$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.mft File: he6QOP_DVBq9-33Z7TPyquNy54w.mft (raw, json) Hash identifier: V9HypwJ4gQnvmksLHu9+sgb87dII0MzUG+8Tl8O2zVs= Subject key identifier: FB:3E:9B:48:1A:12:92:A8:74:A9:2E:B2:76:D0:83:04:24:F6:BA:FE Authority key identifier: 85:EE:90:38:FF:C3:54:1A:BD:FB:7D:D9:ED:33:F2:AA:E3:72:E7:8C Certificate issuer: /CN=A91FF5E4/serialNumber=85EE9038FFC3541ABDFB7DD9ED33F2AAE372E78C Certificate serial: 0631 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6QOP_DVBq9-33Z7TPyquNy54w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.mft Manifest number: 0614 Signing time: Tue 24 Mar 2026 22:35:09 +0000 Manifest this update: Tue 24 Mar 2026 22:35:08 +0000 Manifest next update: Tue 31 Mar 2026 22:35:08 +0000 Files and hashes: 1: he6QOP_DVBq9-33Z7TPyquNy54w.crl (hash: r5CrQjBk4inQNbVwDu5h6nNq5PVHenfA7SCC5RbCZIo=) 2: 09182D38084E11EF89D29620C4F9AE02.roa (hash: SuNBYkbcHt/E/yDdSZbsjsp7zc+8rseF2Of8cM/fHb4=) 3: A6EF097068F911F092D77151C4F9AE02.roa (hash: 7IDRB+gCfRdMDyJ7PzWwJWumz+UxY0a58MybMwDHWJQ=) 4: 7AFCC818E38611EB8BC17765C4F9AE02.roa (hash: 3Cr/pccyDDHFzNo5H8nu6zPrLpYVCpjD2Q93h8Zz6zQ=) 5: 07FBA006084E11EF89D29620C4F9AE02.roa (hash: WCC6UXi4R+1X1dVKcTmUaZE1whe9HYXD5VTHWuUKKDc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.crl rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6QOP_DVBq9-33Z7TPyquNy54w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:35:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1585 (0x631) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF5E4, serialNumber=85EE9038FFC3541ABDFB7DD9ED33F2AAE372E78C Validity Not Before: Mar 24 22:35:08 2026 GMT Not After : Mar 31 22:35:08 2026 GMT Subject: CN=69c3119d-3d86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:07:51:fe:15:ce:47:92:e9:ac:ea:91:5c:a5: 46:3e:86:ab:aa:07:ff:61:23:41:83:03:15:cd:72: 23:3a:67:62:24:ae:a4:8b:3e:37:34:72:41:68:f2: d0:f5:45:0f:0f:a2:44:5c:55:ab:bd:ba:0c:16:fa: 1e:39:6c:51:5b:63:5e:74:c7:b6:06:72:94:96:79: 82:a3:a3:7e:57:3c:98:3d:3d:d7:f2:3c:bc:10:9f: 43:70:1a:f5:54:c9:bb:bd:fb:e3:f1:5e:20:21:ea: ab:9c:89:b4:4c:e3:3c:0c:43:70:d0:d4:59:04:3c: 86:47:5d:0d:15:ab:1c:31:07:50:8a:7b:d0:af:f1: c1:b1:d0:d2:72:c5:10:44:fb:6c:e9:28:7e:46:0c: 75:6e:7f:e0:1d:0b:e9:96:c1:42:dc:98:60:b9:92: a6:48:2b:b5:d6:3e:86:d8:a3:c7:5b:ff:bf:bf:b8: 8b:d1:bf:ea:4c:5e:54:0c:1d:f3:c5:38:c6:04:8b: 0f:ab:4b:ec:67:63:8d:a6:52:6f:bb:c3:fc:f7:73: 45:27:41:df:52:24:31:ae:33:29:bb:3e:bd:9e:e3: 03:85:a1:47:29:9b:06:2d:03:21:13:74:db:79:c0: e1:e7:4e:e2:ca:e2:f6:91:29:45:1b:2e:24:04:41: a8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:3E:9B:48:1A:12:92:A8:74:A9:2E:B2:76:D0:83:04:24:F6:BA:FE