$ rpki-client -vvf rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft File: A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft (raw, json) Hash identifier: gLVcMRqHjTz6swGQiV76lWwxqVVzQh6rz/hLOCPw5D8= Subject key identifier: 35:23:B4:D7:36:1E:E2:20:74:34:D6:EB:7E:50:60:12:FA:27:B1:56 Authority key identifier: 03:A8:56:6C:80:31:F5:62:19:9D:F9:9D:9B:99:B9:C7:E7:19:F8:90 Certificate issuer: /CN=A911FA99/serialNumber=03A8566C8031F562199DF99D9B99B9C7E719F890 Certificate serial: 0BE3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft Manifest number: 0BDA Signing time: Tue 24 Mar 2026 18:43:28 +0000 Manifest this update: Tue 24 Mar 2026 18:43:27 +0000 Manifest next update: Tue 31 Mar 2026 18:43:27 +0000 Files and hashes: 1: A6hWbIAx9WIZnfmdm5m5x-cZ-JA.crl (hash: G3cmA6JAGgsz0s7MxpByGvag4CK+W83r/lJD+lRpdMM=) 2: 730BD0EC384011EAADE7134BC4F9AE02.roa (hash: okr4XbUoy+ROTsU4q56uGhTJoC1U3gm/b9HFaS4EkeQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.crl rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:43:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3043 (0xbe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FA99, serialNumber=03A8566C8031F562199DF99D9B99B9C7E719F890 Validity Not Before: Mar 24 18:43:27 2026 GMT Not After : Mar 31 18:43:27 2026 GMT Subject: CN=69c2db50-d4ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e0:fe:a2:01:f7:42:2f:2e:7e:5f:62:d4:9a: a1:75:f4:85:3f:73:e8:93:25:72:cc:af:51:b6:53: 31:3f:f2:cb:66:57:37:f0:f1:da:39:c3:d3:c6:ab: 5d:44:44:e8:ed:9c:b0:ff:a0:61:0a:89:e6:3a:fb: 8b:51:53:68:32:b5:7f:b5:66:e8:a2:58:9a:35:5b: a2:50:83:32:73:fd:83:51:40:41:d7:5a:38:2a:3d: 21:b0:3e:8e:f7:02:97:d0:17:4a:21:37:ff:15:95: d4:e8:7f:0f:b9:df:38:76:1e:b9:c8:f8:08:92:59: a9:bd:13:7d:ae:d0:71:3c:2b:dc:54:82:f5:3f:6d: e3:8a:56:06:9e:e7:85:f2:f5:72:a9:f3:52:3a:4c: 0f:91:06:2c:de:bf:12:70:e3:c1:9d:89:94:58:a7: 35:cd:32:6b:35:c3:c0:ed:8c:be:40:0e:0b:18:be: 73:d3:ae:c4:be:56:3a:69:b5:08:b0:d7:70:67:f2: 5d:15:c8:c8:5c:26:0f:b1:4c:64:c6:8c:ef:b8:77: 77:1a:f6:22:11:24:52:23:eb:fe:7d:49:cb:76:43: 92:3a:f9:60:1f:7d:a2:79:1b:ec:06:15:9e:fd:5f: b3:3f:8b:86:e0:07:62:69:8d:6f:84:34:14:e4:ee: d9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:23:B4:D7:36:1E:E2:20:74:34:D6:EB:7E:50:60:12:FA:27:B1:56 X509v3 Authority Key Identifier: keyid:03:A8:56:6C:80:31:F5:62:19:9D:F9:9D:9B:99:B9:C7:E7:19:F8:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:f4:fb:fb:ed:4b:70:4f:24:93:77:6a:09:e3:4f:a5:46:eb: c7:72:af:68:03:78:18:61:00:c3:3f:ee:1b:1e:4e:d7:02:19: 5a:1f:40:85:c5:c5:8f:f7:16:2d:d6:bc:f2:4c:a7:d8:9e:af: 1a:72:38:1e:ac:3d:f4:e9:43:fc:89:93:06:2e:58:84:6b:4c: c5:c1:7d:db:cf:73:b3:32:a1:df:1f:fc:a2:77:9b:f7:f5:5d: 9e:b5:60:18:6c:d8:e1:10:33:ab:83:d5:70:4a:00:8e:68:39: 2a:33:99:a7:ee:31:fa:da:2b:40:c4:24:81:5b:a6:a1:e6:e1: 0e:30:23:c5:63:86:40:1c:75:ca:28:6e:4a:9f:4f:d7:22:05: 36:2d:d2:e6:e1:d6:6c:71:f8:8d:6c:49:4e:97:b0:25:1c:26: 62:e3:80:71:94:89:00:e0:be:84:59:e7:29:00:31:09:40:e6: c4:86:a6:3b:a0:06:aa:82:8f:1d:7f:d6:70:a9:d2:18:68:f2: b3:0b:65:b8:ec:14:cf:54:68:84:a8:a1:63:b0:77:e9:9e:ba: 01:b7:74:17:e3:d5:e3:4c:1b:6e:73:a7:71:5c:ef:ed:df:18: d0:4d:e7:87:ec:b8:c6:d1:e6:64:a1:2f:ec:61:d8:4e:34:c5: 7a:63:ee:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZBOTkxMTAvBgNVBAUTKDAzQTg1NjZDODAzMUY1NjIxOTlERjk5RDlCOTlCOUM3 RTcxOUY4OTAwHhcNMjYwMzI0MTg0MzI3WhcNMjYwMzMxMTg0MzI3WjAYMRYwFAYD VQQDEw02OWMyZGI1MC1kNGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxOD+ogH3Qi8ufl9i1JqhdfSFP3PokyVyzK9RtlMxP/LLZlc38PHaOcPTxqtd RETo7Zyw/6BhConmOvuLUVNoMrV/tWbooliaNVuiUIMyc/2DUUBB11o4Kj0hsD6O 9wKX0BdKITf/FZXU6H8Pud84dh65yPgIklmpvRN9rtBxPCvcVIL1P23jilYGnueF 8vVyqfNSOkwPkQYs3r8ScOPBnYmUWKc1zTJrNcPA7Yy+QA4LGL5z067EvlY6abUI sNdwZ/JdFcjIXCYPsUxkxozvuHd3GvYiESRSI+v+fUnLdkOSOvlgH32ieRvsBhWe /V+zP4uG4AdiaY1vhDQU5O7ZoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDUjtNc2 HuIgdDTW635QYBL6J7FWMB8GA1UdIwQYMBaAFAOoVmyAMfViGZ35nZuZucfnGfiQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkE5OS8wNjAyM0M3NjM4 M0YxMUVBQUVFODk0NDVDNEY5QUUwMi9BNmhXYklBeDlXSVpuZm1kbTVtNXgtY1ot SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E2aFdiSUF4OVdJWm5mbWRtNW01eC1jWi1KQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkE5OS8wNjAyM0M3NjM4M0YxMUVBQUVFODk0NDVDNEY5QUUwMi9BNmhXYklBeDlX SVpuZm1kbTVtNXgtY1otSkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMPT7++1LcE8kk3dqCeNPpUbrx3KvaAN4GGEAwz/uGx5O1wIZWh9AhcXFj/cW Lda88kyn2J6vGnI4Hqw99OlD/ImTBi5YhGtMxcF9289zszKh3x/8oneb9/VdnrVg GGzY4RAzq4PVcEoAjmg5KjOZp+4x+torQMQkgVumoebhDjAjxWOGQBx1yihuSp9P 1yIFNi3S5uHWbHH4jWxJTpewJRwmYuOAcZSJAOC+hFnnKQAxCUDmxIamO6AGqoKP HX/WcKnSGGjyswtluOwUz1RohKihY7B36Z66Abd0F+PV40wbbnOncVzv7d8Y0E3n h+y4xtHmZKEv7GHYTjTFemPuPg== -----END CERTIFICATE-----Generated at Thu Mar 26 16:40:08 2026 by rpki-client