$ rpki-client -vvf rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft File: A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft (raw, json) Hash identifier: 6RZpv7Z2El99BTs96AcpZPzg1LVDPWw+MD4nRxNap9I= Subject key identifier: E6:96:A4:86:C3:95:C7:43:86:82:4A:8C:04:D6:7C:47:AC:E9:ED:CA Authority key identifier: 03:A8:56:6C:80:31:F5:62:19:9D:F9:9D:9B:99:B9:C7:E7:19:F8:90 Certificate issuer: /CN=A911FA99/serialNumber=03A8566C8031F562199DF99D9B99B9C7E719F890 Certificate serial: 0BE9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft Manifest number: 0BE0 Signing time: Sat 04 Apr 2026 18:43:23 +0000 Manifest this update: Sat 04 Apr 2026 18:43:23 +0000 Manifest next update: Sat 11 Apr 2026 18:43:23 +0000 Files and hashes: 1: A6hWbIAx9WIZnfmdm5m5x-cZ-JA.crl (hash: HB53frIXxGsSpIui2EjBSGFmLK9yyOjp4OqPXEeLBJU=) 2: 730BD0EC384011EAADE7134BC4F9AE02.roa (hash: okr4XbUoy+ROTsU4q56uGhTJoC1U3gm/b9HFaS4EkeQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.crl rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:43:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3049 (0xbe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FA99, serialNumber=03A8566C8031F562199DF99D9B99B9C7E719F890 Validity Not Before: Apr 4 18:43:23 2026 GMT Not After : Apr 11 18:43:23 2026 GMT Subject: CN=69d15bcb-c798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1f:67:c0:ba:fb:f1:48:05:70:27:92:30:b9: 3b:a0:57:5d:9d:a2:50:f5:00:b7:0a:e1:65:63:d9: d6:d9:a6:ad:76:ca:6b:89:dc:af:0e:8f:7a:04:41: 9d:98:46:3b:62:ca:5a:db:2c:9a:6f:c8:7c:3f:75: 59:f3:f0:ba:6b:55:93:7d:12:34:75:6a:e9:87:24: 27:ba:89:80:41:17:4a:c7:6d:79:fb:b6:28:6b:eb: 53:a7:85:d0:c1:31:7b:14:2e:7b:10:0d:93:9d:34: 8e:dc:cd:04:54:bd:31:ba:c6:3b:91:d2:07:a2:e5: 86:28:b9:11:50:b7:92:d1:4f:57:1d:76:fe:3a:9e: b5:ec:bb:e4:4a:a7:2c:65:9b:08:19:d3:e5:07:d8: 93:6f:90:04:88:42:1e:34:ca:ef:1f:46:d4:2c:4a: f6:ed:62:50:ae:3f:c1:3b:b4:3c:f4:5a:b6:f5:ef: 65:51:3d:26:de:d3:68:ad:2d:b2:5b:94:29:7d:07: 0e:39:66:86:0d:ec:3f:65:8d:95:39:c8:c0:e6:04: 3d:c5:53:dc:ed:b1:98:b0:28:cf:eb:89:63:2d:b1: 39:85:05:b2:f0:da:cb:a5:9f:03:81:fa:89:a2:6c: 2e:07:e7:d9:d0:76:80:a6:6a:4d:a4:b2:4f:80:bf: 7a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:96:A4:86:C3:95:C7:43:86:82:4A:8C:04:D6:7C:47:AC:E9:ED:CA X509v3 Authority Key Identifier: keyid:03:A8:56:6C:80:31:F5:62:19:9D:F9:9D:9B:99:B9:C7:E7:19:F8:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:97:c9:41:2f:87:70:30:08:4e:a3:7d:3f:e7:ad:97:5c:36: 