$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft File: ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft (raw, json) Hash identifier: QvLeGJwjib1iAnRhnSnuymINv5qMDisTjgbAmVgfI7o= Subject key identifier: 1F:43:DF:B2:2F:17:56:E0:B4:6D:BC:FB:95:FD:A9:95:EC:FD:E3:C1 Authority key identifier: 8A:F7:D8:B8:64:FD:90:45:2F:FD:6D:E9:3B:51:45:6C:79:EF:B3:C7 Certificate issuer: /CN=A91AC4FA/serialNumber=8AF7D8B864FD90452FFD6DE93B51456C79EFB3C7 Certificate serial: 0285 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft Manifest number: 0275 Signing time: Wed 25 Mar 2026 01:25:04 +0000 Manifest this update: Wed 25 Mar 2026 01:25:04 +0000 Manifest next update: Wed 01 Apr 2026 01:25:04 +0000 Files and hashes: 1: ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl (hash: HIoeg6jpm3len/ZLaz62WhIaoAQ9x24Nz3Pwv/9JJrk=) 2: 0B1C46B26C8E11EDA1402673C4F9AE02.roa (hash: UWH1x8giA5CUDbuKn5hiEaz+aWmWPo/dG0Iot9P77PQ=) 3: 2A40C41C6EC511ED9672CB40C4F9AE02.roa (hash: Unh6vvgI1wlU5PdNLje9/sZrH6mvqXrjcdflctfvmwM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 645 (0x285) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC4FA, serialNumber=8AF7D8B864FD90452FFD6DE93B51456C79EFB3C7 Validity Not Before: Mar 25 01:25:04 2026 GMT Not After : Apr 1 01:25:04 2026 GMT Subject: CN=69c33970-6a80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:52:80:b9:28:c4:39:02:fa:c6:72:8b:bf:d2: 40:c1:eb:22:94:7e:ea:54:56:c4:9f:eb:54:24:ad: 21:b0:c5:5f:7d:62:5c:c1:45:6a:80:c4:d7:db:2e: d0:66:e3:5f:68:0a:ae:fd:01:7a:74:a5:3c:07:dd: 6a:71:70:47:83:e9:23:9a:01:1d:cd:66:fb:10:43: b0:e4:db:f1:12:50:40:77:14:d1:b1:3d:5b:13:89: c6:8b:2e:c2:e2:87:b2:24:ef:b3:f9:31:1f:9f:86: 53:0e:29:50:82:39:6b:58:f0:5b:28:8b:4b:5e:57: f3:c6:16:79:bc:b2:f3:87:67:7a:9f:43:f4:9d:18: b6:c1:b0:ac:79:e6:e5:25:c7:63:48:6d:94:42:0f: 22:62:ff:ea:3d:a9:dc:9b:8a:f2:1f:c5:80:42:fd: 90:85:57:30:9e:2a:0e:76:4c:a9:b0:6d:91:f4:46: 87:17:bc:35:81:67:bb:75:cb:92:a7:5f:e9:b4:a9: 90:02:8a:bc:6d:5c:6b:69:be:d5:49:ed:5d:5f:c4: 4a:6f:de:62:64:7c:39:d2:10:c7:72:5a:ca:ef:71: b7:cd:92:a9:eb:59:b6:7e:63:e3:d0:26:4d:0e:bc: 0f:8e:04:68:d0:4f:05:59:ae:f1:3d:66:7c:0c:f6: d2:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:43:DF:B2:2F:17:56:E0:B4:6D:BC:FB:95:FD:A9:95:EC:FD:E3:C1 X509v3 Authority Key Identifier: keyid:8A:F7:D8:B8:64:FD:90:45:2F:FD:6D:E9:3B:51:45:6C:79:EF:B3:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:ed:68:84:a1:53:e7:51:18:c9:f3:c9:2e:13:02:0d:20:ba: