$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/6ZqAcw0LqQUR27LRx_XdTaylJdo.mft File: 6ZqAcw0LqQUR27LRx_XdTaylJdo.mft (raw, json) Hash identifier: Aew4y5RPRbofMlyMb3ch6QpjXIbaEqJgWWC8V1SC2Zg= Subject key identifier: 85:9E:EF:30:DB:DC:CE:56:E9:C3:9E:06:D4:15:0F:39:E3:54:88:4C Authority key identifier: E9:9A:80:73:0D:0B:A9:05:11:DB:B2:D1:C7:F5:DD:4D:AC:A5:25:DA Certificate issuer: /CN=A91DD064/serialNumber=E99A80730D0BA90511DBB2D1C7F5DD4DACA525DA Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZqAcw0LqQUR27LRx_XdTaylJdo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/6ZqAcw0LqQUR27LRx_XdTaylJdo.mft Manifest number: 10 Signing time: Sun 05 Apr 2026 08:24:05 +0000 Manifest this update: Sun 05 Apr 2026 08:24:04 +0000 Manifest next update: Sun 12 Apr 2026 08:24:04 +0000 Files and hashes: 1: 6ZqAcw0LqQUR27LRx_XdTaylJdo.crl (hash: H7/IVuhPizdehbchOBMf5fLU+a2uzxCjde/DTRbWXDA=) 2: C85C12E01D0011F1A9EEE03B033D8C67.roa (hash: zL0iGBCbx7jkmH9g3x5NEs3M0zFNDBH3codLTqvy0M8=) 3: 3E9C9BD81D0011F1815CC9FC023D8C67.roa (hash: Kukv8kreY+EmOCja9CqHGkg79ZkBLsRsG81g8wr1j8A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/6ZqAcw0LqQUR27LRx_XdTaylJdo.crl rsync://rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/6ZqAcw0LqQUR27LRx_XdTaylJdo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZqAcw0LqQUR27LRx_XdTaylJdo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD064, serialNumber=E99A80730D0BA90511DBB2D1C7F5DD4DACA525DA Validity Not Before: Apr 5 08:24:04 2026 GMT Not After : Apr 12 08:24:04 2026 GMT Subject: CN=69d21c24-26a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:68:e8:b7:f5:5f:33:43:2d:a4:e7:57:97:28: 9e:6b:8a:f7:0a:1f:d0:c4:e5:65:97:53:6b:94:2f: ff:d4:bc:8f:b9:cd:62:f1:77:1c:36:f1:61:3a:e6: 40:9d:cd:d1:10:75:96:f6:55:28:b9:21:09:93:23: 62:05:45:7e:b2:c4:ea:3c:a1:8f:1e:42:ec:23:38: 90:8a:1c:27:d4:cd:b6:7d:66:fb:c4:79:fb:71:79: 6d:5b:5d:7c:5f:f9:2c:ec:19:03:e3:fa:6c:98:0c: 8d:2f:e0:63:cb:d5:5f:9d:3d:19:d9:8a:95:78:c7: b3:1c:1b:4e:75:9a:e2:ae:b4:41:ed:a3:de:bd:ac: 32:51:6b:73:cc:cd:ad:81:6c:87:74:c4:f4:31:cf: c7:1e:4c:e2:1c:1c:a6:a1:91:ba:97:6f:01:04:3b: a2:3d:cc:bd:38:8a:29:33:43:ef:50:20:58:3c:b9: 8b:61:b3:97:54:aa:f6:1e:2e:a3:27:cb:3c:36:d6: 1d:e4:bc:4d:fa:aa:3c:b4:ac:aa:24:47:c1:17:9b: fb:57:21:31:04:e1:5a:ef:19:15:a2:8a:0c:33:3b: c2:84:33:ae:a6:8e:87:1d:1b:d5:36:3b:99:2f:76: 1b:ab:9d:4a:71:79:c8:e8:8f:91:fa:bb:34:10:5e: 94:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:9E:EF:30:DB:DC:CE:56:E9:C3:9E:06:D4:15:0F:39:E3:54:88:4C X509v3 Authority Key Identifier: keyid:E9:9A:80:73:0D:0B:A9:05:11:DB:B2:D1:C7:F5:DD:4D:AC:A5:25:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/6ZqAcw0LqQUR27LRx_XdTaylJdo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZqAcw0LqQUR27LRx_XdTaylJdo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/6ZqAcw0LqQUR27LRx_XdTaylJdo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:eb:99:43:e3:e6:79:1d:66:65:c6:8b:cd:fa:7f:cb:b3:a2: d6:13:20:8f:c8:45:8f:7b:5d:c8:e9:85:ca:86:ea:54:d8:ff: 79:3e:d2:6f:51:23:3e:0b:6e:69:0e:c2:10:c9:3a:7f:f7:15: f3:4c:a3:97:7a:35:88:d7:66:88:8a:62:6a:93:69:88:e0:51: 2f:1f:a1:be:f5:c0:c3:75:32:ae:13:2d:18:da:34:bb:57:ae: 56:1a:60:c1:2e:da:88:79:7f:67:07:18:da:71:9d:ab:8d:89: 65:c7:ed:41:a5:c8:98:c2:65:cc:c2:be:57:a3:f3:fb:1c:31: cd:e8:e2:ea:6b:12:c2:82:b9:89:03:20:49:3e:3f:b6:70:d9: 40:85:3a:d6:c1:36:62:7d:59:fc:50:24:ab:4e:21:42:94:b3: ba:b0:e6:4e:47:1c:8e:08:cc:c0:b9:0f:ee:56:9f:b6:22:fb: 76:4d:75:c0:b0:be:78:f9:e7:b1:f5:d8:d6:79:16:fb:21:60: b5:d5:9f:77:5e:60:b5:6f:5c:1f:f9:a1:57:b9:18:c6:28:bf: 9b:2f:02:3c:b0:f5:00:82:c1:78:67:30:b8:70:90:8b:7a:d8: c7:24:a7:1e:cc:f0:b5:68:61:e5:2f:e2:3f:ad:cb:9f:5a:de: ed:b3:1b:08 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RDA2NDExMC8GA1UEBRMoRTk5QTgwNzMwRDBCQTkwNTExREJCMkQxQzdGNURENERB Q0E1MjVEQTAeFw0yNjA0MDUwODI0MDRaFw0yNjA0MTIwODI0MDRaMBgxFjAUBgNV BAMTDTY5ZDIxYzI0LTI2YTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYaOi39V8zQy2k51eXKJ5rivcKH9DE5WWXU2uUL//UvI+5zWLxdxw28WE65kCd zdEQdZb2VSi5IQmTI2IFRX6yxOo8oY8eQuwjOJCKHCfUzbZ9ZvvEeftxeW1bXXxf +SzsGQPj+myYDI0v4GPL1V+dPRnZipV4x7McG051muKutEHto969rDJRa3PMza2B bId0xPQxz8ceTOIcHKahkbqXbwEEO6I9zL04iikzQ+9QIFg8uYths5dUqvYeLqMn yzw21h3kvE36qjy0rKokR8EXm/tXITEE4VrvGRWiigwzO8KEM66mjocdG9U2O5kv dhurnUpxecjoj5H6uzQQXpQfAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUhZ7vMNvc zlbpw54G1BUPOeNUiEwwHwYDVR0jBBgwFoAU6ZqAcw0LqQUR27LRx/XdTaylJdow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREMDY0L0QxMkIxQzc4MUNG RjExRjFBNjlFNTBGOTQxM0Q4QzY3LzZacUFjdzBMcVFVUjI3TFJ4X1hkVGF5bEpk by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNlpxQWN3MExxUVVSMjdMUnhfWGRUYXlsSmRvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE MDY0L0QxMkIxQzc4MUNGRjExRjFBNjlFNTBGOTQxM0Q4QzY3LzZacUFjdzBMcVFV UjI3TFJ4X1hkVGF5bEpkby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA665lD4+Z5HWZlxovN+n/Ls6LWEyCPyEWPe13I6YXKhupU2P95PtJvUSM+C25p DsIQyTp/9xXzTKOXejWI12aIimJqk2mI4FEvH6G+9cDDdTKuEy0Y2jS7V65WGmDB LtqIeX9nBxjacZ2rjYllx+1BpciYwmXMwr5Xo/P7HDHN6OLqaxLCgrmJAyBJPj+2 cNlAhTrWwTZifVn8UCSrTiFClLO6sOZORxyOCMzAuQ/uVp+2Ivt2TXXAsL54+eex 9djWeRb7IWC11Z93XmC1b1wf+aFXuRjGKL+bLwI8sPUAgsF4ZzC4cJCLetjHJKce zPC1aGHlL+I/rcufWt7tsxsI -----END CERTIFICATE-----Generated at Sun Apr 5 19:38:12 2026 by rpki-client