$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft File: B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft (raw, json) Hash identifier: TxLuUJULp40FWfFilXtC3Sf20XlZ4pICJfgLF5yl094= Subject key identifier: 35:40:32:A7:25:44:AC:BE:A2:F4:36:0D:E3:C1:98:49:44:86:2C:56 Authority key identifier: 07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60 Certificate issuer: /CN=A91DF93A/serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260 Certificate serial: 0964 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft Manifest number: 08F1 Signing time: Sat 28 Mar 2026 20:26:57 +0000 Manifest this update: Sat 28 Mar 2026 20:26:56 +0000 Manifest next update: Sat 04 Apr 2026 20:26:56 +0000 Files and hashes: 1: B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl (hash: 453DD196cCjY5hWUZJ/cmoJ1enOy5UXy2WdwbWgv3bs=) 2: E518ECC6D52A11ED99D55E2EC4F9AE02.roa (hash: fcYY8JCJfGpn6U42SxS4kdU4DDiWQRVoqOsbnKMAPqQ=) 3: 8D5442E28A4011F093E0F94DC4F9AE02.roa (hash: RA/HBE67KtYqNms2jFNMu68ISNV3T86Ae6alog9HrwA=) 4: F8C02F3CDA4E11EC9C09A446C4F9AE02.roa (hash: HAMfTfZzKgQr1S5Al/mmH4wqYSjJ80ubOBRue4CFJYE=) 5: 5B5CBC68751B11EB9065A822C4F9AE02.roa (hash: VbE9wtNoONHpVqfDihjQrObKeQw1ADJiCzljyCKB/mQ=) 6: FEEC2C90643811EB9D7F624EC4F9AE02.roa (hash: y6W9Xq4d8zRGRJelWYQQv1r/i5L4bEaH/ibWNQgVyoU=) 7: 4944017C8FAF11F0B59F0948C4F9AE02.roa (hash: LH5rCnW4AlRTA7oXpdl4war9anlv1eQFsMx7zEz8aDs=) 8: A709BC948FAE11F09FAE9C69C4F9AE02.roa (hash: EIHD7GlLiYQzwkSdEfGdwiEIm8l3w0dE6JK5q3KM3q4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 Apr 2026 20:26:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2404 (0x964) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF93A, serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260 Validity Not Before: Mar 28 20:26:56 2026 GMT Not After : Apr 4 20:26:56 2026 GMT Subject: CN=69c83990-c09c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d3:41:c0:a0:8f:4e:65:7a:a5:5c:fe:bd:96: 42:f3:00:70:e6:c5:ce:df:0a:c6:30:60:eb:a6:fa: 12:7b:76:9c:32:f0:e6:4a:0d:9d:f0:57:83:d5:cb: ed:aa:40:ba:b4:54:7a:0c:ae:8b:7e:77:b3:a6:ca: eb:65:71:cf:a5:b6:ee:78:7f:35:33:26:e6:dd:aa: da:97:5e:67:5d:f2:e8:ec:3c:ec:af:07:06:a0:8a: bf:d2:77:46:2e:c1:33:56:91:94:f7:dc:e9:04:00: d5:bf:40:98:d1:a7:06:ab:b7:14:6d:40:79:6b:3f: fa:39:30:5d:b5:26:84:07:ed:02:c0:f2:08:7f:86: 37:c0:db:fb:43:2a:ca:2f:de:6b:12:04:54:85:ef: 3b:e7:e4:84:77:14:67:57:88:1a:2e:27:fb:b6:f1: a6:c7:93:8b:9c:ab:2a:9e:d2:3a:49:89:80:6e:cf: fe:10:a4:79:a3:d8:94:42:63:0a:4a:4b:35:b4:b4: 42:b4:b0:a1:b5:79:97:ee:59:d4:e8:f2:48:99:c5: 21:66:35:d7:8f:1a:7a:ec:03:5d:62:bc:1d:a1:66: 61:97:f2:23:63:95:d3:ef:2a:17:13:24:28:61:95: