$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA85A/ABBC679E0DFA11F1928C4B5A053D8C67/6AZAMTRS0FNHrrnqq2DbjgDCGQs.mft File: 6AZAMTRS0FNHrrnqq2DbjgDCGQs.mft (raw, json) Hash identifier: BbAFbDVkrTJ+fu8SBwnCLL2h5Oq73/2jGSfdlqPzzeg= Subject key identifier: C6:A2:58:96:0E:CC:8C:1B:83:01:E3:F9:4F:12:E4:25:9A:0E:72:22 Authority key identifier: E8:06:40:31:34:52:D0:53:47:AE:B9:EA:AB:60:DB:8E:00:C2:19:0B Certificate issuer: /CN=A91AA85A/serialNumber=E80640313452D05347AEB9EAAB60DB8E00C2190B Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6AZAMTRS0FNHrrnqq2DbjgDCGQs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA85A/ABBC679E0DFA11F1928C4B5A053D8C67/6AZAMTRS0FNHrrnqq2DbjgDCGQs.mft Manifest number: 24 Signing time: Fri 17 Apr 2026 08:35:01 +0000 Manifest this update: Fri 17 Apr 2026 08:35:01 +0000 Manifest next update: Fri 24 Apr 2026 08:35:01 +0000 Files and hashes: 1: 6AZAMTRS0FNHrrnqq2DbjgDCGQs.crl (hash: x51VA1KCtPY04dITCmop97e8loAVheBcEL+mewP+Omg=) 2: D7C18BB20DFF11F1BA7C27AF053D8C67.roa (hash: hWKKvsTt7zCxD5Fv8v2sGwk7XoSlQUlgVYDrraM8C1E=) 3: 9ABBE50C0DFD11F18537B598053D8C67.roa (hash: B/TqzACGEfySc+XaR76BsEZga/Tqj8LPu2hT0skPKbE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA85A/ABBC679E0DFA11F1928C4B5A053D8C67/6AZAMTRS0FNHrrnqq2DbjgDCGQs.crl rsync://rpki.apnic.net/member_repository/A91AA85A/ABBC679E0DFA11F1928C4B5A053D8C67/6AZAMTRS0FNHrrnqq2DbjgDCGQs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6AZAMTRS0FNHrrnqq2DbjgDCGQs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA85A, serialNumber=E80640313452D05347AEB9EAAB60DB8E00C2190B Validity Not Before: Apr 17 08:35:01 2026 GMT Not After : Apr 24 08:35:01 2026 GMT Subject: CN=69e1f0b5-fbda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7d:ab:ec:d8:fe:13:46:35:23:2e:96:84:ae: 5c:4d:64:5b:d5:d0:a8:1b:ba:59:71:ee:46:57:ab: d1:4a:64:2d:8f:9d:a2:b5:1b:ea:f3:48:ad:cd:5b: da:c9:5c:4a:4e:0f:b5:6e:dd:48:81:2e:a3:32:5a: 08:94:a2:d6:33:ce:05:1b:2c:84:c3:da:a7:c2:ea: bb:93:bc:b8:a6:74:bf:71:cd:e1:0e:b4:93:89:15: 99:4c:72:f0:8a:50:0c:89:98:37:ec:7b:a7:20:26: d5:3d:d8:74:56:4b:dd:0e:69:fb:dc:66:81:89:63: 38:64:87:43:92:d2:aa:fa:7d:e1:70:00:42:d0:8a: 93:10:85:7a:b3:83:a1:c4:2f:0e:a2:88:13:00:93: 3f:55:81:fc:95:d6:24:c2:88:f7:89:13:54:b5:cd: 67:92:6e:bc:b8:68:b5:12:54:5d:8e:0c:ce:cb:a6: c1:b5:c8:8e:8e:d4:6b:13:48:55:4a:50:d8:ed:c6: b4:04:8a:b3:97:22:1e:6b:3e:d2:7f:b8:ea:c9:4b: 1e:a6:66:83:5f:b9:4b:8f:14:35:8f:07:2c:91:60: 89:19:b4:93:78:af:9c:df:57:ce:e4:05:d4:62:e3: bd:c6:70:79:ef:ea:56:ef:d1:1b:25:11:98:b3:f8: 41:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:A2:58:96:0E:CC:8C:1B:83:01:E3:F9:4F:12:E4:25:9A:0E:72:22 X509v3 Authority Key Identifier: keyid:E8:06:40:31:34:52:D0:53:47:AE:B9:EA:AB:60:DB:8E:00:C2:19:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA85A/ABBC679E0DFA11F1928C4B5A053D8C67/6AZAMTRS0FNHrrnqq2DbjgDCGQs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6AZAMTRS0FNHrrnqq2DbjgDCGQs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA85A/ABBC679E0DFA11F1928C4B5A053D8C67/6AZAMTRS0FNHrrnqq2DbjgDCGQs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:80:73:09:94:eb:cf:a4:59:6f:b1:cf:4d:1d:a9:a3:25:e0: f0:f0:4c:5c:ca:0e:3d:2b:8e:fc:50:12:4c:d7:af:34:f3:67: 0f:07:4a:58:19:be:62:a8:06:9e:d5:cb:77:a5:c6:e7:3d:cd: 3c:c8:6c:85:2b:77:03:93:73:2a:d0:b8:ee:74:26:d2:bd:5d: 92:23:e4:be:35:ee:b6:27:a7:1c:e7:f4:75:f6:17:3b:c2:66: 02:89:8c:39:eb:9e:c2:e4:a2:f9:63:40:66:58:3c:a5:bd:07: ed:22:32:b5:af:49:30:2d:df:7b:d8:2b:a9:7a:bc:26:c4:eb: aa:b7:02:1e:43:00:55:c5:d5:ba:ae:db:5a:36:4c:60:c1:34: 74:0c:69:76:9c:8c:44:f7:38:2f:90:42:3f:f1:5f:81:24:06: 31:ea:af:d2:fc:75:c4:8f:fa:bc:84:b8:d1:b0:79:18:5a:e0: c1:a2:f0:2f:14:ac:9c:54:83:2a:6b:1a:54:e8:6d:d7:45:32: d7:34:cb:28:2b:79:0f:51:9d:a9:47:2d:ff:9b:90:a7:6a:62: 51:1e:3c:e3:e4:97:5e:b7:e3:9d:74:31:13:b2:a3:cd:bb:af: ea:ca:16:36:5a:5c:cf:9f:cb:59:fe:0b:a3:ce:17:da:4a:c8: 01:db:fe:cb -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QTg1QTExMC8GA1UEBRMoRTgwNjQwMzEzNDUyRDA1MzQ3QUVCOUVBQUI2MERCOEUw MEMyMTkwQjAeFw0yNjA0MTcwODM1MDFaFw0yNjA0MjQwODM1MDFaMBgxFjAUBgNV BAMTDTY5ZTFmMGI1LWZiZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCufavs2P4TRjUjLpaErlxNZFvV0Kgbullx7kZXq9FKZC2PnaK1G+rzSK3NW9rJ XEpOD7Vu3UiBLqMyWgiUotYzzgUbLITD2qfC6ruTvLimdL9xzeEOtJOJFZlMcvCK UAyJmDfse6cgJtU92HRWS90OafvcZoGJYzhkh0OS0qr6feFwAELQipMQhXqzg6HE Lw6iiBMAkz9VgfyV1iTCiPeJE1S1zWeSbry4aLUSVF2ODM7LpsG1yI6O1GsTSFVK UNjtxrQEirOXIh5rPtJ/uOrJSx6mZoNfuUuPFDWPByyRYIkZtJN4r5zfV87kBdRi 473GcHnv6lbv0RslEZiz+EFzAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUxqJYlg7M jBuDAeP5TxLkJZoOciIwHwYDVR0jBBgwFoAU6AZAMTRS0FNHrrnqq2DbjgDCGQsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFBODVBL0FCQkM2NzlFMERG QTExRjE5MjhDNEI1QTA1M0Q4QzY3LzZBWkFNVFJTMEZOSHJybnFxMkRiamdEQ0dR cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNkFaQU1UUlMwRk5IcnJucXEyRGJqZ0RDR1FzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFB ODVBL0FCQkM2NzlFMERGQTExRjE5MjhDNEI1QTA1M0Q4QzY3LzZBWkFNVFJTMEZO SHJybnFxMkRiamdEQ0dRcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAUgHMJlOvPpFlvsc9NHamjJeDw8Excyg49K478UBJM168082cPB0pYGb5iqAae 1ct3pcbnPc08yGyFK3cDk3Mq0LjudCbSvV2SI+S+Ne62J6cc5/R19hc7wmYCiYw5 657C5KL5Y0BmWDylvQftIjK1r0kwLd972CuperwmxOuqtwIeQwBVxdW6rttaNkxg wTR0DGl2nIxE9zgvkEI/8V+BJAYx6q/S/HXEj/q8hLjRsHkYWuDBovAvFKycVIMq axpU6G3XRTLXNMsoK3kPUZ2pRy3/m5CnamJRHjzj5Jdet+OddDETsqPNu6/qyhY2 WlzPn8tZ/gujzhfaSsgB2/7L -----END CERTIFICATE-----Generated at Fri Apr 17 11:40:10 2026 by rpki-client