$ rpki-client -vvf rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.mft File: C6HFLWJbsbnkQzglDaPWTYBoego.mft (raw, json) Hash identifier: iOeS+uMybwefTiaJFgiUAi8kR0hXQ4A3rkR2m0Bhpwc= Subject key identifier: 3D:2A:55:B0:E9:B0:11:5B:A1:18:17:D4:B5:55:64:96:CC:F6:A5:22 Authority key identifier: 0B:A1:C5:2D:62:5B:B1:B9:E4:43:38:25:0D:A3:D6:4D:80:68:7A:0A Certificate issuer: /CN=A9140E48/serialNumber=0BA1C52D625BB1B9E44338250DA3D64D80687A0A Certificate serial: 05D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6HFLWJbsbnkQzglDaPWTYBoego.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.mft Manifest number: 05D0 Signing time: Tue 24 Mar 2026 22:43:52 +0000 Manifest this update: Tue 24 Mar 2026 22:43:51 +0000 Manifest next update: Tue 31 Mar 2026 22:43:51 +0000 Files and hashes: 1: C6HFLWJbsbnkQzglDaPWTYBoego.crl (hash: eGNvWVSkI2gjigaFYfcePdRHtNu7mHDNRLIHQTgQVuM=) 2: D5FFCB96F9D611EB8A9FCE34C4F9AE02.roa (hash: 1ZvrMdlGFQCTMD5ecs7oG/S3sWlG0zTg+VziefWYDWo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.crl rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6HFLWJbsbnkQzglDaPWTYBoego.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:43:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1495 (0x5d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140E48, serialNumber=0BA1C52D625BB1B9E44338250DA3D64D80687A0A Validity Not Before: Mar 24 22:43:51 2026 GMT Not After : Mar 31 22:43:51 2026 GMT Subject: CN=69c313a7-947d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:00:42:3a:6c:17:e8:0f:4e:48:08:90:8c:5e: c5:ec:ab:9f:b4:c4:de:dd:41:c0:65:58:fa:ac:d7: a7:27:88:50:80:65:50:68:d9:14:2a:10:ec:c5:6a: 5c:36:4f:5d:13:80:41:56:fe:10:88:fc:e3:60:52: 41:b3:56:a4:9b:4f:e3:c7:b8:30:74:1e:c2:43:d2: a0:69:24:5c:71:20:cb:8e:60:24:79:84:02:4f:5d: 17:8c:d2:07:5d:2d:2f:dd:c7:82:e8:f4:f1:3e:19: fc:db:51:4a:a5:0a:d5:8f:f3:38:24:38:e8:14:ea: ae:f9:a6:f2:98:e2:43:70:bf:71:51:bc:ce:0f:b7: 2a:4d:19:e1:3c:80:3e:90:cc:6a:1a:58:8b:4b:4f: b3:39:de:d1:b9:cd:48:33:13:25:4f:01:7f:35:26: 5f:87:52:cc:b8:ab:41:35:13:db:cd:87:a7:37:22: 87:ab:54:8f:6a:03:dd:da:b8:f2:a1:33:60:9c:6a: 9b:1a:71:61:2a:1a:38:42:84:3d:dd:bf:96:af:84: 48:04:71:54:cf:50:41:0e:51:93:57:c3:64:c9:f9: 25:31:61:fe:ad:40:9b:22:e4:4e:f2:29:82:7d:78: b8:25:9b:30:e7:a9:29:34:68:02:3b:a0:dc:86:40: ca:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:2A:55:B0:E9:B0:11:5B:A1:18:17:D4:B5:55:64:96:CC:F6:A5:22 X509v3 Authority Key Identifier: keyid:0B:A1:C5:2D:62:5B:B1:B9:E4:43:38:25:0D:A3:D6:4D:80:68:7A:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6HFLWJbsbnkQzglDaPWTYBoego.