$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft File: ijkUYMpvZEpYkR23ODRhhON40AU.mft (raw, json) Hash identifier: xvNWOPcXZx9h+Rl4ro7XPVeohMdzqgPKjg8qP1WgZHg= Subject key identifier: 98:7D:7E:05:9C:AC:6D:E5:3E:25:1E:26:B6:E7:6B:DC:CE:73:5A:33 Authority key identifier: 8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05 Certificate issuer: /CN=A91CF7F6/serialNumber=8A391460CA6F644A58911DB738346184E378D005 Certificate serial: 03FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft Manifest number: 03DE Signing time: Wed 25 Mar 2026 00:12:29 +0000 Manifest this update: Wed 25 Mar 2026 00:12:29 +0000 Manifest next update: Wed 01 Apr 2026 00:12:29 +0000 Files and hashes: 1: ijkUYMpvZEpYkR23ODRhhON40AU.crl (hash: sCZmdylUjWHmfrh9por19W7LM/1XDBGalQGoKVgmYmM=) 2: 244CF0D8329D11EF9B0F1058C4F9AE02.roa (hash: RGbQplIoBoixh77E1ML8kaMqxyukkROuY8CpRD/mvKs=) 3: 12A549F8BFC111ECBF03EF63C4F9AE02.roa (hash: a/OjejWguoz8SOjUqilIOKY73TJSTeqh0jYpuVfKqTM=) 4: 16B9139A238311EEA2B7992CC4F9AE02.roa (hash: 3gy1qN11JcP8FRxi5dz6npPXSjCXwvC3iutXG65AMSI=) 5: 446E8606745311EDBF95BB2CC4F9AE02.roa (hash: rOANBQKPsfQ6Tk+3BJxQVcGQ9b8/ioqyWVW5xCF9Omw=) 6: C09ED7E6804A11EDABB05C09C4F9AE02.roa (hash: s1eXFpPP1drLzWYFfSWX2mxgRfaTxGb5Di3eSFyUmzk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:12:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1023 (0x3ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF7F6, serialNumber=8A391460CA6F644A58911DB738346184E378D005 Validity Not Before: Mar 25 00:12:29 2026 GMT Not After : Apr 1 00:12:29 2026 GMT Subject: CN=69c3286d-fa9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:cf:c6:e7:fa:e3:6d:bf:e2:75:d8:58:42:8f: 1e:16:92:b3:70:02:2f:fb:d5:ea:38:5b:77:bc:c1: d0:ed:b1:bd:49:51:c9:69:5c:72:42:2e:9d:e7:e8: bf:9b:f1:4d:24:b0:77:62:21:c2:67:29:05:26:eb: 65:eb:c1:2e:16:c8:7b:b2:1c:b5:20:9b:94:51:80: ab:97:5c:53:a5:c2:76:4e:c2:73:87:27:9e:de:50: 9d:16:d3:cb:4c:c0:75:d1:ee:1d:6a:43:8f:1b:6a: 31:1a:c5:32:97:f2:d2:b6:e0:47:b2:9a:83:62:80: a0:6b:c9:ff:68:12:08:54:e2:dc:89:0c:63:70:0c: f7:8e:85:1b:a0:9d:28:ae:25:21:28:48:3a:30:5a: a5:ba:88:24:0e:a4:85:99:60:56:0d:52:49:59:62: 6e:de:87:0c:d0:d6:7b:dd:36:ad:26:35:09:75:58: 3f:bf:3f:59:1c:14:b2:19:e9:51:e1:39:77:30:65: df:08:1b:5b:7b:bf:e0:23:af:58:43:22:25:83:94: e9:dd:7c:b9:8f:11:ef:2d:2e:04:3f:ab:1b:61:ab: fa:02:ff:7a:87:de:cd:df:ce:3f:ed:4e:28:58:91: 71:52:a1:c7:76:c0:0d:a6:c3:ba:c5:66:3d:ea:30: 58:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:7D:7E:05:9C:AC:6D:E5:3E:25:1E:26:B6:E7:6B:DC:CE:73:5A:33 