$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft File: u6lOqRCj8jLfn98s1OOiejSZa3A.mft (raw, json) Hash identifier: lDFgdW4GqhMtqpZO9nEzY82CliVQTAK6AniE2Wd+ARo= Subject key identifier: D4:87:D2:DA:77:58:33:2A:6E:FF:F2:6D:E9:72:BD:71:FC:A4:B2:C7 Authority key identifier: BB:A9:4E:A9:10:A3:F2:32:DF:9F:DF:2C:D4:E3:A2:7A:34:99:6B:70 Certificate issuer: /CN=A917BEB0/serialNumber=BBA94EA910A3F232DF9FDF2CD4E3A27A34996B70 Certificate serial: 04D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6lOqRCj8jLfn98s1OOiejSZa3A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft Manifest number: 04CF Signing time: Tue 24 Mar 2026 23:33:06 +0000 Manifest this update: Tue 24 Mar 2026 23:33:06 +0000 Manifest next update: Tue 31 Mar 2026 23:33:06 +0000 Files and hashes: 1: u6lOqRCj8jLfn98s1OOiejSZa3A.crl (hash: Ldlr6Tvu3IJeJsIGlYpywRGM3MHHpDBCF+m0i/4FuVg=) 2: 4AEAB70C615D11ECAC75D44DC4F9AE02.roa (hash: 9CfqYYl4auSjx9zjrb6Pvsma7el5RM6zCTL8hx3B2ss=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.crl rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6lOqRCj8jLfn98s1OOiejSZa3A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:33:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1238 (0x4d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BEB0, serialNumber=BBA94EA910A3F232DF9FDF2CD4E3A27A34996B70 Validity Not Before: Mar 24 23:33:06 2026 GMT Not After : Mar 31 23:33:06 2026 GMT Subject: CN=69c31f32-bd90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c3:f0:74:05:d6:01:40:e2:16:ad:a9:35:ac: db:ed:7a:7b:d4:f0:79:ea:46:cb:31:f8:1b:98:7c: e7:95:26:00:80:3a:a5:74:46:ca:10:34:ea:47:e8: 88:3e:bc:b8:f1:2d:6f:d7:d0:90:51:e8:ce:e1:23: fa:06:d8:0d:db:60:ab:c9:6f:63:6d:4c:d3:f7:53: f5:39:da:da:ca:6a:82:b3:1e:a1:33:91:71:ec:a7: 9c:9f:5f:73:37:0f:be:67:8b:59:a8:71:00:56:f5: 5b:0c:dc:d1:8f:80:ba:03:c6:88:0e:ef:c5:c4:1b: aa:71:77:50:e8:cb:bb:13:2b:9c:8e:d9:f9:d9:ff: 22:c3:64:e2:f5:7e:5d:57:18:68:e2:92:8e:c2:58: 22:a9:6c:3d:9d:b7:47:a3:75:28:f1:fe:1a:f7:39: c3:7f:b4:47:15:49:39:82:37:f2:99:04:66:ed:40: b0:45:f5:b1:13:a7:bd:95:39:d7:e4:f5:2c:b1:a1: ee:c9:1e:03:3a:2c:fa:3e:c7:81:e0:11:54:f6:5c: 89:87:dc:ac:c9:59:13:a5:26:61:ed:25:73:8f:25: f3:2a:64:75:c5:bb:32:aa:6b:4d:31:7a:06:7c:5a: 8b:73:23:2c:34:a5:2b:75:72:51:e5:f5:57:ed:2c: 19:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:87:D2:DA:77:58:33:2A:6E:FF:F2:6D:E9:72:BD:71:FC:A4:B2:C7 X509v3 Authority Key Identifier: keyid:BB:A9:4E:A9:10:A3:F2:32:DF:9F:DF:2C:D4:E3:A2:7A:34:99:6B:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6lOqRCj8jLfn98s1OOiejSZa3A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:fa:79:91:b1:56:fb:16:97:56:8f:66:82:24:d2:1c:f6:0d: 7d:52:aa:08:57:4e:a0:df:ce:4c:2a:ad:95:d8:95:b0:1f:b6: 3e:56:14:95:93:71:8e:4b:b9:a0:ac:47:8f:80:14:11:6b:38: 42:81:e5:71:46:db:c0:b4:09:38:a1:02:21:33:6a:c3:d6:72: ed:b9:1d:86:81:fa:06:0f:2c:b4:44:69:d9:06:be:6d:25:9f: 0e:e3:be:eb:9a:2c:3d:b0:85:e6:92:81:25:4e:12:e4:f9:dd: c3:e5:65:88:db:e0:90:6c:e4:d8:0d:ea:34:55:ee:fc:b9:ff: a6:62:8e:a0:2a:40:51:ab:54:e6:ce:b0:fe:4c:69:cb:6e:d6: 7e:6c:cf:5b:39:5b:a4:f1:2b:c2:6d:9c:02:fd:03:af:6e:4c: dc:c3:3b:66:20:c1:8a:0e:16:e2:8c:61:66:b9:a9:5e:62:9e: 9d:0c:6d:76:fa:b5:d7:64:90:9f:6b:a7:72:ac:5f:bf:65:37: 30:30:60:57:87:3c:b3:bd:86:fa:03:e2:e3:87:a4:03:32:ac: 1b:49:cf:02:d2:85:ee:6e:51:5c:2e:df:93:1d:e2:db:f5:b2: ea:19:2a:a2:53:48:ba:66:62:34:d3:ee:d1:e1:50:9e:66:f3: ed:bc:0a:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBNYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JFQjAxMTAvBgNVBAUTKEJCQTk0RUE5MTBBM0YyMzJERjlGREYyQ0Q0RTNBMjdB MzQ5OTZCNzAwHhcNMjYwMzI0MjMzMzA2WhcNMjYwMzMxMjMzMzA2WjAYMRYwFAYD VQQDEw02OWMzMWYzMi1iZDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtsPwdAXWAUDiFq2pNazb7Xp71PB56kbLMfgbmHznlSYAgDqldEbKEDTqR+iI Pry48S1v19CQUejO4SP6BtgN22CryW9jbUzT91P1OdraymqCsx6hM5Fx7Kecn19z Nw++Z4tZqHEAVvVbDNzRj4C6A8aIDu/FxBuqcXdQ6Mu7Eyucjtn52f8iw2Ti9X5d Vxho4pKOwlgiqWw9nbdHo3Uo8f4a9znDf7RHFUk5gjfymQRm7UCwRfWxE6e9lTnX 5PUssaHuyR4DOiz6PseB4BFU9lyJh9ysyVkTpSZh7SVzjyXzKmR1xbsyqmtNMXoG fFqLcyMsNKUrdXJR5fVX7SwZHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNSH0tp3 WDMqbv/ybelyvXH8pLLHMB8GA1UdIwQYMBaAFLupTqkQo/Iy35/fLNTjono0mWtw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkVCMC8xODExM0Q0NDYx NUIxMUVDQkQ5OUQxNENDNEY5QUUwMi91NmxPcVJDajhqTGZuOThzMU9PaWVqU1ph M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U2bE9xUkNqOGpMZm45OHMxT09pZWpTWmEzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkVCMC8xODExM0Q0NDYxNUIxMUVDQkQ5OUQxNENDNEY5QUUwMi91NmxPcVJDajhq TGZuOThzMU9PaWVqU1phM0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHvp5kbFW+xaXVo9mgiTSHPYNfVKqCFdOoN/OTCqtldiVsB+2PlYUlZNxjku5 oKxHj4AUEWs4QoHlcUbbwLQJOKECITNqw9Zy7bkdhoH6Bg8stERp2Qa+bSWfDuO+ 65osPbCF5pKBJU4S5Pndw+VliNvgkGzk2A3qNFXu/Ln/pmKOoCpAUatU5s6w/kxp y27WfmzPWzlbpPErwm2cAv0Dr25M3MM7ZiDBig4W4oxhZrmpXmKenQxtdvq112SQ n2uncqxfv2U3MDBgV4c8s72G+gPi44ekAzKsG0nPAtKF7m5RXC7fkx3i2/Wy6hkq olNIumZiNNPu0eFQnmbz7bwKFw== -----END CERTIFICATE-----Generated at Thu Mar 26 18:35:51 2026 by rpki-client