75:4b:95:4c:ca:d1:e7:82:5d:47:25:b3:70:f6:c0:2f:10:06: 97:aa:91:ec:dd:79:a4:61:9a:df:b9:6a:89:70:17:64:a6:8d: 98:d6:21:66:c3:27:84:5b:2c:21:ca:52:23:e8:28:d0:a3:6e: c7:90:6f:f2:46:a0:4c:ae:98:f8:a9:5d:5b:ce:e0:d8:20:a9: f6:41:f4:ea:a3:6a:36:37:c5:ba:62:61:fc:6e:3b:3d:c2:a2: a4:45:20:5f:e9:48:5e:e8:7b:34:ab:ba:32:26:8b:42:2d:f3: 3b:47:ce:ce:2a:c2:22:6c:89:d3:3c:04:1d:f7:1f:59:14:42: 0a:9c:3a:17:e8:8d:7b:75:46:94:ed:bd:a4:a8:90:b8:0b:84: 68:6a:f7:99:b6:15:4c:60:fc:1a:24:48:41:ae:7b:84:a0:60: 12:37:df:03:e3:bb:77:e6:54:99:aa:7b:29:5c:9c:f8:4d:98: d9:e9:41:d2:f5:4c:d2:45:02:f5:6f:1d:60:69:a9:48:aa:13: 5c:6f:81:47:7c:18:87:62:f0:da:c9:86:d2:a2:57:f2:02:17: 85:22:7a:9b:b4:4f:fa:97:2d:18:20:2d:5f:6f:2a:c6:a6:4f: ea:78:0a:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC+kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZBOTkxMTAvBgNVBAUTKDAzQTg1NjZDODAzMUY1NjIxOTlERjk5RDlCOTlCOUM3 RTcxOUY4OTAwHhcNMjYwNDA0MTg0MzIzWhcNMjYwNDExMTg0MzIzWjAYMRYwFAYD VQQDEw02OWQxNWJjYi1jNzk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuh9nwLr78UgFcCeSMLk7oFddnaJQ9QC3CuFlY9nW2aatdspridyvDo96BEGd mEY7Yspa2yyab8h8P3VZ8/C6a1WTfRI0dWrphyQnuomAQRdKx215+7Yoa+tTp4XQ wTF7FC57EA2TnTSO3M0EVL0xusY7kdIHouWGKLkRULeS0U9XHXb+Op617LvkSqcs ZZsIGdPlB9iTb5AEiEIeNMrvH0bULEr27WJQrj/BO7Q89Fq29e9lUT0m3tNorS2y W5QpfQcOOWaGDew/ZY2VOcjA5gQ9xVPc7bGYsCjP64ljLbE5hQWy8NrLpZ8DgfqJ omwuB+fZ0HaApmpNpLJPgL96iwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOaWpIbD lcdDhoJKjATWfEes6e3KMB8GA1UdIwQYMBaAFAOoVmyAMfViGZ35nZuZucfnGfiQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkE5OS8wNjAyM0M3NjM4 M0YxMUVBQUVFODk0NDVDNEY5QUUwMi9BNmhXYklBeDlXSVpuZm1kbTVtNXgtY1ot SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E2aFdiSUF4OVdJWm5mbWRtNW01eC1jWi1KQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkE5OS8wNjAyM0M3NjM4M0YxMUVBQUVFODk0NDVDNEY5QUUwMi9BNmhXYklBeDlX SVpuZm1kbTVtNXgtY1otSkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbpfJQS+HcDAITqN9P+etl1w2dUuVTMrR54JdRyWzcPbALxAGl6qR7N15pGGa 37lqiXAXZKaNmNYhZsMnhFssIcpSI+go0KNux5Bv8kagTK6Y+KldW87g2CCp9kH0 6qNqNjfFumJh/G47PcKipEUgX+lIXuh7NKu6MiaLQi3zO0fOzirCImyJ0zwEHfcf WRRCCpw6F+iNe3VGlO29pKiQuAuEaGr3mbYVTGD8GiRIQa57hKBgEjffA+O7d+ZU map7KVyc+E2Y2elB0vVM0kUC9W8dYGmpSKoTXG+BR3wYh2Lw2smG0qJX8gIXhSJ6 m7RP+pctGCAtX28qxqZP6ngKUg== -----END CERTIFICATE-----Generated at Sun Apr 5 19:43:10 2026 by rpki-client