$ rpki-client -vvf rpki.apnic.net/member_repository/A91801AC/B075028A12CA11F1BCBA005E063D8C67/iQyucO4FJzcpUQC_DPAR6zIEYrc.mft File: iQyucO4FJzcpUQC_DPAR6zIEYrc.mft (raw, json) Hash identifier: 91NvQ5A2IbwT2W/xmOFF9l+lYaAhfHblt6Mbp7mmiI8= Subject key identifier: F9:48:EF:09:E3:05:E6:05:18:A3:37:88:EF:4E:57:C3:03:9E:C9:AA Authority key identifier: 89:0C:AE:70:EE:05:27:37:29:51:00:BF:0C:F0:11:EB:32:04:62:B7 Certificate issuer: /CN=A91801AC/serialNumber=890CAE70EE052737295100BF0CF011EB320462B7 Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQyucO4FJzcpUQC_DPAR6zIEYrc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91801AC/B075028A12CA11F1BCBA005E063D8C67/iQyucO4FJzcpUQC_DPAR6zIEYrc.mft Manifest number: 16 Signing time: Wed 25 Mar 2026 08:15:01 +0000 Manifest this update: Wed 25 Mar 2026 08:15:00 +0000 Manifest next update: Wed 01 Apr 2026 08:15:00 +0000 Files and hashes: 1: iQyucO4FJzcpUQC_DPAR6zIEYrc.crl (hash: hUuMqCNP8jqDTZJCdl43dxjruCYFXf9NtdV3XSpniCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91801AC/B075028A12CA11F1BCBA005E063D8C67/iQyucO4FJzcpUQC_DPAR6zIEYrc.crl rsync://rpki.apnic.net/member_repository/A91801AC/B075028A12CA11F1BCBA005E063D8C67/iQyucO4FJzcpUQC_DPAR6zIEYrc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQyucO4FJzcpUQC_DPAR6zIEYrc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:15:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91801AC, serialNumber=890CAE70EE052737295100BF0CF011EB320462B7 Validity Not Before: Mar 25 08:15:00 2026 GMT Not After : Apr 1 08:15:00 2026 GMT Subject: CN=69c39985-624e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1b:5e:93:bd:92:f9:87:ff:a6:91:63:ec:92: 82:e9:a0:6b:04:37:10:f6:6d:52:02:0d:0e:f2:e9: c7:6a:30:85:27:0a:25:12:ba:43:dc:5d:55:39:df: 29:b7:d7:40:10:73:1a:39:f8:93:7b:1f:5d:22:2b: d6:64:47:77:1a:ff:7b:43:c9:4c:07:56:8f:cb:5f: c7:0a:81:7c:a2:2c:a1:ef:5e:96:67:69:dc:dd:cc: 20:71:0c:34:93:b4:b3:44:2b:43:4c:8a:f9:2e:b2: d0:99:54:60:9a:b6:3a:58:12:3a:19:5d:40:a4:a0: 0c:59:c9:cc:a8:d6:ad:01:7a:19:85:23:25:c2:d6: 1f:5e:08:28:3b:ec:ad:17:1e:a4:a1:e4:4a:44:7a: 95:7e:2e:43:d0:73:38:7a:f9:e8:66:7e:02:4c:18: 46:4f:94:4f:4f:5c:4c:4f:be:c6:54:d1:40:ad:17: 0b:31:bf:b6:d3:85:fd:8e:23:5f:49:f2:7a:a8:cb: 76:c5:99:2e:70:06:52:1f:fc:81:40:6a:fe:ed:c2: 44:ae:da:9b:3b:f4:f9:ec:bc:b3:ac:8f:75:ea:3f: 4a:cb:4f:12:c7:a6:bc:a0:ae:ac:db:e6:71:02:d8: 32:42:e5:7b:f9:4c:a7:90:24:9a:e9:ee:48:62:5d: 78:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:48:EF:09:E3:05:E6:05:18:A3:37:88:EF:4E:57:C3:03:9E:C9:AA X509v3 Authority Key Identifier: keyid:89:0C:AE:70:EE:05:27:37:29:51:00:BF:0C:F0:11:EB:32:04:62:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91801AC/B075028A12CA11F1BCBA005E063D8C67/iQyucO4FJzcpUQC_DPAR6zIEYrc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQyucO4FJzcpUQC_DPAR6zIEYrc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91801AC/B075028A12CA11F1BCBA005E063D8C67/iQyucO4FJzcpUQC_DPAR6zIEYrc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:ea:45:8a:a7:85:80:c6:4c:cc:4c:56:75:72:1e:3d:52:59: 0b:29:1f:50:2c:c1:77:3b:da:4c:b5:8a:0c:8e:f4:32:d0:c5: ed:bc:69:ec:b0:5b:71:0a:ad:56:33:78:26:2a:31:9d:b4:42: 77:d3:8f:d8:84:d1:8c:17:74:c1:09:f8:6c:c3:3d:68:9e:15: cc:41:fe:8f:46:e5:5d:62:82:4d:3e:1a:64:7c:71:af:72:fa: b0:97:aa:56:74:12:20:d6:79:18:7a:c6:22:60:b6:f9:66:44: cf:1b:0b:13:dc:20:f8:ac:12:5c:41:f3:e0:32:3e:f5:0d:08: 45:f9:0f:41:35:c3:93:ed:00:87:6f:c4:d7:7e:5b:61:e7:27: ca:2b:60:78:1d:a6:93:cf:1a:5e:83:31:3e:44:bf:2b:1d:2b: e4:49:90:03:c4:9c:b9:98:69:27:d8:eb:b2:24:8f:71:c7:c9: 14:f8:88:72:d0:48:86:f3:ac:cf:12:3e:b1:93:a1:22:ea:f7: da:9d:b7:8f:03:6a:1f:e0:8a:ed:f3:90:0b:a3:78:c2:cf:20: e2:ca:6b:eb:3c:8a:65:cd:58:d0:88:0a:e4:05:d6:b4:bd:af: 87:3f:5c:50:71:d0:be:6e:0b:c1:8f:42:1e:c7:cc:88:b8:01: 51:c4:0c:cc -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MDFBQzExMC8GA1UEBRMoODkwQ0FFNzBFRTA1MjczNzI5NTEwMEJGMENGMDExRUIz MjA0NjJCNzAeFw0yNjAzMjUwODE1MDBaFw0yNjA0MDEwODE1MDBaMBgxFjAUBgNV BAMTDTY5YzM5OTg1LTYyNGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1G16TvZL5h/+mkWPskoLpoGsENxD2bVICDQ7y6cdqMIUnCiUSukPcXVU53ym3 10AQcxo5+JN7H10iK9ZkR3ca/3tDyUwHVo/LX8cKgXyiLKHvXpZnadzdzCBxDDST tLNEK0NMivkustCZVGCatjpYEjoZXUCkoAxZycyo1q0BehmFIyXC1h9eCCg77K0X HqSh5EpEepV+LkPQczh6+ehmfgJMGEZPlE9PXExPvsZU0UCtFwsxv7bThf2OI19J 8nqoy3bFmS5wBlIf/IFAav7twkSu2ps79PnsvLOsj3XqP0rLTxLHprygrqzb5nEC 2DJC5Xv5TKeQJJrp7khiXXhTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU+UjvCeMF 5gUYozeI705XwwOeyaowHwYDVR0jBBgwFoAUiQyucO4FJzcpUQC/DPAR6zIEYrcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgwMUFDL0IwNzUwMjhBMTJD QTExRjFCQ0JBMDA1RTA2M0Q4QzY3L2lReXVjTzRGSnpjcFVRQ19EUEFSNnpJRVly Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaVF5dWNPNEZKemNwVVFDX0RQQVI2eklFWXJjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgw MUFDL0IwNzUwMjhBMTJDQTExRjFCQ0JBMDA1RTA2M0Q4QzY3L2lReXVjTzRGSnpj cFVRQ19EUEFSNnpJRVlyYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB16kWKp4WAxkzMTFZ1ch49UlkLKR9QLMF3O9pMtYoMjvQy0MXtvGnssFtxCq1W M3gmKjGdtEJ304/YhNGMF3TBCfhswz1onhXMQf6PRuVdYoJNPhpkfHGvcvqwl6pW dBIg1nkYesYiYLb5ZkTPGwsT3CD4rBJcQfPgMj71DQhF+Q9BNcOT7QCHb8TXflth 5yfKK2B4HaaTzxpegzE+RL8rHSvkSZADxJy5mGkn2OuyJI9xx8kU+Ihy0EiG86zP Ej6xk6Ei6vfanbePA2of4Irt85ALo3jCzyDiymvrPIplzVjQiArkBda0va+HP1xQ cdC+bgvBj0Iex8yIuAFRxAzM -----END CERTIFICATE-----Generated at Thu Mar 26 08:22:15 2026 by rpki-client