$ rpki-client -vvf rpki.apnic.net/member_repository/A9111D65/CFB9E77622A811F1A29C851CB5833773/--6lC0fY6xxw_ToK6VrRt2nYQ0o.mft File: --6lC0fY6xxw_ToK6VrRt2nYQ0o.mft (raw, json) Hash identifier: 7ULWiBoTFh5m8pZ+e2uqXaYvcJHB7b7ZqamVOvitjkU= Subject key identifier: 63:06:7A:34:A6:0B:11:43:99:2B:75:1E:15:EF:FE:5E:D8:0F:41:40 Authority key identifier: FB:EE:A5:0B:47:D8:EB:1C:70:FD:3A:0A:E9:5A:D1:B7:69:D8:43:4A Certificate issuer: /CN=A9111D65/serialNumber=FBEEA50B47D8EB1C70FD3A0AE95AD1B769D8434A Certificate serial: 07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--6lC0fY6xxw_ToK6VrRt2nYQ0o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111D65/CFB9E77622A811F1A29C851CB5833773/--6lC0fY6xxw_ToK6VrRt2nYQ0o.mft Manifest number: 06 Signing time: Wed 25 Mar 2026 08:22:34 +0000 Manifest this update: Wed 25 Mar 2026 08:22:34 +0000 Manifest next update: Wed 01 Apr 2026 08:22:34 +0000 Files and hashes: 1: --6lC0fY6xxw_ToK6VrRt2nYQ0o.crl (hash: mmXckAnLoe83x6+xv7SO6Zwn6yhFY1VJONcmbQAyO0E=) 2: D6075FAE22A911F1B999B242B5833773.roa (hash: hoH+7hdmgPXKwxfgbiApjuFfBwt+Y2bPJbIp+G+HCz0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111D65/CFB9E77622A811F1A29C851CB5833773/--6lC0fY6xxw_ToK6VrRt2nYQ0o.crl rsync://rpki.apnic.net/member_repository/A9111D65/CFB9E77622A811F1A29C851CB5833773/--6lC0fY6xxw_ToK6VrRt2nYQ0o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--6lC0fY6xxw_ToK6VrRt2nYQ0o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:22:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111D65, serialNumber=FBEEA50B47D8EB1C70FD3A0AE95AD1B769D8434A Validity Not Before: Mar 25 08:22:34 2026 GMT Not After : Apr 1 08:22:34 2026 GMT Subject: CN=69c39b4a-47a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:c6:f5:20:72:da:3d:bf:01:b8:d8:2b:67:bd: de:ec:f1:f9:9b:da:f2:4c:61:4e:bb:ac:0b:0e:3d: 71:92:6b:99:9a:7d:12:c9:90:8d:5d:1b:c2:b1:23: ce:d0:ce:42:53:80:f9:1b:26:ba:2f:11:9f:08:d2: 23:b8:df:a7:8b:0e:4f:b9:21:4d:39:8c:09:ba:26: 65:aa:64:d0:eb:db:d6:65:60:47:ee:d7:dc:47:fd: eb:df:a2:c6:3c:15:68:c0:3c:74:c2:39:ff:65:78: 79:93:bb:ca:37:ce:a3:c1:62:a8:0e:8a:7d:8c:5b: a3:00:a9:ab:65:dd:4f:d3:2c:ee:6d:de:29:e6:16: 91:54:1d:23:8a:16:65:4f:8c:7a:bb:44:f7:c1:2f: 71:c0:23:04:57:ba:d7:bd:b7:4a:0c:73:71:67:18: 1b:71:14:ee:b2:5c:d0:55:cc:d6:30:5d:18:e1:6f: 12:f3:82:0e:fa:d5:3d:8d:2d:f8:c6:36:4e:2c:8a: 7d:cb:56:d1:ba:af:66:2f:0c:5d:8d:6f:f6:67:a5: a8:4f:ee:66:b5:f6:92:b1:7d:42:27:f7:6c:3f:37: 0a:25:22:29:69:a0:09:64:96:f4:33:01:53:50:47: b9:6d:84:43:91:af:1f:57:0c:eb:f5:ba:eb:95:9a: d2:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:06:7A:34:A6:0B:11:43:99:2B:75:1E:15:EF:FE:5E:D8:0F:41:40 X509v3 Authority Key Identifier: keyid:FB:EE:A5:0B:47:D8:EB:1C:70:FD:3A:0A:E9:5A:D1:B7:69:D8:43:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111D65/CFB9E77622A811F1A29C851CB5833773/--6lC0fY6xxw_ToK6VrRt2nYQ0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--6lC0fY6xxw_ToK6VrRt2nYQ0o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111D65/CFB9E77622A811F1A29C851CB5833773/--6lC0fY6xxw_ToK6VrRt2nYQ0o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:cd:ab:f7:48:29:7f:bb:97:8d:c9:ff:c7:24:02:14:ef:60: 4c:dc:a5:11:3b:f0:ef:f3:da:30:bf:f1:ec:d2:6e:e0:cf:c6: 06:9f:98:9e:72:c4:f5:0e:9a:05:2e:8a:eb:d1:96:ee:df:b2: c2:91:cc:1b:23:b1:4e:54:5f:c3:35:35:c4:9b:17:c9:5d:b2: db:a3:6e:59:15:a1:44:21:f9:e7:53:82:37:bb:52:7d:fe:23: 83:8e:a5:cc:07:3b:60:40:87:94:be:15:d8:5e:52:0e:d9:31: b3:38:2c:fa:4a:35:af:03:02:5b:39:b9:d6:d2:b6:b4:75:c3: c4:49:11:ed:dd:fa:1c:94:78:6c:15:be:06:b1:ef:f7:83:67: 8a:cc:49:f7:3b:17:3d:68:f8:12:48:7b:66:ad:11:21:b1:67: f8:05:39:82:cf:f0:2a:34:40:77:ec:8d:b1:e5:57:2f:85:d3: 66:dc:66:18:cf:41:87:08:e1:bf:6c:40:b9:85:29:86:d1:e1: 5e:c0:9f:d6:3d:e1:7b:d7:97:0b:22:50:8a:08:c0:6a:e1:3f: d6:8d:5c:fc:3e:20:5d:10:f8:e2:63:2e:e4:f7:c5:f5:ae:cf: ca:ca:13:b2:e0:b7:68:50:45:c6:c0:21:62:8b:7f:b2:f4:b8: 72:52:1e:46 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MUQ2NTExMC8GA1UEBRMoRkJFRUE1MEI0N0Q4RUIxQzcwRkQzQTBBRTk1QUQxQjc2 OUQ4NDM0QTAeFw0yNjAzMjUwODIyMzRaFw0yNjA0MDEwODIyMzRaMBgxFjAUBgNV BAMTDTY5YzM5YjRhLTQ3YTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDsxvUgcto9vwG42Ctnvd7s8fmb2vJMYU67rAsOPXGSa5mafRLJkI1dG8KxI87Q zkJTgPkbJrovEZ8I0iO436eLDk+5IU05jAm6JmWqZNDr29ZlYEfu19xH/evfosY8 FWjAPHTCOf9leHmTu8o3zqPBYqgOin2MW6MAqatl3U/TLO5t3inmFpFUHSOKFmVP jHq7RPfBL3HAIwRXute9t0oMc3FnGBtxFO6yXNBVzNYwXRjhbxLzgg761T2NLfjG Nk4sin3LVtG6r2YvDF2Nb/ZnpahP7ma19pKxfUIn92w/NwolIilpoAlklvQzAVNQ R7lthEORrx9XDOv1uuuVmtJRAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUYwZ6NKYL EUOZK3UeFe/+XtgPQUAwHwYDVR0jBBgwFoAU++6lC0fY6xxw/ToK6VrRt2nYQ0ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTExRDY1L0NGQjlFNzc2MjJB ODExRjFBMjlDODUxQ0I1ODMzNzczLy0tNmxDMGZZNnh4d19Ub0s2VnJSdDJuWVEw by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLS02bEMwZlk2eHh3X1RvSzZWclJ0Mm5ZUTBvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEx RDY1L0NGQjlFNzc2MjJBODExRjFBMjlDODUxQ0I1ODMzNzczLy0tNmxDMGZZNnh4 d19Ub0s2VnJSdDJuWVEwby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAlzav3SCl/u5eNyf/HJAIU72BM3KURO/Dv89owv/Hs0m7gz8YGn5iecsT1DpoF Lorr0Zbu37LCkcwbI7FOVF/DNTXEmxfJXbLbo25ZFaFEIfnnU4I3u1J9/iODjqXM BztgQIeUvhXYXlIO2TGzOCz6SjWvAwJbObnW0ra0dcPESRHt3foclHhsFb4Gse/3 g2eKzEn3Oxc9aPgSSHtmrREhsWf4BTmCz/AqNEB37I2x5VcvhdNm3GYYz0GHCOG/ bEC5hSmG0eFewJ/WPeF715cLIlCKCMBq4T/WjVz8PiBdEPjiYy7k98X1rs/KyhOy 4LdoUEXGwCFii3+y9LhyUh5G -----END CERTIFICATE-----Generated at Fri Mar 27 06:03:10 2026 by rpki-client