$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft File: IbLqdC_w7568zvOZh5Dj9bCNa2M.mft (raw, json) Hash identifier: O3nqQ2PunLMxWXn3Mc7bUh0goAn0+Ea6aSytj07xWdo= Subject key identifier: F9:AC:A1:CF:31:13:94:C5:FB:55:78:5F:58:07:9D:37:3B:65:9E:F5 Authority key identifier: 21:B2:EA:74:2F:F0:EF:9E:BC:CE:F3:99:87:90:E3:F5:B0:8D:6B:63 Certificate issuer: /CN=A91B6172/serialNumber=21B2EA742FF0EF9EBCCEF3998790E3F5B08D6B63 Certificate serial: 0283 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft Manifest number: 026F Signing time: Wed 25 Mar 2026 01:27:50 +0000 Manifest this update: Wed 25 Mar 2026 01:27:49 +0000 Manifest next update: Wed 01 Apr 2026 01:27:49 +0000 Files and hashes: 1: IbLqdC_w7568zvOZh5Dj9bCNa2M.crl (hash: R5zvj8ndzksO9O/E1Kq7vUduHshS/Tx6KW2WX3fIQLI=) 2: ABDDEF28722F11EDA987AB75C4F9AE02.roa (hash: A7VcLCIr/FcjJaPxb9fLesSTHqaiYIJD5WUKTmg4W9Q=) 3: 08A71970723811EDB0BD0312C4F9AE02.roa (hash: FAsv4u0lMC/I3QYc2qVpW+Zdc9wxgYJL7HZ2HtRyWFE=) 4: AC80FFE2722F11EDA987AB75C4F9AE02.roa (hash: Pu3HSh7UAJem3mpQag6OD//H7HzHFiNKKj+xFn4gXBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.crl rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:27:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 643 (0x283) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6172, serialNumber=21B2EA742FF0EF9EBCCEF3998790E3F5B08D6B63 Validity Not Before: Mar 25 01:27:49 2026 GMT Not After : Apr 1 01:27:49 2026 GMT Subject: CN=69c33a16-30b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:74:92:0d:ca:9c:78:51:12:d9:8d:f3:67:14: 22:b3:6e:fb:8d:65:9b:aa:bf:9f:de:83:22:c5:4b: 4f:4e:d8:eb:24:e3:9b:cd:64:d7:97:d3:0b:20:96: 89:cc:b6:62:1d:ea:27:bb:e4:14:81:fc:06:fe:6e: 34:f9:36:de:ec:1c:eb:55:62:56:29:34:6c:b8:43: f2:78:78:3e:24:7d:84:af:89:dc:02:82:f3:0e:3f: 6a:84:c3:f0:90:31:65:fc:1d:c0:78:e3:f1:e2:84: 33:de:51:04:99:b0:42:3b:34:2c:30:5b:df:08:ff: 61:7b:1a:ba:43:bd:bd:f6:19:e1:d9:ec:25:26:3d: f6:61:b7:f1:36:0d:8a:8a:f2:a0:18:10:be:9e:34: b3:4d:6f:3e:11:50:12:d3:46:4e:cc:ad:69:1a:fb: 32:9b:f3:41:56:95:91:60:e1:9f:14:2d:91:db:87: cf:eb:db:05:cf:da:f7:7c:d4:a3:95:ef:c9:05:58: 82:1e:43:d8:43:91:2b:d8:4b:87:cf:1a:ca:be:16: 0e:1e:a9:63:68:83:a1:eb:9f:1d:d1:58:d2:6f:3e: b0:7f:97:ab:5e:2c:ae:ba:d7:4a:03:a6:ff:3f:ca: 7e:5b:63:80:30:63:e3:9e:86:92:90:57:61:39:fe: 55:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:AC:A1:CF:31:13:94:C5:FB:55:78:5F:58:07:9D:37:3B:65:9E:F5 X509v3 Authority Key Identifier: keyid:21:B2:EA:74:2F:F0:EF:9E:BC:CE:F3:99:87:90:E3:F5:B0:8D:6B:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:bf:33:cd:97:21:f4:40:25:6b:f4:bb:29:03:8b:2b:31:79: f1:39:fc:67:e0:81:e9:82:e6:a2:62:52:bb:2d:6e:c1:ca:e0: 54:65:14:ce:cc:5c:44:9c:3b:56:03:1e:59:df:0f:f6:af:fb: 61:82:d6:63:45:1a:53:aa:17:41:5e:2d:ab:0c:75:59:53:88: 87:eb:48:4b:0e:11:99:60:18:07:9f:ef:33:e3:32:ed:68:34: f0:c6:43:2b:59:06:0e:48:99:c2:db:5f:37:d6:77:97:99:3d: b2:5d:87:fd:03:7c:cf:45:5a:18:a2:ac:3f:d8:2c:55:19:3c: 07:49:d9:d6:d3:54:2e:d1:40:e1:6e:30:a7:eb:7b:35:04:b7: c2:cb:72:aa:e1:a2:ce:a7:e4:7d:89:42:27:a8:38:77:db:e3: a7:ae:06:7b:50:ab:55:e6:d6:c2:b4:97:fb:61:0f:fb:06:ca: fc:1f:a8:d5:ff:bc:c3:2e:83:b2:a1:e8:bc:38:9a:b1:98:5c: 24:08:78:a9:6b:4b:be:a9:e3:4f:86:ad:32:ff:da:b5:95:bd: 75:5c:f8:e4:f8:85:58:14:76:f9:ed:b3:e0:8a:7b:d7:94:44: 69:7d:7a:17:0f:c6:c5:80:23:79:2d:a5:82:12:f9:24:52:6e: dd:45:ed:89 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYxNzIxMTAvBgNVBAUTKDIxQjJFQTc0MkZGMEVGOUVCQ0NFRjM5OTg3OTBFM0Y1 QjA4RDZCNjMwHhcNMjYwMzI1MDEyNzQ5WhcNMjYwNDAxMDEyNzQ5WjAYMRYwFAYD VQQDEw02OWMzM2ExNi0zMGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoXSSDcqceFES2Y3zZxQis277jWWbqr+f3oMixUtPTtjrJOObzWTXl9MLIJaJ zLZiHeonu+QUgfwG/m40+Tbe7BzrVWJWKTRsuEPyeHg+JH2Er4ncAoLzDj9qhMPw kDFl/B3AeOPx4oQz3lEEmbBCOzQsMFvfCP9hexq6Q7299hnh2ewlJj32YbfxNg2K ivKgGBC+njSzTW8+EVAS00ZOzK1pGvsym/NBVpWRYOGfFC2R24fP69sFz9r3fNSj le/JBViCHkPYQ5Er2EuHzxrKvhYOHqljaIOh658d0VjSbz6wf5erXiyuutdKA6b/ P8p+W2OAMGPjnoaSkFdhOf5VXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPmsoc8x E5TF+1V4X1gHnTc7ZZ71MB8GA1UdIwQYMBaAFCGy6nQv8O+evM7zmYeQ4/WwjWtj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjE3Mi9CQTU0QzEzNDcy MkIxMUVEOTdENzNDNUFDNEY5QUUwMi9JYkxxZENfdzc1Njh6dk9aaDVEajliQ05h Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0liTHFkQ193NzU2OHp2T1poNURqOWJDTmEyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjE3Mi9CQTU0QzEzNDcyMkIxMUVEOTdENzNDNUFDNEY5QUUwMi9JYkxxZENfdzc1 Njh6dk9aaDVEajliQ05hMk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVb8zzZch9EAla/S7KQOLKzF58Tn8Z+CB6YLmomJSuy1uwcrgVGUUzsxcRJw7 VgMeWd8P9q/7YYLWY0UaU6oXQV4tqwx1WVOIh+tISw4RmWAYB5/vM+My7Wg08MZD K1kGDkiZwttfN9Z3l5k9sl2H/QN8z0VaGKKsP9gsVRk8B0nZ1tNULtFA4W4wp+t7 NQS3wstyquGizqfkfYlCJ6g4d9vjp64Ge1CrVebWwrSX+2EP+wbK/B+o1f+8wy6D sqHovDiasZhcJAh4qWtLvqnjT4atMv/atZW9dVz45PiFWBR2+e2z4Ip715REaX16 Fw/GxYAjeS2lghL5JFJu3UXtiQ== -----END CERTIFICATE-----Generated at Thu Mar 26 14:32:01 2026 by rpki-client