$ rpki-client -vvf rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft File: C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft (raw, json) Hash identifier: Wl0ZdBHEywSc5dw6fnKxg0Ot2cuBwB7+aTVwvAVm5M8= Subject key identifier: FD:C7:13:2C:D1:90:E4:89:1A:0E:58:9E:52:BC:E0:43:E1:41:21:16 Authority key identifier: 0B:A3:4E:64:30:B1:0E:6A:7F:2D:29:96:44:25:D1:F7:14:AF:86:5C Certificate issuer: /CN=A91A279C/serialNumber=0BA34E6430B10E6A7F2D29964425D1F714AF865C Certificate serial: 1B55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6NOZDCxDmp_LSmWRCXR9xSvhlw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft Manifest number: 1B39 Signing time: Tue 24 Mar 2026 16:11:45 +0000 Manifest this update: Tue 24 Mar 2026 16:11:45 +0000 Manifest next update: Tue 31 Mar 2026 16:11:45 +0000 Files and hashes: 1: C6NOZDCxDmp_LSmWRCXR9xSvhlw.crl (hash: yw+9yQvlSnyjoHwhRXxekErxE9rwVtdQk7+qjQXHVyA=) 2: 9DD35B9AF1D011E88D564045C4F9AE02.roa (hash: 6eR+vCZVGIXb6QQ2AexB38hZWjUmD10s4fwQ3319wzs=) 3: 9D2302A4F1D011E88D564045C4F9AE02.roa (hash: 95U1WsLRFD6a7A2se5iCtflZlPkeObhmQCuiY8+IvnI=) 4: 06D9E242335211E79AC36F87C4F9AE02.roa (hash: WoeF+ehZO26Tn0BFlZwa6DzoBxWlNOms/5FLnHV2m6M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.crl rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6NOZDCxDmp_LSmWRCXR9xSvhlw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:11:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6997 (0x1b55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A279C, serialNumber=0BA34E6430B10E6A7F2D29964425D1F714AF865C Validity Not Before: Mar 24 16:11:45 2026 GMT Not After : Mar 31 16:11:45 2026 GMT Subject: CN=69c2b7c1-9328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0f:e2:69:c1:e9:6b:8f:94:25:47:68:24:15: b6:a0:0a:99:0d:a1:13:3c:29:cc:d6:8b:fd:58:a9: 35:1e:46:68:33:70:88:96:13:1c:ea:ab:07:14:2b: f3:cb:8b:b4:93:58:e3:9a:e0:13:f0:26:8a:74:c4: c5:8f:95:67:6d:8b:03:e7:e8:20:6b:2e:d9:44:15: 84:c6:eb:21:b1:60:2e:25:ac:30:2c:65:0d:58:03: f8:1d:d6:62:28:11:52:cd:3e:c6:d8:c2:91:6c:e6: 77:5a:57:d9:6c:72:e8:3d:14:e2:40:79:f6:32:af: 42:7b:66:3b:c0:f7:58:77:5e:14:57:5f:54:cc:79: c2:24:39:c1:d9:e5:3b:7f:6f:16:5a:f8:e3:75:4b: d6:e0:cc:38:b7:1e:e5:9f:f7:84:a1:44:0f:8c:5c: 6b:d6:bf:19:f6:b9:10:18:58:23:88:1b:1d:61:f8: b8:32:64:1f:2c:79:f6:cb:34:22:30:51:d8:39:e8: 2b:ac:dc:83:ff:15:67:8d:e9:03:ef:16:c0:c8:56: 5b:24:2a:9a:8c:fb:2c:cc:dd:e2:ff:e4:b3:17:08: 91:7f:a1:35:f5:14:1e:9f:e2:c8:de:98:bb:c0:31: f1:8e:92:36:73:82:f9:17:d1:7d:bd:fa:5f:b6:d3: 9c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:C7:13:2C:D1:90:E4:89:1A:0E:58:9E:52:BC:E0:43:E1:41:21:16 X509v3 Authority