$ rpki-client -vvf rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.mft File: kY5yieKMGkkiojy1Zb2CG34gphE.mft (raw, json) Hash identifier: BQt4vIDxE0ZKLpIQJ6bWBlVVGAn2tFDB6rNLfJHJuT0= Subject key identifier: 64:1F:2B:18:F8:6E:C6:25:CF:2E:8B:77:5A:38:3A:A0:C1:34:75:1A Authority key identifier: 91:8E:72:89:E2:8C:1A:49:22:A2:3C:B5:65:BD:82:1B:7E:20:A6:11 Certificate issuer: /CN=A9171B1A/serialNumber=918E7289E28C1A4922A23CB565BD821B7E20A611 Certificate serial: 0D6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kY5yieKMGkkiojy1Zb2CG34gphE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.mft Manifest number: 0D5D Signing time: Fri 12 Jun 2026 17:57:44 +0000 Manifest this update: Fri 12 Jun 2026 17:57:43 +0000 Manifest next update: Fri 19 Jun 2026 17:57:43 +0000 Files and hashes: 1: kY5yieKMGkkiojy1Zb2CG34gphE.crl (hash: EtFa/JcODP8q+byj2iuh1on3BJk+Cvc+qcx0/e0mBfQ=) 2: 6E3B1338F41211E9AAF5924EC4F9AE02.roa (hash: X8sSkThLSb4fvyIS1pC23KDUjsj3Bu29OZPUHsBaV1A=) 3: 6D9433B0F41211E9AAF5924EC4F9AE02.roa (hash: Aw64/YmY/GSEcpV9lRNLIVB3nggqqcAVaMWqQLrAoig=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.crl rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kY5yieKMGkkiojy1Zb2CG34gphE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 17:57:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3439 (0xd6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171B1A, serialNumber=918E7289E28C1A4922A23CB565BD821B7E20A611 Validity Not Before: Jun 12 17:57:43 2026 GMT Not After : Jun 19 17:57:43 2026 GMT Subject: CN=6a2c4897-a8f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f9:65:b2:d9:e5:0f:8e:5d:15:92:76:98:8d: 7a:c5:6e:0c:54:8c:c8:39:cd:f0:1f:e5:20:68:7c: 3c:a5:41:7b:1e:69:0b:4d:3b:0c:91:18:d5:c3:1d: 28:60:e4:d7:00:21:9b:20:ef:9a:35:4e:de:9a:38: ca:67:01:8c:7a:f1:f2:2b:ae:7b:33:ce:82:2b:49: 35:25:4a:99:8c:77:65:09:e1:bc:69:75:b7:1b:cb: 29:15:78:7f:bd:f2:e8:52:9a:eb:5b:30:57:43:b1: 5d:8d:cd:b8:1a:86:2a:ee:6c:a6:b2:1c:50:a5:93: 5b:d7:18:40:ec:f7:1e:cc:0f:6b:9f:26:32:6f:83: 45:8d:72:a5:d9:18:e9:86:7f:6e:ba:f6:93:63:42: 09:f8:88:a0:1c:22:46:b7:c9:9e:04:96:9f:80:9c: 30:44:7e:5e:b9:ab:55:91:16:9b:38:be:50:b0:14: 94:ea:c9:23:25:32:7b:09:65:b4:81:43:45:5b:91: c7:69:ed:39:ee:b8:2e:18:88:ad:67:52:72:ba:ac: b2:43:23:df:82:b5:97:63:60:b8:24:0c:c4:36:43: 17:6f:cb:ac:cb:71:75:7c:56:43:c5:c5:af:df:e6: c5:b5:54:20:c9:e3:4a:30:d1:f0:2d:ae:aa:7e:d3: 13:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:1F:2B:18:F8:6E:C6:25:CF:2E:8B:77:5A:38:3A:A0:C1:34:75:1A X509v3 Authority Key Identifier: