$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.mft File: K6PqbAvX8YRghmD5ogTlEYZaAN0.mft (raw, json) Hash identifier: FXiT6EvfFBpHgMAZCtz/x2hX5bXmqr9Ub8mVeAdX3K8= Subject key identifier: 7D:05:44:92:82:1E:CF:51:E3:03:E3:12:8C:E2:74:FA:42:44:E0:5C Authority key identifier: 2B:A3:EA:6C:0B:D7:F1:84:60:86:60:F9:A2:04:E5:11:86:5A:00:DD Certificate issuer: /CN=A91F1E8B/serialNumber=2BA3EA6C0BD7F184608660F9A204E511865A00DD Certificate serial: 09C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6PqbAvX8YRghmD5ogTlEYZaAN0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.mft Manifest number: 09BA Signing time: Sat 04 Apr 2026 19:43:51 +0000 Manifest this update: Sat 04 Apr 2026 19:43:51 +0000 Manifest next update: Sat 11 Apr 2026 19:43:51 +0000 Files and hashes: 1: K6PqbAvX8YRghmD5ogTlEYZaAN0.crl (hash: DKyc4+U89mjQ2YLOp0EiAuy2BqYoJIlpWs4r9KuOO1I=) 2: 33F713A8A3CF11EAA31D8C20C4F9AE02.roa (hash: drREk/OAiw4nw+aB1RVjD5zbqv5hAnk1VMgyPcenfqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.crl rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6PqbAvX8YRghmD5ogTlEYZaAN0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 19:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2499 (0x9c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1E8B, serialNumber=2BA3EA6C0BD7F184608660F9A204E511865A00DD Validity Not Before: Apr 4 19:43:51 2026 GMT Not After : Apr 11 19:43:51 2026 GMT Subject: CN=69d169f7-082e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:2c:1d:81:33:f7:98:db:80:2d:60:eb:ed:67: 74:e1:1e:bd:ca:e7:2a:d5:ba:5d:a2:f3:3d:31:84: c4:0c:a2:6c:46:83:37:90:69:2b:47:1a:db:9c:73: 71:30:ad:74:bd:50:12:03:bf:33:40:05:8d:63:63: 0e:45:72:2d:4e:ee:84:89:fb:4f:a7:a9:a8:37:8a: 93:d1:7f:5d:80:d3:88:64:37:9c:d3:eb:08:56:4c: b2:09:08:4d:f1:00:b2:ea:ff:fb:e2:95:2a:99:17: ed:37:c2:60:a9:6a:bb:8e:a0:04:38:c2:44:90:8a: 82:c0:a3:ec:ed:c7:61:f8:45:f5:52:41:ec:ef:d6: 2e:aa:71:f5:6c:6e:bf:17:ce:d6:42:8f:01:fe:af: 2e:69:dd:71:58:d6:5e:5a:d3:04:91:02:e7:44:75: 08:c0:fe:57:73:b5:49:cc:33:6a:55:d5:8a:6f:16: 25:ee:af:0f:29:9c:df:a2:25:d9:6e:6b:0b:2e:e2: 96:b0:28:3d:67:da:7a:50:0d:25:ab:78:b4:74:c1: 05:37:f1:76:db:05:8b:49:ae:f1:37:7b:ec:56:d6: 1c:de:3d:80:96:15:15:1f:0a:3a:2d:4e:66:0b:95: 1f:b1:a0:a2:dc:04:cc:9e:35:be:b5:fb:3d:bf:92: fb:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:05:44:92:82:1E:CF:51:E3:03:E3:12:8C:E2:74:FA:42:44:E0:5C X509v3 Authority Key Identifier: