$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft File: 6kGaeWKZYloHSmW3ys7_GLgGbIs.mft (raw, json) Hash identifier: +hyMF3Rwoz3EhE57SV00do88+kBCDf9PeFZqCBDIhnY= Subject key identifier: A9:86:C0:32:5F:10:11:81:AE:5E:93:19:B9:47:56:00:B6:B7:1B:CD Authority key identifier: EA:41:9A:79:62:99:62:5A:07:4A:65:B7:CA:CE:FF:18:B8:06:6C:8B Certificate issuer: /CN=A91BEBB1/serialNumber=EA419A796299625A074A65B7CACEFF18B8066C8B Certificate serial: 0294 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6kGaeWKZYloHSmW3ys7_GLgGbIs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft Manifest number: 0289 Signing time: Sun 05 Apr 2026 01:21:31 +0000 Manifest this update: Sun 05 Apr 2026 01:21:30 +0000 Manifest next update: Sun 12 Apr 2026 01:21:30 +0000 Files and hashes: 1: 6kGaeWKZYloHSmW3ys7_GLgGbIs.crl (hash: +2GHsYM68hNhOxksmGGMTgBDs63LXD0bL+pA6tzk3w0=) 2: 8CD5FC2253A011EDAC40531BC4F9AE02.roa (hash: 0TEewgELmV5zVXvWVafqWeimsKRDC+bmdch2A5FjSG8=) 3: FEDE61B6ED2C11EEBF8F3E49C4F9AE02.roa (hash: ufXIWT3ybJ8GsLB+9LFHnYVpVRoxtUOEddi9vIDDRZ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.crl rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6kGaeWKZYloHSmW3ys7_GLgGbIs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 01:21:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 660 (0x294) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEBB1, serialNumber=EA419A796299625A074A65B7CACEFF18B8066C8B Validity Not Before: Apr 5 01:21:30 2026 GMT Not After : Apr 12 01:21:30 2026 GMT Subject: CN=69d1b91b-cc30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d1:84:df:30:1f:65:1c:f3:38:2b:3c:cb:73: 2e:a3:8f:e2:19:16:15:7c:1c:18:bb:34:bb:f2:23: e8:cc:df:a9:73:2a:d5:7e:ea:91:20:ad:b1:4c:c6: 50:87:6f:9a:d3:e6:cd:28:b8:6a:5f:a4:1b:c3:17: dd:ea:a0:62:52:2a:ae:48:89:93:77:07:65:3b:09: ee:b3:64:89:c3:bb:bc:f0:04:4f:c1:bb:0d:6e:78: ed:49:d8:fb:d6:08:b3:62:16:d3:9a:bd:75:ac:ad: 24:28:bf:f1:8f:6e:de:8e:ee:24:27:db:10:fd:0f: 5c:db:c8:6f:24:5c:70:5c:55:4f:ca:6c:93:81:df: 80:79:2a:76:a7:e2:e7:86:25:33:43:87:39:22:58: 3b:79:56:0e:14:69:77:2c:46:f5:9f:ab:4e:03:0b: ed:fc:24:a0:8d:97:c1:7c:43:54:a5:61:d2:ba:64: 17:a0:4e:3e:80:f2:e1:bf:6f:5c:cc:da:48:0b:ee: 6e:55:d6:de:dd:73:33:df:cd:8d:a0:d5:7c:23:b6: 7e:90:5d:7e:63:f0:25:41:0b:3e:96:5a:0a:ad:7a: 2f:99:fb:58:2b:9a:e3:0b:3a:c8:be:bb:9c:32:9a: 98:14:1d:f6:d2:5c:92:99:60:be:52:9d:06:4a:fb: 89:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:86:C0:32:5F:10:11:81:AE:5E:93:19:B9:47:56:00:B6:B7:1B:CD X509v3 Authority Key Identifier: keyid:EA:41:9A:79:62:99:62:5A:07:4A:65:B7:CA:CE:FF:18:B8:06:6C:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6kGaeWKZYloHSmW3ys7_GLgGbIs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:66:bb:fe:09:70:f0:26:7e:1a:6f:97:5b:82:28:66:3e:7e: 37:ee:72:ea:0e:09:c9:e8:05:56:17:fb:51:7c:9d:30:a3:cd: 89:eb:e6:20:f5:e3:38:eb:09:cd:cf:3c:9a:bf:11:74:8f:28: d0:7d:d9:d1:06:66:23:20:d5:9e:19:ee:f0:f0:09:8c:54:6d: 21:cc:61:94:d5:a4:93:3b:fa:b6:6d:5c:62:6a:88:76:c9:94: 3f:40:3c:c6:92:af:9b:d4:af:8a:56:cb:d6:72:01:83:3f:01: 61:61:5d:cd:39:fc:65:52:4e:56:aa:cf:57:86:34:c7:0c:9f: e6:e6:ff:74:ac:63:36:44:5a:30:f6:89:fb:8d:ab:86:21:51: bd:87:36:46:fd:06:9f:64:31:aa:80:ce:72:a7:53:1f:fb:59: 50:cc:98:23:0b:4c:ef:cb:3c:4b:76:4c:a2:26:96:11:d2:6e: 6f:c0:59:2c:23:bc:a3:62:be:a0:a5:70:95:9c:26:e2:82:df: d2:39:9c:f4:f7:7a:a8:55:fe:d7:33:68:1d:f0:7e:e6:49:56: f9:d3:40:5d:fc:9d:aa:d1:68:f0:0d:a0:a7:13:b1:8f:b9:5b: 46:fe:32:14:18:11:7e:16:4d:ad:df:1c:34:cd:89:97:2e:6c: c9:de:d8:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVCQjExMTAvBgNVBAUTKEVBNDE5QTc5NjI5OTYyNUEwNzRBNjVCN0NBQ0VGRjE4 QjgwNjZDOEIwHhcNMjYwNDA1MDEyMTMwWhcNMjYwNDEyMDEyMTMwWjAYMRYwFAYD VQQDEw02OWQxYjkxYi1jYzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApdGE3zAfZRzzOCs8y3Muo4/iGRYVfBwYuzS78iPozN+pcyrVfuqRIK2xTMZQ h2+a0+bNKLhqX6Qbwxfd6qBiUiquSImTdwdlOwnus2SJw7u88ARPwbsNbnjtSdj7 1gizYhbTmr11rK0kKL/xj27eju4kJ9sQ/Q9c28hvJFxwXFVPymyTgd+AeSp2p+Ln hiUzQ4c5Ilg7eVYOFGl3LEb1n6tOAwvt/CSgjZfBfENUpWHSumQXoE4+gPLhv29c zNpIC+5uVdbe3XMz382NoNV8I7Z+kF1+Y/AlQQs+lloKrXovmftYK5rjCzrIvruc MpqYFB320lySmWC+Up0GSvuJAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKmGwDJf EBGBrl6TGblHVgC2txvNMB8GA1UdIwQYMBaAFOpBmnlimWJaB0plt8rO/xi4BmyL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUJCMS82N0JFQTQwNjUz OUMxMUVEQUUwMDRFMTdDNEY5QUUwMi82a0dhZVdLWllsb0hTbVczeXM3X0dMZ0di SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZrR2FlV0taWWxvSFNtVzN5czdfR0xnR2JJcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUJCMS82N0JFQTQwNjUzOUMxMUVEQUUwMDRFMTdDNEY5QUUwMi82a0dhZVdLWlls b0hTbVczeXM3X0dMZ0diSXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAWa7/glw8CZ+Gm+XW4IoZj5+N+5y6g4JyegFVhf7UXydMKPNievmIPXjOOsJ zc88mr8RdI8o0H3Z0QZmIyDVnhnu8PAJjFRtIcxhlNWkkzv6tm1cYmqIdsmUP0A8 xpKvm9SvilbL1nIBgz8BYWFdzTn8ZVJOVqrPV4Y0xwyf5ub/dKxjNkRaMPaJ+42r hiFRvYc2Rv0Gn2QxqoDOcqdTH/tZUMyYIwtM78s8S3ZMoiaWEdJub8BZLCO8o2K+ oKVwlZwm4oLf0jmc9Pd6qFX+1zNoHfB+5klW+dNAXfydqtFo8A2gpxOxj7lbRv4y FBgRfhZNrd8cNM2Jly5syd7Yfg== -----END CERTIFICATE-----Generated at Mon Apr 6 09:56:25 2026 by rpki-client