$ rpki-client -vvf rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft File: e-IwFTz_kAFkLbybJPhdDMKCNk4.mft (raw, json) Hash identifier: WF/IVwQ/RJyXwn4DHcwg/knEGu+JoACAP5otWHt/D5M= Subject key identifier: AA:AC:E6:3B:54:D6:02:74:78:43:EF:B1:08:F0:22:37:DF:B1:D1:C4 Authority key identifier: 7B:E2:30:15:3C:FF:90:01:64:2D:BC:9B:24:F8:5D:0C:C2:82:36:4E Certificate issuer: /CN=A91625DB/serialNumber=7BE230153CFF9001642DBC9B24F85D0CC282364E Certificate serial: 01D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft Manifest number: 01C1 Signing time: Wed 25 Mar 2026 03:16:02 +0000 Manifest this update: Wed 25 Mar 2026 03:16:02 +0000 Manifest next update: Wed 01 Apr 2026 03:16:02 +0000 Files and hashes: 1: e-IwFTz_kAFkLbybJPhdDMKCNk4.crl (hash: RfJZVg8DZFeWamfr/DoiCHK7wIB4Hw0741B+Aa8pIoM=) 2: 9D3EBEF4921111EE9AD1150CC4F9AE02.roa (hash: W9lanvtL2q9XwYCNQGMdXKdQrewpCRyS44URbarRexc=) 3: C00D9A3C71EE11EFA7DD021EC4F9AE02.roa (hash: 5n/vT2aN9VzYjANmFIq1/DcSFVdlgCzkvZzjJSAeg2Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.crl rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:16:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 469 (0x1d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91625DB, serialNumber=7BE230153CFF9001642DBC9B24F85D0CC282364E Validity Not Before: Mar 25 03:16:02 2026 GMT Not After : Apr 1 03:16:02 2026 GMT Subject: CN=69c35372-fa02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8e:61:ac:a1:6d:50:e0:eb:e7:9e:72:eb:78: 25:f2:32:66:ef:b9:cd:28:dd:c9:03:03:15:3b:73: 39:bf:d6:9d:66:df:6c:14:ed:db:1c:c9:ea:fb:c7: 6a:b5:f8:64:fc:b9:a1:cf:2e:09:86:ab:fd:18:c9: 32:9a:ed:14:4e:cb:7e:af:98:2c:54:f6:38:c1:cc: 5d:0a:79:52:ef:fe:8b:8f:3d:37:73:32:1f:74:b4: 84:55:f0:d5:b7:c3:1f:f1:64:0b:4a:49:c8:4b:be: 98:d7:96:50:dd:ea:5f:e5:ca:dd:4f:a1:3d:61:36: 52:e6:77:76:ad:fc:e1:fb:ca:21:23:40:c4:b4:21: ee:b7:11:4a:a8:cd:c5:5f:0f:68:59:5b:5f:9b:69: ca:28:97:80:60:4d:37:5c:34:57:97:2e:f1:50:2c: 55:b2:c2:f0:f8:0e:ee:c7:bd:db:44:bb:3a:a7:cc: c2:d8:b5:b1:3f:7a:96:48:ed:a9:0b:e4:eb:b1:2a: 8e:09:f7:ee:a0:b9:7a:e6:fa:6b:39:d8:21:8d:a3: bb:79:46:0e:60:8d:e0:8f:e3:56:cd:20:45:fd:4f: c6:ed:03:88:89:9d:b6:91:3b:49:3f:24:67:67:45: 99:d1:bf:09:8b:34:3f:3a:12:ac:17:32:f6:1f:e5: 9c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:AC:E6:3B:54:D6:02:74:78:43:EF:B1:08:F0:22:37:DF:B1:D1:C4 X509v3 Authority Key Identifier: keyid:7B:E2:30:15:3C:FF:90:01:64:2D:BC:9B:24:F8:5D:0C:C2:82:36:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:c5:75:b0:4f:fd:12:45:71:0f:3f:e1:5d:5f:4b:d2:18:d0: 67:80:ca:9f:0c:03:09:e6:dd:a0:28:b5:aa:ab:81:2e:ed:08: eb:fc:eb:a6:70:05:b1:4e:70:0a:77:e6:3e:61:ff:be:d1:5f: 79:0e:55:e0:f5:e6:ea:62:e6:1d:b4:54:b1:18:6a:8a:ee:e6: 29:97:06:db:3f:96:37:00:67:6a:ce:31:59:f9:4c:ea:36:59: a2:de:e9:39:4b:6e:01:98:9e:bd:bf:35:bd:51:91:d5:09:d7: 10:5a:90:fb:02:0b:ba:11:5a:58:3e:be:7a:55:59:10:93:ba: e8:1c:24:15:07:47:58:b7:82:b4:48:e5:91:62:ee:ee:e2:e9: 06:d7:8e:ba:c9:a6:9c:dc:96:b7:89:b9:45:f9:d0:4a:f7:89: 36:3f:5c:b4:6c:20:61:04:60:1e:f7:da:f9:41:6c:9f:ef:aa: 22:2d:0d:52:15:59:4d:03:53:dc:1a:85:f1:0b:f1:c3:da:f0: 75:c8:58:e7:da:e1:d2:a3:b7:d9:60:e7:bc:43:4d:b9:9f:67: 19:2f:15:37:0f:43:1e:23:21:34:b9:d1:60:82:9a:7f:22:c5: a2:34:5d:c5:a4:5f:17:bb:f9:60:24:b5:60:1b:8f:a2:30:12: 39:71:32:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI1REIxMTAvBgNVBAUTKDdCRTIzMDE1M0NGRjkwMDE2NDJEQkM5QjI0Rjg1RDBD QzI4MjM2NEUwHhcNMjYwMzI1MDMxNjAyWhcNMjYwNDAxMDMxNjAyWjAYMRYwFAYD VQQDEw02OWMzNTM3Mi1mYTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqY5hrKFtUODr555y63gl8jJm77nNKN3JAwMVO3M5v9adZt9sFO3bHMnq+8dq tfhk/Lmhzy4Jhqv9GMkymu0UTst+r5gsVPY4wcxdCnlS7/6Ljz03czIfdLSEVfDV t8Mf8WQLSknIS76Y15ZQ3epf5crdT6E9YTZS5nd2rfzh+8ohI0DEtCHutxFKqM3F Xw9oWVtfm2nKKJeAYE03XDRXly7xUCxVssLw+A7ux73bRLs6p8zC2LWxP3qWSO2p C+TrsSqOCffuoLl65vprOdghjaO7eUYOYI3gj+NWzSBF/U/G7QOIiZ22kTtJPyRn Z0WZ0b8JizQ/OhKsFzL2H+Wc6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKqs5jtU 1gJ0eEPvsQjwIjffsdHEMB8GA1UdIwQYMBaAFHviMBU8/5ABZC28myT4XQzCgjZO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjVEQi8xMTkzOUQxMDkw NjkxMUVFQjIzRDc0MjVDNEY5QUUwMi9lLUl3RlR6X2tBRmtMYnliSlBoZERNS0NO azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2UtSXdGVHpfa0FGa0xieWJKUGhkRE1LQ05rNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjVEQi8xMTkzOUQxMDkwNjkxMUVFQjIzRDc0MjVDNEY5QUUwMi9lLUl3RlR6X2tB RmtMYnliSlBoZERNS0NOazQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcMV1sE/9EkVxDz/hXV9L0hjQZ4DKnwwDCebdoCi1qquBLu0I6/zrpnAFsU5w CnfmPmH/vtFfeQ5V4PXm6mLmHbRUsRhqiu7mKZcG2z+WNwBnas4xWflM6jZZot7p OUtuAZievb81vVGR1QnXEFqQ+wILuhFaWD6+elVZEJO66BwkFQdHWLeCtEjlkWLu 7uLpBteOusmmnNyWt4m5RfnQSveJNj9ctGwgYQRgHvfa+UFsn++qIi0NUhVZTQNT 3BqF8Qvxw9rwdchY59rh0qO32WDnvENNuZ9nGS8VNw9DHiMhNLnRYIKafyLFojRd xaRfF7v5YCS1YBuPojASOXEygg== -----END CERTIFICATE-----Generated at Thu Mar 26 15:40:22 2026 by rpki-client