$ rpki-client -vvf rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft File: 6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft (raw, json) Hash identifier: REtLxsJFV1QB7iZDxwmnT741V9+AgGkuIBpNg2DYf6Q= Subject key identifier: CD:B7:89:E8:4D:F6:91:B1:39:D4:4B:37:AB:C6:F3:96:7C:88:68:D0 Authority key identifier: E9:9F:F0:44:8B:0B:DA:37:71:CD:C4:A9:6C:59:F7:C9:F9:C8:79:44 Certificate issuer: /CN=A9157E9C/serialNumber=E99FF0448B0BDA3771CDC4A96C59F7C9F9C87944 Certificate serial: 0496 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft Manifest number: 0487 Signing time: Thu 26 Mar 2026 23:48:08 +0000 Manifest this update: Thu 26 Mar 2026 23:48:07 +0000 Manifest next update: Thu 02 Apr 2026 23:48:07 +0000 Files and hashes: 1: 6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.crl (hash: Lxac6PMEbYaY5nbDnP5pqlYJOsrUNEuuLmmw0DNU8oo=) 2: 438C7C387D6F11ECBCDC721DC4F9AE02.roa (hash: N2OHhfn+CsWn9uM8g1Ofmnj7ymg7gw2Y4/3DtYOdMeg=) 3: E3CD40BE7D6611ECBA65C232C4F9AE02.roa (hash: WD9MrIU1Zj3w+mVYD7v9tJ6t/TRXPSfmjh+WqlfPWrY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.crl rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 23:48:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1174 (0x496) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157E9C, serialNumber=E99FF0448B0BDA3771CDC4A96C59F7C9F9C87944 Validity Not Before: Mar 26 23:48:07 2026 GMT Not After : Apr 2 23:48:07 2026 GMT Subject: CN=69c5c5b8-83de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f7:24:49:90:03:0f:eb:04:5e:49:d3:98:84: a6:81:b1:31:f7:e3:08:3d:b7:6d:1b:65:a7:c4:fd: e8:78:b5:9a:ac:90:49:8e:40:3c:7e:7c:b6:2f:98: 21:86:1e:95:34:50:72:98:3c:f4:0c:68:ee:d6:c0: cd:1c:d9:96:b5:ab:0c:5b:a9:68:15:86:90:d3:45: a9:7c:5b:99:94:32:a1:44:26:23:3e:7a:4c:b7:68: c5:29:9e:c0:ca:65:6a:17:76:39:74:36:96:57:3d: 7d:6c:56:5e:6b:57:89:2e:46:73:86:b2:0e:93:cd: 91:80:2d:8b:72:23:64:3b:87:72:50:e5:b1:9e:35: c8:f7:30:1a:57:6d:32:a1:e4:e3:1a:b9:0d:41:83: 0d:d5:65:63:1f:2d:2b:d7:e0:ce:8f:54:b1:01:0e: 5c:d9:c2:cc:73:5f:9e:f4:96:1f:e0:5b:0f:50:5e: 07:19:0b:e6:ac:64:2e:02:6a:24:09:3e:7b:1b:54: ac:a9:a6:77:6a:f8:f9:46:bd:9e:bd:2b:ed:d2:ee: 65:80:fd:32:9c:11:83:8a:d1:8a:3b:df:d3:3e:ec: 6b:6f:c2:77:12:ba:7a:9e:f1:6d:1c:32:5a:a4:91: 94:61:34:59:18:ce:db:30:77:50:d5:1f:10:2d:56: ee:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:B7:89:E8:4D:F6:91:B1:39:D4:4B:37:AB:C6:F3:96:7C:88:68:D0 X509v3 Authority Key Identifier: keyid:E9:9F:F0:44:8B:0B:DA:37:71:CD:C4:A9:6C:59:F7:C9:F9:C8:79:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:59:cc:b4:ff:68:98:22:a3:b1:12:4d:21:ab:e7:19:44:05: 5d:e5:4f:63:e8:ed:46:e3:e8:74:fa:60:79:f5:97:55:ac:5b: 5f:13:7c:dd:9f:cc:2b:a1:6f:85:98:b4:86:2b:e7:40:85:d5: d2:45:d8:26:2b:30:03:54:b4:6f:64:54:ff:5b:a6:3a:b0:2f: 3b:8d:44:25:1c:5b:c5:0d:12:d2:5e:b5:03:c6:58:b6:b3:bb: 6f:68:18:2d:2a:01:21:15:03:c8:c7:12:06:f2:af:da:e0:dd: ef:1b:89:65:cb:50:32:07:00:33:67:bb:13:f9:17:74:1d:8e: 5c:ae:48:5f:81:4d:7b:d2:7c:63:a1:c2:35:51:eb:bc:14:d0: 97:0e:9f:4a:3b:13:c9:b7:99:bd:3c:63:4f:14:99:61:6f:96: 51:68:7e:82:29:af:e4:52:81:c7:08:f5:eb:5d:35:7a:40:f9: d8:6d:1d:b7:07:5b:13:0d:99:9c:64:df:a6:28:e4:bd:16:4c: c7:27:1f:be:fd:03:17:32:85:06:2e:91:da:3c:7b:88:81:ea: 8f:57:02:30:93:e8:61:c0:be:10:0a:af:5b:b2:96:4e:43:02: f8:e4:f0:ac:3b:35:4c:f6:de:fc:ff:15:21:b5:41:aa:51:81: 37:b2:b7:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdFOUMxMTAvBgNVBAUTKEU5OUZGMDQ0OEIwQkRBMzc3MUNEQzRBOTZDNTlGN0M5 RjlDODc5NDQwHhcNMjYwMzI2MjM0ODA3WhcNMjYwNDAyMjM0ODA3WjAYMRYwFAYD VQQDEw02OWM1YzViOC04M2RlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmfckSZADD+sEXknTmISmgbEx9+MIPbdtG2WnxP3oeLWarJBJjkA8fny2L5gh hh6VNFBymDz0DGju1sDNHNmWtasMW6loFYaQ00WpfFuZlDKhRCYjPnpMt2jFKZ7A ymVqF3Y5dDaWVz19bFZea1eJLkZzhrIOk82RgC2LciNkO4dyUOWxnjXI9zAaV20y oeTjGrkNQYMN1WVjHy0r1+DOj1SxAQ5c2cLMc1+e9JYf4FsPUF4HGQvmrGQuAmok CT57G1SsqaZ3avj5Rr2evSvt0u5lgP0ynBGDitGKO9/TPuxrb8J3Erp6nvFtHDJa pJGUYTRZGM7bMHdQ1R8QLVbuqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM23iehN 9pGxOdRLN6vG85Z8iGjQMB8GA1UdIwQYMBaAFOmf8ESLC9o3cc3EqWxZ98n5yHlE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0U5Qy81MEM5OTNDRTdE NjMxMUVDQUM1QzdGMUVDNEY5QUUwMi82Wl93UklzTDJqZHh6Y1NwYkZuM3lmbkll VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZaX3dSSXNMMmpkeHpjU3BiRm4zeWZuSWVVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0U5Qy81MEM5OTNDRTdENjMxMUVDQUM1QzdGMUVDNEY5QUUwMi82Wl93UklzTDJq ZHh6Y1NwYkZuM3lmbkllVVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL1nMtP9omCKjsRJNIavnGUQFXeVPY+jtRuPodPpgefWXVaxbXxN83Z/MK6Fv hZi0hivnQIXV0kXYJiswA1S0b2RU/1umOrAvO41EJRxbxQ0S0l61A8ZYtrO7b2gY LSoBIRUDyMcSBvKv2uDd7xuJZctQMgcAM2e7E/kXdB2OXK5IX4FNe9J8Y6HCNVHr vBTQlw6fSjsTybeZvTxjTxSZYW+WUWh+gimv5FKBxwj16101ekD52G0dtwdbEw2Z nGTfpijkvRZMxycfvv0DFzKFBi6R2jx7iIHqj1cCMJPoYcC+EAqvW7KWTkMC+OTw rDs1TPbe/P8VIbVBqlGBN7K36A== -----END CERTIFICATE-----Generated at Sat Mar 28 10:40:42 2026 by rpki-client