$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1BD/7EC6E5AEFB1011F0947DB856746F56BC/C6kCx31AoXILQnNsTotcNnjiuRQ.mft File: C6kCx31AoXILQnNsTotcNnjiuRQ.mft (raw, json) Hash identifier: X1T+RxUJjNIVH3xeykz+2zwNfoDVKhsdmdK2IjSD5iY= Subject key identifier: 01:62:9C:3F:A4:AA:31:0C:53:55:78:6D:B9:57:E9:51:8B:5A:F7:72 Authority key identifier: 0B:A9:02:C7:7D:40:A1:72:0B:42:73:6C:4E:8B:5C:36:78:E2:B9:14 Certificate issuer: /CN=A914E1BD/serialNumber=0BA902C77D40A1720B42736C4E8B5C3678E2B914 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/C6kCx31AoXILQnNsTotcNnjiuRQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E1BD/7EC6E5AEFB1011F0947DB856746F56BC/C6kCx31AoXILQnNsTotcNnjiuRQ.mft Manifest number: 25 Signing time: Wed 25 Mar 2026 08:02:03 +0000 Manifest this update: Wed 25 Mar 2026 08:02:02 +0000 Manifest next update: Wed 01 Apr 2026 08:02:02 +0000 Files and hashes: 1: C6kCx31AoXILQnNsTotcNnjiuRQ.crl (hash: YyYMkdri5ROva8PPzf9mI1AUHz69cDrUBaJrmgJz0JM=) 2: 5787CC96FB3411F0A8F597323D6F56BC.roa (hash: lG5XzlCW36eN47UotWj73TCol7/E9mkhN9sNAOU+bso=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E1BD/7EC6E5AEFB1011F0947DB856746F56BC/C6kCx31AoXILQnNsTotcNnjiuRQ.crl rsync://rpki.apnic.net/member_repository/A914E1BD/7EC6E5AEFB1011F0947DB856746F56BC/C6kCx31AoXILQnNsTotcNnjiuRQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/C6kCx31AoXILQnNsTotcNnjiuRQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E1BD, serialNumber=0BA902C77D40A1720B42736C4E8B5C3678E2B914 Validity Not Before: Mar 25 08:02:02 2026 GMT Not After : Apr 1 08:02:02 2026 GMT Subject: CN=69c3967b-5233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1c:ce:03:ef:f0:05:88:84:25:64:83:4a:a1: 62:d9:f0:84:ac:8b:41:9e:45:89:13:ce:6d:0b:48: 9a:66:e5:88:e4:07:65:19:eb:c9:2a:b6:f1:27:bc: 64:fe:81:f9:58:c2:c5:f8:93:80:6f:86:02:00:be: 6e:17:7d:1e:26:54:0c:fd:9e:39:2e:43:88:9b:68: d8:84:bc:7b:ac:f9:82:32:98:9c:ed:60:29:6b:05: c4:cf:7e:81:b2:74:30:4a:6a:f4:38:dd:60:88:b4: 0e:cf:11:8b:ee:34:fb:79:9d:8a:e7:17:33:19:27: 72:5a:d5:e0:3b:18:43:d7:7b:83:94:46:95:d5:b7: d6:8f:46:ff:80:36:24:90:26:a1:36:5b:79:32:64: bc:dc:ac:ab:f6:24:7f:a4:a1:77:77:33:55:cd:3e: 13:14:2b:3a:cd:d7:39:99:04:e2:ef:08:fa:9a:49: 8d:71:5b:94:70:b8:d4:48:57:7e:7a:d5:6d:f1:a5: 4c:0b:5f:87:51:12:2f:a0:31:e4:84:0d:8a:cf:7a: a4:fc:95:cb:b0:3a:05:bb:33:1b:66:67:fc:a3:fa: 41:de:b4:ba:c5:34:0b:f7:0a:af:28:d6:a6:e5:ab: 68:d4:e6:52:c0:a2:df:74:45:e2:8c:94:e4:fc:a8: c0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:62:9C:3F:A4:AA:31:0C:53:55:78:6D:B9:57:E9:51:8B:5A:F7:72 X509v3 Authority Key Identifier: keyid:0B:A9:02:C7:7D:40:A1:72:0B:42:73:6C:4E:8B:5C:36:78:E2:B9:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E1BD/7EC6E5AEFB1011F0947DB856746F56BC/C6kCx31AoXILQnNsTotcNnjiuRQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/C6kCx31AoXILQnNsTotcNnjiuRQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1BD/7EC6E5AEFB1011F0947DB856746F56BC/C6kCx31AoXILQnNsTotcNnjiuRQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:37:ec:a7:f2:4e:9b:60:fb:67:3f:5d:e5:02:d3:df:33:e7: 80:40:39:c3:20:8b:67:c8:c7:0b:2b:64:66:50:a9:30:72:2a: ae:3f:b9:47:e3:78:be:46:84:90:14:11:b3:89:af:d9:87:45: 9b:60:e5:3a:7a:43:8e:8c:81:58:18:c1:05:d0:cd:7e:2b:6f: 3d:a4:43:ca:4a:f1:68:13:02:6f:ae:c0:91:8a:17:0d:bc:11: 55:c0:ff:49:52:32:d7:44:59:7f:a5:3c:3c:ac:c9:3d:27:21: 11:bb:6f:ab:71:32:b7:46:2c:43:78:7b:f1:c1:3d:c2:45:7a: 27:0e:cc:bc:bb:1c:ea:ed:89:91:8b:18:3e:9c:55:c6:e4:3d: c8:d2:70:89:fd:18:07:e3:a7:99:59:7f:7d:75:05:6e:bc:56: a2:1e:80:e6:00:bc:05:a6:0b:80:4f:b4:88:4f:7b:65:9a:16: b4:c4:60:2c:b5:76:46:1c:42:cb:65:3c:f3:00:65:af:75:dc: 80:7f:2f:92:46:60:ce:40:49:73:b2:5d:6a:ea:7e:b5:9c:81: 5e:81:f3:d6:b6:d4:38:b0:fa:36:ef:a2:12:54:95:45:c0:b8: a7:79:fb:28:b8:44:b6:14:82:dc:9e:36:20:69:ca:a8:78:8b: 53:6a:01:40 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RTFCRDExMC8GA1UEBRMoMEJBOTAyQzc3RDQwQTE3MjBCNDI3MzZDNEU4QjVDMzY3 OEUyQjkxNDAeFw0yNjAzMjUwODAyMDJaFw0yNjA0MDEwODAyMDJaMBgxFjAUBgNV BAMTDTY5YzM5NjdiLTUyMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6HM4D7/AFiIQlZINKoWLZ8ISsi0GeRYkTzm0LSJpm5YjkB2UZ68kqtvEnvGT+ gflYwsX4k4BvhgIAvm4XfR4mVAz9njkuQ4ibaNiEvHus+YIymJztYClrBcTPfoGy dDBKavQ43WCItA7PEYvuNPt5nYrnFzMZJ3Ja1eA7GEPXe4OURpXVt9aPRv+ANiSQ JqE2W3kyZLzcrKv2JH+koXd3M1XNPhMUKzrN1zmZBOLvCPqaSY1xW5RwuNRIV356 1W3xpUwLX4dREi+gMeSEDYrPeqT8lcuwOgW7MxtmZ/yj+kHetLrFNAv3Cq8o1qbl q2jU5lLAot90ReKMlOT8qMBLAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUAWKcP6Sq MQxTVXhtuVfpUYta93IwHwYDVR0jBBgwFoAUC6kCx31AoXILQnNsTotcNnjiuRQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFMUJELzdFQzZFNUFFRkIx MDExRjA5NDdEQjg1Njc0NkY1NkJDL0M2a0N4MzFBb1hJTFFuTnNUb3RjTm5qaXVS US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvQzZrQ3gzMUFvWElMUW5Oc1RvdGNObmppdVJRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRF MUJELzdFQzZFNUFFRkIxMDExRjA5NDdEQjg1Njc0NkY1NkJDL0M2a0N4MzFBb1hJ TFFuTnNUb3RjTm5qaXVSUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQC+N+yn8k6bYPtnP13lAtPfM+eAQDnDIItnyMcLK2RmUKkwciquP7lH43i+RoSQ FBGzia/Zh0WbYOU6ekOOjIFYGMEF0M1+K289pEPKSvFoEwJvrsCRihcNvBFVwP9J UjLXRFl/pTw8rMk9JyERu2+rcTK3RixDeHvxwT3CRXonDsy8uxzq7YmRixg+nFXG 5D3I0nCJ/RgH46eZWX99dQVuvFaiHoDmALwFpguAT7SIT3tlmha0xGAstXZGHELL ZTzzAGWvddyAfy+SRmDOQElzsl1q6n61nIFegfPWttQ4sPo276ISVJVFwLinefso uES2FILcnjYgacqoeItTagFA -----END CERTIFICATE-----Generated at Thu Mar 26 00:28:17 2026 by rpki-client