$ rpki-client -vvf rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft File: 6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft (raw, json) Hash identifier: FdVSwqZyLqHayf9kOAeZsAPXB8IVEq5iUODKWWZq9xo= Subject key identifier: 7B:C5:A5:ED:20:01:AE:79:EA:00:56:64:F6:18:85:D8:C6:39:74:3C Authority key identifier: E9:36:74:B1:F3:B6:91:6B:2B:63:63:B8:61:D6:B7:7B:39:05:DD:D8 Certificate issuer: /CN=A91889B6/serialNumber=E93674B1F3B6916B2B6363B861D6B77B3905DDD8 Certificate serial: 3540 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft Manifest number: 3539 Signing time: Tue 28 Apr 2026 14:51:35 +0000 Manifest this update: Tue 28 Apr 2026 14:51:35 +0000 Manifest next update: Tue 05 May 2026 14:51:35 +0000 Files and hashes: 1: 6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl (hash: STRyGh8OuLc+L1bh5FNr6RnJCBs7L2kexmSeVwBq00M=) 2: 8D57E1664D0911EEA9837D4AC4F9AE02.roa (hash: Cs9JKjCuX2CcXJQrUV7cbcqrEj31WEsSJAImJkXjuRI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 05 May 2026 14:51:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13632 (0x3540) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91889B6, serialNumber=E93674B1F3B6916B2B6363B861D6B77B3905DDD8 Validity Not Before: Apr 28 14:51:35 2026 GMT Not After : May 5 14:51:35 2026 GMT Subject: CN=69f0c977-7ea0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:74:95:bf:72:c7:df:61:20:a0:52:87:f0:38: b6:a9:28:96:47:7a:cf:58:2b:50:42:f8:50:c9:32: ec:47:03:5c:66:10:fb:24:26:1c:28:0c:4f:bf:69: 0a:23:60:47:d3:52:90:99:84:ee:b5:14:6a:74:fb: 40:a9:9c:62:4c:93:b6:37:28:13:e6:55:17:b5:50: 1f:96:48:76:5a:61:c2:2b:eb:8f:c3:15:77:e2:e5: 1a:3e:f3:32:c0:ae:41:77:41:8c:e1:b5:09:bc:c6: d3:9d:d6:2d:e4:dd:74:4f:36:d6:6a:e5:31:13:da: f4:7d:b7:75:c7:26:39:e4:2c:71:96:dc:5d:62:d4: 68:45:b0:38:fb:71:ef:5c:d3:3b:be:47:99:43:64: 26:c0:d5:ab:b4:21:1b:ae:19:eb:e3:23:86:2c:0e: 70:38:7d:fd:96:9d:18:f7:54:a5:2f:72:a9:a3:be: fd:4b:35:03:68:26:56:87:dc:f4:49:9f:83:8a:f1: 3f:fe:5b:46:4b:b6:52:84:2a:63:4c:0b:4f:b3:d6: b8:d6:37:33:c8:2d:9d:c8:4b:ef:12:9c:d9:58:9e: 36:91:57:70:83:fc:1f:89:ff:4d:75:00:4a:32:d5: 80:0d:5b:05:56:e5:9c:bd:f7:cb:3e:ec:49:94:f1: aa:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:C5:A5:ED:20:01:AE:79:EA:00:56:64:F6:18:85:D8:C6:39:74:3C X509v3 Authority Key Identifier: keyid:E9:36:74:B1:F3:B6:91:6B:2B:63:63:B8:61:D6:B7:7B:39:05:DD:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:b8:7d:0a:fa:03:87:38:90:2d:e3:65:aa:a9:3d:66:aa:12: 