$ rpki-client -vvf rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft File: 6N-NXkyE2ofXKac8HE6GETgassE.mft (raw, json) Hash identifier: I4U0nTpt2W5ToYKWkdbZCrxiubKu9e4XlLx3G2E+rrs= Subject key identifier: A6:2E:89:D6:CB:C0:64:D5:90:CF:D5:26:F8:C1:E1:55:35:E7:01:3C Authority key identifier: E8:DF:8D:5E:4C:84:DA:87:D7:29:A7:3C:1C:4E:86:11:38:1A:B2:C1 Certificate issuer: /CN=A91B01C7/serialNumber=E8DF8D5E4C84DA87D729A73C1C4E8611381AB2C1 Certificate serial: 2AD9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft Manifest number: 2AAD Signing time: Tue 24 Mar 2026 15:31:28 +0000 Manifest this update: Tue 24 Mar 2026 15:31:28 +0000 Manifest next update: Tue 31 Mar 2026 15:31:28 +0000 Files and hashes: 1: 6N-NXkyE2ofXKac8HE6GETgassE.crl (hash: +5+pBlZ10y0MClivfi6scCdoxo3otMCL1xfIKoiiA6E=) 2: 3785190EF0FE11EEA034D07EC4F9AE02.roa (hash: ViUN1ktDgOXxiF30cbqP6I4Vb/rzbxLloaN/i3nx4IY=) 3: E86E188A795F11EFBF3B491CC4F9AE02.roa (hash: XjnN+h9msR5bdiDBc0pY+bbyuYDH3qgvu5jG8SVLQ0Y=) 4: 445DB498796011EFA7E9391DC4F9AE02.roa (hash: k2tDc+ez6BNq63hqlmOcWT3woUQyCLcLZFk7DkkdvX8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.crl rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:31:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10969 (0x2ad9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B01C7, serialNumber=E8DF8D5E4C84DA87D729A73C1C4E8611381AB2C1 Validity Not Before: Mar 24 15:31:28 2026 GMT Not After : Mar 31 15:31:28 2026 GMT Subject: CN=69c2ae50-7f14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d8:62:05:3c:7c:27:e2:12:e0:07:23:0d:14: d2:6c:91:e2:44:48:da:34:1b:03:8d:fb:50:aa:80: 56:0c:fb:28:4e:20:66:65:e1:1a:ff:fb:12:25:cf: 4b:05:da:b0:30:16:8c:24:eb:3a:dc:61:e3:13:97: 33:7c:5a:c5:b6:5a:5e:6b:43:77:63:89:68:05:e3: 79:96:c4:f3:37:ea:63:d8:63:53:e3:04:ac:b8:46: 9e:b3:b3:90:13:8c:9d:da:5f:ed:b3:61:65:10:18: 9e:c4:e6:56:5b:29:99:97:6e:bd:99:7b:8f:51:17: 74:9d:62:af:22:f4:86:18:95:8d:8d:bb:de:cc:86: cd:b8:29:c5:a1:2e:65:eb:28:df:d6:95:0d:cf:1c: 35:45:e6:c7:41:b5:b8:09:bb:d2:b1:36:ec:ee:c2: d8:76:fa:3e:4b:05:0f:31:39:82:1c:e2:3d:e3:a5: 3e:e3:ed:17:64:4e:19:b8:7d:28:19:65:88:5c:d8: fd:20:f5:ff:23:8e:11:8b:cb:e5:c6:c0:15:d5:61: 36:94:eb:ea:10:97:ac:56:42:f1:8e:82:59:fa:b8: f9:e8:04:6d:bc:2e:91:dc:ff:de:8b:5a:35:f9:ce: 84:c9:bb:c2:fc:a2:98:f9:c5:7a:89:d0:ad:92:7b: aa:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:2E:89:D6:CB:C0:64:D5:90:CF:D5:26:F8:C1:E1:55:35:E7:01:3C X509v3 Authority Key Identifier: