$ rpki-client -vvf rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.mft File: -IuXQE-dwQ9aqwL3TsSQ-YrQ07A.mft (raw, json) Hash identifier: hiTHV+jgIMulkcr7Gb2VVVpZNVY3xsm1WzkZX5Yl1pg= Subject key identifier: DC:16:C2:54:57:94:0A:72:9B:F0:24:E3:58:9D:5B:53:F6:AD:DA:A5 Authority key identifier: F8:8B:97:40:4F:9D:C1:0F:5A:AB:02:F7:4E:C4:90:F9:8A:D0:D3:B0 Certificate issuer: /CN=A91854B7/serialNumber=F88B97404F9DC10F5AAB02F74EC490F98AD0D3B0 Certificate serial: 0718 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.mft Manifest number: 06F9 Signing time: Tue 24 Mar 2026 21:45:32 +0000 Manifest this update: Tue 24 Mar 2026 21:45:32 +0000 Manifest next update: Tue 31 Mar 2026 21:45:32 +0000 Files and hashes: 1: -IuXQE-dwQ9aqwL3TsSQ-YrQ07A.crl (hash: oYmw7pUrrZKcynY2sWSbpfqR18frl9uq/GdjW922qoI=) 2: 399EDDAA823F11F0895C5843C4F9AE02.roa (hash: n+OBMglPTvErv+P6ZUgv6kKsWJf1PaCgzoYVPi34f1Q=) 3: 5892BB44853E11EB9D9E2D39C4F9AE02.roa (hash: qXGDfI73IfnHMAp4HxrY2CaG3uaWhC+oKVSUMLz1LFQ=) 4: 3EACF95EEBB511ECA410BF6DC4F9AE02.roa (hash: XoRUOC4UUdsqAWL8b8mRp3Lb8qKoXQVLqNUMMLIx7wI=) 5: 57D28CCA853E11EB9D9E2D39C4F9AE02.roa (hash: 48L080JyJlktjDJm5JUMWcLPjjHEK1WWZAsxDZsWQPg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.crl rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:45:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1816 (0x718) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91854B7, serialNumber=F88B97404F9DC10F5AAB02F74EC490F98AD0D3B0 Validity Not Before: Mar 24 21:45:32 2026 GMT Not After : Mar 31 21:45:32 2026 GMT Subject: CN=69c305fc-dd94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b4:6f:ee:a9:31:7b:1b:88:71:33:43:bd:a3: 19:2b:51:6d:05:f6:a1:84:56:e7:87:cf:4e:5a:26: ec:47:29:ac:a8:18:cb:df:0a:63:07:ae:3f:00:7b: ff:63:85:c8:40:59:59:16:f9:02:ac:84:80:5d:98: 01:ed:cc:47:78:86:b5:22:0c:ef:0c:09:db:0f:f2: d4:50:02:fa:06:7c:0a:f7:c0:45:89:26:fd:c9:73: 98:6f:39:ad:57:9b:10:ce:56:0f:d3:4a:a5:0a:36: 16:ac:f1:f7:3b:2f:97:b7:4e:f5:6a:21:f4:55:f2: 31:3d:31:09:3e:b4:c0:0c:4e:be:d2:4d:6d:df:1e: 63:7f:79:02:e1:e0:6a:95:e3:87:e4:46:a4:cc:b1: 3d:4f:64:2d:3b:d8:ac:72:28:0e:cb:f9:fb:f0:4e: e8:27:2e:bd:ca:91:4f:0a:0d:87:f6:07:d2:5b:16: fc:75:d2:c3:7b:04:ab:72:d5:77:30:ae:f8:f3:8e: cf:ad:46:82:e0:cb:7c:c5:4b:f4:73:88:dc:73:62: bd:2e:7c:fd:a9:15:00:c7:f3:11:79:80:24:00:df: d1:5b:76:bd:67:01:7b:40:d3:04:f8:db:cb:2c:7c: cb:99:a8:03:c8:ff:30:34:c8:2c:1c:fc:36:e5:33: 00:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:16:C2:54:57:94:0A:72:9B:F0:24:E3:58:9D:5B:53:F6:AD:DA:A5 X509v3 Authority