$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft File: 6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft (raw, json) Hash identifier: Ynhw/nnJpK4mMNYUrv5I4nKT7g6f0DOgjZSw2bA9yxk= Subject key identifier: C3:08:1C:97:65:A7:B1:25:BD:76:65:39:64:7A:0F:2D:11:C2:A5:E4 Authority key identifier: E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5 Certificate issuer: /CN=A91A2359/serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5 Certificate serial: 0BF7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft Manifest number: 0BB9 Signing time: Tue 24 Mar 2026 18:49:28 +0000 Manifest this update: Tue 24 Mar 2026 18:49:27 +0000 Manifest next update: Tue 31 Mar 2026 18:49:27 +0000 Files and hashes: 1: 6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl (hash: LhDtcCFaw3crpESmV4ShFV3y2sf6nBqO0cCS53ApQDI=) 2: 6DADCA1C2F1C11EDA3E29B09C4F9AE02.roa (hash: IxMPHfcO4FMJHXeamW9Ntxik/OpowXLrenedL/WZ9v0=) 3: 73E164B0F78311F08252E67A4C6F56BC.roa (hash: G+ObB5wiY0RZq1BlygyBu8U8dT9wJLTIM9sck3J/+9U=) 4: 6B3307CE4D8411EFBAD45B86C4F9AE02.roa (hash: zhvQ2OwFKuDGlesdZErwFsvm54e1zw6iRxJQhNg3+u4=) 5: D5955AB6975511EF94255C5EC4F9AE02.roa (hash: JVd2FG3UkH9H5B617YmFMPIf/lKVb8TVBIpvLq/w07A=) 6: 1FCC64AC719511F090F7F83BC4F9AE02.roa (hash: HDz+1GzuPpUTidanGB4G4ykVBkwdTS/Q6fpag6ihvfc=) 7: 83B1E1429AAB11F0AFE54B2AC4F9AE02.roa (hash: qD1cITJ7GAVqG9RAWVarhkOzSRkX7RbWYic+rFSQm5U=) 8: 46D0A6A8BDDA11F086EB9613C4F9AE02.roa (hash: huORanbeeLTQyC8vfHVhR2qi15Mp9g0ge9RJFONvZrM=) 9: 84210E0A9AAB11F0AFE54B2AC4F9AE02.roa (hash: dGkZlvZrZzzmUrpdcX6PjNjrHOBIi+bf0tGrQjJ9ueg=) 10: 4F153D60719511F0A684963CC4F9AE02.roa (hash: f1UfIHsu2w3uQBtlhqphr4jX3JsvBAbFFTKeDdMIPEc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:49:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3063 (0xbf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2359, serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5 Validity Not Before: Mar 24 18:49:27 2026 GMT Not After : Mar 31 18:49:27 2026 GMT Subject: CN=69c2dcb8-7646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:67:13:34:16:c6:e6:dd:8c:d1:f2:fa:96:bb: 4e:c5:f8:1f:39:b5:a4:4a:e4:0e:d8:2b:3f:6a:0d: a0:f7:41:1e:79:21:4f:35:1b:0b:5a:16:f6:1e:d3: f3:10:a3:c6:68:d2:f5:2a:42:53:c6:44:20:95:e8: a9:50:c1:8f:d4:24:64:28:ff:e0:1a:1d:3e:18:8e: 30:5c:07:b1:7a:d4:3c:b3:8f:53:61:75:ea:e6:11: 90:88:7b:c8:21:bc:25:96:84:a0:25:96:d9:6e:f6: 98:22:b0:90:cb:a7:07:04:d8:c6:4a:c7:0e:a2:b2: b5:f8:af:df:7c:d8:3a:2a:3d:9f:f0:14:c6:b9:6e: 5d:dc:f8:d9:aa:04:b7:0f:a7:18:14:e0:46:dc:5a: 33:ce:c3:67:4c:89:7a:1c:48:83:e2:83:cf:69:70: 2a:3f:6c:29:88:f4:88:ad:65:7f:9b:07:df:29:ae: 39:f1:ca:3e:57:68:c2:f5:7b:cb:04:f2:b0:0c:83: 08:a6:f8:0d:b6:d0:1c:4d:d4:9f:79:49:73:55:c2: 