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:6a:b7:ae:1a:d3:d8:05:f5:c3:56:6f:e6:ec:ce:9e:d3:7f: 12:85:e6:d6:c3:4e:d4:e3:54:5d:e2:b9:e7:cf:24:46:20:ff: c5:e8:cb:d8:8d:15:c9:11:c0:75:18:5a:a2:61:6c:49:d4:f5: 09:e2:49:0e:57:f9:6b:cc:d4:d7:56:2c:26:66:06:df:1c:24: fd:9a:ea:91:bb:ee:93:30:51:37:66:e6:83:2b:b4:32:0c:82: 47:de:48:6d:06:d2:12:be:45:46:22:68:f0:e3:31:04:0a:fe: 6d:e4:75:26:4c:38:fc:5f:6d:c7:3e:dc:ce:e6:6a:8d:45:d6: 20:50:d1:51:5b:90:a4:29:73:13:a2:34:de:21:d5:ce:ba:fe: ba:c2:bc:f7:48:b3:5f:37:a5:82:51:40:d5:af:ea:3e:25:be: 96:bc:9c:69:1d:23:ea:5d:83:8a:0a:6a:29:17:d9:bb:25:01: c5:a1:79:21:c1:da:84:ce:89:5a:11:97:4c:ca:71:35:91:e3: d7:f8:1d:b9:24:7e:f4:aa:59:b7:25:4e:da:65:eb:64:c5:34: e8:db:b9:48:61:97:df:0a:3b:bb:e5:33:90:ef:48:2c:a8:ce: 23:c3:97:77:b7:bc:ba:46:67:fd:3d:d5:57:26:94:93:7c:64: c6:60:41:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBFNDgxMTAvBgNVBAUTKDBCQTFDNTJENjI1QkIxQjlFNDQzMzgyNTBEQTNENjRE ODA2ODdBMEEwHhcNMjYwMzI0MjI0MzUxWhcNMjYwMzMxMjI0MzUxWjAYMRYwFAYD VQQDEw02OWMzMTNhNy05NDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxQBCOmwX6A9OSAiQjF7F7KuftMTe3UHAZVj6rNenJ4hQgGVQaNkUKhDsxWpc Nk9dE4BBVv4QiPzjYFJBs1akm0/jx7gwdB7CQ9KgaSRccSDLjmAkeYQCT10XjNIH XS0v3ceC6PTxPhn821FKpQrVj/M4JDjoFOqu+abymOJDcL9xUbzOD7cqTRnhPIA+ kMxqGliLS0+zOd7Ruc1IMxMlTwF/NSZfh1LMuKtBNRPbzYenNyKHq1SPagPd2rjy oTNgnGqbGnFhKho4QoQ93b+Wr4RIBHFUz1BBDlGTV8NkyfklMWH+rUCbIuRO8imC fXi4JZsw56kpNGgCO6DchkDK9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD0qVbDp sBFboRgX1LVVZJbM9qUiMB8GA1UdIwQYMBaAFAuhxS1iW7G55EM4JQ2j1k2AaHoK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEU0OC81MEVGRDg3NkY5 RDQxMUVCOTc5NDgzMTFDNEY5QUUwMi9DNkhGTFdKYnNibmtRemdsRGFQV1RZQm9l Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M2SEZMV0pic2Jua1F6Z2xEYVBXVFlCb2Vnby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEU0OC81MEVGRDg3NkY5RDQxMUVCOTc5NDgzMTFDNEY5QUUwMi9DNkhGTFdKYnNi bmtRemdsRGFQV1RZQm9lZ28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAv2q3rhrT2AX1w1Zv5uzOntN/EoXm1sNO1ONUXeK5588kRiD/xejL2I0VyRHA dRhaomFsSdT1CeJJDlf5a8zU11YsJmYG3xwk/ZrqkbvukzBRN2bmgyu0MgyCR95I bQbSEr5FRiJo8OMxBAr+beR1Jkw4/F9txz7czuZqjUXWIFDRUVuQpClzE6I03iHV zrr+usK890izXzelglFA1a/qPiW+lrycaR0j6l2DigpqKRfZuyUBxaF5IcHahM6J WhGXTMpxNZHj1/gduSR+9KpZtyVO2mXrZMU06Nu5SGGX3wo7u+UzkO9ILKjOI8OX d7e8ukZn/T3VVyaUk3xkxmBB1Q== -----END CERTIFICATE-----Generated at Thu Mar 26 08:55:30 2026 by rpki-client