keyid:91:8E:72:89:E2:8C:1A:49:22:A2:3C:B5:65:BD:82:1B:7E:20:A6:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kY5yieKMGkkiojy1Zb2CG34gphE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:17:61:cc:a8:ae:f3:dd:ab:09:b2:24:4f:a6:46:ed:40:ff: 10:95:0e:d7:4f:67:77:17:ae:60:ba:9d:5e:4f:9b:fe:8b:c3: 54:71:d7:66:1e:4e:08:ea:cd:f7:e4:98:ef:02:af:60:f9:5e: 66:8f:80:8a:d5:5b:d8:87:5b:85:bb:6b:c4:80:c9:ea:bc:69: e4:d0:68:0c:8c:78:02:7f:56:a0:47:18:14:1e:5e:37:a3:06: 34:fd:27:d1:7e:72:77:42:1a:b0:63:81:eb:23:56:a7:34:2a: 07:0e:62:b9:07:01:81:98:16:f2:28:6e:e9:81:b4:34:5c:5c: 45:b5:94:69:67:b1:60:df:51:02:9d:b4:6b:b2:93:0e:a5:8d: f1:e0:dd:a7:7e:0f:d5:42:39:c7:69:6a:0a:7d:71:13:a1:98: eb:29:6c:83:39:ce:c5:91:1c:99:56:b8:3c:04:8e:b4:48:a0: f3:35:9a:9b:26:60:cf:54:1a:ca:08:13:02:a2:59:54:0b:a5: 63:a6:ab:5c:15:fb:d2:16:17:c7:8a:96:89:14:e3:07:26:41: c6:68:65:3d:57:e4:3d:de:2b:af:70:73:21:a9:22:f9:47:5d: 95:1f:14:05:69:b8:21:c3:5e:73:b1:e6:90:81:4c:29:28:08: df:04:40:78 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFCMUExMTAvBgNVBAUTKDkxOEU3Mjg5RTI4QzFBNDkyMkEyM0NCNTY1QkQ4MjFC N0UyMEE2MTEwHhcNMjYwNjEyMTc1NzQzWhcNMjYwNjE5MTc1NzQzWjAYMRYwFAYD VQQDEw02YTJjNDg5Ny1hOGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxPllstnlD45dFZJ2mI16xW4MVIzIOc3wH+UgaHw8pUF7HmkLTTsMkRjVwx0o YOTXACGbIO+aNU7emjjKZwGMevHyK657M86CK0k1JUqZjHdlCeG8aXW3G8spFXh/ vfLoUprrWzBXQ7Fdjc24GoYq7mymshxQpZNb1xhA7PcezA9rnyYyb4NFjXKl2Rjp hn9uuvaTY0IJ+IigHCJGt8meBJafgJwwRH5euatVkRabOL5QsBSU6skjJTJ7CWW0 gUNFW5HHae057rguGIitZ1JyuqyyQyPfgrWXY2C4JAzENkMXb8usy3F1fFZDxcWv 3+bFtVQgyeNKMNHwLa6qftMTsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGQfKxj4 bsYlzy6Ld1o4OqDBNHUaMB8GA1UdIwQYMBaAFJGOconijBpJIqI8tWW9ght+IKYR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUIxQS81MUZGQzRFNEY0 MTExMUU5QTQzNUIwNENDNEY5QUUwMi9rWTV5aWVLTUdra2lvankxWmIyQ0czNGdw aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tZNXlpZUtNR2traW9qeTFaYjJDRzM0Z3BoRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUIxQS81MUZGQzRFNEY0MTExMUU5QTQzNUIwNENDNEY5QUUwMi9rWTV5aWVLTUdr a2lvankxWmIyQ0czNGdwaEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZhdhzKiu892rCbIkT6ZG7UD/EJUO109ndxeuYLqdXk+b/ovDVHHXZh5OCOrN 9+SY7wKvYPleZo+AitVb2IdbhbtrxIDJ6rxp5NBoDIx4An9WoEcYFB5eN6MGNP0n 0X5yd0IasGOB6yNWpzQqBw5iuQcBgZgW8ihu6YG0NFxcRbWUaWexYN9RAp20a7KT DqWN8eDdp34P1UI5x2lqCn1xE6GY6ylsgznOxZEcmVa4PASOtEig8zWamyZgz1Qa yggTAqJZVAulY6arXBX70hYXx4qWiRTjByZBxmhlPVfkPd4rr3BzIaki+UddlR8U BWm4IcNec7HmkIFMKSgI3wRAeA== -----END CERTIFICATE-----Generated at Sat Jun 13 19:49:06 2026 by rpki-client