$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft File: iro-R9UcXSye80Plr0EQHkPFiog.mft (raw, json) Hash identifier: KPvk9ni+GNFEUdNWx6KGpj+EKQLgbVN25e4Sjo20sfA= Subject key identifier: 6B:EB:6B:7E:7E:CE:5A:70:E6:7E:AA:C3:4D:8C:C4:39:C9:44:8D:7C Authority key identifier: 8A:BA:3E:47:D5:1C:5D:2C:9E:F3:43:E5:AF:41:10:1E:43:C5:8A:88 Certificate issuer: /CN=A91AE984/serialNumber=8ABA3E47D51C5D2C9EF343E5AF41101E43C58A88 Certificate serial: 0C95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iro-R9UcXSye80Plr0EQHkPFiog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft Manifest number: 0C89 Signing time: Tue 24 Mar 2026 18:24:17 +0000 Manifest this update: Tue 24 Mar 2026 18:24:16 +0000 Manifest next update: Tue 31 Mar 2026 18:24:16 +0000 Files and hashes: 1: iro-R9UcXSye80Plr0EQHkPFiog.crl (hash: 0DTrcw9zyC3T9LRhJz2ufyIcpjVMAUS7DDlrFwbMBKU=) 2: CEC4C3FC903B11ED96D73F40C4F9AE02.roa (hash: ulVwpupTnSQGj93CteWzU9AxM16id4m9AwfIdwmeXW4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.crl rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iro-R9UcXSye80Plr0EQHkPFiog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:24:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3221 (0xc95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE984, serialNumber=8ABA3E47D51C5D2C9EF343E5AF41101E43C58A88 Validity Not Before: Mar 24 18:24:16 2026 GMT Not After : Mar 31 18:24:16 2026 GMT Subject: CN=69c2d6d1-da01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e4:e1:67:7b:d3:9f:8b:a8:73:41:cd:7e:8c: 12:61:c9:8a:f6:26:82:bb:f0:71:e9:57:5a:f3:02: 3e:e7:fc:a4:88:ec:70:a0:99:4d:bf:f5:b6:86:0e: b3:0a:95:0e:f2:61:0d:58:9f:ad:2c:ed:0e:7a:6f: d2:7a:11:23:8c:3e:47:cc:b3:04:62:f6:0a:d9:52: 5b:50:e6:ec:66:5f:0c:a1:17:4a:0b:52:e8:c0:8e: a1:d8:ac:31:c7:2a:ba:16:e4:06:a7:f2:a4:1d:a4: 37:58:20:87:4a:2e:56:f5:60:88:64:19:7a:cb:0d: c1:14:9f:3a:77:a5:51:3c:26:98:66:ca:bb:53:a8: f0:aa:fd:72:b7:90:9c:e1:52:71:b0:3c:0b:19:31: 2f:29:42:cd:3a:41:2c:61:5b:5b:7d:27:94:33:80: 96:d2:b3:5e:00:e4:91:74:07:2f:8d:6a:23:dc:ab: 15:21:3d:a8:67:14:44:95:c0:ef:2c:51:b4:7f:32: 11:a2:08:fb:04:47:fc:e2:5f:e3:87:88:2d:8a:5c: 3a:e6:36:8d:19:ca:2d:9a:cc:b7:44:62:71:b8:49: a1:a1:b5:ec:2d:50:b3:b3:5f:2c:b6:60:b6:02:9d: 5a:b8:8d:b9:47:9a:09:e0:05:3d:0a:e1:0f:18:db: 5a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:EB:6B:7E:7E:CE:5A:70:E6:7E:AA:C3:4D:8C:C4:39:C9:44:8D:7C X509v3 Authority Key Identifier: