$ rpki-client -vvf rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft File: IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft (raw, json) Hash identifier: xKJVzbdNZ11XA5VNEvXpQp1yyU6yNl2tGkmgeCY5de4= Subject key identifier: 0E:AE:6B:0B:45:0A:17:E5:FE:BE:F4:43:12:E7:FA:0A:2A:CF:29:46 Authority key identifier: 21:FC:81:5F:CB:1C:EA:D7:70:BD:6C:90:36:94:74:5F:71:CA:71:95 Certificate issuer: /CN=A91A91D2/serialNumber=21FC815FCB1CEAD770BD6C903694745F71CA7195 Certificate serial: 0A24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft Manifest number: 0A13 Signing time: Tue 24 Mar 2026 19:36:19 +0000 Manifest this update: Tue 24 Mar 2026 19:36:19 +0000 Manifest next update: Tue 31 Mar 2026 19:36:19 +0000 Files and hashes: 1: IfyBX8sc6tdwvWyQNpR0X3HKcZU.crl (hash: 3RKqPX4/gMPy5M7P4O+mW5HjJsVaQLdCOu0OiT38Onw=) 2: 371ADD3E9C9811EDA6AEF053C4F9AE02.roa (hash: ZDaQsYTQonQRSy58mGR7Kcfg4nWAO+ekMAlPoJ+tMyE=) 3: FE6C73289C9A11ED8123147BC4F9AE02.roa (hash: 2OCGb2GsDSN9eWUkEJm9OxDpHisk081Il0yQc3djlTw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.crl rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:36:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2596 (0xa24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A91D2, serialNumber=21FC815FCB1CEAD770BD6C903694745F71CA7195 Validity Not Before: Mar 24 19:36:19 2026 GMT Not After : Mar 31 19:36:19 2026 GMT Subject: CN=69c2e7b3-f4cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:11:5a:60:49:b0:57:eb:45:82:f1:1a:42:c6: f3:89:d3:7a:80:1d:da:ef:8d:7a:64:dd:d0:ab:8c: 6a:af:c7:58:a2:de:58:6f:05:4a:23:c5:fb:22:88: 47:1c:b9:14:30:b8:32:89:6f:1e:74:50:3e:0e:aa: f8:68:7a:6e:ef:2e:bd:3e:7b:66:3e:d4:2b:c7:53: 4b:1c:7e:4d:d2:a1:e8:fe:4a:bd:b2:8b:38:79:7a: 84:f1:aa:54:ab:ab:af:e4:96:f4:65:69:60:cf:f3: ba:65:9c:9d:74:28:f2:1b:35:ec:52:67:0f:25:33: 07:a1:04:39:34:f3:06:f5:a1:09:17:46:0f:f8:f0: 6e:3a:c1:4d:10:4c:16:83:01:42:3c:bc:87:de:86: e9:60:c0:26:e5:83:a6:81:62:50:15:d8:b0:95:b4: bd:82:47:75:5a:1e:25:4a:35:dc:9b:de:e3:9e:ef: 10:f4:e5:38:60:fc:b8:5e:44:43:ba:58:5e:13:3b: b9:ca:ef:45:30:07:ef:44:dc:7a:8d:eb:fe:e6:aa: c2:4b:5a:86:9e:27:cb:6c:f3:fd:63:66:85:de:a2: 94:9d:1a:ef:f5:f2:e9:d7:f7:05:04:51:61:48:1f: 2c:0c:69:0e:3b:c8:53:59:90:04:77:7b:8c:b1:f7: 41:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:AE:6B:0B:45:0A:17:E5:FE:BE:F4:43:12:E7:FA:0A:2A:CF:29:46 X509v3 Authority Key Identifier: keyid:21:FC:81:5F:CB:1C:EA:D7:70:BD:6C:90:36:94:74:5F:71:CA:71:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:f8:77:bc:f6:b7:a8:8f:53:10:fa:63:a6:2e:00:e0:fc:9b: 1b:a9:f8:9e:c9:19:0b:ad:5d:13:8a:36:1b:99:6d:96:22:e2: 5d:db:a4:07:ff:79:00:f3:88:30:24:25:bf:00:bd:00:c7:1c: 96:4b:ec:d1:1e:5f:00:8f:3e:3f:2d:cb:e3:66:14:0e:9d:37: af:c0:1f:2e:93:fc:e2:5b:a8:e8:d9:41:77:99:67:98:0d:cf: 46:17:ec:3f:bd:3e:83:a4:ba:5f:ef:03:99:99:d7:50:b9:59: b4:b6:dc:ed:af:6a:59:37:cd:c7:cc:65:6f:85:3d:3b:4a:06: c2:f2:b0:0a:d8:9a:cd:5d:ce:d4:f9:0c:f1:bd:41:3f:24:26: 08:5a:eb:59:ba:b7:be:e4:5e:35:42:38:db:e2:a5:bf:aa:31: 4a:d9:14:51:61:0a:60:e7:b3:6d:2e:1f:0f:24:b5:56:b3:aa: 80:b8:3a:b0:8c:52:a6:db:f4:c1:90:fe:b4:da:66:f7:a1:b5: 92:95:94:31:23:b9:4c:fe:c0:a3:de:77:d3:35:c0:a8:4d:1b: e3:9a:6d:39:1f:1c:35:06:37:77:3a:cf:37:b7:f6:71:b7:32: b4:a6:78:74:47:5c:72:c3:02:1f:3e:ae:78:50:69:fd:c4:6c: fc:8f:df:63 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkxRDIxMTAvBgNVBAUTKDIxRkM4MTVGQ0IxQ0VBRDc3MEJENkM5MDM2OTQ3NDVG NzFDQTcxOTUwHhcNMjYwMzI0MTkzNjE5WhcNMjYwMzMxMTkzNjE5WjAYMRYwFAYD VQQDEw02OWMyZTdiMy1mNGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0xFaYEmwV+tFgvEaQsbzidN6gB3a7416ZN3Qq4xqr8dYot5YbwVKI8X7IohH HLkUMLgyiW8edFA+Dqr4aHpu7y69PntmPtQrx1NLHH5N0qHo/kq9sos4eXqE8apU q6uv5Jb0ZWlgz/O6ZZyddCjyGzXsUmcPJTMHoQQ5NPMG9aEJF0YP+PBuOsFNEEwW gwFCPLyH3obpYMAm5YOmgWJQFdiwlbS9gkd1Wh4lSjXcm97jnu8Q9OU4YPy4XkRD ulheEzu5yu9FMAfvRNx6jev+5qrCS1qGnifLbPP9Y2aF3qKUnRrv9fLp1/cFBFFh SB8sDGkOO8hTWZAEd3uMsfdBKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA6uawtF Chfl/r70QxLn+goqzylGMB8GA1UdIwQYMBaAFCH8gV/LHOrXcL1skDaUdF9xynGV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTFEMi84QzE0RTk0NDkx RDExMUVBQTUzM0E5NzhDNEY5QUUwMi9JZnlCWDhzYzZ0ZHd2V3lRTnBSMFgzSEtj WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lmeUJYOHNjNnRkd3ZXeVFOcFIwWDNIS2NaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTFEMi84QzE0RTk0NDkxRDExMUVBQTUzM0E5NzhDNEY5QUUwMi9JZnlCWDhzYzZ0 ZHd2V3lRTnBSMFgzSEtjWlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqvh3vPa3qI9TEPpjpi4A4PybG6n4nskZC61dE4o2G5ltliLiXdukB/95APOI MCQlvwC9AMcclkvs0R5fAI8+Py3L42YUDp03r8AfLpP84luo6NlBd5lnmA3PRhfs P70+g6S6X+8DmZnXULlZtLbc7a9qWTfNx8xlb4U9O0oGwvKwCtiazV3O1PkM8b1B PyQmCFrrWbq3vuReNUI42+Klv6oxStkUUWEKYOezbS4fDyS1VrOqgLg6sIxSptv0 wZD+tNpm96G1kpWUMSO5TP7Ao9530zXAqE0b45ptOR8cNQY3dzrPN7f2cbcytKZ4 dEdccsMCHz6ueFBp/cRs/I/fYw== -----END CERTIFICATE-----Generated at Thu Mar 26 17:41:57 2026 by rpki-client