Key Identifier: keyid:F8:8B:97:40:4F:9D:C1:0F:5A:AB:02:F7:4E:C4:90:F9:8A:D0:D3:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:57:e6:ce:b2:8c:d7:c4:7f:db:4f:55:02:fa:0e:c0:52:14: 14:78:39:58:f9:74:01:19:8e:2a:bc:22:9b:d9:70:a0:72:8d: 8e:1e:d4:e7:32:7f:40:da:5c:29:43:06:b6:89:80:44:8c:04: a2:f5:e7:26:ee:20:d0:18:5c:bb:4e:1d:6b:a7:bd:e4:cc:6c: b8:95:05:3d:db:9d:33:55:ba:11:32:0e:e1:f1:21:18:c2:d6: 9c:fb:c1:82:a1:21:b2:0a:c6:58:6f:56:8c:2c:e2:c4:0f:d7: 9e:07:06:66:7f:48:bc:d5:6a:99:d1:0a:cc:db:81:5e:32:f8: 8b:0b:5f:83:dc:f1:ef:c4:12:b6:e1:7c:45:31:7c:3c:10:d4: 0f:f3:90:ef:02:77:ce:dc:20:ff:88:11:d6:05:2d:57:e5:d8: 2f:18:b7:2a:b0:a0:fe:ea:ae:9b:48:75:ea:47:81:d6:bc:4e: 9c:80:67:1c:a5:b8:e4:93:d7:b5:26:68:ec:8f:62:7a:ba:e1: 52:20:f3:9e:75:39:8a:13:bb:d9:c9:99:b4:ed:5d:62:d7:a4: ad:bb:4f:e8:c4:7a:7e:60:ce:00:60:52:87:d6:5b:1b:82:fa: 29:83:70:ab:c9:40:28:f1:f0:40:cd:37:48:15:d2:a6:38:77: 6d:10:82:95 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBxgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU0QjcxMTAvBgNVBAUTKEY4OEI5NzQwNEY5REMxMEY1QUFCMDJGNzRFQzQ5MEY5 OEFEMEQzQjAwHhcNMjYwMzI0MjE0NTMyWhcNMjYwMzMxMjE0NTMyWjAYMRYwFAYD VQQDEw02OWMzMDVmYy1kZDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhbRv7qkxexuIcTNDvaMZK1FtBfahhFbnh89OWibsRymsqBjL3wpjB64/AHv/ Y4XIQFlZFvkCrISAXZgB7cxHeIa1IgzvDAnbD/LUUAL6BnwK98BFiSb9yXOYbzmt V5sQzlYP00qlCjYWrPH3Oy+Xt071aiH0VfIxPTEJPrTADE6+0k1t3x5jf3kC4eBq leOH5EakzLE9T2QtO9iscigOy/n78E7oJy69ypFPCg2H9gfSWxb8ddLDewSrctV3 MK74847PrUaC4Mt8xUv0c4jcc2K9Lnz9qRUAx/MReYAkAN/RW3a9ZwF7QNME+NvL LHzLmagDyP8wNMgsHPw25TMAyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNwWwlRX lApym/Ak41idW1P2rdqlMB8GA1UdIwQYMBaAFPiLl0BPncEPWqsC907EkPmK0NOw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTRCNy9FMTgwQ0U3QTg1 MUUxMUVCODQxOUIzMjdDNEY5QUUwMi8tSXVYUUUtZHdROWFxd0wzVHNTUS1ZclEw N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1JdVhRRS1kd1E5YXF3TDNUc1NRLVlyUTA3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTRCNy9FMTgwQ0U3QTg1MUUxMUVCODQxOUIzMjdDNEY5QUUwMi8tSXVYUUUtZHdR OWFxd0wzVHNTUS1ZclEwN0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuFfmzrKM18R/209VAvoOwFIUFHg5WPl0ARmOKrwim9lwoHKNjh7U5zJ/QNpc KUMGtomARIwEovXnJu4g0Bhcu04da6e95MxsuJUFPdudM1W6ETIO4fEhGMLWnPvB gqEhsgrGWG9WjCzixA/XngcGZn9IvNVqmdEKzNuBXjL4iwtfg9zx78QStuF8RTF8 PBDUD/OQ7wJ3ztwg/4gR1gUtV+XYLxi3KrCg/uqum0h16keB1rxOnIBnHKW45JPX tSZo7I9ierrhUiDznnU5ihO72cmZtO1dYtekrbtP6MR6fmDOAGBSh9ZbG4L6KYNw q8lAKPHwQM03SBXSpjh3bRCClQ== -----END CERTIFICATE-----Generated at Thu Mar 26 00:59:46 2026 by rpki-client