keyid:8A:BA:3E:47:D5:1C:5D:2C:9E:F3:43:E5:AF:41:10:1E:43:C5:8A:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iro-R9UcXSye80Plr0EQHkPFiog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d4:4e:96:c5:23:0a:6d:ee:64:c3:4f:cb:95:7e:a8:d0:00:2b: 32:a8:1e:cb:d5:c7:53:14:9b:16:1c:63:34:a7:20:6b:0e:fb: 83:2a:3b:fd:5c:72:7d:d0:9a:fa:1d:66:4b:01:e6:3b:04:b6: ad:01:86:f7:ec:ae:9a:6e:ac:3b:ac:e0:01:ef:6d:18:90:a1: f2:4f:9e:b4:5d:fb:6e:b9:67:1d:9a:b7:b4:58:67:f5:5a:6a: e0:3b:48:6e:7b:69:33:68:7e:66:bf:26:f6:d2:97:0f:1b:68: 08:3a:9d:93:4c:bf:4a:fc:32:e6:fd:f8:c0:1b:d1:fd:e5:de: 8f:52:67:d2:ff:9e:1c:c2:92:05:18:f0:96:5e:22:7a:59:0b: 93:e2:fe:ae:5d:4f:47:bd:38:7b:2e:2c:96:ae:29:2f:c7:35: 45:e8:b8:8e:47:b2:b6:a6:cc:3c:dc:67:56:7e:47:b0:ed:ff: c1:38:b9:55:7c:01:3b:fe:e5:8b:06:5c:dd:96:95:65:05:94: 50:bb:1a:69:e5:b7:d1:f0:cf:5c:81:ad:9f:0a:15:ae:75:a9: c4:2f:0c:1f:e1:1f:e5:e4:7f:20:8f:da:eb:c5:d9:40:4f:7e: af:70:6e:98:ab:8e:db:ba:f7:81:00:cf:49:22:62:28:35:cd: b2:22:66:2b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU5ODQxMTAvBgNVBAUTKDhBQkEzRTQ3RDUxQzVEMkM5RUYzNDNFNUFGNDExMDFF NDNDNThBODgwHhcNMjYwMzI0MTgyNDE2WhcNMjYwMzMxMTgyNDE2WjAYMRYwFAYD VQQDEw02OWMyZDZkMS1kYTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyuThZ3vTn4uoc0HNfowSYcmK9iaCu/Bx6Vda8wI+5/ykiOxwoJlNv/W2hg6z CpUO8mENWJ+tLO0Oem/SehEjjD5HzLMEYvYK2VJbUObsZl8MoRdKC1LowI6h2Kwx xyq6FuQGp/KkHaQ3WCCHSi5W9WCIZBl6yw3BFJ86d6VRPCaYZsq7U6jwqv1yt5Cc 4VJxsDwLGTEvKULNOkEsYVtbfSeUM4CW0rNeAOSRdAcvjWoj3KsVIT2oZxRElcDv LFG0fzIRogj7BEf84l/jh4gtilw65jaNGcotmsy3RGJxuEmhobXsLVCzs18stmC2 Ap1auI25R5oJ4AU9CuEPGNtagwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGvra35+ zlpw5n6qw02MxDnJRI18MB8GA1UdIwQYMBaAFIq6PkfVHF0snvND5a9BEB5DxYqI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTk4NC8yODc0NUU0QzE1 RUUxMUVBQTJEOUUwNkVDNEY5QUUwMi9pcm8tUjlVY1hTeWU4MFBscjBFUUhrUEZp b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lyby1SOVVjWFN5ZTgwUGxyMEVRSGtQRmlvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTk4NC8yODc0NUU0QzE1RUUxMUVBQTJEOUUwNkVDNEY5QUUwMi9pcm8tUjlVY1hT eWU4MFBscjBFUUhrUEZpb2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA1E6WxSMKbe5kw0/LlX6o0AArMqgey9XHUxSbFhxjNKcgaw77gyo7/VxyfdCa +h1mSwHmOwS2rQGG9+yumm6sO6zgAe9tGJCh8k+etF37brlnHZq3tFhn9Vpq4DtI bntpM2h+Zr8m9tKXDxtoCDqdk0y/Svwy5v34wBvR/eXej1Jn0v+eHMKSBRjwll4i elkLk+L+rl1PR704ey4slq4pL8c1Rei4jkeytqbMPNxnVn5HsO3/wTi5VXwBO/7l iwZc3ZaVZQWUULsaaeW30fDPXIGtnwoVrnWpxC8MH+Ef5eR/II/a68XZQE9+r3Bu mKuO27r3gQDPSSJiKDXNsiJmKw== -----END CERTIFICATE-----Generated at Thu Mar 26 02:01:02 2026 by rpki-client