$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.mft File: B_6JYwIB3vN_TWiiDtEzqcO2oqM.mft (raw, json) Hash identifier: 49lNRg9tHWAck2nN1nE7MXr5+YggtTNsHM2gOgYn650= Subject key identifier: 5C:2C:9B:04:21:E1:4D:75:B7:49:FC:AE:48:FF:AC:3E:DA:B4:85:75 Authority key identifier: 07:FE:89:63:02:01:DE:F3:7F:4D:68:A2:0E:D1:33:A9:C3:B6:A2:A3 Certificate issuer: /CN=A9152E70/serialNumber=07FE89630201DEF37F4D68A20ED133A9C3B6A2A3 Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B_6JYwIB3vN_TWiiDtEzqcO2oqM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.mft Manifest number: 67 Signing time: Mon 02 Mar 2026 00:48:23 +0000 Manifest this update: Mon 02 Mar 2026 00:48:20 +0000 Manifest next update: Mon 09 Mar 2026 00:48:20 +0000 Files and hashes: 1: B_6JYwIB3vN_TWiiDtEzqcO2oqM.crl (hash: x9xznMlxAZ8+feMyeOHwENkceSQCa16T/19+at3ehJU=) 2: 889930E805E011F18AD458A9133D8C67.roa (hash: 6Xr8zkjpwgzzu+pV8hgykjL+uM8MQRKO4RcwgTTu2OA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.crl rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B_6JYwIB3vN_TWiiDtEzqcO2oqM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:48:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152E70, serialNumber=07FE89630201DEF37F4D68A20ED133A9C3B6A2A3 Validity Not Before: Mar 2 00:48:20 2026 GMT Not After : Mar 9 00:48:20 2026 GMT Subject: CN=69a4de57-be03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f9:36:05:be:ff:a2:aa:9e:cb:5c:27:93:a8: 81:83:17:0d:f1:f6:0d:7d:ce:8c:1f:5f:2a:ff:db: 75:73:94:e7:91:a6:ab:78:41:e1:30:cf:9b:b1:b0: 98:e4:c0:16:45:a4:d3:03:e5:3f:66:1c:84:a3:b9: 3b:93:a8:2d:c8:74:52:eb:b6:8d:61:bb:59:86:dd: 28:23:ce:37:a4:6f:8e:ca:a1:e9:42:83:fb:2a:4f: 0f:16:f5:da:84:90:a8:03:40:2a:b8:36:6f:d7:13: 2b:e2:27:b0:e9:05:9e:25:d1:6f:df:45:ec:cd:26: 00:d3:43:8d:23:25:27:e0:68:8f:ac:2b:a4:78:db: b9:eb:47:53:ed:9f:b9:11:5d:e3:dd:58:54:e2:6e: 24:7c:5a:81:14:c3:f9:c8:02:50:d5:88:45:d8:e6: 8f:28:43:35:5f:a2:66:16:47:4e:de:7c:1e:e9:cf: 57:42:3c:4d:46:e7:48:3a:b0:cc:05:95:cf:7e:4d: 81:87:a7:71:41:e6:3b:c4:98:fb:61:51:48:8e:07: b4:f8:71:79:bd:dc:d2:f0:c4:06:7f:49:7c:6b:a1: e2:2c:3b:69:27:ac:64:9a:d9:d3:3c:1f:a2:de:73: 7f:be:5a:1c:60:56:4b:c0:32:16:d6:9b:f4:d7:81: 5b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:2C:9B:04:21:E1:4D:75:B7:49:FC:AE:48:FF:AC:3E:DA:B4:85:75 X509v3 Authority Key Identifier: keyid:07:FE:89:63:02:01:DE:F3:7F:4D:68:A2:0E:D1:33:A9:C3:B6:A2:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B_6JYwIB3vN_TWiiDtEzqcO2oqM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:29:1a:cc:d3:f5:d5:e2:06:a4:74:ad:c5:40:e0:61:47:58: ee:cf:a1:90:16:67:7b:bc:08:6c:09:f2:3d:82:f4:12:1a:cc: 41:6d:13:f6:a6:67:c6:ba:41:22:ab:6d:45:50:4e:47:78:50: 67:7d:62:8d:7a:78:f7:b5:fc:6d:5c:f5:16:e5:b8:9d:c4:1f: d2:4b:8a:a2:57:e3:80:56:4c:51:c8:c9:ac:66:61:4a:06:5b: 1d:ac:24:98:b9:6c:83:c4:04:e8:40:48:7b:ae:ca:3c:eb:b1: 9b:4e:84:b6:01:c4:46:76:ca:d1:1b:fb:10:ad:a1:38:a9:e1: 4a:4b:52:0e:fd:ff:f5:bb:1c:0f:30:43:66:98:82:31:8e:72: 70:9f:df:f0:55:31:a3:b8:52:31:02:fd:07:a1:39:d2:3c:8d: 00:a1:34:77:40:ab:56:68:53:f5:51:53:c5:04:0a:37:be:9e: eb:22:0c:38:b6:c7:4d:ff:8a:ff:66:2e:d8:08:fa:e9:70:f2: 8a:cb:9a:10:7f:1f:f3:30:ec:01:63:8d:b3:c0:2b:7d:cb:eb: a0:d9:13:f7:ba:57:16:52:09:a4:3f:4a:ff:5c:01:4e:f8:5f: 04:d7:9f:18:39:03:f8:87:ff:db:5f:c8:57:9f:b6:59:6f:9f: 4c:9d:3c:4a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MkU3MDExMC8GA1UEBRMoMDdGRTg5NjMwMjAxREVGMzdGNEQ2OEEyMEVEMTMzQTlD M0I2QTJBMzAeFw0yNjAzMDIwMDQ4MjBaFw0yNjAzMDkwMDQ4MjBaMBgxFjAUBgNV BAMTDTY5YTRkZTU3LWJlMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDc+TYFvv+iqp7LXCeTqIGDFw3x9g19zowfXyr/23VzlOeRpqt4QeEwz5uxsJjk wBZFpNMD5T9mHISjuTuTqC3IdFLrto1hu1mG3Sgjzjekb47KoelCg/sqTw8W9dqE kKgDQCq4Nm/XEyviJ7DpBZ4l0W/fRezNJgDTQ40jJSfgaI+sK6R427nrR1Ptn7kR XePdWFTibiR8WoEUw/nIAlDViEXY5o8oQzVfomYWR07efB7pz1dCPE1G50g6sMwF lc9+TYGHp3FB5jvEmPthUUiOB7T4cXm93NLwxAZ/SXxroeIsO2knrGSa2dM8H6Le c3++WhxgVkvAMhbWm/TXgVsrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUXCybBCHh TXW3SfyuSP+sPtq0hXUwHwYDVR0jBBgwFoAUB/6JYwIB3vN/TWiiDtEzqcO2oqMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUyRTcwL0U2MEU5MzdDN0Q4 NjExRjA4RkIwRTg3OUM0RjlBRTAyL0JfNkpZd0lCM3ZOX1RXaWlEdEV6cWNPMm9x TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQl82Sll3SUIzdk5fVFdpaUR0RXpxY08yb3FNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUy RTcwL0U2MEU5MzdDN0Q4NjExRjA4RkIwRTg3OUM0RjlBRTAyL0JfNkpZd0lCM3ZO X1RXaWlEdEV6cWNPMm9xTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBbKRrM0/XV4gakdK3FQOBhR1juz6GQFmd7vAhsCfI9gvQSGsxBbRP2pmfGukEi q21FUE5HeFBnfWKNenj3tfxtXPUW5bidxB/SS4qiV+OAVkxRyMmsZmFKBlsdrCSY uWyDxAToQEh7rso867GbToS2AcRGdsrRG/sQraE4qeFKS1IO/f/1uxwPMENmmIIx jnJwn9/wVTGjuFIxAv0HoTnSPI0AoTR3QKtWaFP1UVPFBAo3vp7rIgw4tsdN/4r/ Zi7YCPrpcPKKy5oQfx/zMOwBY42zwCt9y+ug2RP3ulcWUgmkP0r/XAFO+F8E158Y OQP4h//bX8hXn7ZZb59MnTxK -----END CERTIFICATE-----Generated at Mon Mar 2 07:25:29 2026 by rpki-client