$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF2DB/BC6F3AC0C43111F0A5849C4CC4F9AE02/6LXsJI3LE0kLwr3r1ks5DdHLpQk.mft File: 6LXsJI3LE0kLwr3r1ks5DdHLpQk.mft (raw, json) Hash identifier: JgtD4YF0iDWsvRcXa/R2jXa5GvWZsgVbskhLUWfWjdw= Subject key identifier: 42:30:54:4C:64:BC:89:6C:2C:0C:8C:5B:2C:1F:46:F9:2C:51:A0:19 Authority key identifier: E8:B5:EC:24:8D:CB:13:49:0B:C2:BD:EB:D6:4B:39:0D:D1:CB:A5:09 Certificate issuer: /CN=A91BF2DB/serialNumber=E8B5EC248DCB13490BC2BDEBD64B390DD1CBA509 Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6LXsJI3LE0kLwr3r1ks5DdHLpQk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF2DB/BC6F3AC0C43111F0A5849C4CC4F9AE02/6LXsJI3LE0kLwr3r1ks5DdHLpQk.mft Manifest number: 39 Signing time: Sun 01 Mar 2026 09:56:38 +0000 Manifest this update: Sun 01 Mar 2026 09:56:37 +0000 Manifest next update: Sun 08 Mar 2026 09:56:37 +0000 Files and hashes: 1: 6LXsJI3LE0kLwr3r1ks5DdHLpQk.crl (hash: Tkgsy9VRVIvNM234F60IxKDq0+gBNLZHBSvqECZLaSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF2DB/BC6F3AC0C43111F0A5849C4CC4F9AE02/6LXsJI3LE0kLwr3r1ks5DdHLpQk.crl rsync://rpki.apnic.net/member_repository/A91BF2DB/BC6F3AC0C43111F0A5849C4CC4F9AE02/6LXsJI3LE0kLwr3r1ks5DdHLpQk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6LXsJI3LE0kLwr3r1ks5DdHLpQk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:56:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF2DB, serialNumber=E8B5EC248DCB13490BC2BDEBD64B390DD1CBA509 Validity Not Before: Mar 1 09:56:37 2026 GMT Not After : Mar 8 09:56:37 2026 GMT Subject: CN=69a40d56-3497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:7d:64:0b:be:02:b0:6a:e0:79:eb:98:8a:43: dd:7b:b2:7b:02:d0:b2:dd:df:66:2b:c9:30:ae:c3: 8c:a1:9b:70:c6:c0:46:b3:ed:d7:db:b6:d2:08:88: 37:02:5e:f2:b9:93:3b:4f:71:3e:04:94:79:72:2b: 12:51:b1:52:80:23:84:03:24:66:89:3c:fe:4d:22: 62:12:47:f1:ec:95:3c:6f:b9:73:51:79:0e:79:5e: 27:a7:ac:43:1b:5b:b9:0a:21:93:11:14:71:e5:1d: 02:8d:de:b8:8e:97:1c:f5:5d:99:10:b0:1d:83:93: b6:ba:11:86:7e:94:1c:03:98:dd:69:0a:f6:0b:63: 8e:90:89:31:27:65:30:a1:b1:50:30:22:24:c8:39: 5b:0c:6c:a9:2f:9d:0e:4f:7b:8d:96:c5:2b:fb:e7: 4b:e4:04:77:37:5d:9e:ed:21:57:ee:b6:44:c8:d9: e0:ad:c1:69:dc:76:d5:6e:67:a6:20:83:c5:1e:b8: a1:aa:32:64:8c:c2:87:8c:9e:aa:c9:ab:68:90:0a: 48:a2:f7:34:b6:20:c7:90:a3:62:13:ba:be:49:28: 1d:53:06:fb:51:e1:24:73:55:f7:71:dc:30:1b:4b: 4f:0b:87:88:cd:62:5b:74:bc:1e:95:e7:c4:69:bb: d9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:30:54:4C:64:BC:89:6C:2C:0C:8C:5B:2C:1F:46:F9:2C:51:A0:19 X509v3 Authority Key Identifier: keyid:E8:B5:EC:24:8D:CB:13:49:0B:C2:BD:EB:D6:4B:39:0D:D1:CB:A5:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF2DB/BC6F3AC0C43111F0A5849C4CC4F9AE02/6LXsJI3LE0kLwr3r1ks5DdHLpQk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6LXsJI3LE0kLwr3r1ks5DdHLpQk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF2DB/BC6F3AC0C43111F0A5849C4CC4F9AE02/6LXsJI3LE0kLwr3r1ks5DdHLpQk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:f5:41:cf:37:1a:f9:57:4a:d4:85:db:f3:a6:83:9d:04:fa: 72:9c:f8:9d:fa:c1:e7:b0:46:32:b8:b7:14:30:20:7e:01:e1: a8:5f:70:42:9b:76:77:ae:fc:05:60:32:d5:77:77:52:7b:c8: 12:5e:0e:d4:f3:97:7a:82:d7:3f:22:28:ad:9d:1b:aa:95:22: 12:7c:73:c4:77:85:75:fd:ff:f0:24:c5:2e:1d:8b:02:de:d8: 6c:93:86:fa:6a:6a:61:b3:3d:58:49:4c:35:9a:12:f0:24:22: 37:08:13:dd:74:6e:ec:d7:05:d8:90:37:29:6c:64:c6:ae:b8: 65:a0:fc:91:32:38:6c:bc:a1:7e:1c:5f:34:ca:f8:62:0e:b0: 9d:2a:46:b9:bd:38:48:b0:e1:fb:4c:b0:29:21:5e:0c:39:ec: 25:29:16:40:38:73:d1:43:5d:7d:af:81:d0:00:45:53:97:4e: bc:22:b4:a0:3b:b8:98:5e:54:18:2e:08:6b:d3:f2:09:1c:83: 5d:6e:d6:f7:ae:07:9d:22:80:07:5d:9f:60:44:05:d9:33:f4: 3f:2b:bd:0a:6d:81:16:f5:3b:9d:9a:ff:d1:e2:95:70:24:a0: 95:31:f4:5b:8e:63:40:cb:55:3b:8b:06:c1:f0:d2:3e:3c:42: ff:c0:54:41 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RjJEQjExMC8GA1UEBRMoRThCNUVDMjQ4RENCMTM0OTBCQzJCREVCRDY0QjM5MERE MUNCQTUwOTAeFw0yNjAzMDEwOTU2MzdaFw0yNjAzMDgwOTU2MzdaMBgxFjAUBgNV BAMTDTY5YTQwZDU2LTM0OTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCFfWQLvgKwauB565iKQ917snsC0LLd32YryTCuw4yhm3DGwEaz7dfbttIIiDcC XvK5kztPcT4ElHlyKxJRsVKAI4QDJGaJPP5NImISR/HslTxvuXNReQ55XienrEMb W7kKIZMRFHHlHQKN3riOlxz1XZkQsB2Dk7a6EYZ+lBwDmN1pCvYLY46QiTEnZTCh sVAwIiTIOVsMbKkvnQ5Pe42WxSv750vkBHc3XZ7tIVfutkTI2eCtwWncdtVuZ6Yg g8UeuKGqMmSMwoeMnqrJq2iQCkii9zS2IMeQo2ITur5JKB1TBvtR4SRzVfdx3DAb S08Lh4jNYlt0vB6V58Rpu9ndAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUQjBUTGS8 iWwsDIxbLB9G+SxRoBkwHwYDVR0jBBgwFoAU6LXsJI3LE0kLwr3r1ks5DdHLpQkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJGMkRCL0JDNkYzQUMwQzQz MTExRjBBNTg0OUM0Q0M0RjlBRTAyLzZMWHNKSTNMRTBrTHdyM3Ixa3M1RGRITHBR ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNkxYc0pJM0xFMGtMd3IzcjFrczVEZEhMcFFrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJG MkRCL0JDNkYzQUMwQzQzMTExRjBBNTg0OUM0Q0M0RjlBRTAyLzZMWHNKSTNMRTBr THdyM3Ixa3M1RGRITHBRay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBH9UHPNxr5V0rUhdvzpoOdBPpynPid+sHnsEYyuLcUMCB+AeGoX3BCm3Z3rvwF YDLVd3dSe8gSXg7U85d6gtc/IiitnRuqlSISfHPEd4V1/f/wJMUuHYsC3thsk4b6 amphsz1YSUw1mhLwJCI3CBPddG7s1wXYkDcpbGTGrrhloPyRMjhsvKF+HF80yvhi DrCdKka5vThIsOH7TLApIV4MOewlKRZAOHPRQ119r4HQAEVTl068IrSgO7iYXlQY Lghr0/IJHINdbtb3rgedIoAHXZ9gRAXZM/Q/K70KbYEW9Tudmv/R4pVwJKCVMfRb jmNAy1U7iwbB8NI+PEL/wFRB -----END CERTIFICATE-----Generated at Sun Mar 1 22:24:03 2026 by rpki-client