Key Identifier: keyid:0B:A3:4E:64:30:B1:0E:6A:7F:2D:29:96:44:25:D1:F7:14:AF:86:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6NOZDCxDmp_LSmWRCXR9xSvhlw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:0c:07:03:09:4b:2f:67:a1:98:19:88:21:98:1a:a0:51:aa: 25:20:41:32:01:4e:fa:50:fc:c0:2d:97:c8:3a:55:56:5f:1a: 13:b4:9c:7c:f9:a5:88:8a:53:d8:2b:08:75:71:f4:c9:b6:40: 97:1b:d8:f4:cd:c1:d0:14:25:6a:cc:2a:d9:ba:e6:89:84:81: 57:35:66:34:d4:2c:e5:7c:f9:f2:d6:a0:43:73:38:50:f3:56: e0:7e:a6:b8:61:77:37:18:8c:c3:ab:1c:74:93:0d:1a:2a:4c: 27:d3:71:97:e3:4c:43:7a:b6:76:ee:91:43:59:30:a7:3b:2d: 0d:e1:9f:dc:f7:8f:f3:df:42:89:f0:49:9a:a9:5d:f4:1d:18: 23:be:33:5c:08:74:b2:a6:f3:2b:2b:86:1c:85:d8:35:37:f5: 7d:3d:cb:92:f6:74:61:b8:74:34:b3:94:89:83:3c:2a:cf:1d: 55:1c:5d:df:1b:92:b5:e7:e4:23:3b:fc:9a:7a:de:4f:77:8b: 4f:0c:82:c2:c1:a8:2c:b6:35:b5:7e:32:89:d0:c1:fb:14:b6: 8e:b3:4d:0b:45:a8:ed:91:f7:56:3a:d3:86:ce:a5:3b:16:09: e6:dd:8f:98:d3:35:b2:9c:c8:ce:cd:19:3b:ce:4a:52:94:28: a3:6c:33:cd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICG1UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTI3OUMxMTAvBgNVBAUTKDBCQTM0RTY0MzBCMTBFNkE3RjJEMjk5NjQ0MjVEMUY3 MTRBRjg2NUMwHhcNMjYwMzI0MTYxMTQ1WhcNMjYwMzMxMTYxMTQ1WjAYMRYwFAYD VQQDEw02OWMyYjdjMS05MzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqQ/iacHpa4+UJUdoJBW2oAqZDaETPCnM1ov9WKk1HkZoM3CIlhMc6qsHFCvz y4u0k1jjmuAT8CaKdMTFj5VnbYsD5+ggay7ZRBWExushsWAuJawwLGUNWAP4HdZi KBFSzT7G2MKRbOZ3WlfZbHLoPRTiQHn2Mq9Ce2Y7wPdYd14UV19UzHnCJDnB2eU7 f28WWvjjdUvW4Mw4tx7ln/eEoUQPjFxr1r8Z9rkQGFgjiBsdYfi4MmQfLHn2yzQi MFHYOegrrNyD/xVnjekD7xbAyFZbJCqajPsszN3i/+SzFwiRf6E19RQen+LI3pi7 wDHxjpI2c4L5F9F9vfpfttOcAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP3HEyzR kOSJGg5YnlK84EPhQSEWMB8GA1UdIwQYMBaAFAujTmQwsQ5qfy0plkQl0fcUr4Zc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjc5Qy8xQ0VCNzcxODMz NTExMUU3QkY0Qjk1ODZDNEY5QUUwMi9DNk5PWkRDeERtcF9MU21XUkNYUjl4U3Zo bHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M2Tk9aREN4RG1wX0xTbVdSQ1hSOXhTdmhsdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Mjc5Qy8xQ0VCNzcxODMzNTExMUU3QkY0Qjk1ODZDNEY5QUUwMi9DNk5PWkRDeERt cF9MU21XUkNYUjl4U3ZobHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuAwHAwlLL2ehmBmIIZgaoFGqJSBBMgFO+lD8wC2XyDpVVl8aE7ScfPmliIpT 2CsIdXH0ybZAlxvY9M3B0BQlaswq2brmiYSBVzVmNNQs5Xz58tagQ3M4UPNW4H6m uGF3NxiMw6scdJMNGipMJ9Nxl+NMQ3q2du6RQ1kwpzstDeGf3PeP899CifBJmqld 9B0YI74zXAh0sqbzKyuGHIXYNTf1fT3LkvZ0Ybh0NLOUiYM8Ks8dVRxd3xuStefk Izv8mnreT3eLTwyCwsGoLLY1tX4yidDB+xS2jrNNC0Wo7ZH3VjrThs6lOxYJ5t2P mNM1spzIzs0ZO85KUpQoo2wzzQ== -----END CERTIFICATE-----Generated at Thu Mar 26 07:14:59 2026 by rpki-client