$ rpki-client -vvf rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft File: 6q7GCbncI1xGucXxvKPNvsf_7ig.mft (raw, json) Hash identifier: pNJwIPk72teqomcI7iAbLZdyyzIP380LTG0ktTxbchU= Subject key identifier: 62:2A:41:FF:9A:57:BB:D1:E1:2F:0C:21:E9:A3:BA:E6:F2:CD:85:54 Authority key identifier: EA:AE:C6:09:B9:DC:23:5C:46:B9:C5:F1:BC:A3:CD:BE:C7:FF:EE:28 Certificate issuer: /CN=A917A82D/serialNumber=EAAEC609B9DC235C46B9C5F1BCA3CDBEC7FFEE28 Certificate serial: 0CE1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft Manifest number: 0CBE Signing time: Tue 24 Mar 2026 18:20:43 +0000 Manifest this update: Tue 24 Mar 2026 18:20:42 +0000 Manifest next update: Tue 31 Mar 2026 18:20:42 +0000 Files and hashes: 1: 6q7GCbncI1xGucXxvKPNvsf_7ig.crl (hash: NrXk/SnEo04ALmJqdzzkt//10KlObwe0Khv5vt0rc0M=) 2: 403FDDD0DF3511ED8FBA823DC4F9AE02.roa (hash: ZcreYCpZyWSjMYdhO/BQNJ+N4twNtDLduQjxj+MFalE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.crl rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:20:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3297 (0xce1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A82D, serialNumber=EAAEC609B9DC235C46B9C5F1BCA3CDBEC7FFEE28 Validity Not Before: Mar 24 18:20:42 2026 GMT Not After : Mar 31 18:20:42 2026 GMT Subject: CN=69c2d5fa-17f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2a:b9:12:4f:64:df:4a:35:87:06:85:fc:e9: 16:9b:17:64:76:9a:53:5c:50:ea:d9:1b:3d:2b:c5: 4a:97:64:8f:70:2f:ea:2d:75:84:d4:cc:41:4f:f9: 91:98:ee:0a:c8:99:cb:69:3a:09:94:f4:e4:f5:ce: 7d:a0:c3:b8:19:c7:64:df:8b:9e:61:db:d6:10:a7: d8:b7:dd:c0:97:b6:b6:91:79:e8:71:42:99:4f:92: cc:f9:ca:36:63:10:e0:1e:bd:e6:bf:62:96:81:c3: a0:68:01:0c:b8:38:cb:29:86:8f:54:5e:28:40:40: 7b:81:1d:66:02:e3:87:63:24:81:40:0e:b1:7b:e4: ae:e1:43:08:37:8b:fa:68:23:18:95:c5:f7:8c:7b: 93:fd:23:06:97:94:a6:d7:f7:a3:aa:32:6f:2f:9c: af:e4:14:d2:82:cf:1e:88:c6:67:87:44:f8:20:b8: de:24:2b:3a:25:8c:ab:d2:3b:04:60:09:60:94:c6: 09:9b:fd:4b:19:ca:99:d2:af:cf:59:ec:0a:f2:db: 97:d1:fb:87:bf:3e:f0:0b:8f:18:92:42:c8:b5:41: c4:04:c3:cb:48:dc:aa:e8:60:1c:66:5f:3f:9e:28: 98:84:92:3a:a5:e6:60:95:35:96:01:9d:a2:ab:c4: 92:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:2A:41:FF:9A:57:BB:D1:E1:2F:0C:21:E9:A3:BA:E6:F2:CD:85:54 X509v3 Authority Key Identifier: keyid:EA:AE:C6:09:B9:DC:23:5C:46:B9:C5:F1:BC:A3:CD:BE:C7:FF:EE:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:4a:c1:b5:c7:8e:62:88:1c:6d:10:6d:72:76:43:5c:6c:82: 