$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft File: ech9xZWwwn0jMpvJkoSiPIv9oOc.mft (raw, json) Hash identifier: nxzBKMYGTr1KCB2kfqFynDjDRcrxNsuy08P24ailTgY= Subject key identifier: 6C:05:F5:A9:A3:98:75:08:FF:3B:9C:55:A7:8E:41:1B:C4:89:88:3F Authority key identifier: 79:C8:7D:C5:95:B0:C2:7D:23:32:9B:C9:92:84:A2:3C:8B:FD:A0:E7 Certificate issuer: /CN=A91B2D4F/serialNumber=79C87DC595B0C27D23329BC99284A23C8BFDA0E7 Certificate serial: 01FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft Manifest number: 01F6 Signing time: Fri 27 Mar 2026 02:43:27 +0000 Manifest this update: Fri 27 Mar 2026 02:43:26 +0000 Manifest next update: Fri 03 Apr 2026 02:43:26 +0000 Files and hashes: 1: ech9xZWwwn0jMpvJkoSiPIv9oOc.crl (hash: vTEOyPY4b1mpPMeExy4trtded9TCh7IWCM20+W0YKYw=) 2: 416EB4022F6111EE8C156634C4F9AE02.roa (hash: fjGpC/tzzFWbeBBortAKHNrafmR/+XWGojeVFa7vFyo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.crl rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 02:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 508 (0x1fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2D4F, serialNumber=79C87DC595B0C27D23329BC99284A23C8BFDA0E7 Validity Not Before: Mar 27 02:43:26 2026 GMT Not After : Apr 3 02:43:26 2026 GMT Subject: CN=69c5eecf-02c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:68:e6:10:bb:9b:c2:ab:7b:b0:b7:1c:5a:bf: eb:48:ba:bb:02:4f:a1:0c:33:ae:ca:34:69:ba:86: 32:59:50:62:4b:8d:06:a4:ea:8b:14:92:69:66:dc: f7:f7:76:26:9f:75:00:42:5b:f8:f6:14:6e:2d:1e: ac:92:3e:af:78:88:5c:17:3e:1b:c3:06:5d:1d:7d: 21:6d:76:87:51:ad:d5:7b:ee:ea:ed:d9:bc:f3:2d: 92:42:b3:32:93:33:df:8d:85:c6:44:9f:a4:23:a4: 0a:37:3b:65:00:4e:97:c3:f5:b2:02:20:4a:47:e5: 4a:91:6f:22:90:a9:42:5f:d8:7e:39:37:17:28:bb: 85:70:c1:f5:13:13:56:4c:23:cc:48:ed:85:ff:17: db:f6:da:a4:5f:7e:f9:ae:ea:13:32:d6:59:43:64: 5d:24:ef:1c:d8:7e:f3:8f:f8:30:72:d0:99:92:c2: 3f:f4:aa:36:44:da:44:bb:64:08:6d:d2:1d:f0:a0: c0:9b:89:64:92:3f:ff:a4:ce:9b:ce:75:99:c2:63: 2d:2b:6c:3f:77:e0:a0:44:13:f2:d0:f7:d0:84:79: cd:be:d7:45:a7:91:00:08:c0:a5:f6:a5:25:05:c7: 36:c8:04:22:1c:d0:9b:61:60:7c:bc:27:72:02:af: 15:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:05:F5:A9:A3:98:75:08:FF:3B:9C:55:A7:8E:41:1B:C4:89:88:3F X509v3 Authority Key Identifier: keyid:79:C8:7D:C5:95:B0:C2:7D:23:32:9B:C9:92:84:A2:3C:8B:FD:A0:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:bf:6a:f5:1c:3c:02:4d:5c:d1:99:00:66:5f:d6:41:95:6f: 