$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/iwbd_ObxnEG-OZ07x74q4-O_1F8.mft File: iwbd_ObxnEG-OZ07x74q4-O_1F8.mft (raw, json) Hash identifier: yNCBG9+IGZO0+K1sXr/R91SyNPTNMHfpmecDawv1TF0= Subject key identifier: 1C:A6:34:79:D4:D7:63:99:F2:F6:2B:30:87:ED:B3:C6:1C:2B:09:CF Authority key identifier: 8B:06:DD:FC:E6:F1:9C:41:BE:39:9D:3B:C7:BE:2A:E3:E3:BF:D4:5F Certificate issuer: /CN=A91A2946/serialNumber=8B06DDFCE6F19C41BE399D3BC7BE2AE3E3BFD45F Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iwbd_ObxnEG-OZ07x74q4-O_1F8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/iwbd_ObxnEG-OZ07x74q4-O_1F8.mft Manifest number: 36 Signing time: Wed 25 Mar 2026 07:47:49 +0000 Manifest this update: Wed 25 Mar 2026 07:47:48 +0000 Manifest next update: Wed 01 Apr 2026 07:47:48 +0000 Files and hashes: 1: iwbd_ObxnEG-OZ07x74q4-O_1F8.crl (hash: RZjH42uEwddamyJ8seq6fk2D1fTtGRwoIyNRETBWRMk=) 2: 6E15925AE30511F0AC7EDB7A636F56BC.roa (hash: /kkUwnOrv/6/y9wITM43bvgWnFqMEe+eDDsrg29HO0s=) 3: 821C9E64DB3611F09027CD7F8DD3641D.roa (hash: AOfad5a7fSWsHdbLHMDODjYpWnpW4mwlrkvLUN4b9F4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/iwbd_ObxnEG-OZ07x74q4-O_1F8.crl rsync://rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/iwbd_ObxnEG-OZ07x74q4-O_1F8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iwbd_ObxnEG-OZ07x74q4-O_1F8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:47:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2946, serialNumber=8B06DDFCE6F19C41BE399D3BC7BE2AE3E3BFD45F Validity Not Before: Mar 25 07:47:48 2026 GMT Not After : Apr 1 07:47:48 2026 GMT Subject: CN=69c39324-9ba4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:63:69:0f:c4:3f:16:98:93:fa:d5:38:ca:9e: 96:0b:36:69:ec:74:ce:ba:a7:2f:4e:d4:3d:cc:a2: 58:06:ad:7f:62:83:88:1b:10:4c:d0:d3:19:d5:42: dd:d9:0f:b3:fb:b5:6d:67:53:eb:65:e1:e6:9d:4a: 5e:f3:6f:f0:8c:cb:e0:25:93:14:64:95:f8:42:30: 49:ba:4f:ec:6c:fe:4b:56:1d:79:3f:cd:b4:91:dc: 6d:74:9c:76:e1:1b:90:f7:7a:ac:18:83:2a:e5:21: f7:a9:1c:96:fe:c0:77:64:b2:0a:66:a7:23:3d:02: 3e:3e:1a:68:57:2f:8f:35:3d:62:11:e4:29:1f:c4: 7f:06:9a:54:1d:5d:e5:75:f7:cb:91:b9:8e:15:d8: 9c:18:05:e0:83:d7:40:0f:2e:e0:d7:89:84:d2:e5: 2f:d9:66:dd:5a:67:9c:0a:47:d0:8e:e3:20:9a:d4: 6f:59:0f:ea:ee:c3:48:c0:89:fe:c9:2e:56:ab:1f: 7b:d5:a2:04:58:76:46:bf:4d:2f:ef:81:90:7a:c2: c9:cd:d9:fa:f6:b8:47:10:81:ad:55:79:52:e9:5c: 26:78:98:2e:e4:10:76:16:35:05:56:e0:dc:82:76: 78:d8:28:1e:16:db:a4:61:c5:d5:b0:98:6f:e5:c8: 3c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:A6:34:79:D4:D7:63:99:F2:F6:2B:30:87:ED:B3:C6:1C:2B:09:CF X509v3 Authority Key Identifier: keyid:8B:06:DD:FC:E6:F1:9C:41:BE:39:9D:3B:C7:BE:2A:E3:E3:BF:D4:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/iwbd_ObxnEG-OZ07x74q4-O_1F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iwbd_ObxnEG-OZ07x74q4-O_1F8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/iwbd_ObxnEG-OZ07x74q4-O_1F8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:84:b7:3e:b9:b7:de:c6:94:16:2a:d9:7b:aa:4f:cb:5b:c3: 54:cf:e4:89:c2:c0:49:23:dc:8b:cf:6a:e0:ca:5a:31:53:23: 7c:ca:e8:d7:ff:e7:66:ff:71:38:ce:8a:77:d5:b1:0c:0d:56: 1d:7d:f0:82:bf:46:35:35:36:03:db:6b:a4:41:b5:48:ef:85: fa:c0:d9:53:48:b7:fe:a6:80:d2:1d:be:15:42:e3:34:e7:4b: b7:dc:51:ff:2e:2e:18:54:17:3b:07:72:a6:5d:0c:2e:21:49: e7:eb:01:73:07:60:26:35:64:4a:c7:fd:f0:d2:e0:4a:cf:77: 65:99:53:3d:7c:5a:9a:77:95:84:b5:14:41:8f:e0:82:2f:4b: a0:32:5a:8e:10:db:2d:3a:b0:94:b3:47:68:7d:f7:f9:17:c7: 39:1f:0b:bc:81:23:83:3d:7a:a4:55:f3:c4:6e:87:23:48:69: d7:fd:d1:e4:b5:b7:56:dc:c7:3d:27:66:13:55:02:ee:6c:f4: b6:1d:07:cd:95:b4:50:4d:98:f5:64:eb:64:a7:48:75:61:50: 7e:6b:62:57:e1:6c:2e:46:64:1d:5f:fd:25:cb:3c:b8:4e:43: cb:7b:13:e9:e5:af:e3:1c:59:2f:e8:03:98:66:fe:a3:b5:6a: 3b:b6:39:29 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB Mjk0NjExMC8GA1UEBRMoOEIwNkRERkNFNkYxOUM0MUJFMzk5RDNCQzdCRTJBRTNF M0JGRDQ1RjAeFw0yNjAzMjUwNzQ3NDhaFw0yNjA0MDEwNzQ3NDhaMBgxFjAUBgNV BAMTDTY5YzM5MzI0LTliYTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+Y2kPxD8WmJP61TjKnpYLNmnsdM66py9O1D3MolgGrX9ig4gbEEzQ0xnVQt3Z D7P7tW1nU+tl4eadSl7zb/CMy+AlkxRklfhCMEm6T+xs/ktWHXk/zbSR3G10nHbh G5D3eqwYgyrlIfepHJb+wHdksgpmpyM9Aj4+GmhXL481PWIR5CkfxH8GmlQdXeV1 98uRuY4V2JwYBeCD10APLuDXiYTS5S/ZZt1aZ5wKR9CO4yCa1G9ZD+ruw0jAif7J LlarH3vVogRYdka/TS/vgZB6wsnN2fr2uEcQga1VeVLpXCZ4mC7kEHYWNQVW4NyC dnjYKB4W26RhxdWwmG/lyDwtAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUHKY0edTX Y5ny9iswh+2zxhwrCc8wHwYDVR0jBBgwFoAUiwbd/ObxnEG+OZ07x74q4+O/1F8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEyOTQ2L0I2NzEwMTMwREIz MzExRjBBMkNFNTM2ODhDRDM2NDFEL2l3YmRfT2J4bkVHLU9aMDd4NzRxNC1PXzFG OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaXdiZF9PYnhuRUctT1owN3g3NHE0LU9fMUY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEy OTQ2L0I2NzEwMTMwREIzMzExRjBBMkNFNTM2ODhDRDM2NDFEL2l3YmRfT2J4bkVH LU9aMDd4NzRxNC1PXzFGOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBkhLc+ubfexpQWKtl7qk/LW8NUz+SJwsBJI9yLz2rgyloxUyN8yujX/+dm/3E4 zop31bEMDVYdffCCv0Y1NTYD22ukQbVI74X6wNlTSLf+poDSHb4VQuM050u33FH/ Li4YVBc7B3KmXQwuIUnn6wFzB2AmNWRKx/3w0uBKz3dlmVM9fFqad5WEtRRBj+CC L0ugMlqOENstOrCUs0dofff5F8c5Hwu8gSODPXqkVfPEbocjSGnX/dHktbdW3Mc9 J2YTVQLubPS2HQfNlbRQTZj1ZOtkp0h1YVB+a2JX4WwuRmQdX/0lyzy4TkPLexPp 5a/jHFkv6AOYZv6jtWo7tjkp -----END CERTIFICATE-----Generated at Thu Mar 26 02:37:43 2026 by rpki-client