keyid:E8:DF:8D:5E:4C:84:DA:87:D7:29:A7:3C:1C:4E:86:11:38:1A:B2:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:7e:b4:0f:d1:55:10:37:1b:71:4d:8a:75:8c:8b:8a:ae:d6: 57:26:d7:64:92:15:c7:9a:38:b5:de:0c:f4:15:ac:9d:84:78: 0c:91:72:68:c7:e4:3a:dd:10:f7:e7:3a:72:13:1c:d1:22:0a: be:29:12:be:3f:b0:6a:fe:37:de:0b:7e:cf:68:59:ec:b9:e5: 63:57:05:d1:af:38:b8:79:54:76:0c:32:41:e6:1c:68:50:1e: 38:0a:c1:69:11:4b:05:6f:aa:94:4f:a1:b8:16:37:00:32:be: c5:e9:07:03:1e:9d:80:55:29:60:15:34:7b:5a:92:f3:18:d6: 52:81:86:5b:80:19:5c:08:ae:2d:12:81:99:2b:c6:05:cf:5e: bd:3a:ec:91:00:45:a5:10:88:e8:c6:fc:3b:d2:81:5a:51:15: 35:28:42:7c:2b:23:c6:d8:38:76:5d:0d:d9:82:2e:5a:8d:6b: 2b:61:85:20:dc:db:e0:7a:b0:ff:13:6e:16:ff:55:10:52:4f: 1e:f9:eb:8e:46:76:e2:b3:a5:ea:c3:ae:e8:04:55:2f:47:ea: 51:ae:16:21:2d:c8:53:ae:fc:26:d8:ad:5e:a0:bb:ef:81:63: 32:a6:a6:56:91:ad:76:34:51:94:29:62:93:ed:31:5f:69:16: 49:83:79:cf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICKtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAxQzcxMTAvBgNVBAUTKEU4REY4RDVFNEM4NERBODdENzI5QTczQzFDNEU4NjEx MzgxQUIyQzEwHhcNMjYwMzI0MTUzMTI4WhcNMjYwMzMxMTUzMTI4WjAYMRYwFAYD VQQDEw02OWMyYWU1MC03ZjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoNhiBTx8J+IS4AcjDRTSbJHiREjaNBsDjftQqoBWDPsoTiBmZeEa//sSJc9L BdqwMBaMJOs63GHjE5czfFrFtlpea0N3Y4loBeN5lsTzN+pj2GNT4wSsuEaes7OQ E4yd2l/ts2FlEBiexOZWWymZl269mXuPURd0nWKvIvSGGJWNjbvezIbNuCnFoS5l 6yjf1pUNzxw1RebHQbW4CbvSsTbs7sLYdvo+SwUPMTmCHOI946U+4+0XZE4ZuH0o GWWIXNj9IPX/I44Ri8vlxsAV1WE2lOvqEJesVkLxjoJZ+rj56ARtvC6R3P/ei1o1 +c6EybvC/KKY+cV6idCtknuqowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKYuidbL wGTVkM/VJvjB4VU15wE8MB8GA1UdIwQYMBaAFOjfjV5MhNqH1ymnPBxOhhE4GrLB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDFDNy85N0NGMjBGQTMz MjMxMUU0QTZFNzQ5MTFDNEY5QUUwMi82Ti1OWGt5RTJvZlhLYWM4SEU2R0VUZ2Fz c0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZOLU5Ya3lFMm9mWEthYzhIRTZHRVRnYXNzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDFDNy85N0NGMjBGQTMzMjMxMUU0QTZFNzQ5MTFDNEY5QUUwMi82Ti1OWGt5RTJv ZlhLYWM4SEU2R0VUZ2Fzc0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUX60D9FVEDcbcU2KdYyLiq7WVybXZJIVx5o4td4M9BWsnYR4DJFyaMfkOt0Q 9+c6chMc0SIKvikSvj+wav433gt+z2hZ7LnlY1cF0a84uHlUdgwyQeYcaFAeOArB aRFLBW+qlE+huBY3ADK+xekHAx6dgFUpYBU0e1qS8xjWUoGGW4AZXAiuLRKBmSvG Bc9evTrskQBFpRCI6Mb8O9KBWlEVNShCfCsjxtg4dl0N2YIuWo1rK2GFINzb4Hqw /xNuFv9VEFJPHvnrjkZ24rOl6sOu6ARVL0fqUa4WIS3IU678JtitXqC774FjMqam VpGtdjRRlClik+0xX2kWSYN5zw== -----END CERTIFICATE-----Generated at Thu Mar 26 04:44:31 2026 by rpki-client