$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft File: 6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft (raw, json) Hash identifier: SrPOLAptYASAQr86kVctlgxGCdpB8fVFQucoEbTsLcQ= Subject key identifier: 59:2A:C9:53:46:81:3A:82:AF:8B:27:6C:68:98:EC:3E:C8:7E:D6:E9 Authority key identifier: E8:7D:C6:C5:C7:10:43:90:57:D8:AB:ED:90:C2:6D:0C:9C:87:2B:34 Certificate issuer: /CN=A9137ABC/serialNumber=E87DC6C5C710439057D8ABED90C26D0C9C872B34 Certificate serial: 2AAA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft Manifest number: 2A95 Signing time: Thu 26 Mar 2026 14:20:00 +0000 Manifest this update: Thu 26 Mar 2026 14:19:59 +0000 Manifest next update: Thu 02 Apr 2026 14:19:59 +0000 Files and hashes: 1: 6H3GxccQQ5BX2KvtkMJtDJyHKzQ.crl (hash: 9v4RQ0kw8iA2I6b0Nru5bC269AFRbBI98GsM65Bq7Ro=) 2: 7A90F2402C3C11EE81B24651C4F9AE02.roa (hash: isBreiDKr6NXcCp7n3XCZQnUQzfzqpGrvgRaOTGfsLA=) 3: 79AF67622C3C11EE81B24651C4F9AE02.roa (hash: RbHJbXxXrULxZSrxCeKFvKTasWruATr+3w5vTVZ+CDQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.crl rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:19:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10922 (0x2aaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC, serialNumber=E87DC6C5C710439057D8ABED90C26D0C9C872B34 Validity Not Before: Mar 26 14:19:59 2026 GMT Not After : Apr 2 14:19:59 2026 GMT Subject: CN=69c54090-aca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:48:40:b6:b6:b4:5f:ec:20:92:13:87:ba:c9: 31:8e:bc:a1:96:e9:a7:9b:2d:fe:5b:d2:ff:1c:b2: 16:2b:61:f5:a3:83:8a:30:af:a5:bc:af:8a:bc:27: f8:1c:c2:30:55:a7:9e:d9:39:9f:49:09:43:5c:0e: 32:03:4c:2e:60:48:37:2a:81:f1:7b:2b:c0:13:f2: 97:ea:bd:60:2c:b3:70:57:57:65:43:d1:41:b0:2f: a5:8d:9c:36:5b:29:03:29:5c:17:01:7a:7a:dc:ef: 0e:0d:6c:29:f3:89:93:79:9d:9a:71:e8:33:9b:32: 24:46:67:08:78:95:9b:e0:fa:e3:2a:53:69:f5:da: 77:fa:66:c5:67:bf:52:d0:1e:26:31:ac:3f:64:ac: 8a:de:be:74:f1:ef:a7:59:5b:bb:41:ea:3b:d9:d9: a3:56:03:d9:6b:38:9b:ac:40:65:10:e3:3e:a3:d7: 94:71:0c:dd:62:c8:16:c0:34:dd:43:10:78:2f:84: d8:a1:05:b1:07:4d:aa:d8:2e:db:b4:49:a2:2b:15: a0:55:8a:da:22:ef:83:75:5c:af:fe:b6:7c:79:b7: 7e:7f:40:9f:ac:49:17:31:01:98:9b:ee:cc:4c:24: d8:9f:dc:d1:2e:11:74:55:06:17:d2:6c:50:80:36: 4b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:2A:C9:53:46:81:3A:82:AF:8B:27:6C:68:98:EC:3E:C8:7E:D6:E9 X509v3 Authority Key Identifier: keyid:E8:7D:C6:C5:C7:10:43:90:57:D8:AB:ED:90:C2:6D:0C:9C:87:2B:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:59:00:7b:15:da:f2:9a:0d:11:bf:a8:a7:f4:f5:fa:86:6a: be:43:bf:eb:29:01:d1:05:2e:c9:b0:b9:0f:ce:79:b1:eb:b6: 54:be:69:fa:aa:b7:0d:ac:c4:76:cf:2a:ba:b0:ce:e6:3a:74: fe:bb:1f:8a:54:bc:95:73:82:a2:31:63:bf:5d:fc:c6:e3:5c: c5:09:77:56:50:0e:af:59:ea:cf:96:c7:6c:c4:b7:76:9b:37: 92:0d:90:5a:32:4a:7d:ce:b1:47:26:7f:af:c1:ec:df:7d:16: d7:c4:d2:37:4c:83:46:de:e0:23:fa:c9:eb:9e:59:b0:96:24: fb:42:59:a3:5f:81:80:9e:88:a2:25:2b:dd:b8:a0:fe:8d:0f: d8:fb:f7:c6:4e:3e:41:70:7a:29:f7:e9:bd:e0:35:88:db:6f: ee:68:24:a4:53:6a:65:8b:91:e8:5c:0f:f8:f5:0e:4a:14:d9: 69:df:26:05:1d:5f:6d:38:56:2a:7e:4c:72:a0:ea:a8:c6:b8: f7:2f:d5:d0:b6:88:95:ef:85:26:fd:a9:1a:25:17:b6:60:a7: 26:ce:cb:02:b3:f9:58:79:08:11:6c:9f:d0:06:dc:a0:21:bd: 28:8a:36:27:53:38:c0:6e:86:58:57:9d:8a:7b:59:fa:05:d0: 82:85:2e:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICKqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKEU4N0RDNkM1QzcxMDQzOTA1N0Q4QUJFRDkwQzI2RDBD OUM4NzJCMzQwHhcNMjYwMzI2MTQxOTU5WhcNMjYwNDAyMTQxOTU5WjAYMRYwFAYD VQQDEw02OWM1NDA5MC1hY2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAykhAtra0X+wgkhOHuskxjryhlumnmy3+W9L/HLIWK2H1o4OKMK+lvK+KvCf4 HMIwVaee2TmfSQlDXA4yA0wuYEg3KoHxeyvAE/KX6r1gLLNwV1dlQ9FBsC+ljZw2 WykDKVwXAXp63O8ODWwp84mTeZ2acegzmzIkRmcIeJWb4PrjKlNp9dp3+mbFZ79S 0B4mMaw/ZKyK3r508e+nWVu7Qeo72dmjVgPZazibrEBlEOM+o9eUcQzdYsgWwDTd QxB4L4TYoQWxB02q2C7btEmiKxWgVYraIu+DdVyv/rZ8ebd+f0CfrEkXMQGYm+7M TCTYn9zRLhF0VQYX0mxQgDZL+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFkqyVNG gTqCr4snbGiY7D7IftbpMB8GA1UdIwQYMBaAFOh9xsXHEEOQV9ir7ZDCbQychys0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy82QjhCOUQwRTM2 RkYxMUU0OTkwNEFDNjZDNEY5QUUwMi82SDNHeGNjUVE1QlgyS3Z0a01KdERKeUhL elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZIM0d4Y2NRUTVCWDJLdnRrTUp0REp5SEt6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz N0FCQy82QjhCOUQwRTM2RkYxMUU0OTkwNEFDNjZDNEY5QUUwMi82SDNHeGNjUVE1 QlgyS3Z0a01KdERKeUhLelEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAklkAexXa8poNEb+op/T1+oZqvkO/6ykB0QUuybC5D855seu2VL5p+qq3DazE ds8qurDO5jp0/rsfilS8lXOCojFjv138xuNcxQl3VlAOr1nqz5bHbMS3dps3kg2Q WjJKfc6xRyZ/r8Hs330W18TSN0yDRt7gI/rJ655ZsJYk+0JZo1+BgJ6IoiUr3big /o0P2Pv3xk4+QXB6KffpveA1iNtv7mgkpFNqZYuR6FwP+PUOShTZad8mBR1fbThW Kn5McqDqqMa49y/V0LaIle+FJv2pGiUXtmCnJs7LArP5WHkIEWyf0AbcoCG9KIo2 J1M4wG6GWFedintZ+gXQgoUu0Q== -----END CERTIFICATE-----Generated at Thu Mar 26 19:31:46 2026 by rpki-client