$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1BD/7EC6E5AEFB1011F0947DB856746F56BC/C6kCx31AoXILQnNsTotcNnjiuRQ.mft File: C6kCx31AoXILQnNsTotcNnjiuRQ.mft (raw, json) Hash identifier: W/EsuVJCz8WATyxZOzjO4BBMlY0+yfD/ZLM3ju/4Y/s= Subject key identifier: 07:BE:64:54:A8:70:44:A5:C5:3E:6C:4E:89:2B:79:02:9A:C4:75:5C Authority key identifier: 0B:A9:02:C7:7D:40:A1:72:0B:42:73:6C:4E:8B:5C:36:78:E2:B9:14 Certificate issuer: /CN=A914E1BD/serialNumber=0BA902C77D40A1720B42736C4E8B5C3678E2B914 Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/C6kCx31AoXILQnNsTotcNnjiuRQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E1BD/7EC6E5AEFB1011F0947DB856746F56BC/C6kCx31AoXILQnNsTotcNnjiuRQ.mft Manifest number: 19 Signing time: Sun 01 Mar 2026 10:29:25 +0000 Manifest this update: Sun 01 Mar 2026 10:29:24 +0000 Manifest next update: Sun 08 Mar 2026 10:29:24 +0000 Files and hashes: 1: C6kCx31AoXILQnNsTotcNnjiuRQ.crl (hash: esztHAsSVxPu3xepWGkGglXAqdDhPveFJ19bds8Lzxg=) 2: 5787CC96FB3411F0A8F597323D6F56BC.roa (hash: lG5XzlCW36eN47UotWj73TCol7/E9mkhN9sNAOU+bso=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E1BD/7EC6E5AEFB1011F0947DB856746F56BC/C6kCx31AoXILQnNsTotcNnjiuRQ.crl rsync://rpki.apnic.net/member_repository/A914E1BD/7EC6E5AEFB1011F0947DB856746F56BC/C6kCx31AoXILQnNsTotcNnjiuRQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/C6kCx31AoXILQnNsTotcNnjiuRQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:29:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E1BD, serialNumber=0BA902C77D40A1720B42736C4E8B5C3678E2B914 Validity Not Before: Mar 1 10:29:24 2026 GMT Not After : Mar 8 10:29:24 2026 GMT Subject: CN=69a41505-3939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:65:70:6b:f7:ee:58:fd:a4:b2:a3:01:20:1d: 99:45:f9:db:20:f3:91:c5:6d:5a:50:3d:9b:65:c4: 52:fe:04:3b:f0:f8:e5:c0:eb:60:8c:a9:d5:e4:90: 54:c5:ee:42:05:39:d8:74:fa:cf:7e:c5:22:a2:3b: 35:e7:e9:2a:64:ed:1a:e8:ed:30:8f:2b:77:26:2b: ba:c1:ab:21:fd:e7:15:81:e4:6c:7e:ea:35:bc:12: 83:73:92:87:66:f9:7f:03:c7:a9:cf:a6:25:e0:9e: a9:ab:5e:8a:b1:07:cc:5e:52:a9:56:74:94:43:87: cf:28:a2:e2:f5:a8:b5:6e:24:4f:1d:89:cd:b6:ca: 4e:82:9e:53:49:9f:5d:2b:59:e0:70:55:2a:24:1d: 86:26:f2:96:d3:4b:e7:fe:35:b5:54:85:f1:5b:3a: d3:31:14:25:62:dc:d4:c0:5f:c1:7b:dc:09:09:d9: 15:69:8a:80:62:d1:2b:c9:bb:61:f8:44:a6:18:4f: 5a:c2:9f:21:3d:ce:84:e5:b4:e6:6d:f4:fd:89:fd: 23:f9:6e:c5:4f:0a:90:5b:d6:59:30:9f:cc:51:2b: 3e:31:01:3f:ae:cb:2f:5a:29:17:4f:93:44:ad:3c: 44:af:be:26:21:b7:d3:ee:5f:67:70:6c:b0:2b:5f: fe:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:BE:64:54:A8:70:44:A5:C5:3E:6C:4E:89:2B:79:02:9A:C4:75:5C X509v3 Authority Key Identifier: keyid:0B:A9:02:C7:7D:40:A1:72:0B:42:73:6C:4E:8B:5C:36:78:E2:B9:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E1BD/7EC6E5AEFB1011F0947DB856746F56BC/C6kCx31AoXILQnNsTotcNnjiuRQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/C6kCx31AoXILQnNsTotcNnjiuRQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1BD/7EC6E5AEFB1011F0947DB856746F56BC/C6kCx31AoXILQnNsTotcNnjiuRQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:6f:b7:3c:b7:1e:f5:d2:89:30:94:68:9e:fa:fe:f8:4a:21: 0c:67:b9:5e:96:49:0a:d3:1e:50:07:4e:3e:12:19:df:93:9b: a8:67:a0:1d:40:be:23:19:28:09:ae:b2:2a:05:76:ee:ac:4a: db:de:e4:62:11:09:3a:09:ea:9e:80:8d:ee:2e:26:e3:00:fc: 70:04:79:31:31:bc:df:ef:4d:dc:b7:d0:a7:0e:23:f9:d8:1b: d0:13:d4:8f:79:63:0e:a0:30:de:30:5f:d9:6a:0e:9b:78:86: 8e:4d:be:e1:31:e3:c4:fc:08:da:f5:4e:d0:e1:fc:df:09:fe: 4e:54:6f:12:ed:b5:72:36:94:b3:b6:f5:3a:ef:58:af:14:ac: ec:ce:f9:b9:a5:ba:12:82:ff:5d:47:2e:a6:ed:d5:bb:ae:d7: b4:2e:73:d3:82:a6:c4:62:bd:c9:7c:9f:3f:b8:3f:1c:53:1e: 10:21:38:de:11:0e:46:c8:e0:a4:ee:85:6f:ab:6f:49:ce:78: d2:58:d9:89:ab:b7:65:71:54:c1:93:8d:c8:04:62:e4:4e:51: cc:75:fc:b8:f5:1b:69:aa:ee:11:bf:07:d3:4f:1d:8c:77:32: ba:a5:45:18:86:fe:22:6d:3f:db:60:c5:8e:cb:b7:7b:80:32: 33:96:18:a4 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RTFCRDExMC8GA1UEBRMoMEJBOTAyQzc3RDQwQTE3MjBCNDI3MzZDNEU4QjVDMzY3 OEUyQjkxNDAeFw0yNjAzMDExMDI5MjRaFw0yNjAzMDgxMDI5MjRaMBgxFjAUBgNV BAMTDTY5YTQxNTA1LTM5MzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2ZXBr9+5Y/aSyowEgHZlF+dsg85HFbVpQPZtlxFL+BDvw+OXA62CMqdXkkFTF 7kIFOdh0+s9+xSKiOzXn6Spk7Rro7TCPK3cmK7rBqyH95xWB5Gx+6jW8EoNzkodm +X8Dx6nPpiXgnqmrXoqxB8xeUqlWdJRDh88oouL1qLVuJE8dic22yk6CnlNJn10r WeBwVSokHYYm8pbTS+f+NbVUhfFbOtMxFCVi3NTAX8F73AkJ2RVpioBi0SvJu2H4 RKYYT1rCnyE9zoTltOZt9P2J/SP5bsVPCpBb1lkwn8xRKz4xAT+uyy9aKRdPk0St PESvviYht9PuX2dwbLArX/5NAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUB75kVKhw RKXFPmxOiSt5AprEdVwwHwYDVR0jBBgwFoAUC6kCx31AoXILQnNsTotcNnjiuRQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFMUJELzdFQzZFNUFFRkIx MDExRjA5NDdEQjg1Njc0NkY1NkJDL0M2a0N4MzFBb1hJTFFuTnNUb3RjTm5qaXVS US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvQzZrQ3gzMUFvWElMUW5Oc1RvdGNObmppdVJRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRF MUJELzdFQzZFNUFFRkIxMDExRjA5NDdEQjg1Njc0NkY1NkJDL0M2a0N4MzFBb1hJ TFFuTnNUb3RjTm5qaXVSUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA1b7c8tx710okwlGie+v74SiEMZ7lelkkK0x5QB04+Ehnfk5uoZ6AdQL4jGSgJ rrIqBXburErb3uRiEQk6CeqegI3uLibjAPxwBHkxMbzf703ct9CnDiP52BvQE9SP eWMOoDDeMF/Zag6beIaOTb7hMePE/Aja9U7Q4fzfCf5OVG8S7bVyNpSztvU671iv FKzszvm5pboSgv9dRy6m7dW7rte0LnPTgqbEYr3JfJ8/uD8cUx4QITjeEQ5GyOCk 7oVvq29JznjSWNmJq7dlcVTBk43IBGLkTlHMdfy49Rtpqu4RvwfTTx2MdzK6pUUY hv4ibT/bYMWOy7d7gDIzlhik -----END CERTIFICATE-----Generated at Mon Mar 2 13:35:29 2026 by rpki-client