$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2B9A/5EA3462AF12211F0AC5CDA7E4E6F56BC/iQJo_SXHeeNvu4cvYBPzBBX_ot0.mft File: iQJo_SXHeeNvu4cvYBPzBBX_ot0.mft (raw, json) Hash identifier: LMuKA7QLaD/AokVnSsuwyEifamp+gfo2u0KY05GotE4= Subject key identifier: 6D:A9:9C:A0:43:09:D5:9D:DC:86:D6:92:28:57:F2:3E:7D:62:1D:65 Authority key identifier: 89:02:68:FD:25:C7:79:E3:6F:BB:87:2F:60:13:F3:04:15:FF:A2:DD Certificate issuer: /CN=A91D2B9A/serialNumber=890268FD25C779E36FBB872F6013F30415FFA2DD Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQJo_SXHeeNvu4cvYBPzBBX_ot0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2B9A/5EA3462AF12211F0AC5CDA7E4E6F56BC/iQJo_SXHeeNvu4cvYBPzBBX_ot0.mft Manifest number: 2C Signing time: Wed 25 Mar 2026 07:57:49 +0000 Manifest this update: Wed 25 Mar 2026 07:57:48 +0000 Manifest next update: Wed 01 Apr 2026 07:57:48 +0000 Files and hashes: 1: iQJo_SXHeeNvu4cvYBPzBBX_ot0.crl (hash: h2F62DuBXUT//pz9qxUf27niVnKN7txIEkDoUqebUqc=) 2: 75431F44F12311F09E054F8D4F6F56BC.roa (hash: dSpl28NojgoPbGTH9IFDprulOgPwqOMWIzrfbBeiOaI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2B9A/5EA3462AF12211F0AC5CDA7E4E6F56BC/iQJo_SXHeeNvu4cvYBPzBBX_ot0.crl rsync://rpki.apnic.net/member_repository/A91D2B9A/5EA3462AF12211F0AC5CDA7E4E6F56BC/iQJo_SXHeeNvu4cvYBPzBBX_ot0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQJo_SXHeeNvu4cvYBPzBBX_ot0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:57:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2B9A, serialNumber=890268FD25C779E36FBB872F6013F30415FFA2DD Validity Not Before: Mar 25 07:57:48 2026 GMT Not After : Apr 1 07:57:48 2026 GMT Subject: CN=69c3957d-bdb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0e:be:6b:3c:d1:71:e4:e6:40:75:90:6a:09: b2:73:ed:bd:ff:92:b1:ae:88:49:56:ad:ea:db:e4: b7:ba:13:73:76:fe:34:71:e5:92:ac:27:3d:8c:f7: b0:9e:12:6c:8e:b5:79:3f:0a:ec:58:11:18:16:28: 4c:74:a2:98:30:a5:a9:64:87:a1:a8:d9:36:7f:bc: 61:8e:df:41:97:1f:25:6c:33:5e:f3:9c:d1:59:a0: 35:cc:ea:19:99:d1:66:d7:3d:2e:ba:3d:d7:06:a6: 5e:2d:88:e6:37:56:5d:8a:46:d7:cb:b8:1a:98:42: 42:1e:20:f8:c1:36:54:2e:1a:b2:0a:3d:03:5e:8a: 22:05:80:f8:a4:6e:86:12:56:a2:cb:94:bb:10:d3: 5c:c2:9d:6b:09:1f:07:28:e2:a4:fe:86:e6:ff:42: e7:2e:a9:69:58:17:0b:61:63:2e:d7:6c:63:b4:37: 7d:e8:17:97:fd:ce:81:1d:26:9d:bf:97:f0:0f:af: 38:ba:e2:dd:fe:08:f9:00:c1:8a:5b:85:11:02:72: 76:ec:9e:f6:24:f2:25:6c:83:13:14:f9:1b:de:47: 16:10:20:94:a7:ba:c2:eb:e7:52:5c:39:26:25:ce: ab:d7:de:65:f5:3a:24:83:39:99:34:92:18:0b:08: 6f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:A9:9C:A0:43:09:D5:9D:DC:86:D6:92:28:57:F2:3E:7D:62:1D:65 X509v3 Authority Key Identifier: keyid:89:02:68:FD:25:C7:79:E3:6F:BB:87:2F:60:13:F3:04:15:FF:A2:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2B9A/5EA3462AF12211F0AC5CDA7E4E6F56BC/iQJo_SXHeeNvu4cvYBPzBBX_ot0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQJo_SXHeeNvu4cvYBPzBBX_ot0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2B9A/5EA3462AF12211F0AC5CDA7E4E6F56BC/iQJo_SXHeeNvu4cvYBPzBBX_ot0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:14:0b:05:01:c0:be:3a:c5:6a:d4:1d:ab:a2:f3:8b:ed:fc: 28:5d:c4:59:ee:da:e9:a0:f5:9e:80:a6:db:b2:65:17:83:54: 86:b1:d1:2f:f7:a5:18:e9:c0:41:67:0c:4a:b8:be:d0:a6:3d: 21:47:8c:c8:d1:38:35:e4:c8:3b:75:33:59:5e:e7:3a:e4:97: ee:99:48:c4:c0:ce:12:03:d1:73:e2:7e:eb:e5:d8:26:56:7a: be:d7:2c:3c:35:0a:ac:90:ad:e3:f6:68:be:40:29:62:58:f0: ea:22:7a:4c:66:74:5b:8c:c5:b2:8c:f5:6e:68:3d:bb:4f:86: ca:f8:52:11:c9:2d:76:c9:7f:8b:77:15:87:e7:cb:13:d6:60: 47:18:02:c7:28:b3:ca:63:71:16:2c:d7:c8:ef:f5:4d:3a:e1: d0:49:e7:3d:c7:76:ac:2b:a3:f2:05:80:2e:28:7b:e2:1f:7d: 6b:9f:88:f9:97:95:39:13:a5:98:c7:93:1a:c1:02:cf:87:fb: 9e:b2:ee:6b:99:3a:62:2f:e2:80:63:bc:95:b9:d5:e2:cc:7f: 88:e4:50:f0:23:2c:f0:16:2a:26:cf:1e:7e:8e:6f:9d:62:a8: 5b:90:c6:33:60:0f:58:1d:24:22:9e:58:14:38:45:c7:fe:94: 09:3d:60:d8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MkI5QTExMC8GA1UEBRMoODkwMjY4RkQyNUM3NzlFMzZGQkI4NzJGNjAxM0YzMDQx NUZGQTJERDAeFw0yNjAzMjUwNzU3NDhaFw0yNjA0MDEwNzU3NDhaMBgxFjAUBgNV BAMTDTY5YzM5NTdkLWJkYjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDADr5rPNFx5OZAdZBqCbJz7b3/krGuiElWrerb5Le6E3N2/jRx5ZKsJz2M97Ce EmyOtXk/CuxYERgWKEx0opgwpalkh6Go2TZ/vGGO30GXHyVsM17znNFZoDXM6hmZ 0WbXPS66PdcGpl4tiOY3Vl2KRtfLuBqYQkIeIPjBNlQuGrIKPQNeiiIFgPikboYS VqLLlLsQ01zCnWsJHwco4qT+hub/QucuqWlYFwthYy7XbGO0N33oF5f9zoEdJp2/ l/APrzi64t3+CPkAwYpbhRECcnbsnvYk8iVsgxMU+RveRxYQIJSnusLr51JcOSYl zqvX3mX1OiSDOZk0khgLCG+jAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUbamcoEMJ 1Z3chtaSKFfyPn1iHWUwHwYDVR0jBBgwFoAUiQJo/SXHeeNvu4cvYBPzBBX/ot0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyQjlBLzVFQTM0NjJBRjEy MjExRjBBQzVDREE3RTRFNkY1NkJDL2lRSm9fU1hIZWVOdnU0Y3ZZQlB6QkJYX290 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaVFKb19TWEhlZU52dTRjdllCUHpCQlhfb3QwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy QjlBLzVFQTM0NjJBRjEyMjExRjBBQzVDREE3RTRFNkY1NkJDL2lRSm9fU1hIZWVO dnU0Y3ZZQlB6QkJYX290MC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBpFAsFAcC+OsVq1B2rovOL7fwoXcRZ7trpoPWegKbbsmUXg1SGsdEv96UY6cBB ZwxKuL7Qpj0hR4zI0Tg15Mg7dTNZXuc65JfumUjEwM4SA9Fz4n7r5dgmVnq+1yw8 NQqskK3j9mi+QCliWPDqInpMZnRbjMWyjPVuaD27T4bK+FIRyS12yX+LdxWH58sT 1mBHGALHKLPKY3EWLNfI7/VNOuHQSec9x3asK6PyBYAuKHviH31rn4j5l5U5E6WY x5MawQLPh/uesu5rmTpiL+KAY7yVudXizH+I5FDwIyzwFiomzx5+jm+dYqhbkMYz YA9YHSQinlgUOEXH/pQJPWDY -----END CERTIFICATE-----Generated at Thu Mar 26 16:05:56 2026 by rpki-client