c:cf:5e:95:24:b7:48:de:3b: 72:8e:55:81:85:a8:02:5c:0b:5c:26:50:3a:90:1e:47:a9:54: b9:9e:58:6a:ef:7f:95:d8:44:47:d0:ec:d8:d2:cc:c9:0c:ed: 14:94:4f:3d:fb:4b:6b:cc:c0:24:4d:38:91:dc:6a:9c:b6:89: 36:24:24:37:fc:aa:e5:ca:d4:33:be:81:04:64:94:53:7a:d5: a0:7e:4b:2e:c7:57:bc:75:2a:12:b5:c0:b5:c6:cd:ab:31:43: ec:74:50:df:60:fc:fc:75:de:40:05:91:41:4d:94:6b:4c:6d: 79:91:26:e4:5e:18:22:3d:c9:38:41:a4:0a:a0:12:2b:81:f6: e2:e3:7a:e9:be:ca:7d:cb:b8:fb:00:fd:03:f6:53:a5:5f:e2: 9d:13:1c:08:8d:2c:ec:c3:f0:fe:56:be:8d:81:6c:62:ec:07: 86:c9:53:e5:5a:ad:cd:9b:36:23:da:12:65:d6:59:29:71:ad: 33:ff:20:12:e5:3a:78:80:5f:c2:5d:20:5b:2e:82:74:5a:1a: de:a6:24:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBERjAxMTAvBgNVBAUTKDAwMDhFMkVFQkU2QzU1RjI1OTQ5NDlBNDc3Rjg2NzdC RkY0QTdGRTQwHhcNMjYwNjEzMDI1NDA3WhcNMjYwNjIwMDI1NDA3WjAYMRYwFAYD VQQDEw02YTJjYzY1MC02MGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo1OSrwh/U+JPo0sClE4X84h3crknHINlen0ROdzIffki8JfExHO02dynX8BI waEIDrRl4IWa69WOqXQQD7o694ATXeS6XkdiE3yvTGcE+/oIaIUhW8qwW6JzgKVu ouNg1SvXioemerCu69eAwvCFzCIoLKCU87NenB3TQ1Fln0e8yslHUHobLkTUq5et jGTO5D7DWCfT1Mr8pfVpwjckIi1XPjDU13jD732UC9pcjWiAeiJuDJGPFxMp6lzN XRWFysa1kjMHq2IKbuFsslqZrWuDzAQEQjNHc/kr8aTvKURCzUJ8EYCZEVHe5EYM th5jTZ86rRI3FbNYVyxSbqVopQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMUmKgjn yMUu0xpn9oO5riveiwtzMB8GA1UdIwQYMBaAFAAI4u6+bFXyWUlJpHf4Z3v/Sn/k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MERGMC81REVGQUNGMDM2 NDQxMUVFQUNFNUM3MkVDNEY5QUUwMi9BQWppN3I1c1ZmSlpTVW1rZF9obmVfOUtm LVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0FBamk3cjVzVmZKWlNVbWtkX2huZV85S2YtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MERGMC81REVGQUNGMDM2NDQxMUVFQUNFNUM3MkVDNEY5QUUwMi9BQWppN3I1c1Zm SlpTVW1rZF9obmVfOUtmLVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtmLrXmnyl0en0hNfbcwDFWyvo3VahVZLbZa/410k8H5gIYfFRCa93IDZtq00 fM9elSS3SN47co5VgYWoAlwLXCZQOpAeR6lUuZ5Yau9/ldhER9Ds2NLMyQztFJRP PftLa8zAJE04kdxqnLaJNiQkN/yq5crUM76BBGSUU3rVoH5LLsdXvHUqErXAtcbN qzFD7HRQ32D8/HXeQAWRQU2Ua0xteZEm5F4YIj3JOEGkCqASK4H24uN66b7Kfcu4 +wD9A/ZTpV/inRMcCI0s7MPw/la+jYFsYuwHhslT5VqtzZs2I9oSZdZZKXGtM/8g EuU6eIBfwl0gWy6CdFoa3qYk0g== -----END CERTIFICATE-----Generated at Sat Jun 13 14:13:23 2026 by rpki-client