$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.mft File: 09eD7kxpu1Bj-1z1smKLx77DdIo.mft (raw, json) Hash identifier: g0jlxNEGq/EPJKXKwN/Yu6huN46o83NYp2k3dAzL4Uc= Subject key identifier: 66:61:91:B8:83:47:7D:24:E6:B9:3D:89:D3:78:FB:45:42:AD:97:37 Authority key identifier: D3:D7:83:EE:4C:69:BB:50:63:FB:5C:F5:B2:62:8B:C7:BE:C3:74:8A Certificate issuer: /CN=A91B9A77/serialNumber=D3D783EE4C69BB5063FB5CF5B2628BC7BEC3748A Certificate serial: 0144 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/09eD7kxpu1Bj-1z1smKLx77DdIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.mft Manifest number: 0144 Signing time: Sat 13 Jun 2026 01:00:01 +0000 Manifest this update: Sat 13 Jun 2026 01:00:01 +0000 Manifest next update: Sat 20 Jun 2026 01:00:01 +0000 Files and hashes: 1: 09eD7kxpu1Bj-1z1smKLx77DdIo.crl (hash: SSWEPmoz22T4lvjiMbQqhdBCRvxUslgiQ9MvoLFKzQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.crl rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/09eD7kxpu1Bj-1z1smKLx77DdIo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 324 (0x144) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9A77, serialNumber=D3D783EE4C69BB5063FB5CF5B2628BC7BEC3748A Validity Not Before: Jun 13 01:00:01 2026 GMT Not After : Jun 20 01:00:01 2026 GMT Subject: CN=6a2cab91-1488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:79:fe:55:10:3e:64:38:1e:d4:a8:46:5e:1d: a3:11:cd:22:0f:b3:0f:9f:f8:1d:07:e9:a9:a5:18: 10:57:30:03:13:59:57:3d:a0:4f:fa:80:b4:b8:92: 1d:e6:05:a8:89:bc:c8:21:85:8d:af:31:5e:37:1b: a6:61:ba:0c:bb:94:88:a5:41:eb:55:e0:29:1d:1d: 33:7f:9a:40:d8:6f:87:7a:01:78:46:b4:60:54:0a: 6f:22:cd:fd:5c:35:49:2f:d2:70:c9:4d:5c:5d:29: ee:af:9f:0e:0e:36:f1:68:46:7f:4e:33:07:4d:f6: 7a:ae:c2:7b:5f:8b:23:0d:79:46:8e:8e:9b:7c:27: 20:59:c3:53:38:28:e4:e9:3d:3d:4f:2b:f5:4e:f8: fb:e2:d2:64:15:e8:44:45:69:76:9a:4d:a8:0f:62: 50:ad:fb:08:57:ff:e9:64:a5:33:64:89:e8:68:6e: 22:7d:74:0e:4a:3f:2e:3d:e5:1d:96:84:38:05:d0: aa:6f:a2:6d:de:dd:1c:7f:06:b9:5e:dc:64:b0:16: e9:e8:e8:2d:36:9f:16:17:db:c0:9f:94:e3:08:f0: bd:98:ee:a4:89:31:fd:da:c0:74:f8:78:03:e5:92: 12:15:07:3a:3a:50:48:76:3a:35:23:0e:47:58:5e: 46:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:61:91:B8:83:47:7D:24:E6:B9:3D:89:D3:78:FB:45:42:AD:97:37 X509v3 Authority Key Identifier: keyid:D3:D7:83:EE:4C:69:BB:50:63:FB:5C:F5:B2:62:8B:C7:BE:C3:74:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/09eD7kxpu1Bj-1z1smKLx77DdIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:86:1f:37:61:87:31:f6:b3:58:32:4c:b4:21:46:fa:f8:3b: 