X509v3 Authority Key Identifier: keyid:8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:f4:a6:8d:6a:2e:5a:e8:1a:57:d7:f6:40:c3:00:61:25:ee: 37:9c:a9:0c:a1:67:af:39:81:2d:bc:7b:00:85:1f:e8:bf:33: fa:55:af:a8:42:e0:d4:86:43:ae:6c:37:b1:2d:c8:27:67:f0: 9d:2b:56:f1:50:01:32:37:56:5a:a8:c6:72:c0:57:0c:1b:59: 48:2a:4e:a4:33:3d:3b:55:2c:1c:c9:f0:ab:f4:3f:8d:7e:65: 85:64:fb:3a:36:07:f7:5d:46:fd:f1:a1:49:10:7d:50:89:13: 18:b1:9e:88:e9:6a:a7:d6:3d:9f:47:4d:33:56:2d:e1:cb:b0: 88:29:99:fd:be:ea:c0:8b:78:bc:52:a9:53:d1:74:26:d7:a1: 4a:80:ed:57:64:d3:ff:c5:90:22:5f:f8:37:ea:17:a5:0e:93: ad:11:b7:64:0f:c2:1d:22:96:88:0d:e1:91:86:44:5d:48:84: c7:3a:3e:e1:a0:b0:75:79:8c:84:e3:f1:84:29:cd:c8:d1:35: 15:d8:e2:ce:31:84:22:61:7c:b0:f5:51:d5:92:c0:14:20:3a: a8:d9:a4:46:1a:c2:a9:5c:78:e9:a2:cd:00:c3:95:19:e4:00: 5f:2c:54:bf:4e:26:33:20:42:62:e7:c9:4b:2e:54:9b:a0:63: c3:a3:a6:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y3RjYxMTAvBgNVBAUTKDhBMzkxNDYwQ0E2RjY0NEE1ODkxMURCNzM4MzQ2MTg0 RTM3OEQwMDUwHhcNMjYwMzI1MDAxMjI5WhcNMjYwNDAxMDAxMjI5WjAYMRYwFAYD VQQDEw02OWMzMjg2ZC1mYTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA58/G5/rjbb/iddhYQo8eFpKzcAIv+9XqOFt3vMHQ7bG9SVHJaVxyQi6d5+i/ m/FNJLB3YiHCZykFJutl68EuFsh7shy1IJuUUYCrl1xTpcJ2TsJzhyee3lCdFtPL TMB10e4dakOPG2oxGsUyl/LStuBHspqDYoCga8n/aBIIVOLciQxjcAz3joUboJ0o riUhKEg6MFqluogkDqSFmWBWDVJJWWJu3ocM0NZ73TatJjUJdVg/vz9ZHBSyGelR 4Tl3MGXfCBtbe7/gI69YQyIlg5Tp3Xy5jxHvLS4EP6sbYav6Av96h97N384/7U4o WJFxUqHHdsANpsO6xWY96jBYAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJh9fgWc rG3lPiUeJrbna9zOc1ozMB8GA1UdIwQYMBaAFIo5FGDKb2RKWJEdtzg0YYTjeNAF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjdGNi83ODI0RUJENEJG QkQxMUVDQjc4ODEyNURDNEY5QUUwMi9pamtVWU1wdlpFcFlrUjIzT0RSaGhPTjQw QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lqa1VZTXB2WkVwWWtSMjNPRFJoaE9ONDBBVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjdGNi83ODI0RUJENEJGQkQxMUVDQjc4ODEyNURDNEY5QUUwMi9pamtVWU1wdlpF cFlrUjIzT0RSaGhPTjQwQVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT/SmjWouWugaV9f2QMMAYSXuN5ypDKFnrzmBLbx7AIUf6L8z+lWvqELg1IZD rmw3sS3IJ2fwnStW8VABMjdWWqjGcsBXDBtZSCpOpDM9O1UsHMnwq/Q/jX5lhWT7 OjYH911G/fGhSRB9UIkTGLGeiOlqp9Y9n0dNM1Yt4cuwiCmZ/b7qwIt4vFKpU9F0 JtehSoDtV2TT/8WQIl/4N+oXpQ6TrRG3ZA/CHSKWiA3hkYZEXUiExzo+4aCwdXmM hOPxhCnNyNE1FdjizjGEImF8sPVR1ZLAFCA6qNmkRhrCqVx46aLNAMOVGeQAXyxU v04mMyBCYufJSy5Um6Bjw6OmVA== -----END CERTIFICATE-----Generated at Thu Mar 26 18:38:14 2026 by rpki-client