$ rpki-client -vvf rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft File: 6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft (raw, json) Hash identifier: MMf2tUib7fhbpO1PTsHrJhIihEwo1zCk6BRqo4+iMtk= Subject key identifier: 8D:AE:3C:0E:09:9F:46:12:C9:BD:4E:BE:88:B0:52:DF:5F:81:C9:E4 Authority key identifier: E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14 Certificate issuer: /CN=A917CBD7/serialNumber=E9923BAC0F5C58CABEB93286CA20266F1F6EFB14 Certificate serial: 0B35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft Manifest number: 0B0D Signing time: Sat 28 Mar 2026 19:16:14 +0000 Manifest this update: Sat 28 Mar 2026 19:16:13 +0000 Manifest next update: Sat 04 Apr 2026 19:16:13 +0000 Files and hashes: 1: 6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl (hash: 4kn3XTQU5ww3R7D2BVl5xxXMZU769maAcjfvZAPYoBI=) 2: 8AD0E57C8FE311EB89767C78C4F9AE02.roa (hash: 5OKWpLiITpzC82N35iOhZbsAzgBXSVM9wxMVAwNfKSI=) 3: BE633CD283A611EE804BB319C4F9AE02.roa (hash: VEGEjvA8mXlTYgeX41lw6Rhiexaef4whXcV7cTx74tM=) 4: ACFA076483A611EE9C62DE0CC4F9AE02.roa (hash: bmegegPDxR1urUoWVZTcpCbAwDOttLwteVNluF5nkEc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 Apr 2026 19:16:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2869 (0xb35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CBD7, serialNumber=E9923BAC0F5C58CABEB93286CA20266F1F6EFB14 Validity Not Before: Mar 28 19:16:13 2026 GMT Not After : Apr 4 19:16:13 2026 GMT Subject: CN=69c828fe-b928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6a:f3:96:7d:c2:9e:b7:e2:13:7e:5c:d6:39: 1e:27:3a:9e:2a:11:9a:b3:5c:42:2f:4a:60:19:93: be:aa:9f:98:b5:28:72:b3:b4:18:6c:f7:d2:5b:70: b2:47:7d:01:57:c0:ce:e0:1b:ce:82:90:52:e1:ee: 7b:e1:74:14:74:d6:f0:54:20:d9:cf:c9:46:6e:4a: e0:03:07:aa:43:59:c1:39:7b:98:01:28:68:16:cf: a4:ea:da:7d:db:76:5f:1b:f6:aa:97:85:7d:37:55: 37:ce:25:72:18:b8:75:e6:53:e6:53:c4:d4:6c:7d: db:02:af:4e:59:84:78:9e:ee:a7:d0:8c:54:c4:12: d5:34:27:3d:0b:2f:8f:59:4a:50:da:92:3a:4a:f3: 28:25:f7:b1:e2:68:12:ed:3b:80:e2:a9:79:7d:c1: 58:0d:37:bf:a0:c5:ea:c1:6b:4c:cd:51:2f:bf:ff: a6:f6:24:64:ab:70:e1:15:aa:7b:fb:d7:35:b9:f6: 0a:4f:7c:2e:15:01:56:3e:df:f6:75:89:78:45:da: 6f:5c:07:2a:ad:89:48:bc:e7:c1:05:b7:93:0d:d1: 48:1f:7c:1f:3a:0d:a9:2a:91:f6:a2:37:b1:9f:e0: 2b:94:ca:30:1b:39:ab:7a:d0:5b:2e:57:9b:bc:23: 31:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:AE:3C:0E:09:9F:46:12:C9:BD:4E:BE:88:B0:52:DF:5F:81:C9:E4 X509v3 Authority Key Identifier: keyid:E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:10:c3:e8:05:5e:a3:fa:4d:2a:5c:aa:65:97:c3:73:a8:86: 3e:86:7f:bb:c6:5d:eb:25:04:e7:17:04:fd:ab:fd:6d:40:da: 53:f6:78:3a:08:ac:be:ae:25:ca:e9:96:a7:c9:db:fc:20:f6: 9b:1a:73:42:2f:95:ca:98:86:6e:6e:e1:47:d6:32:65:d5:75: 2e:92:9d:f6:9a:f7:63:39:19:ac:e0:a0:8a:85:75:61:15:12: d5:17:d0:cf:1d:43:04:3f:97:16:e1:d6:6a:e4:b9:a5:64:29: 87:3f:17:bb:2f:eb:f3:26:cd:5c:58:70:52:cd:2d:0d:0d:bf: 99:ea:12:7b:a8:5b:f9:e4:87:f8:c5:16:06:62:94:34:2d:80: b8:ab:23:60:f9:bf:6c:91:a2:ae:48:1f:f5:82:6f:ce:9b:e1: 64:d1:94:fc:e1:ba:1f:97:0e:49:b1:fb:64:02:22:c0:6e:47: 04:5e:61:19:78:67:46:ec:3f:c5:64:b5:c9:c7:fe:32:cd:4b: a3:b0:89:c5:e9:2f:71:a1:e5:6e:fc:9d:d6:4d:61:f2:85:b6: b1:54:97:da:0a:27:69:80:e7:86:47:62:12:44:62:cf:a6:f9: c5:59:18:41:c7:44:59:e0:3b:2d:de:b8:bc:85:19:b2:e4:85: 11:f9:32:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCzUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0NCRDcxMTAvBgNVBAUTKEU5OTIzQkFDMEY1QzU4Q0FCRUI5MzI4NkNBMjAyNjZG MUY2RUZCMTQwHhcNMjYwMzI4MTkxNjEzWhcNMjYwNDA0MTkxNjEzWjAYMRYwFAYD VQQDEw02OWM4MjhmZS1iOTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApGrzln3CnrfiE35c1jkeJzqeKhGas1xCL0pgGZO+qp+YtShys7QYbPfSW3Cy R30BV8DO4BvOgpBS4e574XQUdNbwVCDZz8lGbkrgAweqQ1nBOXuYAShoFs+k6tp9 23ZfG/aql4V9N1U3ziVyGLh15lPmU8TUbH3bAq9OWYR4nu6n0IxUxBLVNCc9Cy+P WUpQ2pI6SvMoJfex4mgS7TuA4ql5fcFYDTe/oMXqwWtMzVEvv/+m9iRkq3DhFap7 +9c1ufYKT3wuFQFWPt/2dYl4RdpvXAcqrYlIvOfBBbeTDdFIH3wfOg2pKpH2ojex n+ArlMowGzmretBbLlebvCMxUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI2uPA4J n0YSyb1OvoiwUt9fgcnkMB8GA1UdIwQYMBaAFOmSO6wPXFjKvrkyhsogJm8fbvsU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0JENy8xOTIzQkY2ODY0 MjgxMUVBQTcwNDFENDhDNEY5QUUwMi82Wkk3ckE5Y1dNcS11VEtHeWlBbWJ4OXUt eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZaSTdyQTljV01xLXVUS0d5aUFtYng5dS14US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Q0JENy8xOTIzQkY2ODY0MjgxMUVBQTcwNDFENDhDNEY5QUUwMi82Wkk3ckE5Y1dN cS11VEtHeWlBbWJ4OXUteFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdxDD6AVeo/pNKlyqZZfDc6iGPoZ/u8Zd6yUE5xcE/av9bUDaU/Z4Ogisvq4l yumWp8nb/CD2mxpzQi+VypiGbm7hR9YyZdV1LpKd9pr3YzkZrOCgioV1YRUS1RfQ zx1DBD+XFuHWauS5pWQphz8Xuy/r8ybNXFhwUs0tDQ2/meoSe6hb+eSH+MUWBmKU NC2AuKsjYPm/bJGirkgf9YJvzpvhZNGU/OG6H5cOSbH7ZAIiwG5HBF5hGXhnRuw/ xWS1ycf+Ms1Lo7CJxekvcaHlbvyd1k1h8oW2sVSX2gonaYDnhkdiEkRiz6b5xVkY QcdEWeA7Ld64vIUZsuSFEfkySw== -----END CERTIFICATE-----Generated at Mon Mar 30 17:30:14 2026 by rpki-client