$ rpki-client -vvf rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft File: 2z39hs6_6u06rxXeruaWUjR0aik.mft (raw, json) Hash identifier: KiGekTraIFgpbtfzasVBQUVAbSguutVH8xRK+Ra4hS0= Subject key identifier: B1:FA:3F:44:09:56:A1:4A:DA:3D:25:3C:A9:D2:9B:CE:4C:A7:24:2E Authority key identifier: DB:3D:FD:86:CE:BF:EA:ED:3A:AF:15:DE:AE:E6:96:52:34:74:6A:29 Certificate issuer: /CN=A9171BF0/serialNumber=DB3DFD86CEBFEAED3AAF15DEAEE6965234746A29 Certificate serial: 011D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2z39hs6_6u06rxXeruaWUjR0aik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft Manifest number: 0119 Signing time: Wed 13 May 2026 05:58:06 +0000 Manifest this update: Wed 13 May 2026 05:58:05 +0000 Manifest next update: Wed 20 May 2026 05:58:05 +0000 Files and hashes: 1: 2z39hs6_6u06rxXeruaWUjR0aik.crl (hash: dKJEKH+ZQrED5AHNz4RlqPkWTanDhxZrlopgu+CiGDo=) 2: 12004368A41611EFA0D7CD42C4F9AE02.roa (hash: Mbaq1JxQwVcFP87z4eBI+1tbhFSk65AD4tx8mWL3NcA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.crl rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2z39hs6_6u06rxXeruaWUjR0aik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 05:58:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171BF0, serialNumber=DB3DFD86CEBFEAED3AAF15DEAEE6965234746A29 Validity Not Before: May 13 05:58:05 2026 GMT Not After : May 20 05:58:05 2026 GMT Subject: CN=6a0412ee-0d1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:29:84:2b:da:86:22:80:93:d4:dd:c1:2e:1d: 08:17:17:5d:03:3c:24:95:fa:1b:4f:6a:53:7e:05: 08:fb:9c:8c:9f:83:de:37:d8:07:11:bd:0c:9f:b2: af:41:08:b5:57:8c:37:bc:95:21:a6:ef:30:2f:7b: b6:02:fb:bd:b3:86:ea:9a:2a:cf:69:3d:61:70:3b: bc:d0:a4:2f:46:25:99:b8:80:52:fb:16:94:a4:4e: 73:6a:e1:c3:85:3e:3d:7b:c4:0e:67:c5:05:f1:5b: c5:41:c2:89:8e:b8:d2:1d:6d:5a:13:ad:fa:8f:88: 7a:b7:0e:ea:cf:37:90:aa:cd:14:1f:07:f5:d1:85: 88:52:4c:12:72:14:8f:95:d3:73:3e:ad:60:8e:f9: 8e:dc:b8:fc:1f:80:cc:15:c2:a9:c8:19:9f:82:77: ca:d8:97:30:d4:d2:01:ab:82:87:1d:16:54:a4:07: 4b:62:c5:4b:e3:bd:6c:92:81:60:6f:c7:9b:0f:a8: 6c:c6:08:de:5d:71:f1:90:02:23:a7:30:fb:25:3c: 26:ba:73:fe:48:bf:ab:0b:fc:e9:61:21:1b:ab:f3: 42:00:13:10:90:35:f8:7f:36:c4:7f:b2:fa:72:12: e1:32:b7:d7:62:93:90:cd:f6:8e:94:4d:ca:fa:d3: d3:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:FA:3F:44:09:56:A1:4A:DA:3D:25:3C:A9:D2:9B:CE:4C:A7:24:2E X509v3 Authority Key Identifier: