$ rpki-client -vvf rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.mft File: ShUjM8QF9WZCwv0DscDx5R97ZNY.mft (raw, json) Hash identifier: eanYuliT3hUG+1wSgRY8UVhr1c0d07n+BqObDo/LNmU= Subject key identifier: 76:6E:30:C5:B5:16:48:71:26:C5:48:40:4D:9A:F6:BA:F4:D4:FC:A2 Authority key identifier: 4A:15:23:33:C4:05:F5:66:42:C2:FD:03:B1:C0:F1:E5:1F:7B:64:D6 Certificate issuer: /CN=A9173BC9/serialNumber=4A152333C405F56642C2FD03B1C0F1E51F7B64D6 Certificate serial: 0CF5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShUjM8QF9WZCwv0DscDx5R97ZNY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.mft Manifest number: 0CCE Signing time: Fri 12 Jun 2026 18:29:11 +0000 Manifest this update: Fri 12 Jun 2026 18:29:10 +0000 Manifest next update: Fri 19 Jun 2026 18:29:10 +0000 Files and hashes: 1: ShUjM8QF9WZCwv0DscDx5R97ZNY.crl (hash: zPnJ39YGdn4JUBEbstTvaD0/HXlPI1o+AmYbXw+GCuc=) 2: EF14DD34B6E211EAB3BA9536C4F9AE02.roa (hash: 4GtPeohLS8OTUPDc8RgozS35ewcE3lUXQAukx2eqQRw=) 3: 2A9AFB320BC911EBBA11562FC4F9AE02.roa (hash: pUo1M6Sm4lp9c2XrgF+LDSj3mLXP2pG6wm3MhRuMa6w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.crl rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShUjM8QF9WZCwv0DscDx5R97ZNY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 18:29:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3317 (0xcf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173BC9, serialNumber=4A152333C405F56642C2FD03B1C0F1E51F7B64D6 Validity Not Before: Jun 12 18:29:10 2026 GMT Not After : Jun 19 18:29:10 2026 GMT Subject: CN=6a2c4ff7-d907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:08:24:86:3b:0d:46:29:cf:9d:a5:8e:98:76: d0:40:18:e0:c7:4b:b2:d5:42:7d:13:f8:d3:04:af: 6d:7a:2f:d5:bd:02:99:9c:d0:74:a4:4f:1e:5c:0f: 45:4a:a7:f0:31:0b:48:39:e9:aa:ce:21:17:02:2a: af:15:2a:41:74:15:84:48:e2:12:27:d0:95:2f:86: f9:c9:c2:de:58:b0:e4:d6:92:c9:6d:c4:db:89:d8: 70:9b:cd:5d:74:9d:d1:46:96:8f:fc:10:f7:02:77: c7:ae:a8:d6:0a:4d:e1:ba:b5:50:ac:9c:ed:2b:11: 4a:38:86:c4:2b:30:29:d9:28:50:9d:e6:d8:37:6e: a0:4a:51:78:47:ed:58:73:e3:b6:81:93:90:9e:93: 25:33:74:53:e0:f3:35:4c:e4:ea:cc:3a:8c:76:43: fc:ab:ff:22:e8:96:bf:c2:95:6e:4a:5c:18:c2:f4: 11:02:94:45:d4:e8:f9:6d:39:81:a3:9e:9f:18:51: 99:29:e4:d5:1b:d1:b0:fc:29:6a:8d:4f:0d:20:03: 02:20:52:b3:45:bd:29:47:2f:d2:e7:07:89:a5:da: a1:35:8b:74:97:94:d1:11:7f:a3:0e:43:11:c4:d0: 5c:5e:77:e4:32:7f:f7:e8:55:19:8b:44:bb:96:d0: bf:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:6E:30:C5:B5:16:48:71:26:C5:48:40:4D:9A:F6:BA:F4:D4:FC:A2 X509v3 Authority Key Identifier: keyid:4A:15:23:33:C4:05:F5:66:42:C2:FD:03:B1:C0:F1:E5:1F:7B:64:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShUjM8QF9WZCwv0DscDx5R97ZNY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173BC9/C5C83CAE13A011EA93EEEF65C4F9AE02/ShUjM8QF9WZCwv0DscDx5R97ZNY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:ef:18:64:40:16:e1:1a:9d:9b:90:cd:24:a6:ae:b6:64:54: cb:71:82:0e:7f:9d:2e:96:1e:f2:d4:ab:a2:a3:bf:9e:39:68: 5c:31:64:dc:bd:55:79:45:cd:13:d6:f8:42:69:c8:de:11:b1: 2c:df:5a:65:5b:51:b5:8e:2f:b4:17:0b:fc:92:0c:ca:77:8a: 26:d1:2b:97:38:6a:7d:42:93:db:b1:d9:fc:ea:ee:d3:0f:57: 3f:8f:f6:50:e6:b4:b4:85:08:38:92:9b:a1:2d:6e:98:c6:ff: 18:89:44:db:fe:49:89:5b:20:7f:62:13:8d:c8:39:35:b2:6c: 2b:aa:06:4f:7c:4c:94:1f:50:b9:24:5f:f4:62:4b:ea:67:dd: 2c:84:6a:a7:98:93:6b:e2:46:44:11:56:6f:29:7b:f5:b6:c8: ff:c8:c2:29:85:c8:22:c6:0a:1d:11:99:11:b0:fd:9f:b8:df: 04:92:e0:6c:13:99:c6:11:d1:d4:38:cd:c4:93:14:f5:85:7f: fa:65:d3:8f:a6:95:3e:25:82:80:73:b2:f8:a4:97:34:46:46: d1:48:ab:91:76:81:86:70:bc:e1:75:74:2a:2a:d8:c6:19:ce: 07:c3:6d:10:3c:5d:01:30:db:a3:26:38:db:fb:bb:20:ca:c0: 8f:de:13:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNCQzkxMTAvBgNVBAUTKDRBMTUyMzMzQzQwNUY1NjY0MkMyRkQwM0IxQzBGMUU1 MUY3QjY0RDYwHhcNMjYwNjEyMTgyOTEwWhcNMjYwNjE5MTgyOTEwWjAYMRYwFAYD VQQDEw02YTJjNGZmNy1kOTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmQgkhjsNRinPnaWOmHbQQBjgx0uy1UJ9E/jTBK9tei/VvQKZnNB0pE8eXA9F SqfwMQtIOemqziEXAiqvFSpBdBWESOISJ9CVL4b5ycLeWLDk1pLJbcTbidhwm81d dJ3RRpaP/BD3AnfHrqjWCk3hurVQrJztKxFKOIbEKzAp2ShQnebYN26gSlF4R+1Y c+O2gZOQnpMlM3RT4PM1TOTqzDqMdkP8q/8i6Ja/wpVuSlwYwvQRApRF1Oj5bTmB o56fGFGZKeTVG9Gw/ClqjU8NIAMCIFKzRb0pRy/S5weJpdqhNYt0l5TREX+jDkMR xNBcXnfkMn/36FUZi0S7ltC/wQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHZuMMW1 FkhxJsVIQE2a9rr01PyiMB8GA1UdIwQYMBaAFEoVIzPEBfVmQsL9A7HA8eUfe2TW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0JDOS9DNUM4M0NBRTEz QTAxMUVBOTNFRUVGNjVDNEY5QUUwMi9TaFVqTThRRjlXWkN3djBEc2NEeDVSOTda TlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NoVWpNOFFGOVdaQ3d2MERzY0R4NVI5N1pOWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0JDOS9DNUM4M0NBRTEzQTAxMUVBOTNFRUVGNjVDNEY5QUUwMi9TaFVqTThRRjlX WkN3djBEc2NEeDVSOTdaTlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAde8YZEAW4Rqdm5DNJKautmRUy3GCDn+dLpYe8tSroqO/njloXDFk3L1VeUXN E9b4QmnI3hGxLN9aZVtRtY4vtBcL/JIMyneKJtErlzhqfUKT27HZ/Oru0w9XP4/2 UOa0tIUIOJKboS1umMb/GIlE2/5JiVsgf2ITjcg5NbJsK6oGT3xMlB9QuSRf9GJL 6mfdLIRqp5iTa+JGRBFWbyl79bbI/8jCKYXIIsYKHRGZEbD9n7jfBJLgbBOZxhHR 1DjNxJMU9YV/+mXTj6aVPiWCgHOy+KSXNEZG0UirkXaBhnC84XV0KirYxhnOB8Nt EDxdATDboyY42/u7IMrAj94Tdg== -----END CERTIFICATE-----Generated at Sat Jun 13 20:26:35 2026 by rpki-client