$ rpki-client -vvf rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft File: n6yKuWoNopKfw9GHG-1vdD6MlXc.mft (raw, json) Hash identifier: IikZKNLjkopr9cnji7+xmWyr5nOCnA6G5sTg/cAnTuA= Subject key identifier: DD:9C:D0:F6:C3:88:75:45:D8:EC:33:29:DD:13:57:80:D9:B2:18:DC Authority key identifier: 9F:AC:8A:B9:6A:0D:A2:92:9F:C3:D1:87:1B:ED:6F:74:3E:8C:95:77 Certificate issuer: /CN=A916E2DC/serialNumber=9FAC8AB96A0DA2929FC3D1871BED6F743E8C9577 Certificate serial: 0289 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6yKuWoNopKfw9GHG-1vdD6MlXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft Manifest number: 027F Signing time: Wed 25 Mar 2026 01:23:41 +0000 Manifest this update: Wed 25 Mar 2026 01:23:41 +0000 Manifest next update: Wed 01 Apr 2026 01:23:41 +0000 Files and hashes: 1: n6yKuWoNopKfw9GHG-1vdD6MlXc.crl (hash: IBG0+FcjBJDTTwRkTZANviKz/dIitrh37rzAz/YV/Os=) 2: 6993B4CCD43B11EDA821F80DC4F9AE02.roa (hash: g0yS7bFn3lbGirjQQ0HvWJ4zDhCK1JFrtq90yzs+oDo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.crl rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6yKuWoNopKfw9GHG-1vdD6MlXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:23:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 649 (0x289) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E2DC, serialNumber=9FAC8AB96A0DA2929FC3D1871BED6F743E8C9577 Validity Not Before: Mar 25 01:23:41 2026 GMT Not After : Apr 1 01:23:41 2026 GMT Subject: CN=69c3391d-b371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:11:6e:10:a9:6b:ac:fb:ba:2e:9d:ff:e6:26: 01:6e:b4:71:b3:75:69:28:52:51:0f:87:de:74:e7: cc:60:01:66:38:e6:33:03:01:22:f7:16:b1:ef:e5: a0:c4:41:6c:c5:82:44:f3:91:43:8c:1f:12:94:fb: 7c:30:be:6b:44:36:8a:cd:b7:b5:4e:04:65:ab:5f: 7e:df:ba:6b:b2:43:b2:a6:d9:70:34:95:80:17:0c: 2c:8d:61:ad:52:a8:60:92:70:b5:a7:4e:a8:d3:e1: d4:c8:ae:8d:85:18:80:ab:f1:84:67:e5:ad:ca:e1: 72:9f:08:4c:5a:e5:a2:d2:ca:a1:67:0a:5b:5c:c6: 67:2a:d5:03:b3:77:dd:66:77:20:19:88:82:24:6f: 5d:19:a9:0e:e2:13:bc:c0:26:47:38:ac:cf:85:69: 1f:52:88:3a:64:68:31:83:60:a1:3c:03:31:d6:64: 8b:f0:a7:7f:a2:41:e7:c8:b5:33:12:76:ef:70:f5: 78:40:21:93:3c:f2:79:29:eb:45:9a:1d:d7:66:39: 3b:5f:4e:cc:b1:29:4c:7f:99:d3:43:83:bd:9d:13: c3:ac:08:8a:90:a3:a6:da:fa:b7:43:57:8d:26:39: ff:a2:2e:2b:a4:c7:1a:06:83:52:9d:e7:be:60:d3: 42:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:9C:D0:F6:C3:88:75:45:D8:EC:33:29:DD:13:57:80:D9:B2:18:DC X509v3 Authority Key Identifier: keyid:9F:AC:8A:B9:6A:0D:A2:92:9F:C3:D1:87:1B:ED:6F:74:3E:8C:95:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6yKuWoNopKfw9GHG-1vdD6MlXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:ab:c8:e4:75:e0:bd:c4:69:a2:2c:33:4a:49:27:7c:41:da: c5:e2:7f:be:70:b6:21:93:76:b2:4d:07:bd:5d:09:c6:ca:35: 4a:e9:df:59:44:4a:a9:d7:e3:73:56:b6:bb:7e:2e:b7:1e:32: 95:45:6f:97:d3:24:56:dc:fb:40:46:06:c9:4b:2c:b3:3b:8c: d8:93:b9:7d:89:ef:71:7a:83:a4:73:3d:09:95:58:5a:5e:5a: 9f:e9:10:57:db:59:a0:26:18:a4:e2:9f:80:db:ae:b1:17:dd: af:bd:b1:95:a6:37:26:3e:85:07:4f:09:b4:96:44:e5:11:44: 6d:10:bd:d9:11:c3:11:b6:05:88:60:6c:a4:41:85:0b:80:32: 0f:d6:4b:34:4f:4c:21:fe:40:8b:4e:a1:f1:12:93:d8:b4:d2: ee:aa:98:1c:e7:fd:a9:b0:da:9c:8a:a8:9d:cd:42:bb:c1:3c: f6:1b:8e:c7:cc:aa:a6:33:2a:9a:22:b2:fb:18:03:07:85:c6: 19:c3:05:8a:e6:4b:93:23:fd:92:69:a1:33:22:61:bd:41:9a: e7:07:86:97:f0:80:18:19:40:89:76:6b:73:5c:7f:23:16:f2: 74:0e:07:c1:4f:b6:85:94:f2:74:38:47:df:6d:38:46:9c:36: b6:f4:89:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkUyREMxMTAvBgNVBAUTKDlGQUM4QUI5NkEwREEyOTI5RkMzRDE4NzFCRUQ2Rjc0 M0U4Qzk1NzcwHhcNMjYwMzI1MDEyMzQxWhcNMjYwNDAxMDEyMzQxWjAYMRYwFAYD VQQDEw02OWMzMzkxZC1iMzcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoxFuEKlrrPu6Lp3/5iYBbrRxs3VpKFJRD4fedOfMYAFmOOYzAwEi9xax7+Wg xEFsxYJE85FDjB8SlPt8ML5rRDaKzbe1TgRlq19+37prskOyptlwNJWAFwwsjWGt UqhgknC1p06o0+HUyK6NhRiAq/GEZ+WtyuFynwhMWuWi0sqhZwpbXMZnKtUDs3fd ZncgGYiCJG9dGakO4hO8wCZHOKzPhWkfUog6ZGgxg2ChPAMx1mSL8Kd/okHnyLUz EnbvcPV4QCGTPPJ5KetFmh3XZjk7X07MsSlMf5nTQ4O9nRPDrAiKkKOm2vq3Q1eN Jjn/oi4rpMcaBoNSnee+YNNC7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN2c0PbD iHVF2OwzKd0TV4DZshjcMB8GA1UdIwQYMBaAFJ+sirlqDaKSn8PRhxvtb3Q+jJV3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTJEQy82RDg5NjQ0QTZB RTcxMUVEOTRCNDRDODdDNEY5QUUwMi9uNnlLdVdvTm9wS2Z3OUdIRy0xdmRENk1s WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL242eUt1V29Ob3BLZnc5R0hHLTF2ZEQ2TWxYYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTJEQy82RDg5NjQ0QTZBRTcxMUVEOTRCNDRDODdDNEY5QUUwMi9uNnlLdVdvTm9w S2Z3OUdIRy0xdmRENk1sWGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZ6vI5HXgvcRpoiwzSkknfEHaxeJ/vnC2IZN2sk0HvV0Jxso1SunfWURKqdfj c1a2u34utx4ylUVvl9MkVtz7QEYGyUssszuM2JO5fYnvcXqDpHM9CZVYWl5an+kQ V9tZoCYYpOKfgNuusRfdr72xlaY3Jj6FB08JtJZE5RFEbRC92RHDEbYFiGBspEGF C4AyD9ZLNE9MIf5Ai06h8RKT2LTS7qqYHOf9qbDanIqonc1Cu8E89huOx8yqpjMq miKy+xgDB4XGGcMFiuZLkyP9kmmhMyJhvUGa5weGl/CAGBlAiXZrc1x/IxbydA4H wU+2hZTydDhH3204Rpw2tvSJpg== -----END CERTIFICATE-----Generated at Thu Mar 26 13:39:39 2026 by rpki-client