b9:a5:11:bd:19:55:9f:4c:34:dd:ae:6a:f5:ba:90: a2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:40:32:A7:25:44:AC:BE:A2:F4:36:0D:E3:C1:98:49:44:86:2C:56 X509v3 Authority Key Identifier: keyid:07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:f3:f6:99:4c:e6:d6:07:61:0a:ae:fd:a2:35:60:dd:29:97: 07:75:7b:4d:ba:2c:4b:98:8d:7e:f4:67:81:52:9a:50:69:7f: 2b:95:64:9f:c6:84:85:d1:bc:03:78:53:be:0a:b6:e9:37:50: f7:03:44:cd:2d:fa:35:98:94:12:d6:65:78:e0:93:be:62:7e: 88:5e:d2:f4:ba:ad:6d:de:3d:4f:a8:41:ce:c4:5a:1d:a3:94: be:dd:68:08:55:61:d5:39:8f:f3:2b:5e:3c:72:6c:59:26:49: 5d:3f:75:17:6b:ad:06:fa:bf:b3:dc:3d:98:2d:86:e9:4b:6c: 49:e0:94:c1:d9:1b:b2:89:88:57:bd:c5:20:b2:3f:2b:0c:9d: 06:6b:0d:9f:03:cc:90:00:4a:db:e7:7d:b6:ab:d3:f0:e9:ce: 4d:73:be:51:c3:e8:7c:27:5d:40:17:e2:1a:b7:6c:ec:28:d3: 87:01:73:32:b6:1c:16:2f:de:98:de:e6:86:1f:ca:2e:68:be: 6f:a3:92:b2:a6:fd:e3:f4:b1:3c:f0:77:de:5a:19:2d:53:b8: f9:44:f6:ca:e4:bf:97:d7:b7:20:14:7b:a4:03:ca:b8:74:17: 88:61:fa:8d:63:ba:c3:dc:61:7e:f2:ca:89:51:b8:70:f4:53: 63:db:a1:ec -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY5M0ExMTAvBgNVBAUTKDA3QTFDMDg1NDVDQUNDNjVFMDg4MkQ0OUU5RjJGOENG RDJCRTgyNjAwHhcNMjYwMzI4MjAyNjU2WhcNMjYwNDA0MjAyNjU2WjAYMRYwFAYD VQQDEw02OWM4Mzk5MC1jMDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9NBwKCPTmV6pVz+vZZC8wBw5sXO3wrGMGDrpvoSe3acMvDmSg2d8FeD1cvt qkC6tFR6DK6LfnezpsrrZXHPpbbueH81Mybm3aral15nXfLo7DzsrwcGoIq/0ndG LsEzVpGU99zpBADVv0CY0acGq7cUbUB5az/6OTBdtSaEB+0CwPIIf4Y3wNv7QyrK L95rEgRUhe875+SEdxRnV4gaLif7tvGmx5OLnKsqntI6SYmAbs/+EKR5o9iUQmMK Sks1tLRCtLChtXmX7lnU6PJImcUhZjXXjxp67ANdYrwdoWZhl/IjY5XT7yoXEyQo YZW5pRG9GVWfTDTdrmr1upCijQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDVAMqcl RKy+ovQ2DePBmElEhixWMB8GA1UdIwQYMBaAFAehwIVFysxl4IgtSeny+M/SvoJg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjkzQS9GRjUxRTU5RUU1 RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9CNkhBaFVYS3pHWGdpQzFKNmZMNHo5Sy1n bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I2SEFoVVhLekdYZ2lDMUo2Zkw0ejlLLWdtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjkzQS9GRjUxRTU5RUU1RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9CNkhBaFVYS3pH WGdpQzFKNmZMNHo5Sy1nbUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAePP2mUzm1gdhCq79ojVg3SmXB3V7TbosS5iNfvRngVKaUGl/K5Vkn8aEhdG8 A3hTvgq26TdQ9wNEzS36NZiUEtZleOCTvmJ+iF7S9Lqtbd49T6hBzsRaHaOUvt1o CFVh1TmP8ytePHJsWSZJXT91F2utBvq/s9w9mC2G6UtsSeCUwdkbsomIV73FILI/ KwydBmsNnwPMkABK2+d9tqvT8OnOTXO+UcPofCddQBfiGrds7CjThwFzMrYcFi/e mN7mhh/KLmi+b6OSsqb94/SxPPB33loZLVO4+UT2yuS/l9e3IBR7pAPKuHQXiGH6 jWO6w9xhfvLKiVG4cPRTY9uh7A== -----END CERTIFICATE-----Generated at Sun Mar 29 23:49:54 2026 by rpki-client