X509v3 Authority Key Identifier: keyid:85:EE:90:38:FF:C3:54:1A:BD:FB:7D:D9:ED:33:F2:AA:E3:72:E7:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6QOP_DVBq9-33Z7TPyquNy54w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:b7:92:61:d7:1a:16:4d:e3:be:9c:b7:1b:f9:2d:3b:00:13: 5e:4e:f8:2f:02:24:7b:3d:4c:e6:0c:69:99:ba:24:b3:dc:e1: e4:60:a8:c7:ad:a5:ba:9d:2a:b6:0a:6a:d6:b5:18:ef:75:e7: ae:52:96:ce:e9:b4:08:ee:a9:f2:0c:bd:f6:c1:d3:55:8c:ef: 14:8f:e2:33:76:fd:d0:3d:4d:16:88:d6:18:54:d1:53:bd:a4: fa:0d:91:4a:4d:a6:66:5d:b0:59:5e:f4:56:e5:01:97:46:53: e7:0b:61:a4:56:0b:99:83:4a:ae:e9:6b:00:a5:86:e6:fc:d4: 83:57:86:20:ab:c0:00:56:6c:be:59:6d:15:14:aa:6f:ec:3d: 4c:23:e7:c7:01:5c:66:f2:5e:11:7d:a4:60:14:10:6a:1b:62: 67:90:09:54:04:ad:29:bd:d9:66:db:9f:c5:8c:c3:b6:45:5b: bc:96:d2:06:1c:6a:f4:a8:67:43:0f:73:41:a6:7e:df:88:08: 4d:c2:5d:18:c3:cf:51:ef:43:a0:02:b2:ca:6f:03:21:73:aa: 81:e6:1c:2c:fa:15:5f:40:59:15:0b:b6:4b:da:d7:e8:b8:28: e3:ed:44:c2:df:ff:aa:32:e1:23:33:c8:0c:7f:a8:20:47:99: 9e:df:d9:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY1RTQxMTAvBgNVBAUTKDg1RUU5MDM4RkZDMzU0MUFCREZCN0REOUVEMzNGMkFB RTM3MkU3OEMwHhcNMjYwMzI0MjIzNTA4WhcNMjYwMzMxMjIzNTA4WjAYMRYwFAYD VQQDEw02OWMzMTE5ZC0zZDg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwwdR/hXOR5LprOqRXKVGPoarqgf/YSNBgwMVzXIjOmdiJK6kiz43NHJBaPLQ 9UUPD6JEXFWrvboMFvoeOWxRW2NedMe2BnKUlnmCo6N+VzyYPT3X8jy8EJ9DcBr1 VMm7vfvj8V4gIeqrnIm0TOM8DENw0NRZBDyGR10NFascMQdQinvQr/HBsdDScsUQ RPts6Sh+Rgx1bn/gHQvplsFC3JhguZKmSCu11j6G2KPHW/+/v7iL0b/qTF5UDB3z xTjGBIsPq0vsZ2ONplJvu8P893NFJ0HfUiQxrjMpuz69nuMDhaFHKZsGLQMhE3Tb ecDh507iyuL2kSlFGy4kBEGoeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPs+m0ga EpKodKkusnbQgwQk9rr+MB8GA1UdIwQYMBaAFIXukDj/w1Qavft92e0z8qrjcueM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjVFNC9FRDA3OURGRUUz ODQxMUVCQTg1OTNCNjVDNEY5QUUwMi9oZTZRT1BfRFZCcTktMzNaN1RQeXF1Tnk1 NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hlNlFPUF9EVkJxOS0zM1o3VFB5cXVOeTU0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjVFNC9FRDA3OURGRUUzODQxMUVCQTg1OTNCNjVDNEY5QUUwMi9oZTZRT1BfRFZC cTktMzNaN1RQeXF1Tnk1NHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxreSYdcaFk3jvpy3G/ktOwATXk74LwIkez1M5gxpmboks9zh5GCox62lup0q tgpq1rUY73XnrlKWzum0CO6p8gy99sHTVYzvFI/iM3b90D1NFojWGFTRU72k+g2R Sk2mZl2wWV70VuUBl0ZT5wthpFYLmYNKrulrAKWG5vzUg1eGIKvAAFZsvlltFRSq b+w9TCPnxwFcZvJeEX2kYBQQahtiZ5AJVAStKb3ZZtufxYzDtkVbvJbSBhxq9Khn Qw9zQaZ+34gITcJdGMPPUe9DoAKyym8DIXOqgeYcLPoVX0BZFQu2S9rX6Lgo4+1E wt//qjLhIzPIDH+oIEeZnt/Zgg== -----END CERTIFICATE-----Generated at Thu Mar 26 15:59:17 2026 by rpki-client