$ rpki-client -vvf rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft File: 6O2nHIlk0p8GwkorbRt3FTyo84k.mft (raw, json) Hash identifier: 9McAlpXYzRRX9BSgP5GasMv336bSu3YUuxrHjK/QSkE= Subject key identifier: C3:37:3F:BB:C8:63:3C:8E:1E:88:2D:6D:99:59:E6:4E:FE:DE:78:B9 Authority key identifier: E8:ED:A7:1C:89:64:D2:9F:06:C2:4A:2B:6D:1B:77:15:3C:A8:F3:89 Certificate issuer: /CN=A91F724B/serialNumber=E8EDA71C8964D29F06C24A2B6D1B77153CA8F389 Certificate serial: 2128 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft Manifest number: 20FF Signing time: Sat 04 Apr 2026 15:52:32 +0000 Manifest this update: Sat 04 Apr 2026 15:52:31 +0000 Manifest next update: Sat 11 Apr 2026 15:52:31 +0000 Files and hashes: 1: 6O2nHIlk0p8GwkorbRt3FTyo84k.crl (hash: b3bi2nampDIhwa9pf89joU/vBwfy6bnPAnLRgxwon4Y=) 2: 36AB4096C51611E7AECA8B79C4F9AE02.roa (hash: MGk7Hv0oGH/cadOMgEkpIwvLj9yE4m4r9Wud6jaS3Qs=) 3: D6702FB2C51411E7A0AC1A77C4F9AE02.roa (hash: +tvaJ54I6jm5pWGSD/+mc9Tf5oV3zMzWVdx1mR4kWxw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.crl rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 15:52:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8488 (0x2128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F724B, serialNumber=E8EDA71C8964D29F06C24A2B6D1B77153CA8F389 Validity Not Before: Apr 4 15:52:31 2026 GMT Not After : Apr 11 15:52:31 2026 GMT Subject: CN=69d133c0-ea28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:14:b0:c1:5a:06:8a:49:9e:33:cc:c8:5f:4e: 81:ef:2d:15:89:e1:c3:a6:26:d8:77:b3:bf:9a:39: df:32:03:3d:46:c4:5c:6b:1e:f8:cf:6c:f2:c7:55: 59:62:70:4d:ef:14:fa:ea:6a:7d:85:d4:26:3b:48: f6:5d:55:ad:6a:89:db:d6:a4:e4:66:ee:a8:03:48: 45:f8:7c:76:5f:00:26:bf:de:38:1a:ca:4a:b7:5c: 56:98:96:65:ed:00:fe:fa:d5:32:0e:9d:84:d4:34: 6b:fc:93:bc:61:e2:6d:e2:4f:b1:63:4e:3a:39:63: 5e:31:ff:99:ce:e6:03:49:4e:50:a7:f4:19:b0:28: e1:25:1f:d4:80:5b:f4:51:f2:de:a7:ca:3f:18:98: d7:a2:e3:da:a0:11:a7:d0:26:25:6d:74:a0:3e:5c: a9:83:13:c5:46:e0:1e:6e:87:c8:55:d1:1a:ed:3e: 63:67:80:2c:76:e0:a9:7d:3e:35:68:7d:c2:18:84: 08:7a:36:39:cc:f1:bb:62:68:c1:04:6f:e9:f7:4c: 03:5b:88:74:73:74:ea:14:0b:72:13:19:86:4f:3e: 03:54:52:47:e3:56:05:31:2f:44:e9:0d:9f:de:3b: 7d:74:4a:b1:7a:6e:76:81:cf:57:71:4c:7c:60:b3: c8:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:37:3F:BB:C8:63:3C:8E:1E:88:2D:6D:99:59:E6:4E:FE:DE:78:B9 X509v3 Authority Key Identifier: keyid:E8:ED:A7:1C:89:64:D2:9F:06:C2:4A:2B:6D:1B:77:15:3C:A8:F3:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:9f:8b:7b:03:39:12:16:e1:55:b8:e4:64:b9:4a:b1:c7:4a: e1:2e:cb:ca:08:ed:56:cf:e3:44:90:70:8a:96:33:21:d9:bd: bd:2a:cf:20:ed:d6:26:d1:17:66:61:a3:20:b6:4e:65:fe:af: 33:23:aa:4f:a2:8d:03:eb:dd:83:62:20:58:a5:8c:8c:26:f6: 58:01:7b:e6:4f:ff:5a:b0:e2:25:dc:4b:ca:a3:af:2e:76:3e: 1d:a8:b2:ef:71:a8:c3:be:68:da:7c:cc:62:6c:6c:ad:d0:c5: b7:24:3d:85:b0:7a:e3:6e:98:8f:a7:f2:35:60:b7:1f:c5:8e: af:0a:6a:53:75:79:32:39:e9:b2:c7:4f:83:00:0b:62:9b:96: 99:15:e7:2d:96:09:4a:41:28:f2:6e:7a:62:73:dc:13:89:d8: 53:b0:e2:c6:1d:29:ee:e5:ae:4a:90:4b:78:b2:ac:2e:18:ff: bc:cd:43:e4:72:08:5a:3f:f4:93:00:68:50:bc:04:eb:39:7d: 73:dc:62:49:5f:a4:4f:08:3c:9b:45:e8:03:2f:87:7e:82:5d: 0b:85:6c:e8:07:5f:90:35:bc:4b:b9:b7:68:55:2e:7b:95:6e: 68:1c:72:94:19:15:f7:50:dd:2e:1d:60:39:31:47:60:4c:2f: 3e:bb:6f:c6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICISgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjcyNEIxMTAvBgNVBAUTKEU4RURBNzFDODk2NEQyOUYwNkMyNEEyQjZEMUI3NzE1 M0NBOEYzODkwHhcNMjYwNDA0MTU1MjMxWhcNMjYwNDExMTU1MjMxWjAYMRYwFAYD VQQDEw02OWQxMzNjMC1lYTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqhSwwVoGikmeM8zIX06B7y0VieHDpibYd7O/mjnfMgM9RsRcax74z2zyx1VZ YnBN7xT66mp9hdQmO0j2XVWtaonb1qTkZu6oA0hF+Hx2XwAmv944GspKt1xWmJZl 7QD++tUyDp2E1DRr/JO8YeJt4k+xY046OWNeMf+ZzuYDSU5Qp/QZsCjhJR/UgFv0 UfLep8o/GJjXouPaoBGn0CYlbXSgPlypgxPFRuAebofIVdEa7T5jZ4AsduCpfT41 aH3CGIQIejY5zPG7YmjBBG/p90wDW4h0c3TqFAtyExmGTz4DVFJH41YFMS9E6Q2f 3jt9dEqxem52gc9XcUx8YLPISwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMM3P7vI YzyOHogtbZlZ5k7+3ni5MB8GA1UdIwQYMBaAFOjtpxyJZNKfBsJKK20bdxU8qPOJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzI0Qi8xQkM3MUE2MjE2 ODkxMUU2OEVFRkQ5N0JDNEY5QUUwMi82TzJuSElsazBwOEd3a29yYlJ0M0ZUeW84 NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZPMm5ISWxrMHA4R3drb3JiUnQzRlR5bzg0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzI0Qi8xQkM3MUE2MjE2ODkxMUU2OEVFRkQ5N0JDNEY5QUUwMi82TzJuSElsazBw OEd3a29yYlJ0M0ZUeW84NGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHJ+LewM5EhbhVbjkZLlKscdK4S7LygjtVs/jRJBwipYzIdm9vSrPIO3WJtEX ZmGjILZOZf6vMyOqT6KNA+vdg2IgWKWMjCb2WAF75k//WrDiJdxLyqOvLnY+Haiy 73Gow75o2nzMYmxsrdDFtyQ9hbB6426Yj6fyNWC3H8WOrwpqU3V5MjnpssdPgwAL YpuWmRXnLZYJSkEo8m56YnPcE4nYU7Dixh0p7uWuSpBLeLKsLhj/vM1D5HIIWj/0 kwBoULwE6zl9c9xiSV+kTwg8m0XoAy+HfoJdC4Vs6AdfkDW8S7m3aFUue5VuaBxy lBkV91DdLh1gOTFHYEwvPrtvxg== -----END CERTIFICATE-----Generated at Mon Apr 6 08:24:34 2026 by rpki-client