$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft File: D6tO-YKPSvJnwW2K1HEKjuybu64.mft (raw, json) Hash identifier: l3dvTf43zj17PKaUaNwqL0AUz0LLNqbSKyTi6aM1fEc= Subject key identifier: 6B:5C:01:BA:3E:A1:A5:A8:DB:33:D7:13:79:56:4B:DA:B7:AC:6B:7C Authority key identifier: 0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE Certificate issuer: /CN=A91BEBE9/serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE Certificate serial: 022B Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft Manifest number: 021A Signing time: Tue 07 Apr 2026 02:19:21 +0000 Manifest this update: Tue 07 Apr 2026 02:19:21 +0000 Manifest next update: Tue 14 Apr 2026 02:19:21 +0000 Files and hashes: 1: D6tO-YKPSvJnwW2K1HEKjuybu64.crl (hash: 9XGXd86flUFIj2FvNuKcYgwZ+KNEw7CImyXrC7hRMSs=) 2: A0DEDD52FDF811EEA4D57274C4F9AE02.roa (hash: hT0A2KRW/3QOLTyxBn8Un7aA6iluT3rc/l0TDSw8688=) 3: A16366C6FDF811EEA4D57274C4F9AE02.roa (hash: d03oC9NyvqRx8U/l5SE7fqdhkjTewkYgCSF6lgvXCMc=) 4: A1C0742EFDF811EEA4D57274C4F9AE02.roa (hash: weDayyeYutvx0b8e1SLUbhE0mFruNtfvUzk0Kx4AkzY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 02:19:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 555 (0x22b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEBE9, serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE Validity Not Before: Apr 7 02:19:21 2026 GMT Not After : Apr 14 02:19:21 2026 GMT Subject: CN=69d469a9-6b60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:66:a9:d2:a5:0b:e4:dd:ea:7c:16:1a:50:20: ea:a2:83:81:b1:63:02:9e:e8:08:e2:2c:82:79:6f: b0:19:0f:b2:0d:4e:35:e9:cd:1b:d9:f9:a3:41:9d: ac:d9:fa:bd:7d:c8:a5:a5:b5:f6:bb:e0:61:ad:ca: 09:c9:58:c4:0d:8a:ee:e3:37:42:c4:a2:89:4e:b3: 76:7e:a5:c9:68:36:0b:e5:a4:42:06:a8:d3:f2:5b: 0a:cd:2f:6d:bf:0f:4b:a3:52:e2:3b:e1:30:91:f0: 82:13:c7:9e:f8:92:61:01:3f:d9:67:0e:e1:6b:ec: ed:85:2c:55:b3:8b:85:e7:d5:56:28:1f:c8:b2:97: b3:37:01:86:33:b5:29:aa:80:97:3a:c6:ee:24:f4: 2a:85:b6:ab:04:25:c1:e2:2f:df:cc:d7:9c:02:3f: 40:a4:f1:76:06:68:db:b3:85:31:ff:6b:04:c6:6e: d7:54:82:18:da:c7:55:37:f9:1e:a6:67:62:7b:2b: 77:c7:c1:9d:1a:be:d4:ba:e1:2f:67:e8:06:ab:9e: a7:76:29:92:83:7a:32:97:aa:f7:c8:86:fe:f1:28: 06:43:4c:64:98:24:40:c6:d7:d0:c2:85:ae:8f:61: d3:e9:d4:57:52:6d:cd:81:16:56:a8:c6:d1:ce:dd: b1:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:5C:01:BA:3E:A1:A5:A8:DB:33:D7:13:79:56:4B:DA:B7:AC:6B:7C X509v3 Authority Key Identifier: keyid:0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:62:9a:96:11:50:03:12:69:f7:f6:ca:62:69:35:9a:a1:c1: 89:73:a9:85:9e:28:fb:d5:0b:2b:94:77:26:0e:39:cf:5b:53: 68:8f:c2:b4:b8:a2:23:56:08:7d:48:17:6a:92:b9:4a:28:b0: 89:c8:84:54:0a:11:36:34:5f:53:12:a1:7b:50:6c:b6:15:65: cc:3e:b5:b8:79:b9:d8:99:43:47:f9:df:19:cb:ad:1f:07:7e: 62:e4:c0:ce:89:10:93:d6:1d:56:bb:41:48:97:79:7e:33:0e: 04:f1:79:d9:43:42:b7:cf:69:2b:eb:f9:6b:d4:b3:63:e9:4f: 6e:51:69:be:e9:79:3a:38:31:2b:54:b7:40:ac:02:32:8b:11: e5:fd:47:5f:87:5e:43:fc:81:09:a8:61:76:cb:53:cc:3a:33: 2d:10:ca:07:9e:71:94:d4:37:e3:8d:79:54:74:d3:49:26:42: 63:47:a9:3f:1b:2c:e2:c7:52:10:8c:99:29:be:cc:b4:39:c9: f1:d8:6f:90:bd:bc:46:6d:94:73:a8:e6:49:21:97:38:09:82: c7:23:e3:f5:b4:6d:53:e8:60:34:ff:ec:bd:82:d8:0a:a8:d3: 6d:d2:f1:e7:21:2e:ed:56:5a:7f:19:71:26:d4:fe:80:ef:22: e9:9f:8c:a3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVCRTkxMTAvBgNVBAUTKDBGQUI0RUY5ODI4RjRBRjI2N0MxNkQ4QUQ0NzEwQThF RUM5QkJCQUUwHhcNMjYwNDA3MDIxOTIxWhcNMjYwNDE0MDIxOTIxWjAYMRYwFAYD VQQDEw02OWQ0NjlhOS02YjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs2ap0qUL5N3qfBYaUCDqooOBsWMCnugI4iyCeW+wGQ+yDU416c0b2fmjQZ2s 2fq9fcilpbX2u+BhrcoJyVjEDYru4zdCxKKJTrN2fqXJaDYL5aRCBqjT8lsKzS9t vw9Lo1LiO+EwkfCCE8ee+JJhAT/ZZw7ha+zthSxVs4uF59VWKB/IspezNwGGM7Up qoCXOsbuJPQqhbarBCXB4i/fzNecAj9ApPF2Bmjbs4Ux/2sExm7XVIIY2sdVN/ke pmdieyt3x8GdGr7UuuEvZ+gGq56ndimSg3oyl6r3yIb+8SgGQ0xkmCRAxtfQwoWu j2HT6dRXUm3NgRZWqMbRzt2xCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGtcAbo+ oaWo2zPXE3lWS9q3rGt8MB8GA1UdIwQYMBaAFA+rTvmCj0ryZ8FtitRxCo7sm7uu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUJFOS85NEM5Qjg3ODAw NUQxMUVFQkU3QTkyNDFDNEY5QUUwMi9ENnRPLVlLUFN2Sm53VzJLMUhFS2p1eWJ1 NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0Q2dE8tWUtQU3ZKbndXMksxSEVLanV5YnU2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUJFOS85NEM5Qjg3ODAwNUQxMUVFQkU3QTkyNDFDNEY5QUUwMi9ENnRPLVlLUFN2 Sm53VzJLMUhFS2p1eWJ1NjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAamKalhFQAxJp9/bKYmk1mqHBiXOphZ4o+9ULK5R3Jg45z1tTaI/CtLiiI1YI fUgXapK5SiiwiciEVAoRNjRfUxKhe1BsthVlzD61uHm52JlDR/nfGcutHwd+YuTA zokQk9YdVrtBSJd5fjMOBPF52UNCt89pK+v5a9SzY+lPblFpvul5OjgxK1S3QKwC MosR5f1HX4deQ/yBCahhdstTzDozLRDKB55xlNQ34415VHTTSSZCY0epPxss4sdS EIyZKb7MtDnJ8dhvkL28Rm2Uc6jmSSGXOAmCxyPj9bRtU+hgNP/svYLYCqjTbdLx 5yEu7VZafxlxJtT+gO8i6Z+Mow== -----END CERTIFICATE-----Generated at Tue Apr 7 13:31:25 2026 by rpki-client