keyid:DB:3D:FD:86:CE:BF:EA:ED:3A:AF:15:DE:AE:E6:96:52:34:74:6A:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2z39hs6_6u06rxXeruaWUjR0aik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:15:5b:ab:02:66:12:b8:ae:c5:34:56:db:f4:bb:77:87:5d: 89:9b:12:89:9f:f4:59:5a:34:08:16:40:26:27:bf:4c:e2:3d: 55:8c:cc:ac:46:c1:f0:a4:18:88:08:f8:96:7c:d6:8b:35:ee: f7:11:a0:0e:8e:6d:d3:c6:a5:06:43:5f:98:30:d9:42:bf:91: d7:00:aa:d5:86:6b:61:4e:a8:12:67:90:1b:bf:8d:f0:01:e1: 8e:de:9c:8f:18:50:6e:bd:e1:fe:ff:ab:01:5a:93:80:13:39: 19:7b:53:30:26:21:e3:a1:ab:fa:ff:db:b3:bc:e8:ce:5d:16: f4:23:e9:54:8f:a4:87:8d:7c:7f:43:3e:30:ea:5e:93:99:a2: bd:20:60:be:11:63:fb:d5:47:02:ce:15:b0:9d:d0:eb:db:9f: af:06:25:b7:dc:a6:95:9b:03:84:31:e3:87:10:b2:e2:b3:30: a0:bc:88:e1:1c:91:ac:79:95:8f:86:a1:a8:d3:bb:a6:a4:f2: c1:a0:25:b8:42:0c:4d:86:53:da:a8:66:ff:2c:3c:31:d8:99: 78:1e:f3:56:15:cf:91:8e:0b:26:c9:25:89:ad:0e:6e:e6:cd: 9b:aa:f3:b0:80:9d:bf:aa:a5:26:b8:45:b4:28:b3:c1:9f:bd: 93:6c:6b:4f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFCRjAxMTAvBgNVBAUTKERCM0RGRDg2Q0VCRkVBRUQzQUFGMTVERUFFRTY5NjUy MzQ3NDZBMjkwHhcNMjYwNTEzMDU1ODA1WhcNMjYwNTIwMDU1ODA1WjAYMRYwFAYD VQQDEw02YTA0MTJlZS0wZDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnCmEK9qGIoCT1N3BLh0IFxddAzwklfobT2pTfgUI+5yMn4PeN9gHEb0Mn7Kv QQi1V4w3vJUhpu8wL3u2Avu9s4bqmirPaT1hcDu80KQvRiWZuIBS+xaUpE5zauHD hT49e8QOZ8UF8VvFQcKJjrjSHW1aE636j4h6tw7qzzeQqs0UHwf10YWIUkwSchSP ldNzPq1gjvmO3Lj8H4DMFcKpyBmfgnfK2Jcw1NIBq4KHHRZUpAdLYsVL471skoFg b8ebD6hsxgjeXXHxkAIjpzD7JTwmunP+SL+rC/zpYSEbq/NCABMQkDX4fzbEf7L6 chLhMrfXYpOQzfaOlE3K+tPTmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLH6P0QJ VqFK2j0lPKnSm85MpyQuMB8GA1UdIwQYMBaAFNs9/YbOv+rtOq8V3q7mllI0dGop MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUJGMC9BNzhGMUIxMkE0 MTUxMUVGQTE0RkJEM0ZDNEY5QUUwMi8yejM5aHM2XzZ1MDZyeFhlcnVhV1VqUjBh aWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ6MzloczZfNnUwNnJ4WGVydWFXVWpSMGFpay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUJGMC9BNzhGMUIxMkE0MTUxMUVGQTE0RkJEM0ZDNEY5QUUwMi8yejM5aHM2XzZ1 MDZyeFhlcnVhV1VqUjBhaWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYBVbqwJmEriuxTRW2/S7d4ddiZsSiZ/0WVo0CBZAJie/TOI9VYzMrEbB8KQY iAj4lnzWizXu9xGgDo5t08alBkNfmDDZQr+R1wCq1YZrYU6oEmeQG7+N8AHhjt6c jxhQbr3h/v+rAVqTgBM5GXtTMCYh46Gr+v/bs7zozl0W9CPpVI+kh418f0M+MOpe k5mivSBgvhFj+9VHAs4VsJ3Q69ufrwYlt9ymlZsDhDHjhxCy4rMwoLyI4RyRrHmV j4ahqNO7pqTywaAluEIMTYZT2qhm/yw8MdiZeB7zVhXPkY4LJsklia0ObubNm6rz sICdv6qlJrhFtCizwZ+9k2xrTw== -----END CERTIFICATE-----Generated at Wed May 13 12:54:21 2026 by rpki-client