2c:3b:1b:c3:b8:47:6f:01:80:ee:1b:bc:28:76:42:17:55:ff: 9b:41:38:0e:5c:31:46:93:a7:5f:26:41:23:13:e3:69:0e:23: a7:eb:c7:d6:77:52:ee:61:c9:91:ce:23:26:5e:5c:a2:7f:71: 64:b1:72:ec:cd:4f:34:77:5a:fb:37:23:a6:b3:14:51:b8:83: a6:3d:5b:44:83:6e:19:42:b6:50:5b:40:99:19:03:9c:38:5d: 5a:0f:29:00:2b:77:f5:76:47:1a:1e:72:03:53:d4:19:cc:82: 5a:6e:00:ca:f9:98:78:6d:81:ec:c1:ff:02:c0:30:e7:51:cd: 3f:6b:47:a8:2c:51:55:a6:19:58:69:77:c4:c0:26:5d:50:49: a9:4b:6e:ff:cd:dc:d6:72:35:41:22:2b:b9:54:d2:f8:6c:55: 7c:39:c6:cb:5b:89:9d:17:98:7f:1c:51:81:cc:b8:37:c0:03: 75:ed:ec:0c:20:2d:c7:44:d3:e2:bf:94:ae:88:3e:fd:18:3c: 5f:b0:9d:98:f8:45:a0:c7:5b:95:24:6e:83:94:2b:2a:66:d7: db:1a:57:fb:59:93:68:e0:7e:a0:dc:fa:8b:4f:cf:dc:b2:05: 2e:93:4d:80 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJENEYxMTAvBgNVBAUTKDc5Qzg3REM1OTVCMEMyN0QyMzMyOUJDOTkyODRBMjND OEJGREEwRTcwHhcNMjYwMzI3MDI0MzI2WhcNMjYwNDAzMDI0MzI2WjAYMRYwFAYD VQQDEw02OWM1ZWVjZi0wMmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0WjmELubwqt7sLccWr/rSLq7Ak+hDDOuyjRpuoYyWVBiS40GpOqLFJJpZtz3 93Ymn3UAQlv49hRuLR6skj6veIhcFz4bwwZdHX0hbXaHUa3Ve+7q7dm88y2SQrMy kzPfjYXGRJ+kI6QKNztlAE6Xw/WyAiBKR+VKkW8ikKlCX9h+OTcXKLuFcMH1ExNW TCPMSO2F/xfb9tqkX375ruoTMtZZQ2RdJO8c2H7zj/gwctCZksI/9Ko2RNpEu2QI bdId8KDAm4lkkj//pM6bznWZwmMtK2w/d+CgRBPy0PfQhHnNvtdFp5EACMCl9qUl Bcc2yAQiHNCbYWB8vCdyAq8V7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGwF9amj mHUI/zucVaeOQRvEiYg/MB8GA1UdIwQYMBaAFHnIfcWVsMJ9IzKbyZKEojyL/aDn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkQ0Ri9FRjg3NTUxODJG NjAxMUVFQkY3Rjc3MzNDNEY5QUUwMi9lY2g5eFpXd3duMGpNcHZKa29TaVBJdjlv T2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VjaDl4Wld3d24wak1wdkprb1NpUEl2OW9PYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkQ0Ri9FRjg3NTUxODJGNjAxMUVFQkY3Rjc3MzNDNEY5QUUwMi9lY2g5eFpXd3du MGpNcHZKa29TaVBJdjlvT2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnL9q9Rw8Ak1c0ZkAZl/WQZVvLDsbw7hHbwGA7hu8KHZCF1X/m0E4DlwxRpOn XyZBIxPjaQ4jp+vH1ndS7mHJkc4jJl5con9xZLFy7M1PNHda+zcjprMUUbiDpj1b RINuGUK2UFtAmRkDnDhdWg8pACt39XZHGh5yA1PUGcyCWm4AyvmYeG2B7MH/AsAw 51HNP2tHqCxRVaYZWGl3xMAmXVBJqUtu/83c1nI1QSIruVTS+GxVfDnGy1uJnReY fxxRgcy4N8ADde3sDCAtx0TT4r+Urog+/Rg8X7CdmPhFoMdblSRug5QrKmbX2xpX +1mTaOB+oNz6i0/P3LIFLpNNgA== -----END CERTIFICATE-----Generated at Sat Mar 28 08:43:46 2026 by rpki-client