$ rpki-client -vvf rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.mft File: i1fdFr2X-1v8IdnMqeK4bVUC4og.mft (raw, json) Hash identifier: BLbR0/k4xS83kVvm08EW69TMBcdhRaZn1bxVHLX2HfI= Subject key identifier: 62:E2:BE:98:CA:52:D7:D4:46:EC:9B:11:80:12:3D:8F:5E:85:C3:52 Authority key identifier: 8B:57:DD:16:BD:97:FB:5B:FC:21:D9:CC:A9:E2:B8:6D:55:02:E2:88 Certificate issuer: /CN=A91B929F/serialNumber=8B57DD16BD97FB5BFC21D9CCA9E2B86D5502E288 Certificate serial: 062D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i1fdFr2X-1v8IdnMqeK4bVUC4og.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.mft Manifest number: 0626 Signing time: Tue 24 Mar 2026 22:28:27 +0000 Manifest this update: Tue 24 Mar 2026 22:28:26 +0000 Manifest next update: Tue 31 Mar 2026 22:28:26 +0000 Files and hashes: 1: i1fdFr2X-1v8IdnMqeK4bVUC4og.crl (hash: +0Or55aGjkbM2rcCVREE3YCj0YJ+enpZ1RrJz/Sbjas=) 2: 2EA68D96D65211EB8DAD1886C4F9AE02.roa (hash: 2z/07142KRcC5lJIKi6aYRS5wWoeJVFtsDdL/K6XB7w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.crl rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i1fdFr2X-1v8IdnMqeK4bVUC4og.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:28:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1581 (0x62d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B929F, serialNumber=8B57DD16BD97FB5BFC21D9CCA9E2B86D5502E288 Validity Not Before: Mar 24 22:28:26 2026 GMT Not After : Mar 31 22:28:26 2026 GMT Subject: CN=69c3100b-c3ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8d:05:33:c3:74:c0:a8:9d:28:ad:c7:3b:5f: 35:7b:6d:5e:c3:aa:67:95:f0:08:04:d5:da:16:a0: 08:11:65:fd:46:8c:9c:e2:e0:ee:35:4b:7e:ba:2b: 37:c9:b2:56:6c:06:d2:3a:b8:db:19:2c:de:37:a3: c0:8c:e8:c9:84:57:c2:29:c7:5b:66:c3:ea:25:78: 0b:30:d2:74:a6:12:f8:9f:b7:42:7f:9a:8d:62:2a: 5f:3a:7c:99:83:19:90:a6:67:b0:a9:63:f0:00:15: de:a2:b3:2f:71:1a:75:7c:d1:c0:84:01:c0:95:01: 40:76:42:94:40:6a:a1:44:98:8b:c7:ad:18:37:87: 73:7f:2e:e1:02:2c:e4:ca:cd:fe:d0:05:ed:4a:e7: 37:39:90:34:d8:61:21:28:1f:c2:c3:ce:c4:33:1f: 20:7e:9d:f5:fa:51:38:e5:70:c7:ac:ad:72:73:c7: 80:c5:93:62:b7:eb:19:2b:bb:4b:b3:b8:cc:e6:88: ae:ad:95:46:3c:35:1b:6d:8a:e5:17:ae:1f:07:12: a0:33:6a:cb:d5:68:ad:8b:9b:b2:f7:c6:33:33:e7: c7:89:b0:0a:a2:50:18:f7:cc:5f:e3:72:e6:15:c6: 0e:95:4a:ec:32:37:21:31:36:93:b7:97:16:45:9d: 3d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:E2:BE:98:CA:52:D7:D4:46:EC:9B:11:80:12:3D:8F:5E:85:C3:52 X509v3 Authority Key Identifier: keyid:8B:57:DD:16:BD:97:FB:5B:FC:21:D9:CC:A9:E2:B8:6D:55:02:E2:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i1fdFr2X-1v8IdnMqeK4bVUC4og.