$ rpki-client -vvf rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft File: iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft (raw, json) Hash identifier: udv9qEVoo/YU5MVs+iU9DRypcQf0jVdRn2P21kW3E8o= Subject key identifier: 79:AE:03:F4:A3:A1:A3:8A:17:B5:33:96:A8:67:6D:A4:1E:B7:FE:45 Authority key identifier: 88:6A:0E:E6:BC:7A:BD:C0:9F:A8:22:E1:14:DF:43:5F:0B:0E:86:5A Certificate issuer: /CN=A91376FB/serialNumber=886A0EE6BC7ABDC09FA822E114DF435F0B0E865A Certificate serial: 0486 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iGoO5rx6vcCfqCLhFN9DXwsOhlo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft Manifest number: 0479 Signing time: Tue 24 Mar 2026 23:46:15 +0000 Manifest this update: Tue 24 Mar 2026 23:46:14 +0000 Manifest next update: Tue 31 Mar 2026 23:46:14 +0000 Files and hashes: 1: iGoO5rx6vcCfqCLhFN9DXwsOhlo.crl (hash: /Qbj/1EOW1mC4cd4+8Iab+elBOTigTa+UVgpwra5KeE=) 2: 25C61AECB7ED11ED9CF6A63EC4F9AE02.roa (hash: xofse8Wy66MIstuqq88GIwR6LgO/Bu5HVqHK6p5t5Hk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.crl rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iGoO5rx6vcCfqCLhFN9DXwsOhlo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:46:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1158 (0x486) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91376FB, serialNumber=886A0EE6BC7ABDC09FA822E114DF435F0B0E865A Validity Not Before: Mar 24 23:46:14 2026 GMT Not After : Mar 31 23:46:14 2026 GMT Subject: CN=69c32247-b978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cb:2b:16:d0:26:39:05:00:02:08:06:7a:22: b9:0e:78:00:eb:01:37:37:e1:bf:cc:b7:82:ef:6e: 75:d0:35:7e:42:95:79:c8:86:d6:e1:0f:80:95:15: 39:54:38:52:3f:7f:4a:b7:df:d5:4a:e9:fb:55:84: 2e:4c:47:1d:88:77:6c:39:84:d9:35:73:20:97:43: db:b0:ef:6e:54:2c:a7:0c:65:18:c9:07:f0:ca:27: 5e:0e:86:05:89:a2:c5:33:2c:3d:c9:35:41:ea:b6: 81:63:1a:d2:86:5c:71:a9:be:53:4b:b5:86:94:b6: 02:1d:e4:06:7b:68:55:ac:e1:8a:da:2d:cb:b6:0d: 63:13:4f:d3:d4:a6:0c:1c:ef:ce:36:a0:ca:4b:07: 9e:00:cc:c7:ba:82:7a:78:a0:e2:9b:c5:16:a4:56: 95:7d:7a:b8:ae:a1:13:d4:df:28:76:be:9f:ed:ae: 04:1f:3b:e8:33:c4:e9:4a:ac:71:84:45:61:f1:dd: ee:bc:b8:e8:b2:9b:de:87:3d:15:93:6d:bf:41:8d: 3d:99:40:f5:a2:e2:43:21:76:d1:56:77:12:65:c2: ce:cf:e5:36:52:8f:c0:14:0e:eb:50:6a:e9:24:0a: 5c:e7:d1:d3:7f:d8:77:47:50:b9:b9:5e:0c:09:64: c0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:AE:03:F4:A3:A1:A3:8A:17:B5:33:96:A8:67:6D:A4:1E:B7:FE:45 X509v3 Authority Key Identifier: keyid:88:6A:0E:E6:BC:7A:BD:C0:9F:A8:22:E1:14:DF:43:5F:0B:0E:86:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iGoO5rx6vcCfqCLhFN9DXwsOhlo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:52:c3:ee:1f:48:36:3c:0c:db:4a:9d:79:c5:88:1c:35:5a: 80:0f:ab:aa:2d:c1:6f:82:f9:95:a0:78:d4:69:d8:7a:cd:08: 5a:56:18:ef:7f:5f:d0:bc:6f:76:9e:66:5e:cc:f5:4c:3d:d4: e6:73:26:ee:20:c1:c0:d8:b5:61:98:b3:2d:03:4b:e9:af:9a: f0:6a:4f:df:2f:95:49:4d:bd:64:27:fd:61:fd:0f:64:e3:e0: 0d:50:dc:23:1c:c6:8f:46:f4:eb:06:81:13:68:6c:2b:82:b1: 92:cc:52:ca:f2:ec:bf:8f:b4:f3:29:7e:0b:ac:1b:e4:92:50: 27:79:b8:25:62:2d:09:85:b7:32:3e:19:1d:60:3c:5f:fb:6c: 52:f3:19:a8:ef:94:ab:28:e9:4e:ce:f4:87:54:d3:fd:03:e2: 1d:ff:0c:c3:7b:c7:08:44:91:5c:d7:7b:42:b1:6b:98:79:35: 6a:60:60:24:54:e9:21:b2:c3:1e:40:21:51:cc:c3:3f:a7:f1: e2:c2:b8:f6:b6:64:81:84:94:b0:31:9a:a6:27:04:9a:ef:c7: 11:ab:7a:14:d4:66:d9:e8:6f:9e:53:f7:2a:f7:f3:16:c0:8f: 20:ff:4e:67:6b:1e:a0:05:ea:bc:21:a7:72:b1:30:53:88:23: c8:07:65:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc2RkIxMTAvBgNVBAUTKDg4NkEwRUU2QkM3QUJEQzA5RkE4MjJFMTE0REY0MzVG MEIwRTg2NUEwHhcNMjYwMzI0MjM0NjE0WhcNMjYwMzMxMjM0NjE0WjAYMRYwFAYD VQQDEw02OWMzMjI0Ny1iOTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuMsrFtAmOQUAAggGeiK5DngA6wE3N+G/zLeC72510DV+QpV5yIbW4Q+AlRU5 VDhSP39Kt9/VSun7VYQuTEcdiHdsOYTZNXMgl0PbsO9uVCynDGUYyQfwyideDoYF iaLFMyw9yTVB6raBYxrShlxxqb5TS7WGlLYCHeQGe2hVrOGK2i3Ltg1jE0/T1KYM HO/ONqDKSweeAMzHuoJ6eKDim8UWpFaVfXq4rqET1N8odr6f7a4EHzvoM8TpSqxx hEVh8d3uvLjospvehz0Vk22/QY09mUD1ouJDIXbRVncSZcLOz+U2Uo/AFA7rUGrp JApc59HTf9h3R1C5uV4MCWTATQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHmuA/Sj oaOKF7UzlqhnbaQet/5FMB8GA1UdIwQYMBaAFIhqDua8er3An6gi4RTfQ18LDoZa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzZGQi85MkZCNzFBMDgz RjIxMUVDQkIyNTE5ODVDNEY5QUUwMi9pR29PNXJ4NnZjQ2ZxQ0xoRk45RFh3c09o bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lHb081cng2dmNDZnFDTGhGTjlEWHdzT2hsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzZGQi85MkZCNzFBMDgzRjIxMUVDQkIyNTE5ODVDNEY5QUUwMi9pR29PNXJ4NnZj Q2ZxQ0xoRk45RFh3c09obG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADlLD7h9INjwM20qdecWIHDVagA+rqi3Bb4L5laB41GnYes0IWlYY739f0Lxv dp5mXsz1TD3U5nMm7iDBwNi1YZizLQNL6a+a8GpP3y+VSU29ZCf9Yf0PZOPgDVDc IxzGj0b06waBE2hsK4KxksxSyvLsv4+08yl+C6wb5JJQJ3m4JWItCYW3Mj4ZHWA8 X/tsUvMZqO+UqyjpTs70h1TT/QPiHf8Mw3vHCESRXNd7QrFrmHk1amBgJFTpIbLD HkAhUczDP6fx4sK49rZkgYSUsDGapicEmu/HEat6FNRm2ehvnlP3KvfzFsCPIP9O Z2seoAXqvCGncrEwU4gjyAdlAw== -----END CERTIFICATE-----Generated at Thu Mar 26 15:40:58 2026 by rpki-client