$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.mft File: 6ibTI4Mc2ho4TpHg_jiR2wzrLsg.mft (raw, json) Hash identifier: OVlRgt4klUNr6qyBeTKa2Km7aFHsV5nLLytkdkFo0DQ= Subject key identifier: 77:0A:FF:48:3A:D7:6A:D6:D4:DB:8F:03:1B:02:12:66:64:20:12:15 Authority key identifier: EA:26:D3:23:83:1C:DA:1A:38:4E:91:E0:FE:38:91:DB:0C:EB:2E:C8 Certificate issuer: /CN=A91F6C39/serialNumber=EA26D323831CDA1A384E91E0FE3891DB0CEB2EC8 Certificate serial: 064A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.mft Manifest number: 063E Signing time: Tue 24 Mar 2026 22:26:07 +0000 Manifest this update: Tue 24 Mar 2026 22:26:06 +0000 Manifest next update: Tue 31 Mar 2026 22:26:06 +0000 Files and hashes: 1: 6ibTI4Mc2ho4TpHg_jiR2wzrLsg.crl (hash: egNBoICXJovej9Nbm4+pTJVNa8wfpkgMug8BkN7aIzU=) 2: 6F9ACE76CE7211EBAF46B61AC4F9AE02.roa (hash: mYcX8Mou9RkMoZH6tAQ0rBX8I2qYZv51Ux4N/qA8EJA=) 3: 7EFC59BA5D0511EEB1F12C3BC4F9AE02.roa (hash: wVTtBB6GnMKv7oNe8pedju8FoDxU6Pr/R9wj9DvMQIc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.crl rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:26:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1610 (0x64a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6C39, serialNumber=EA26D323831CDA1A384E91E0FE3891DB0CEB2EC8 Validity Not Before: Mar 24 22:26:06 2026 GMT Not After : Mar 31 22:26:06 2026 GMT Subject: CN=69c30f7f-335e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:87:66:d1:64:7b:4c:37:5b:a9:46:7b:7b:90: 1d:32:3b:ac:c1:0f:86:04:df:86:cd:bb:ed:cc:ae: 37:dd:de:73:52:d7:82:6d:d1:18:11:ae:43:cf:5e: 66:0d:bc:2f:4d:96:65:c5:8d:14:a7:34:62:82:9d: a2:44:89:3a:e8:65:ea:56:f8:c3:a2:d3:b2:75:ef: 64:ea:b8:0d:67:73:48:67:e7:6c:2b:0d:67:e5:85: f2:d5:0c:b5:47:76:65:e5:17:32:df:3b:c5:7e:90: cc:dc:d9:9e:0e:80:82:ac:7c:75:53:40:84:5b:b1: 33:7c:15:f7:b2:63:20:0f:8a:50:37:80:1b:29:5b: c1:d0:21:0e:d9:a1:4e:27:26:8e:09:dd:3e:f3:20: 4b:fe:f7:88:77:41:a7:b7:7e:fb:b5:bf:24:6c:75: 10:97:0b:9e:23:35:b3:86:4e:7e:b2:36:29:7c:0a: 75:d3:ce:7d:fa:88:c4:fe:e9:0f:05:d2:8c:dd:32: e4:46:b8:7b:7c:cf:bf:7a:e1:39:e2:7f:1f:cb:17: 4f:87:b1:fb:a8:58:57:82:80:8a:4e:0d:8f:48:ee: 64:8f:2f:47:55:60:48:0d:e8:50:4d:5b:6c:80:f0: f1:59:c2:29:dc:02:a1:b1:40:81:f3:c6:e6:33:11: 2c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:0A:FF:48:3A:D7:6A:D6:D4:DB:8F:03:1B:02:12:66:64:20:12:15 X509v3 Authority Key Identifier: keyid:EA:26:D3:23:83:1C:DA:1A:38:4E:91:E0:FE:38:91:DB:0C:EB:2E:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:88:08:17:9a:53:d7:d9:b3:63:98:ce:7d:72:0b:b5:2f:bc: ec:be:d0:f0:0c:fc:a1:1a:d9:6b:70:45:21:6a:6b:cf:5f:71: 3f:b7:3a:1a:1d:f6:8e:8f:ee:4e:74:34:8f:c1:ff:8b:0e:e7: f2:77:1a:1d:7e:5d:f9:c7:6a:30:4d:39:64:65:c4:71:cc:23: d4:2d:88:33:5e:58:d4:ac:d2:29:e4:44:3e:35:f8:6f:e7:b6: 21:4b:8e:a4:9b:7d:63:80:d4:b4:58:8b:b4:0d:d7:bd:19:11: 70:a1:ba:ea:fe:d7:34:81:d1:e6:57:f9:90:94:33:cd:b9:f0: fa:13:0c:50:54:7f:96:ce:5e:6a:bc:12:b5:a9:3e:7e:5e:a4: d3:be:71:5c:f5:f3:a6:c8:af:d6:e1:bf:43:8b:d5:cf:ff:74: 57:c1:60:4c:8e:74:7f:96:c7:55:8f:ad:8c:ff:21:44:98:49: d9:b3:8d:de:ab:11:bd:cd:2e:cd:67:69:8a:e4:46:98:83:08: 24:91:8c:e0:02:13:05:52:55:7f:74:0f:25:de:42:59:c2:62: 78:58:a2:88:6a:3e:15:90:b6:32:40:ed:84:11:34:5b:9f:07: 2a:dd:f1:7e:a4:f3:c7:cb:c3:92:46:09:7c:c8:f6:1c:c6:4f: de:5e:0c:27 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZDMzkxMTAvBgNVBAUTKEVBMjZEMzIzODMxQ0RBMUEzODRFOTFFMEZFMzg5MURC MENFQjJFQzgwHhcNMjYwMzI0MjIyNjA2WhcNMjYwMzMxMjIyNjA2WjAYMRYwFAYD VQQDEw02OWMzMGY3Zi0zMzVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuIdm0WR7TDdbqUZ7e5AdMjuswQ+GBN+GzbvtzK433d5zUteCbdEYEa5Dz15m DbwvTZZlxY0UpzRigp2iRIk66GXqVvjDotOyde9k6rgNZ3NIZ+dsKw1n5YXy1Qy1 R3Zl5Rcy3zvFfpDM3NmeDoCCrHx1U0CEW7EzfBX3smMgD4pQN4AbKVvB0CEO2aFO JyaOCd0+8yBL/veId0Gnt377tb8kbHUQlwueIzWzhk5+sjYpfAp10859+ojE/ukP BdKM3TLkRrh7fM+/euE54n8fyxdPh7H7qFhXgoCKTg2PSO5kjy9HVWBIDehQTVts gPDxWcIp3AKhsUCB88bmMxEsWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHcK/0g6 12rW1NuPAxsCEmZkIBIVMB8GA1UdIwQYMBaAFOom0yODHNoaOE6R4P44kdsM6y7I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkMzOS83QkYwRjI3NENF NzAxMUVCQTdFMDlCMUFDNEY5QUUwMi82aWJUSTRNYzJobzRUcEhnX2ppUjJ3enJM c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZpYlRJNE1jMmhvNFRwSGdfamlSMnd6ckxzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkMzOS83QkYwRjI3NENFNzAxMUVCQTdFMDlCMUFDNEY5QUUwMi82aWJUSTRNYzJo bzRUcEhnX2ppUjJ3enJMc2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMIgIF5pT19mzY5jOfXILtS+87L7Q8Az8oRrZa3BFIWprz19xP7c6Gh32jo/u TnQ0j8H/iw7n8ncaHX5d+cdqME05ZGXEccwj1C2IM15Y1KzSKeREPjX4b+e2IUuO pJt9Y4DUtFiLtA3XvRkRcKG66v7XNIHR5lf5kJQzzbnw+hMMUFR/ls5earwStak+ fl6k075xXPXzpsiv1uG/Q4vVz/90V8FgTI50f5bHVY+tjP8hRJhJ2bON3qsRvc0u zWdpiuRGmIMIJJGM4AITBVJVf3QPJd5CWcJieFiiiGo+FZC2MkDthBE0W58HKt3x fqTzx8vDkkYJfMj2HMZP3l4MJw== -----END CERTIFICATE-----Generated at Thu Mar 26 04:44:43 2026 by rpki-client