45:cd:2a:4d:15:b3:5c:25:9a:0d:db:0f:b7:33:49:ff:de:76: ac:67:d0:cf:c7:63:db:1c:77:21:aa:75:29:cd:5e:40:af:a6: 1e:16:d7:59:45:5f:40:07:7e:21:b0:fe:65:ba:50:62:9e:e9: 72:e8:04:87:ea:0c:30:a6:60:92:33:02:e0:45:bc:65:d9:46: ec:ec:1f:bb:89:3e:64:8a:fb:72:fe:ff:08:1b:70:ca:eb:62: 24:e6:3f:23:d4:cb:b3:02:52:d3:a2:d0:6f:a5:c3:8f:df:ab: 77:e3:44:57:c5:8f:6f:d7:05:0d:ee:a5:11:88:4f:8a:cc:6b: 96:f3:96:0d:bc:cc:d2:9d:b6:a5:42:7e:1e:5c:cc:e7:a6:b5: c3:7a:2d:3e:c6:1a:cd:4d:de:ca:ed:fc:17:32:3b:1a:90:9c: 60:ce:83:93:a6:3c:90:e8:67:eb:06:9a:be:27:a7:71:b0:f6: a6:d5:81:3b:58:16:74:43:7c:82:0e:73:c4:4d:78:0e:73:46: 10:e3:4f:1a:c9:ab:5c:ec:44:a2:a6:d4:68:78:e9:29:8c:92: a7:84:11:76:a9:0d:82:e5:56:1c:12:f8:b8:07:ac:63:b4:53: ef:c7:3c:a3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E4MkQxMTAvBgNVBAUTKEVBQUVDNjA5QjlEQzIzNUM0NkI5QzVGMUJDQTNDREJF QzdGRkVFMjgwHhcNMjYwMzI0MTgyMDQyWhcNMjYwMzMxMTgyMDQyWjAYMRYwFAYD VQQDEw02OWMyZDVmYS0xN2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnyq5Ek9k30o1hwaF/OkWmxdkdppTXFDq2Rs9K8VKl2SPcC/qLXWE1MxBT/mR mO4KyJnLaToJlPTk9c59oMO4Gcdk34ueYdvWEKfYt93Al7a2kXnocUKZT5LM+co2 YxDgHr3mv2KWgcOgaAEMuDjLKYaPVF4oQEB7gR1mAuOHYySBQA6xe+Su4UMIN4v6 aCMYlcX3jHuT/SMGl5Sm1/ejqjJvL5yv5BTSgs8eiMZnh0T4ILjeJCs6JYyr0jsE YAlglMYJm/1LGcqZ0q/PWewK8tuX0fuHvz7wC48YkkLItUHEBMPLSNyq6GAcZl8/ niiYhJI6peZglTWWAZ2iq8SSTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGIqQf+a V7vR4S8MIemjuubyzYVUMB8GA1UdIwQYMBaAFOquxgm53CNcRrnF8byjzb7H/+4o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTgyRC9BREY2NjVDMDEy NzgxMUVBOUI4RUQwMzRDNEY5QUUwMi82cTdHQ2JuY0kxeEd1Y1h4dktQTnZzZl83 aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZxN0dDYm5jSTF4R3VjWHh2S1BOdnNmXzdpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTgyRC9BREY2NjVDMDEyNzgxMUVBOUI4RUQwMzRDNEY5QUUwMi82cTdHQ2JuY0kx eEd1Y1h4dktQTnZzZl83aWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM0rBtceOYogcbRBtcnZDXGyCRc0qTRWzXCWaDdsPtzNJ/952rGfQz8dj2xx3 Iap1Kc1eQK+mHhbXWUVfQAd+IbD+ZbpQYp7pcugEh+oMMKZgkjMC4EW8ZdlG7Owf u4k+ZIr7cv7/CBtwyutiJOY/I9TLswJS06LQb6XDj9+rd+NEV8WPb9cFDe6lEYhP isxrlvOWDbzM0p22pUJ+HlzM56a1w3otPsYazU3eyu38FzI7GpCcYM6Dk6Y8kOhn 6waaviencbD2ptWBO1gWdEN8gg5zxE14DnNGEONPGsmrXOxEoqbUaHjpKYySp4QR dqkNguVWHBL4uAesY7RT78c8ow== -----END CERTIFICATE-----Generated at Thu Mar 26 00:50:38 2026 by rpki-client