$ rpki-client -vvf rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft File: ihprqbt2zysN7jXqTP0vX_jAieM.mft (raw, json) Hash identifier: ItyLMm0/q6FseZGBAOtEwlLCATbLR1Jz5045URWBNv8= Subject key identifier: 28:7B:21:1E:42:77:6B:C1:1F:6D:A3:50:C0:9D:12:16:84:B1:CA:BF Authority key identifier: 8A:1A:6B:A9:BB:76:CF:2B:0D:EE:35:EA:4C:FD:2F:5F:F8:C0:89:E3 Certificate issuer: /CN=A91C36EE/serialNumber=8A1A6BA9BB76CF2B0DEE35EA4CFD2F5FF8C089E3 Certificate serial: 0C83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihprqbt2zysN7jXqTP0vX_jAieM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft Manifest number: 0C7A Signing time: Tue 24 Mar 2026 18:24:57 +0000 Manifest this update: Tue 24 Mar 2026 18:24:57 +0000 Manifest next update: Tue 31 Mar 2026 18:24:57 +0000 Files and hashes: 1: ihprqbt2zysN7jXqTP0vX_jAieM.crl (hash: +PdpxooIA9Wu8nDWmYe0NuQOmMQQvNOLMcRY9RndDOg=) 2: 6FCF7FF2180411EA9AA70A57C4F9AE02.roa (hash: Jmt3gOA3SMMnVdNR/G0V8b2lUdwKqb+fxUhA4ydziJ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.crl rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihprqbt2zysN7jXqTP0vX_jAieM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:24:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3203 (0xc83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C36EE, serialNumber=8A1A6BA9BB76CF2B0DEE35EA4CFD2F5FF8C089E3 Validity Not Before: Mar 24 18:24:57 2026 GMT Not After : Mar 31 18:24:57 2026 GMT Subject: CN=69c2d6f9-875f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e8:bf:12:6a:47:d9:8b:fa:39:0d:59:62:1b: c4:e7:ac:17:35:e1:de:89:03:28:1c:8b:e0:30:8e: e2:9b:3a:03:c3:29:3a:f1:a8:d9:4b:ac:c9:9f:d8: be:90:46:bc:27:5d:58:c9:3b:ff:4c:29:16:b6:fb: 74:cd:af:43:8c:73:76:5b:cc:92:2b:29:f6:52:59: db:89:e7:c0:82:f7:e6:da:bb:4a:61:a9:29:7d:34: 5c:fe:01:f1:9e:b2:b9:3f:d0:1c:49:52:c4:56:93: e0:c3:81:7f:f6:06:1f:53:53:9e:a7:14:7a:57:ef: a2:51:54:14:3e:02:72:1b:e1:46:48:c9:95:ea:bd: 07:f4:71:49:d8:46:7f:9b:1b:f5:a5:ea:7f:64:56: 50:f1:30:e9:a4:ed:1b:27:04:11:cc:45:32:89:f2: aa:c4:f3:b4:11:bf:23:6a:4b:7c:7c:16:ed:64:92: d8:5f:02:c3:01:3c:de:34:78:dc:7e:3d:89:6b:02: 2b:0a:51:67:1f:b3:a6:1e:00:96:66:1f:cb:8b:b4: 1f:d8:ee:95:09:90:d9:b8:5b:6d:7e:43:f3:88:5f: ad:3f:2c:d4:82:c7:1d:bd:f6:16:59:6a:7f:e9:07: 5a:69:8b:7b:f4:fe:bc:e2:3d:88:d5:77:d8:21:26: af:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:7B:21:1E:42:77:6B:C1:1F:6D:A3:50:C0:9D:12:16:84:B1:CA:BF X509v3 Authority Key Identifier: keyid:8A:1A:6B:A9:BB:76:CF:2B:0D:EE:35:EA:4C:FD:2F:5F:F8:C0:89:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihprqbt2zysN7jXqTP0vX_jAieM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:30:41:42:6d:86:50:91:a3:37:ee:b1:93:de:2c:af:7f:56: 80:9d:bc:c0:08:d5:8b:2b:aa:d9:03:eb:22:96:24:e6:ea:90: 22:54:eb:50:42:e8:92:4e:1c:db:51:a0:47:6b:1e:f2:09:5f: 0f:45:c1:d6:20:8c:f1:13:ec:cb:be:dc:e7:58:8d:de:de:dc: 4c:6d:99:1e:8f:c0:ce:82:ca:a5:8e:a0:2b:c5:7b:76:bc:97: 5c:11:98:e8:12:97:f9:5d:d1:17:5a:de:00:a2:b9:1f:8d:08: 9f:d6:37:ef:06:8a:01:64:9b:0d:5b:df:0b:da:8d:0b:13:6c: 0d:69:7d:11:d3:9d:75:01:9d:62:3e:d3:2b:9b:80:98:25:22: 9b:e8:13:0c:09:4d:9a:13:71:d0:31:30:bc:e6:bc:79:99:5d: 0d:5c:9e:74:23:50:47:1f:d4:b2:72:89:9e:a1:20:83:f5:1c: 97:fe:cc:3f:2d:c1:86:4d:60:3e:35:cd:77:a8:7d:38:85:87: 4c:d1:8a:7f:a6:37:5b:36:29:f1:28:5c:81:7b:b0:b2:d6:2a: 8d:46:c4:f2:0e:02:34:79:8e:c3:b6:3d:26:9e:12:38:ff:0d: a2:c1:8b:30:b8:cd:07:a2:a0:0f:ae:46:18:4e:a4:b0:9f:52: f7:b2:c0:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzM2RUUxMTAvBgNVBAUTKDhBMUE2QkE5QkI3NkNGMkIwREVFMzVFQTRDRkQyRjVG RjhDMDg5RTMwHhcNMjYwMzI0MTgyNDU3WhcNMjYwMzMxMTgyNDU3WjAYMRYwFAYD VQQDEw02OWMyZDZmOS04NzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApei/EmpH2Yv6OQ1ZYhvE56wXNeHeiQMoHIvgMI7imzoDwyk68ajZS6zJn9i+ kEa8J11YyTv/TCkWtvt0za9DjHN2W8ySKyn2UlnbiefAgvfm2rtKYakpfTRc/gHx nrK5P9AcSVLEVpPgw4F/9gYfU1OepxR6V++iUVQUPgJyG+FGSMmV6r0H9HFJ2EZ/ mxv1pep/ZFZQ8TDppO0bJwQRzEUyifKqxPO0Eb8jakt8fBbtZJLYXwLDATzeNHjc fj2JawIrClFnH7OmHgCWZh/Li7Qf2O6VCZDZuFttfkPziF+tPyzUgscdvfYWWWp/ 6QdaaYt79P684j2I1XfYISavjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCh7IR5C d2vBH22jUMCdEhaEscq/MB8GA1UdIwQYMBaAFIoaa6m7ds8rDe416kz9L1/4wInj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzZFRS9BOEMxQzg3QTE4 MDMxMUVBQkVDODJCNTZDNEY5QUUwMi9paHBycWJ0Mnp5c043alhxVFAwdlhfakFp ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2locHJxYnQyenlzTjdqWHFUUDB2WF9qQWllTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzZFRS9BOEMxQzg3QTE4MDMxMUVBQkVDODJCNTZDNEY5QUUwMi9paHBycWJ0Mnp5 c043alhxVFAwdlhfakFpZU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPTBBQm2GUJGjN+6xk94sr39WgJ28wAjViyuq2QPrIpYk5uqQIlTrUELokk4c 21GgR2se8glfD0XB1iCM8RPsy77c51iN3t7cTG2ZHo/AzoLKpY6gK8V7dryXXBGY 6BKX+V3RF1reAKK5H40In9Y37waKAWSbDVvfC9qNCxNsDWl9EdOddQGdYj7TK5uA mCUim+gTDAlNmhNx0DEwvOa8eZldDVyedCNQRx/UsnKJnqEgg/Ucl/7MPy3Bhk1g PjXNd6h9OIWHTNGKf6Y3WzYp8ShcgXuwstYqjUbE8g4CNHmOw7Y9Jp4SOP8NosGL MLjNB6KgD65GGE6ksJ9S97LAmA== -----END CERTIFICATE-----Generated at Thu Mar 26 18:24:28 2026 by rpki-client