63:a2:85:1c:87:8d:c4:c5:ee:36:a2:40:e6:c5:aa:42:c1:e7: 75:d3:e9:d5:ea:ff:37:e9:f2:50:96:15:51:be:bb:c9:d0:82: b0:86:21:67:ea:54:01:71:f0:70:eb:97:81:a1:e8:83:48:5b: 82:fc:47:27:5f:06:ca:2f:6a:42:11:a1:d9:5e:a6:5d:30:ad: 7d:4c:77:56:6e:fa:1c:1a:0d:60:00:55:71:a2:e7:07:1d:3c: c2:a5:47:ce:2d:6e:8f:e7:b3:1d:03:c7:45:c6:22:6c:31:3f: f7:41:78:36:70:a2:9d:f6:9d:72:64:fb:ef:58:aa:ec:85:08: 0b:13:49:b7:12:e4:d9:c8:40:fb:f1:96:57:15:99:44:15:0d: c9:1b:b4:b1:94:f4:64:f0:2f:f3:16:ee:c2:3a:a0:36:bf:12: bf:0b:9e:a9:84:f2:67:ed:ba:96:1c:10:ac:3e:4e:de:01:6a: 44:fb:1d:45:7e:ca:76:b0:84:0b:79:39:a9:4a:91:c7:9a:30: bd:70:4a:4d:4d:97:a0:57:bf:7d:b6:20:28:7a:4a:3c:4b:d7: 28:af:8a:28:17:9d:7a:fa:08:af:76:bc:e7:a0:fa:a8:fe:c7: da:25:e8:15 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5QjYxMTAvBgNVBAUTKEU5MzY3NEIxRjNCNjkxNkIyQjYzNjNCODYxRDZCNzdC MzkwNURERDgwHhcNMjYwNDI4MTQ1MTM1WhcNMjYwNTA1MTQ1MTM1WjAYMRYwFAYD VQQDEw02OWYwYzk3Ny03ZWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp3SVv3LH32EgoFKH8Di2qSiWR3rPWCtQQvhQyTLsRwNcZhD7JCYcKAxPv2kK I2BH01KQmYTutRRqdPtAqZxiTJO2NygT5lUXtVAflkh2WmHCK+uPwxV34uUaPvMy wK5Bd0GM4bUJvMbTndYt5N10TzbWauUxE9r0fbd1xyY55CxxltxdYtRoRbA4+3Hv XNM7vkeZQ2QmwNWrtCEbrhnr4yOGLA5wOH39lp0Y91SlL3Kpo779SzUDaCZWh9z0 SZ+DivE//ltGS7ZShCpjTAtPs9a41jczyC2dyEvvEpzZWJ42kVdwg/wfif9NdQBK MtWADVsFVuWcvffLPuxJlPGqvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHvFpe0g Aa556gBWZPYYhdjGOXQ8MB8GA1UdIwQYMBaAFOk2dLHztpFrK2NjuGHWt3s5Bd3Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlCNi8yQzRFRjk3NjFE OTYxMUUyQTY1NDhFN0UwOEIwMkNEMi82VFowc2ZPMmtXc3JZMk80WWRhM2V6a0Yz ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZUWjBzZk8ya1dzclkyTzRZZGEzZXprRjNkZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODlCNi8yQzRFRjk3NjFEOTYxMUUyQTY1NDhFN0UwOEIwMkNEMi82VFowc2ZPMmtX c3JZMk80WWRhM2V6a0YzZGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAW7h9CvoDhziQLeNlqqk9ZqoSY6KFHIeNxMXuNqJA5sWqQsHnddPp1er/N+ny UJYVUb67ydCCsIYhZ+pUAXHwcOuXgaHog0hbgvxHJ18Gyi9qQhGh2V6mXTCtfUx3 Vm76HBoNYABVcaLnBx08wqVHzi1uj+ezHQPHRcYibDE/90F4NnCinfadcmT771iq 7IUICxNJtxLk2chA+/GWVxWZRBUNyRu0sZT0ZPAv8xbuwjqgNr8SvwueqYTyZ+26 lhwQrD5O3gFqRPsdRX7KdrCEC3k5qUqRx5owvXBKTU2XoFe/fbYgKHpKPEvXKK+K KBedevoIr3a856D6qP7H2iXoFQ== -----END CERTIFICATE-----Generated at Wed Apr 29 16:57:02 2026 by rpki-client