$ rpki-client -vvf rpki.apnic.net/member_repository/A91578DF/051CF1D495C711F0ABE2FD5FC4F9AE02/IPxzgnJ0AC605K7oniD9DRc_soU.mft File: IPxzgnJ0AC605K7oniD9DRc_soU.mft (raw, json) Hash identifier: +P87c+E5la2GjSSioRwbubOdWo3uzp/dw0mhJ0hm/lU= Subject key identifier: 71:54:9F:CF:86:63:DA:47:55:C1:5A:BA:2F:9F:C7:3B:C2:2B:1A:48 Authority key identifier: 20:FC:73:82:72:74:00:2E:B4:E4:AE:E8:9E:20:FD:0D:17:3F:B2:85 Certificate issuer: /CN=A91578DF/serialNumber=20FC73827274002EB4E4AEE89E20FD0D173FB285 Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPxzgnJ0AC605K7oniD9DRc_soU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91578DF/051CF1D495C711F0ABE2FD5FC4F9AE02/IPxzgnJ0AC605K7oniD9DRc_soU.mft Manifest number: 67 Signing time: Fri 27 Mar 2026 07:32:31 +0000 Manifest this update: Fri 27 Mar 2026 07:32:30 +0000 Manifest next update: Fri 03 Apr 2026 07:32:30 +0000 Files and hashes: 1: IPxzgnJ0AC605K7oniD9DRc_soU.crl (hash: XdnCTx0ju8P8zC8SdG1IYiQnDJHpzaGBRD3oWKcE9Pc=) 2: 067CE6C895C811F09500A713C4F9AE02.roa (hash: JhdOJ9Lykz/GZq5gbRC19nNJ2o6yyUCB0MKG5PSJxsk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91578DF/051CF1D495C711F0ABE2FD5FC4F9AE02/IPxzgnJ0AC605K7oniD9DRc_soU.crl rsync://rpki.apnic.net/member_repository/A91578DF/051CF1D495C711F0ABE2FD5FC4F9AE02/IPxzgnJ0AC605K7oniD9DRc_soU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPxzgnJ0AC605K7oniD9DRc_soU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 07:32:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91578DF, serialNumber=20FC73827274002EB4E4AEE89E20FD0D173FB285 Validity Not Before: Mar 27 07:32:30 2026 GMT Not After : Apr 3 07:32:30 2026 GMT Subject: CN=69c6328e-f990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:58:1e:89:e3:5b:85:12:d6:23:4c:cc:44:4c: b0:90:13:21:9d:11:2d:d7:43:fa:b7:c7:ad:82:f7: db:61:60:f5:17:fb:76:82:69:a4:dc:3c:85:4c:32: 0f:0a:71:43:b4:17:30:46:8a:3b:76:46:fe:9a:b0: fe:8c:fd:6a:43:4b:8f:69:3a:a4:33:2a:91:aa:42: 3a:ca:80:19:05:ca:20:c0:5b:cc:91:2a:ea:d2:c6: 30:f7:b4:1c:7c:d9:de:0e:34:42:59:4e:26:31:55: da:29:81:25:68:a5:57:ec:c1:df:b3:7a:ab:7b:f8: 6d:97:ca:c5:3e:44:8f:b8:e3:96:6a:96:b9:56:11: 4b:a7:4b:e6:f9:52:5f:5a:91:23:b8:07:26:50:49: b2:4c:8e:b6:6b:92:9c:0e:62:33:1f:39:a6:b1:45: 54:d9:a1:4a:ae:17:d7:aa:e8:9d:8e:2e:dd:c7:4e: b9:53:e8:41:67:60:e4:22:25:3e:d9:9a:c2:a1:88: ad:4f:b5:4c:49:f3:44:e5:25:80:24:49:89:a1:55: 58:15:95:73:38:90:3e:1a:c1:fe:16:a7:e2:f6:8c: 09:c7:c2:29:0c:55:3d:ad:2f:e7:06:7c:b8:67:e6: 6e:f8:9b:75:61:be:52:bb:d2:80:06:f5:16:09:2f: 2a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:54:9F:CF:86:63:DA:47:55:C1:5A:BA:2F:9F:C7:3B:C2:2B:1A:48 X509v3 Authority Key Identifier: keyid:20:FC:73:82:72:74:00:2E:B4:E4:AE:E8:9E:20:FD:0D:17:3F:B2:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91578DF/051CF1D495C711F0ABE2FD5FC4F9AE02/IPxzgnJ0AC605K7oniD9DRc_soU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPxzgnJ0AC605K7oniD9DRc_soU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91578DF/051CF1D495C711F0ABE2FD5FC4F9AE02/IPxzgnJ0AC605K7oniD9DRc_soU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:5a:fe:84:5c:4c:8b:90:b9:9f:08:7d:77:6a:88:b9:68:2b: 30:bb:1c:a3:ca:fd:4d:38:05:53:e1:1f:b8:4c:40:bb:11:d0: 1a:0b:ca:67:d9:dd:b3:85:5a:0f:66:15:8f:d8:72:bd:0e:ad: 4a:e0:b3:ed:d0:90:cf:39:cb:e7:42:ff:40:02:27:b9:2b:c6: 56:d9:07:bf:f5:7c:da:ea:1d:ef:15:1e:da:d0:fe:12:fa:9a: f9:19:42:07:c8:1a:60:5a:79:12:94:ab:17:6d:dd:1b:b5:43: bc:59:d1:98:06:61:ff:1c:5a:9b:be:8b:67:ad:8b:86:1e:c4: 2d:7e:70:aa:58:8f:ca:dd:e9:86:85:e1:23:cb:7a:80:5d:a4: e3:f9:e4:06:ab:0a:f7:29:55:70:0d:f0:80:52:2a:51:92:e6: c3:f4:44:ec:1a:5d:0d:01:64:ec:9d:b6:2d:ed:2d:c4:22:c0: 6c:34:db:56:d8:c9:bc:88:04:69:33:1c:8f:82:53:7b:f2:a9: bf:8c:bc:32:df:1d:3c:a2:11:b9:46:ed:c1:16:4d:0a:65:86: f0:f8:f1:3c:7f:f4:0b:dc:e2:00:70:07:e5:1c:33:6a:e4:54: ae:de:d6:d1:36:fb:cf:d0:45:3b:a4:09:7c:74:0b:44:ed:c1: 6a:d5:51:21 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NzhERjExMC8GA1UEBRMoMjBGQzczODI3Mjc0MDAyRUI0RTRBRUU4OUUyMEZEMEQx NzNGQjI4NTAeFw0yNjAzMjcwNzMyMzBaFw0yNjA0MDMwNzMyMzBaMBgxFjAUBgNV BAMTDTY5YzYzMjhlLWY5OTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDnWB6J41uFEtYjTMxETLCQEyGdES3XQ/q3x62C99thYPUX+3aCaaTcPIVMMg8K cUO0FzBGijt2Rv6asP6M/WpDS49pOqQzKpGqQjrKgBkFyiDAW8yRKurSxjD3tBx8 2d4ONEJZTiYxVdopgSVopVfswd+zeqt7+G2XysU+RI+445ZqlrlWEUunS+b5Ul9a kSO4ByZQSbJMjrZrkpwOYjMfOaaxRVTZoUquF9eq6J2OLt3HTrlT6EFnYOQiJT7Z msKhiK1PtUxJ80TlJYAkSYmhVVgVlXM4kD4awf4Wp+L2jAnHwikMVT2tL+cGfLhn 5m74m3VhvlK70oAG9RYJLyr/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUcVSfz4Zj 2kdVwVq6L5/HO8IrGkgwHwYDVR0jBBgwFoAUIPxzgnJ0AC605K7oniD9DRc/soUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3OERGLzA1MUNGMUQ0OTVD NzExRjBBQkUyRkQ1RkM0RjlBRTAyL0lQeHpnbkowQUM2MDVLN29uaUQ5RFJjX3Nv VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSVB4emduSjBBQzYwNUs3b25pRDlEUmNfc29VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3 OERGLzA1MUNGMUQ0OTVDNzExRjBBQkUyRkQ1RkM0RjlBRTAyL0lQeHpnbkowQUM2 MDVLN29uaUQ5RFJjX3NvVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCGWv6EXEyLkLmfCH13aoi5aCswuxyjyv1NOAVT4R+4TEC7EdAaC8pn2d2zhVoP ZhWP2HK9Dq1K4LPt0JDPOcvnQv9AAie5K8ZW2Qe/9Xza6h3vFR7a0P4S+pr5GUIH yBpgWnkSlKsXbd0btUO8WdGYBmH/HFqbvotnrYuGHsQtfnCqWI/K3emGheEjy3qA XaTj+eQGqwr3KVVwDfCAUipRkubD9ETsGl0NAWTsnbYt7S3EIsBsNNtW2Mm8iARp MxyPglN78qm/jLwy3x08ohG5Ru3BFk0KZYbw+PE8f/QL3OIAcAflHDNq5FSu3tbR NvvP0EU7pAl8dAtE7cFq1VEh -----END CERTIFICATE-----Generated at Sat Mar 28 12:08:51 2026 by rpki-client