64:90:a7:4e:2e:9e:f8:e5:b3:69:f4:61:4d:43:31:dd:15:51: 47:8a:73:76:65:09:8f:f7:7e:61:fd:76:eb:c8:c1:1c:0a:00: c3:3d:77:a2:fe:17:f8:12:86:13:74:ab:01:73:05:e7:64:a9: 43:90:06:cc:86:14:76:b4:9b:d4:73:09:7d:29:60:a7:71:e2: ee:06:f5:b6:50:cc:18:80:55:3c:e3:33:e9:86:97:eb:d0:91: d0:ff:56:38:95:bf:e6:a9:95:6c:eb:b4:24:45:be:dd:e3:0c: 6c:42:5f:cb:c1:38:28:5a:77:0c:0e:c5:8c:14:ea:97:c6:01: d9:94:68:de:a2:73:da:6a:c6:8f:69:0f:e3:8f:06:74:b6:4a: 01:09:71:3a:ca:26:fd:de:61:56:fe:84:23:bf:64:e1:3f:03: 3a:49:5b:46:72:87:dc:de:fe:28:37:b3:7e:a6:03:e2:3b:66: 1c:5b:6c:a2:8b:46:b4:5f:21:d1:74:f2:0e:e9:bf:dd:68:82: ed:62:4f:fd:8c:b2:bf:76:e7:ff:51:d6:0d:7e:c5:0b:17:da: b8:36:59:85:a2:99:35:86:57:ba:47:18:f4:07:ae:15:5f:c0: 83:46:e4:58 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlBNzcxMTAvBgNVBAUTKEQzRDc4M0VFNEM2OUJCNTA2M0ZCNUNGNUIyNjI4QkM3 QkVDMzc0OEEwHhcNMjYwNjEzMDEwMDAxWhcNMjYwNjIwMDEwMDAxWjAYMRYwFAYD VQQDEw02YTJjYWI5MS0xNDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA13n+VRA+ZDge1KhGXh2jEc0iD7MPn/gdB+mppRgQVzADE1lXPaBP+oC0uJId 5gWoibzIIYWNrzFeNxumYboMu5SIpUHrVeApHR0zf5pA2G+HegF4RrRgVApvIs39 XDVJL9JwyU1cXSnur58ODjbxaEZ/TjMHTfZ6rsJ7X4sjDXlGjo6bfCcgWcNTOCjk 6T09Tyv1Tvj74tJkFehERWl2mk2oD2JQrfsIV//pZKUzZInoaG4ifXQOSj8uPeUd loQ4BdCqb6Jt3t0cfwa5XtxksBbp6OgtNp8WF9vAn5TjCPC9mO6kiTH92sB0+HgD 5ZISFQc6OlBIdjo1Iw5HWF5GrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGZhkbiD R30k5rk9idN4+0VCrZc3MB8GA1UdIwQYMBaAFNPXg+5MabtQY/tc9bJii8e+w3SK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUE3Ny9BQjg1MzQ0MDdB M0YxMUVGQTFDMEUwMTZDNEY5QUUwMi8wOWVEN2t4cHUxQmotMXoxc21LTHg3N0Rk SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzA5ZUQ3a3hwdTFCai0xejFzbUtMeDc3RGRJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUE3Ny9BQjg1MzQ0MDdBM0YxMUVGQTFDMEUwMTZDNEY5QUUwMi8wOWVEN2t4cHUx QmotMXoxc21LTHg3N0RkSW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUoYfN2GHMfazWDJMtCFG+vg7ZJCnTi6e+OWzafRhTUMx3RVRR4pzdmUJj/d+ Yf1268jBHAoAwz13ov4X+BKGE3SrAXMF52SpQ5AGzIYUdrSb1HMJfSlgp3Hi7gb1 tlDMGIBVPOMz6YaX69CR0P9WOJW/5qmVbOu0JEW+3eMMbEJfy8E4KFp3DA7FjBTq l8YB2ZRo3qJz2mrGj2kP448GdLZKAQlxOsom/d5hVv6EI79k4T8DOklbRnKH3N7+ KDezfqYD4jtmHFtsootGtF8h0XTyDum/3WiC7WJP/Yyyv3bn/1HWDX7FCxfauDZZ haKZNYZXukcY9AeuFV/Ag0bkWA== -----END CERTIFICATE-----Generated at Sat Jun 13 14:36:26 2026 by rpki-client