da:e6:6b:7e:cc:82:e0:b1:fd:8a:14:b5:2d:78:57:08:f7:7c: 68:2b:a6:a1:89:83:bf:9e:ae:8c:af:5a:3e:22:6c:76:a2:cc: 43:13:7e:f0:0c:41:12:a3:ec:ee:67:d7:59:22:58:34:f4:a0: 29:3d:85:61:f2:d0:cc:7f:3a:88:b5:89:dd:44:ad:3e:3f:82: 5a:e1:15:22:20:88:95:80:b3:9b:d9:81:1c:61:fd:ed:77:e7: f5:c4:28:9d:d3:c7:20:2e:d0:25:90:bb:20:b8:bd:45:05:54: f4:10:75:94:19:08:40:43:5b:f7:fa:3d:5b:58:f9:e7:2a:21: 09:bc:1e:1f:62:ed:87:03:08:44:16:99:80:52:26:90:13:a6: b1:dd:9f:e7:5d:0f:df:d7:2a:e5:45:cf:f7:48:78:a2:1d:7b: 37:69:dd:ef:48:33:19:75:9b:76:b4:92:25:d2:28:b9:c1:15: ce:21:6b:d4:70:a6:0a:5a:e9:73:79:ca:31:cd:60:ba:5a:ce: df:0e:14:14:f7:36:61:52:be:b2:95:29:7e:fb:51:f6:80:f3: bd:9c:19:58:31:4e:9c:26:f7:3d:1f:9e:6f:3d:59:0c:3c:69: 0e:90:9f:38 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM0RkExMTAvBgNVBAUTKDhBRjdEOEI4NjRGRDkwNDUyRkZENkRFOTNCNTE0NTZD NzlFRkIzQzcwHhcNMjYwMzI1MDEyNTA0WhcNMjYwNDAxMDEyNTA0WjAYMRYwFAYD VQQDEw02OWMzMzk3MC02YTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA21KAuSjEOQL6xnKLv9JAwesilH7qVFbEn+tUJK0hsMVffWJcwUVqgMTX2y7Q ZuNfaAqu/QF6dKU8B91qcXBHg+kjmgEdzWb7EEOw5NvxElBAdxTRsT1bE4nGiy7C 4oeyJO+z+TEfn4ZTDilQgjlrWPBbKItLXlfzxhZ5vLLzh2d6n0P0nRi2wbCseebl JcdjSG2UQg8iYv/qPancm4ryH8WAQv2QhVcwnioOdkypsG2R9EaHF7w1gWe7dcuS p1/ptKmQAoq8bVxrab7VSe1dX8RKb95iZHw50hDHclrK73G3zZKp61m2fmPj0CZN DrwPjgRo0E8FWa7xPWZ8DPbSjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB9D37Iv F1bgtG28+5X9qZXs/ePBMB8GA1UdIwQYMBaAFIr32Lhk/ZBFL/1t6TtRRWx577PH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzRGQS8zN0NCODc5ODZD OEIxMUVEODdBRkY1NzFDNEY5QUUwMi9pdmZZdUdUOWtFVXZfVzNwTzFGRmJIbnZz OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l2Zll1R1Q5a0VVdl9XM3BPMUZGYkhudnM4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzRGQS8zN0NCODc5ODZDOEIxMUVEODdBRkY1NzFDNEY5QUUwMi9pdmZZdUdUOWtF VXZfVzNwTzFGRmJIbnZzOGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhu1ohKFT51EYyfPJLhMCDSC62uZrfsyC4LH9ihS1LXhXCPd8aCumoYmDv56u jK9aPiJsdqLMQxN+8AxBEqPs7mfXWSJYNPSgKT2FYfLQzH86iLWJ3UStPj+CWuEV IiCIlYCzm9mBHGH97Xfn9cQondPHIC7QJZC7ILi9RQVU9BB1lBkIQENb9/o9W1j5 5yohCbweH2LthwMIRBaZgFImkBOmsd2f510P39cq5UXP90h4oh17N2nd70gzGXWb drSSJdIoucEVziFr1HCmClrpc3nKMc1gulrO3w4UFPc2YVK+spUpfvtR9oDzvZwZ WDFOnCb3PR+ebz1ZDDxpDpCfOA== -----END CERTIFICATE-----Generated at Thu Mar 26 02:26:56 2026 by rpki-client