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:af:c2:12:ae:fe:45:4d:5f:7b:bd:03:38:ee:28:94:4a:31: 61:4f:65:7e:0b:35:d8:d6:f4:e1:5b:05:cb:dc:cb:6c:7e:47: cf:0c:4f:74:93:76:59:c3:04:89:eb:d6:1e:90:96:6f:68:35: e1:0e:e3:d4:6b:f8:84:22:9e:d7:d6:1e:87:31:28:24:d4:03: 95:69:b8:0a:c6:04:07:7c:17:32:da:10:37:0c:5f:84:93:3c: de:70:80:94:46:98:79:a8:54:56:91:05:6b:45:63:2b:74:e7: c3:1c:2f:6c:ba:1b:d1:ab:2a:5c:c7:14:cc:4a:33:86:c1:a8: 1b:6f:05:7e:c0:25:ff:5d:f5:6a:b8:30:1d:2d:90:ab:54:38: da:eb:59:a1:05:86:91:53:d5:18:ed:85:f7:50:b0:4d:8a:2f: f3:39:f0:b7:e4:55:be:0e:55:b2:80:06:26:c7:89:57:82:88: 01:c5:cc:dc:ff:8d:c9:2d:9d:b8:8c:47:21:92:40:e6:ac:19: 73:7e:3a:8e:7c:1f:58:88:e3:b3:ee:35:33:28:0e:cd:87:d4: c0:30:dd:98:27:66:12:2b:30:aa:30:45:75:5b:16:3e:bd:3f: bb:78:32:48:85:f4:0d:9d:b9:74:e4:9b:da:0f:c9:4d:76:ad: cb:b1:2d:32 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkyOUYxMTAvBgNVBAUTKDhCNTdERDE2QkQ5N0ZCNUJGQzIxRDlDQ0E5RTJCODZE NTUwMkUyODgwHhcNMjYwMzI0MjIyODI2WhcNMjYwMzMxMjIyODI2WjAYMRYwFAYD VQQDEw02OWMzMTAwYi1jM2VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs40FM8N0wKidKK3HO181e21ew6pnlfAIBNXaFqAIEWX9Royc4uDuNUt+uis3 ybJWbAbSOrjbGSzeN6PAjOjJhFfCKcdbZsPqJXgLMNJ0phL4n7dCf5qNYipfOnyZ gxmQpmewqWPwABXeorMvcRp1fNHAhAHAlQFAdkKUQGqhRJiLx60YN4dzfy7hAizk ys3+0AXtSuc3OZA02GEhKB/Cw87EMx8gfp31+lE45XDHrK1yc8eAxZNit+sZK7tL s7jM5oiurZVGPDUbbYrlF64fBxKgM2rL1Witi5uy98YzM+fHibAKolAY98xf43Lm FcYOlUrsMjchMTaTt5cWRZ09UQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGLivpjK UtfURuybEYASPY9ehcNSMB8GA1UdIwQYMBaAFItX3Ra9l/tb/CHZzKniuG1VAuKI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTI5Ri8zQkU1NDlDRUQ2 NEUxMUVCOTRENEYyN0RDNEY5QUUwMi9pMWZkRnIyWC0xdjhJZG5NcWVLNGJWVUM0 b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2kxZmRGcjJYLTF2OElkbk1xZUs0YlZVQzRvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTI5Ri8zQkU1NDlDRUQ2NEUxMUVCOTRENEYyN0RDNEY5QUUwMi9pMWZkRnIyWC0x djhJZG5NcWVLNGJWVUM0b2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmK/CEq7+RU1fe70DOO4olEoxYU9lfgs12Nb04VsFy9zLbH5HzwxPdJN2WcME ievWHpCWb2g14Q7j1Gv4hCKe19YehzEoJNQDlWm4CsYEB3wXMtoQNwxfhJM83nCA lEaYeahUVpEFa0VjK3TnwxwvbLob0asqXMcUzEozhsGoG28FfsAl/131argwHS2Q q1Q42utZoQWGkVPVGO2F91CwTYov8znwt+RVvg5VsoAGJseJV4KIAcXM3P+NyS2d uIxHIZJA5qwZc346jnwfWIjjs+41MygOzYfUwDDdmCdmEiswqjBFdVsWPr0/u3gy SIX0DZ25dOSb2g/JTXaty7EtMg== -----END CERTIFICATE-----Generated at Thu Mar 26 12:37:04 2026 by rpki-client