$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1BD/7EC6E5AEFB1011F0947DB856746F56BC/C6kCx31AoXILQnNsTotcNnjiuRQ.mft File: C6kCx31AoXILQnNsTotcNnjiuRQ.mft (raw, json) Hash identifier: u+zGcilreHmJRStjiY3Ia5XV1ImKOb9/LgzWZ95C41w= Subject key identifier: 5D:C3:F5:45:47:52:6C:0E:40:A8:80:EB:C6:4F:58:0A:C6:27:42:0D Authority key identifier: 0B:A9:02:C7:7D:40:A1:72:0B:42:73:6C:4E:8B:5C:36:78:E2:B9:14 Certificate issuer: /CN=A914E1BD/serialNumber=0BA902C77D40A1720B42736C4E8B5C3678E2B914 Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/C6kCx31AoXILQnNsTotcNnjiuRQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E1BD/7EC6E5AEFB1011F0947DB856746F56BC/C6kCx31AoXILQnNsTotcNnjiuRQ.mft Manifest number: 33 Signing time: Tue 21 Apr 2026 08:27:07 +0000 Manifest this update: Tue 21 Apr 2026 08:27:06 +0000 Manifest next update: Tue 28 Apr 2026 08:27:06 +0000 Files and hashes: 1: C6kCx31AoXILQnNsTotcNnjiuRQ.crl (hash: +M3298MpwAnityCoCSHONN3goiwDW1hwYZY1s2YcNFQ=) 2: 5787CC96FB3411F0A8F597323D6F56BC.roa (hash: lG5XzlCW36eN47UotWj73TCol7/E9mkhN9sNAOU+bso=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E1BD/7EC6E5AEFB1011F0947DB856746F56BC/C6kCx31AoXILQnNsTotcNnjiuRQ.crl rsync://rpki.apnic.net/member_repository/A914E1BD/7EC6E5AEFB1011F0947DB856746F56BC/C6kCx31AoXILQnNsTotcNnjiuRQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/C6kCx31AoXILQnNsTotcNnjiuRQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 08:27:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E1BD, serialNumber=0BA902C77D40A1720B42736C4E8B5C3678E2B914 Validity Not Before: Apr 21 08:27:06 2026 GMT Not After : Apr 28 08:27:06 2026 GMT Subject: CN=69e734db-f8a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b2:2c:ec:74:07:e8:4d:89:43:50:45:11:7e: 34:38:94:01:e7:13:78:24:15:a4:69:19:c1:40:8e: 59:a7:73:ca:b7:fc:e6:f9:b7:36:33:0c:39:a0:11: cd:52:59:e1:81:fe:59:72:95:03:0b:b7:9d:f4:bf: 50:c9:64:59:46:69:35:8b:0f:b7:f5:15:46:dc:55: 86:e1:fa:ee:2e:38:95:9b:cd:b5:f4:bd:01:d4:aa: 11:ea:a0:8a:36:cd:f6:4a:12:8f:a4:8e:61:fc:0e: eb:d2:ff:26:95:dc:ff:19:36:1e:f6:35:37:8e:58: 72:89:1b:56:c4:00:e2:44:fc:f7:ae:86:02:d8:23: 52:32:7d:2a:05:d4:b4:82:b3:c3:79:6d:65:fe:37: fd:0c:d9:bf:99:5b:fc:42:3c:b6:48:99:c9:2c:a2: ab:8f:dc:99:ad:d5:dc:36:9a:c1:0b:dc:c7:c1:3a: 90:63:55:54:1d:77:0f:f5:da:f0:4d:49:a4:94:20: 17:36:c5:db:bf:73:21:53:01:95:ba:ca:ae:57:3c: d8:db:5e:1a:61:e4:ec:b0:b7:de:04:cc:3d:06:a6: 48:d9:44:22:9c:34:75:73:37:a9:c6:2e:b9:e0:6d: 39:2a:f2:aa:34:06:21:76:c9:87:a0:a6:c0:60:e1: 5b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:C3:F5:45:47:52:6C:0E:40:A8:80:EB:C6:4F:58:0A:C6:27:42:0D X509v3 Authority Key Identifier: keyid:0B:A9:02:C7:7D:40:A1:72:0B:42:73:6C:4E:8B:5C:36:78:E2:B9:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E1BD/7EC6E5AEFB1011F0947DB856746F56BC/C6kCx31AoXILQnNsTotcNnjiuRQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/C6kCx31AoXILQnNsTotcNnjiuRQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1BD/7EC6E5AEFB1011F0947DB856746F56BC/C6kCx31AoXILQnNsTotcNnjiuRQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:ef:0b:62:08:a8:ee:da:26:61:07:5b:a1:19:b1:db:68:ee: 2d:b0:47:ee:9b:6c:5f:c4:80:a2:53:55:6b:2c:cf:f2:8c:31: 85:16:b2:9c:7e:9e:00:15:ba:52:3a:64:c6:30:1e:68:97:02: 91:97:02:07:78:1e:16:51:ed:0d:55:99:d2:b1:d6:67:c3:df: e1:06:9e:bd:d2:05:f1:54:f9:93:ff:46:31:a6:b0:48:43:a2: ab:49:40:0b:b2:1a:f4:0c:8f:27:f9:9b:5c:c0:60:8e:d7:87: 2c:9b:0a:8f:53:96:0a:8a:ff:24:10:5e:07:4a:0a:05:c9:2a: b4:36:f9:6c:8e:50:36:49:4f:64:e6:55:fb:8f:bb:a4:86:fa: 63:74:6c:2e:78:bb:4c:31:74:6e:08:ac:82:fa:f9:84:40:7f: d6:a1:fc:b2:6e:d4:3d:0c:48:26:f0:64:46:90:c7:9e:2b:65: 4b:91:85:b6:f1:5f:eb:ae:36:8b:a5:b3:60:1d:4d:91:38:d9: db:83:3a:a7:55:cc:37:96:79:04:2f:ef:07:66:49:b1:f5:07: 52:2a:80:31:9a:9c:64:f0:7a:a0:b2:9e:d1:5f:10:40:08:73: 7c:9e:41:5e:9c:9a:7f:d5:6f:2b:87:d6:17:2a:84:6f:23:5e: 6c:52:02:64 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RTFCRDExMC8GA1UEBRMoMEJBOTAyQzc3RDQwQTE3MjBCNDI3MzZDNEU4QjVDMzY3 OEUyQjkxNDAeFw0yNjA0MjEwODI3MDZaFw0yNjA0MjgwODI3MDZaMBgxFjAUBgNV BAMTDTY5ZTczNGRiLWY4YTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCOsizsdAfoTYlDUEURfjQ4lAHnE3gkFaRpGcFAjlmnc8q3/Ob5tzYzDDmgEc1S WeGB/llylQMLt530v1DJZFlGaTWLD7f1FUbcVYbh+u4uOJWbzbX0vQHUqhHqoIo2 zfZKEo+kjmH8DuvS/yaV3P8ZNh72NTeOWHKJG1bEAOJE/PeuhgLYI1IyfSoF1LSC s8N5bWX+N/0M2b+ZW/xCPLZImcksoquP3Jmt1dw2msEL3MfBOpBjVVQddw/12vBN SaSUIBc2xdu/cyFTAZW6yq5XPNjbXhph5Oywt94EzD0GpkjZRCKcNHVzN6nGLrng bTkq8qo0BiF2yYegpsBg4VthAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUXcP1RUdS bA5AqIDrxk9YCsYnQg0wHwYDVR0jBBgwFoAUC6kCx31AoXILQnNsTotcNnjiuRQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFMUJELzdFQzZFNUFFRkIx MDExRjA5NDdEQjg1Njc0NkY1NkJDL0M2a0N4MzFBb1hJTFFuTnNUb3RjTm5qaXVS US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvQzZrQ3gzMUFvWElMUW5Oc1RvdGNObmppdVJRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRF MUJELzdFQzZFNUFFRkIxMDExRjA5NDdEQjg1Njc0NkY1NkJDL0M2a0N4MzFBb1hJ TFFuTnNUb3RjTm5qaXVSUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCQ7wtiCKju2iZhB1uhGbHbaO4tsEfum2xfxICiU1VrLM/yjDGFFrKcfp4AFbpS OmTGMB5olwKRlwIHeB4WUe0NVZnSsdZnw9/hBp690gXxVPmT/0YxprBIQ6KrSUAL shr0DI8n+ZtcwGCO14csmwqPU5YKiv8kEF4HSgoFySq0NvlsjlA2SU9k5lX7j7uk hvpjdGwueLtMMXRuCKyC+vmEQH/WofyybtQ9DEgm8GRGkMeeK2VLkYW28V/rrjaL pbNgHU2RONnbgzqnVcw3lnkEL+8HZkmx9QdSKoAxmpxk8Hqgsp7RXxBACHN8nkFe nJp/1W8rh9YXKoRvI15sUgJk -----END CERTIFICATE-----Generated at Tue Apr 21 21:40:40 2026 by rpki-client