keyid:2B:A3:EA:6C:0B:D7:F1:84:60:86:60:F9:A2:04:E5:11:86:5A:00:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6PqbAvX8YRghmD5ogTlEYZaAN0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:21:d7:f1:f7:ff:df:a8:63:b7:6d:70:2c:3f:53:bc:ee:a9: 9f:36:2c:65:58:c8:39:ed:e3:e4:22:6c:69:31:7d:b1:6c:24: da:21:5d:76:c0:fb:bd:21:46:72:66:73:bb:36:a9:11:32:9d: d8:88:fd:d3:33:a9:66:16:fb:f6:1c:43:27:cc:d0:41:1e:94: f1:79:6b:05:32:00:a3:44:06:1f:2d:17:f2:7d:37:18:a3:10: c8:af:0c:89:0b:e2:41:9c:c7:96:47:d5:a3:cd:10:ee:e7:db: 4d:b9:fd:29:89:5f:24:e1:22:e2:1f:36:0f:dd:a1:f1:b5:ee: 92:84:eb:38:df:f3:51:aa:ed:9e:ac:6b:9a:31:c8:08:03:19: 40:08:2c:d6:0a:10:e3:64:54:af:46:79:5c:27:2c:8b:b6:31: 84:25:ad:e4:32:87:84:53:90:08:a9:38:c7:7e:36:22:47:72: 75:9e:4f:0d:aa:f3:0b:e1:2a:1d:0c:65:6e:ea:ba:c8:dd:24: e5:d0:ca:ea:74:99:a1:d4:d0:d8:66:12:3c:2b:39:03:4c:20: a1:dd:14:8d:d5:a5:14:41:b9:43:b4:91:b7:5b:51:2b:7a:c6: 9b:ca:66:6f:4f:34:da:6b:7f:df:f2:77:a5:9a:a5:7c:3e:3e: bb:d5:f0:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjFFOEIxMTAvBgNVBAUTKDJCQTNFQTZDMEJEN0YxODQ2MDg2NjBGOUEyMDRFNTEx ODY1QTAwREQwHhcNMjYwNDA0MTk0MzUxWhcNMjYwNDExMTk0MzUxWjAYMRYwFAYD VQQDEw02OWQxNjlmNy0wODJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6CwdgTP3mNuALWDr7Wd04R69yucq1bpdovM9MYTEDKJsRoM3kGkrRxrbnHNx MK10vVASA78zQAWNY2MORXItTu6EiftPp6moN4qT0X9dgNOIZDec0+sIVkyyCQhN 8QCy6v/74pUqmRftN8JgqWq7jqAEOMJEkIqCwKPs7cdh+EX1UkHs79YuqnH1bG6/ F87WQo8B/q8uad1xWNZeWtMEkQLnRHUIwP5Xc7VJzDNqVdWKbxYl7q8PKZzfoiXZ bmsLLuKWsCg9Z9p6UA0lq3i0dMEFN/F22wWLSa7xN3vsVtYc3j2AlhUVHwo6LU5m C5UfsaCi3ATMnjW+tfs9v5L7OQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH0FRJKC Hs9R4wPjEozidPpCROBcMB8GA1UdIwQYMBaAFCuj6mwL1/GEYIZg+aIE5RGGWgDd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUU4Qi84MDdERkRBMEEz Q0UxMUVBOEJBRTY1MjBDNEY5QUUwMi9LNlBxYkF2WDhZUmdobUQ1b2dUbEVZWmFB TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s2UHFiQXZYOFlSZ2htRDVvZ1RsRVlaYUFOMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MUU4Qi84MDdERkRBMEEzQ0UxMUVBOEJBRTY1MjBDNEY5QUUwMi9LNlBxYkF2WDhZ UmdobUQ1b2dUbEVZWmFBTjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALCHX8ff/36hjt21wLD9TvO6pnzYsZVjIOe3j5CJsaTF9sWwk2iFddsD7vSFG cmZzuzapETKd2Ij90zOpZhb79hxDJ8zQQR6U8XlrBTIAo0QGHy0X8n03GKMQyK8M iQviQZzHlkfVo80Q7ufbTbn9KYlfJOEi4h82D92h8bXukoTrON/zUartnqxrmjHI CAMZQAgs1goQ42RUr0Z5XCcsi7YxhCWt5DKHhFOQCKk4x342IkdydZ5PDarzC+Eq HQxlbuq6yN0k5dDK6nSZodTQ2GYSPCs5A0wgod0UjdWlFEG5Q7SRt1tRK3rGm8pm b0802mt/3/J3pZqlfD4+u9XwVQ== -----END CERTIFICATE-----Generated at Mon Apr 6 11:19:28 2026 by rpki-client