$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft File: B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft (raw, json) Hash identifier: qI8xA7nO6rVhRmgKWePg/vatAIWG+QdElYMgAjh2JiQ= Subject key identifier: DA:82:1E:7E:27:CE:F2:22:12:70:45:E3:9F:24:38:86:61:D3:19:63 Authority key identifier: 07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60 Certificate issuer: /CN=A91DF93A/serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260 Certificate serial: 0962 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft Manifest number: 08EF Signing time: Tue 24 Mar 2026 20:19:40 +0000 Manifest this update: Tue 24 Mar 2026 20:19:39 +0000 Manifest next update: Tue 31 Mar 2026 20:19:39 +0000 Files and hashes: 1: B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl (hash: jRlaA8htse5cEj1uVzINYFg/SS8x+IQ4QIc1cVs3C58=) 2: 4944017C8FAF11F0B59F0948C4F9AE02.roa (hash: LH5rCnW4AlRTA7oXpdl4war9anlv1eQFsMx7zEz8aDs=) 3: 8D5442E28A4011F093E0F94DC4F9AE02.roa (hash: RA/HBE67KtYqNms2jFNMu68ISNV3T86Ae6alog9HrwA=) 4: 5B5CBC68751B11EB9065A822C4F9AE02.roa (hash: VbE9wtNoONHpVqfDihjQrObKeQw1ADJiCzljyCKB/mQ=) 5: F8C02F3CDA4E11EC9C09A446C4F9AE02.roa (hash: HAMfTfZzKgQr1S5Al/mmH4wqYSjJ80ubOBRue4CFJYE=) 6: A709BC948FAE11F09FAE9C69C4F9AE02.roa (hash: EIHD7GlLiYQzwkSdEfGdwiEIm8l3w0dE6JK5q3KM3q4=) 7: E518ECC6D52A11ED99D55E2EC4F9AE02.roa (hash: fcYY8JCJfGpn6U42SxS4kdU4DDiWQRVoqOsbnKMAPqQ=) 8: FEEC2C90643811EB9D7F624EC4F9AE02.roa (hash: y6W9Xq4d8zRGRJelWYQQv1r/i5L4bEaH/ibWNQgVyoU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2402 (0x962) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF93A, serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260 Validity Not Before: Mar 24 20:19:39 2026 GMT Not After : Mar 31 20:19:39 2026 GMT Subject: CN=69c2f1db-1708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7b:f9:7e:c1:fd:e7:91:ff:17:25:5d:36:de: 33:f6:b5:6b:4c:83:6c:87:f9:31:9a:a5:0c:5a:15: a7:f7:4e:54:31:20:e9:ee:e6:74:40:be:43:ad:b9: 04:3f:34:7c:49:6c:87:1d:fc:9b:43:e8:8d:70:4c: e1:ad:32:13:d6:54:f8:91:3e:fc:93:3c:a3:78:92: ed:6e:6d:b0:1b:15:6a:d3:ad:f3:ed:8a:77:7b:48: 99:a3:66:bd:b5:64:c6:f8:de:30:94:eb:85:d4:5f: 0b:bb:8f:8f:c3:b9:e9:ea:5e:94:44:fe:0e:78:61: 5d:75:d6:94:be:b9:9f:52:39:9c:83:dd:90:f6:3e: e1:c4:7c:d5:aa:72:67:43:65:a8:57:a2:6d:94:8d: 29:0d:1c:e1:7a:45:d6:12:74:6e:f2:bf:e2:0f:5a: 68:cf:b5:db:39:2d:74:28:a1:ea:7b:12:56:8c:c4: 67:ec:f1:99:f1:9f:ff:09:dd:01:ba:0f:07:ac:3a: f2:c6:84:8b:7b:b1:c1:4b:71:93:d6:d4:9f:a6:e2: d9:fc:c5:ee:d8:c4:22:db:fa:2b:21:76:e5:4c:a9: 1d:3b:46:48:d0:4b:70:d0:a1:1c:2a:aa:0b:2b:de: 49:c6:5e:71:49:ba:8f:c4:d9:b8:33:4e:6e:e8:5a: ee:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:82:1E:7E:27:CE:F2:22:12:70:45:E3:9F:24:38:86:61:D3:19:63 X509v3 Authority Key Identifier: keyid:07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:96:87:2f:8f:d8:c5:a9:ef:b7:0e:af:93:4f:0c:ee:94:41: 42:6a:2d:21:9f:df:f6:d6:ae:fb:7b:c7:3e:dc:56:61:d7:82: 47:93:57:dd:d4:58:c2:e5:61:1c:30:87:a7:90:2b:64:93:ea: a8:75:8a:90:76:0b:ea:c2:38:55:00:13:b8:7e:ad:a1:ca:9f: a3:bd:df:8f:04:53:5b:c2:7e:5b:2d:92:dd:ba:81:b2:a1:8d: 41:31:a5:a2:23:46:18:1e:e5:d3:21:3a:a0:50:30:c7:b8:4c: 01:08:74:bd:cd:bd:25:93:cd:df:20:fb:f4:f7:5d:aa:56:96: 67:f3:89:98:b5:3c:3b:f1:8f:52:33:c7:d7:bc:c5:d7:07:11: f8:c0:c4:af:43:dd:27:c8:e1:f6:b0:43:07:b7:7d:61:ad:1d: 5e:73:cc:90:95:7b:eb:10:f2:ee:7c:c7:69:45:7d:70:c6:81: 80:5f:fc:5d:30:9d:97:f7:8b:87:24:eb:3e:42:da:22:de:fc: 56:7b:da:c1:0a:b5:f0:80:a8:4f:e8:78:02:84:fa:06:08:1b: 9e:b2:0e:57:5a:d3:96:50:72:90:0f:fa:30:4d:62:a2:35:7e: 5f:39:44:78:9d:6e:00:84:46:09:49:ac:7e:76:fd:a1:3f:64: a7:d9:07:39 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY5M0ExMTAvBgNVBAUTKDA3QTFDMDg1NDVDQUNDNjVFMDg4MkQ0OUU5RjJGOENG RDJCRTgyNjAwHhcNMjYwMzI0MjAxOTM5WhcNMjYwMzMxMjAxOTM5WjAYMRYwFAYD VQQDEw02OWMyZjFkYi0xNzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzXv5fsH955H/FyVdNt4z9rVrTINsh/kxmqUMWhWn905UMSDp7uZ0QL5DrbkE PzR8SWyHHfybQ+iNcEzhrTIT1lT4kT78kzyjeJLtbm2wGxVq063z7Yp3e0iZo2a9 tWTG+N4wlOuF1F8Lu4+Pw7np6l6URP4OeGFdddaUvrmfUjmcg92Q9j7hxHzVqnJn Q2WoV6JtlI0pDRzhekXWEnRu8r/iD1poz7XbOS10KKHqexJWjMRn7PGZ8Z//Cd0B ug8HrDryxoSLe7HBS3GT1tSfpuLZ/MXu2MQi2/orIXblTKkdO0ZI0Etw0KEcKqoL K95Jxl5xSbqPxNm4M05u6FruYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNqCHn4n zvIiEnBF458kOIZh0xljMB8GA1UdIwQYMBaAFAehwIVFysxl4IgtSeny+M/SvoJg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjkzQS9GRjUxRTU5RUU1 RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9CNkhBaFVYS3pHWGdpQzFKNmZMNHo5Sy1n bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I2SEFoVVhLekdYZ2lDMUo2Zkw0ejlLLWdtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjkzQS9GRjUxRTU5RUU1RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9CNkhBaFVYS3pH WGdpQzFKNmZMNHo5Sy1nbUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASJaHL4/Yxanvtw6vk08M7pRBQmotIZ/f9tau+3vHPtxWYdeCR5NX3dRYwuVh HDCHp5ArZJPqqHWKkHYL6sI4VQATuH6tocqfo73fjwRTW8J+Wy2S3bqBsqGNQTGl oiNGGB7l0yE6oFAwx7hMAQh0vc29JZPN3yD79PddqlaWZ/OJmLU8O/GPUjPH17zF 1wcR+MDEr0PdJ8jh9rBDB7d9Ya0dXnPMkJV76xDy7nzHaUV9cMaBgF/8XTCdl/eL hyTrPkLaIt78VnvawQq18ICoT+h4AoT6BggbnrIOV1rTllBykA/6ME1iojV+XzlE eJ1uAIRGCUmsfnb9oT9kp9kHOQ== -----END CERTIFICATE-----Generated at Thu Mar 26 02:37:12 2026 by rpki-client