04:c6:8e:0b:7f:de:e8:3c:13:e0:43:8b:36:a6:4a: 48:4d:b3:59:d7:9a:c3:48:00:1a:d0:78:12:0a:2f: 82:57:e9:a5:be:dd:2e:ef:da:e3:70:b6:57:20:9f: f4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:08:1C:97:65:A7:B1:25:BD:76:65:39:64:7A:0F:2D:11:C2:A5:E4 X509v3 Authority Key Identifier: keyid:E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:43:12:03:38:fd:ef:49:3a:7d:a5:b7:48:df:86:dc:46:9d: d2:c8:c9:c8:24:db:56:1c:d1:99:98:e3:72:c7:28:3f:d7:f9: 2e:04:a0:be:b7:ac:a6:89:eb:eb:36:b1:c0:e6:70:e4:23:34: 62:5a:ab:f7:b0:c3:77:e7:39:28:d4:8f:97:db:73:f3:36:46: 85:02:73:71:71:32:da:3d:4d:a2:40:b4:88:bf:e5:4a:d9:93: 86:fd:87:bc:12:ff:ac:4d:c0:0a:dd:71:bf:8e:f2:32:08:82: 65:f1:57:44:75:ee:23:34:bb:c6:fa:ed:c0:fe:fa:74:99:bd: 3b:ad:28:8b:23:4f:fb:96:6b:88:a3:bd:33:51:db:7c:33:c2: 4a:88:66:b2:88:83:88:b3:1f:57:70:76:fd:b8:cf:69:3f:d0: c9:c3:8e:9a:c7:83:46:93:ee:5b:3f:b7:64:d4:71:26:9c:7c: 37:e4:8a:0f:d2:6f:a0:cf:66:b8:4c:3c:65:35:25:24:2c:2a: 6e:e3:d5:d8:70:35:96:24:ab:6a:d2:80:13:08:84:3f:5e:e8: 15:86:81:24:47:bf:dd:aa:ae:7e:a4:f3:83:5a:de:86:69:47: 45:ff:61:3b:ec:2f:df:c8:53:9d:f3:99:1c:7f:cc:56:b8:3c: 61:e9:2e:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC/cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTIzNTkxMTAvBgNVBAUTKEU5OTFBNUEyREQ5RDFGMkEyNDNERjZBQTI0QjlGNTBF MUNCOEZFRTUwHhcNMjYwMzI0MTg0OTI3WhcNMjYwMzMxMTg0OTI3WjAYMRYwFAYD VQQDEw02OWMyZGNiOC03NjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwGcTNBbG5t2M0fL6lrtOxfgfObWkSuQO2Cs/ag2g90EeeSFPNRsLWhb2HtPz EKPGaNL1KkJTxkQgleipUMGP1CRkKP/gGh0+GI4wXAexetQ8s49TYXXq5hGQiHvI IbwlloSgJZbZbvaYIrCQy6cHBNjGSscOorK1+K/ffNg6Kj2f8BTGuW5d3PjZqgS3 D6cYFOBG3FozzsNnTIl6HEiD4oPPaXAqP2wpiPSIrWV/mwffKa458co+V2jC9XvL BPKwDIMIpvgNttAcTdSfeUlzVcIExo4Lf97oPBPgQ4s2pkpITbNZ15rDSAAa0HgS Ci+CV+mlvt0u79rjcLZXIJ/0kQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMMIHJdl p7ElvXZlOWR6Dy0RwqXkMB8GA1UdIwQYMBaAFOmRpaLdnR8qJD32qiS59Q4cuP7l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjM1OS9GQzI5OERFQTQx NzAxMUVBOThERTY1NkFDNEY5QUUwMi82Wkdsb3QyZEh5b2tQZmFxSkxuMURoeTRf dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZaR2xvdDJkSHlva1BmYXFKTG4xRGh5NF91VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjM1OS9GQzI5OERFQTQxNzAxMUVBOThERTY1NkFDNEY5QUUwMi82Wkdsb3QyZEh5 b2tQZmFxSkxuMURoeTRfdVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWUMSAzj970k6faW3SN+G3Ead0sjJyCTbVhzRmZjjcscoP9f5LgSgvresponr 6zaxwOZw5CM0Ylqr97DDd+c5KNSPl9tz8zZGhQJzcXEy2j1NokC0iL/lStmThv2H vBL/rE3ACt1xv47yMgiCZfFXRHXuIzS7xvrtwP76dJm9O60oiyNP+5ZriKO9M1Hb fDPCSohmsoiDiLMfV3B2/bjPaT/QycOOmseDRpPuWz+3ZNRxJpx8N+SKD9JvoM9m uEw8ZTUlJCwqbuPV2HA1liSratKAEwiEP17oFYaBJEe/3aqufqTzg1rehmlHRf9h O+wv38hTnfOZHH/MVrg8YekuSw== -----END CERTIFICATE-----Generated at Thu Mar 26 18:57:39 2026 by rpki-client