$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft File: 6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft (raw, json) Hash identifier: nVwkY9dO3waR3nXO9yk8La9m7VCYN/2npSpyjsgp6Vg= Subject key identifier: 05:47:FB:94:4F:C0:D5:B4:9D:11:9C:B9:17:8D:77:FF:10:1A:62:1F Authority key identifier: E8:68:21:E9:F2:3D:42:F3:62:E4:2A:E2:AF:B5:BD:98:E0:B1:11:93 Certificate issuer: /CN=A91C6FD6/serialNumber=E86821E9F23D42F362E42AE2AFB5BD98E0B11193 Certificate serial: 015B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ggh6fI9QvNi5Crir7W9mOCxEZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft Manifest number: 0152 Signing time: Fri 17 Apr 2026 04:48:13 +0000 Manifest this update: Fri 17 Apr 2026 04:48:12 +0000 Manifest next update: Fri 24 Apr 2026 04:48:12 +0000 Files and hashes: 1: 6Ggh6fI9QvNi5Crir7W9mOCxEZM.crl (hash: uBDhwpJLtlEY/5BuKjiDqdfPc+HC4ZwrGzYOHYohD4Q=) 2: 70F3668238F711EFB4132D26C4F9AE02.roa (hash: J+hvCkdt6g/OaFOvzPdZIrEAlI39zR1KbhhXWY3YwWA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.crl rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ggh6fI9QvNi5Crir7W9mOCxEZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 04:48:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 347 (0x15b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6FD6, serialNumber=E86821E9F23D42F362E42AE2AFB5BD98E0B11193 Validity Not Before: Apr 17 04:48:12 2026 GMT Not After : Apr 24 04:48:12 2026 GMT Subject: CN=69e1bb8d-ffbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cd:6a:90:6a:a6:01:b4:c6:0f:ae:96:0f:95: 70:11:3d:5c:f5:c4:19:4c:18:fe:a8:e0:88:df:ad: c3:b0:86:10:24:2a:37:8e:11:00:0b:21:7c:40:b8: a7:f3:cb:26:8f:13:09:74:04:44:38:3e:99:5d:3e: b4:71:6d:c6:9e:44:0d:52:d5:4a:e7:17:7b:70:6b: ae:e9:77:49:10:7e:55:e7:76:8a:e2:80:90:0b:29: 91:da:2e:78:33:e8:a5:b6:1d:7a:fa:e4:a2:39:ee: 9d:7f:fc:22:4b:d5:8e:4d:48:82:98:24:78:0f:6a: 80:90:c6:82:70:2a:f5:d6:33:65:43:8a:da:90:c5: d6:48:30:c8:e2:98:42:6a:a3:2b:db:6e:31:64:fd: c2:ea:35:6a:c8:39:83:89:62:76:6c:ab:54:28:9f: 16:6a:1b:49:84:7b:25:8c:bd:00:ba:6f:7d:17:2b: 1f:dd:e1:c5:6b:5b:f9:12:8d:52:69:f3:cb:02:a6: 19:03:4f:0d:e3:d4:75:89:52:63:7f:59:0f:50:8c: 43:a5:35:03:bd:59:4b:ca:31:c7:de:4b:6a:e6:2c: fd:f5:1e:49:c3:de:bc:2d:70:3e:de:58:0c:c3:de: 38:c8:6e:ad:94:b5:86:46:87:5c:9d:0e:66:66:2e: 4a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:47:FB:94:4F:C0:D5:B4:9D:11:9C:B9:17:8D:77:FF:10:1A:62:1F X509v3 Authority Key Identifier: keyid:E8:68:21:E9:F2:3D:42:F3:62:E4:2A:E2:AF:B5:BD:98:E0:B1:11:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ggh6fI9QvNi5Crir7W9mOCxEZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:95:0d:fd:86:93:78:56:64:a0:53:20:ec:a8:c7:d7:80:23: 49:9f:1c:66:8c:64:2c:c7:26:5a:ea:33:8d:37:42:18:16:ea: 79:21:7c:89:49:5a:1c:af:25:1b:5c:b2:5e:ce:88:e4:74:bd: b0:65:58:d1:0d:24:67:c9:49:e6:ec:f8:73:de:a7:a6:a0:b1: 38:f5:e8:fd:d7:b5:0c:5d:e8:ab:1d:97:08:23:a1:40:92:8d: f5:5a:23:3c:e7:5b:38:25:e6:5f:9f:42:a0:6f:a6:a3:83:34: f5:79:3d:5c:f5:41:0a:49:fb:9e:c6:3b:73:a0:90:34:79:c2: bd:3d:c9:bd:cb:8a:45:1d:d9:ac:b0:07:9c:d3:28:20:a6:7b: 88:5b:c8:dd:dd:49:0a:ba:a7:08:3c:90:b0:74:fb:1b:ce:19: 2d:b8:df:75:39:8c:72:e6:d3:7e:ef:a5:98:91:73:32:a9:13: ae:d5:00:3c:c3:1d:0d:b0:e3:7c:4a:d6:50:ae:6f:a7:bc:53: e8:a0:d5:77:91:ee:a6:91:71:d5:a3:cd:4e:f8:19:9a:38:b0: 8f:28:ff:b7:29:ef:ae:36:cf:43:34:0d:d8:00:09:76:5e:50: 17:6e:7c:7d:04:af:91:1d:37:fd:b3:ea:e2:a3:95:2e:fd:e1: 9a:e9:16:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZGRDYxMTAvBgNVBAUTKEU4NjgyMUU5RjIzRDQyRjM2MkU0MkFFMkFGQjVCRDk4 RTBCMTExOTMwHhcNMjYwNDE3MDQ0ODEyWhcNMjYwNDI0MDQ0ODEyWjAYMRYwFAYD VQQDEw02OWUxYmI4ZC1mZmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuM1qkGqmAbTGD66WD5VwET1c9cQZTBj+qOCI363DsIYQJCo3jhEACyF8QLin 88smjxMJdAREOD6ZXT60cW3GnkQNUtVK5xd7cGuu6XdJEH5V53aK4oCQCymR2i54 M+ilth16+uSiOe6df/wiS9WOTUiCmCR4D2qAkMaCcCr11jNlQ4rakMXWSDDI4phC aqMr224xZP3C6jVqyDmDiWJ2bKtUKJ8WahtJhHsljL0Aum99Fysf3eHFa1v5Eo1S afPLAqYZA08N49R1iVJjf1kPUIxDpTUDvVlLyjHH3ktq5iz99R5Jw968LXA+3lgM w944yG6tlLWGRodcnQ5mZi5KMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAVH+5RP wNW0nRGcuReNd/8QGmIfMB8GA1UdIwQYMBaAFOhoIenyPULzYuQq4q+1vZjgsRGT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkZENi82OERBNEI2QTM4 RjYxMUVGQjEzMTg0MjNDNEY5QUUwMi82R2doNmZJOVF2Tmk1Q3JpcjdXOW1PQ3hF Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZHZ2g2Zkk5UXZOaTVDcmlyN1c5bU9DeEVaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkZENi82OERBNEI2QTM4RjYxMUVGQjEzMTg0MjNDNEY5QUUwMi82R2doNmZJOVF2 Tmk1Q3JpcjdXOW1PQ3hFWk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWZUN/YaTeFZkoFMg7KjH14AjSZ8cZoxkLMcmWuozjTdCGBbqeSF8iUlaHK8l G1yyXs6I5HS9sGVY0Q0kZ8lJ5uz4c96npqCxOPXo/de1DF3oqx2XCCOhQJKN9Voj POdbOCXmX59CoG+mo4M09Xk9XPVBCkn7nsY7c6CQNHnCvT3JvcuKRR3ZrLAHnNMo IKZ7iFvI3d1JCrqnCDyQsHT7G84ZLbjfdTmMcubTfu+lmJFzMqkTrtUAPMMdDbDj fErWUK5vp7xT6KDVd5HuppFx1aPNTvgZmjiwjyj/tynvrjbPQzQN2AAJdl5QF258 fQSvkR03/bPq4qOVLv3hmukWBw== -----END CERTIFICATE-----Generated at Fri Apr 17 18:07:31 2026 by rpki-client