$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.mft File: iyYWhr2S4s9r9UjNNVlt6pX_WDM.mft (raw, json) Hash identifier: 5WamptxBZZGT4ZR8+WdYKUpAWQJ4jJckBzeIwcTirA4= Subject key identifier: C3:DC:CE:2B:01:E7:E1:7D:BF:3A:E6:3C:FA:05:01:72:57:CB:5B:1F Authority key identifier: 8B:26:16:86:BD:92:E2:CF:6B:F5:48:CD:35:59:6D:EA:95:FF:58:33 Certificate issuer: /CN=A91D3078/serialNumber=8B261686BD92E2CF6BF548CD35596DEA95FF5833 Certificate serial: 11B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyYWhr2S4s9r9UjNNVlt6pX_WDM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.mft Manifest number: 11AD Signing time: Tue 24 Mar 2026 17:04:58 +0000 Manifest this update: Tue 24 Mar 2026 17:04:58 +0000 Manifest next update: Tue 31 Mar 2026 17:04:58 +0000 Files and hashes: 1: iyYWhr2S4s9r9UjNNVlt6pX_WDM.crl (hash: li+Z32LMULHXwJdjj+zGdpHqd3iCX2P44j+8UjOIx6Y=) 2: 6127B9001FE711ECB8454E83C4F9AE02.roa (hash: SXnpFOe0vmH6ZhEOUBoFfqwqIICiKNDRMjwx5BrPeMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.crl rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyYWhr2S4s9r9UjNNVlt6pX_WDM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:04:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4536 (0x11b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3078, serialNumber=8B261686BD92E2CF6BF548CD35596DEA95FF5833 Validity Not Before: Mar 24 17:04:58 2026 GMT Not After : Mar 31 17:04:58 2026 GMT Subject: CN=69c2c43a-77c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f5:90:73:a5:d3:79:33:92:ff:d5:4c:ba:13: 27:6f:95:db:35:62:f7:e1:48:af:b3:00:4f:6f:e3: 8c:42:0b:50:b6:df:c6:71:a0:52:91:be:18:1f:bf: 48:7e:6e:b2:cc:03:c4:29:6b:0d:34:3a:6b:ff:67: 29:4d:54:ae:0e:f1:17:e4:00:52:dd:35:01:a9:33: cd:f4:b8:a1:b8:b7:44:59:d7:ea:75:c9:d1:72:45: 89:5b:23:05:19:cb:51:fc:9e:d9:a4:f2:4a:89:30: ca:45:98:01:f1:69:f4:00:b9:a7:61:bb:f0:b5:c2: 34:d6:a5:cf:4b:76:96:f9:60:8c:00:e9:76:df:92: 38:07:e3:46:68:16:1e:c7:0e:da:ca:86:a8:48:1d: 0e:d7:98:fd:1d:37:d5:96:8a:5c:2a:6d:75:ed:a3: 6b:31:84:6b:c6:86:a9:54:58:b7:1b:e0:d8:4f:1d: c7:84:06:ee:9d:15:47:50:b9:7a:3b:0a:90:95:da: 56:12:dd:0b:3b:2e:12:e9:78:c7:57:a7:d0:07:d5: 2f:1d:e4:08:76:fe:21:29:e4:12:0f:ee:e8:3f:80: 87:a9:a0:3c:05:c2:de:37:ee:21:7e:0b:44:e5:f2: 1e:5a:f5:a7:f1:af:04:62:c6:d2:8f:7a:99:5f:68: f1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:DC:CE:2B:01:E7:E1:7D:BF:3A:E6:3C:FA:05:01:72:57:CB:5B:1F X509v3 Authority Key Identifier: keyid:8B:26:16:86:BD:92:E2:CF:6B:F5:48:CD:35:59:6D:EA:95:FF:58:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyYWhr2S4s9r9UjNNVlt6pX_WDM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:a4:19:cc:5a:2e:f9:94:93:40:03:66:4f:ba:0b:69:db:87: 21:54:99:65:65:7e:db:11:3b:86:d3:ad:8c:c3:2d:09:33:d7: a4:b3:93:ff:a9:90:33:f4:d5:f7:61:ca:e4:27:6e:61:77:bf: 7e:8e:ba:a1:7a:f6:35:6c:67:72:06:00:f0:4d:d5:59:67:ce: 22:00:a3:37:fa:6f:d0:21:d7:a2:24:4c:a4:9b:e5:41:74:9b: c8:62:83:cd:d2:ff:92:6a:26:68:24:62:8a:55:46:80:18:99: bb:35:6a:46:6e:2e:d3:74:bb:52:9b:c9:1e:40:6a:c1:d3:ea: c2:02:47:cd:c7:50:ba:08:21:ba:22:90:60:6c:fa:d5:4c:0f: f6:b4:9a:04:a3:94:9e:58:3c:96:23:95:38:09:db:9d:fc:5b: 90:da:5a:c3:98:cc:38:ab:01:bd:ae:dd:e9:3e:46:de:ab:fa: 85:47:81:9a:59:d1:51:19:06:eb:4c:65:4a:d9:86:54:f0:5f: 89:2a:77:4b:dd:a0:8f:5c:a1:24:e3:8a:54:fd:17:ba:12:d5: 2b:a9:34:c2:ba:cf:5a:84:90:08:fc:dc:f4:c7:db:a5:b9:12: d0:23:c8:d9:21:44:fd:69:24:99:0a:1a:54:35:b5:a0:b5:18: db:e4:a5:4d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMwNzgxMTAvBgNVBAUTKDhCMjYxNjg2QkQ5MkUyQ0Y2QkY1NDhDRDM1NTk2REVB OTVGRjU4MzMwHhcNMjYwMzI0MTcwNDU4WhcNMjYwMzMxMTcwNDU4WjAYMRYwFAYD VQQDEw02OWMyYzQzYS03N2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/WQc6XTeTOS/9VMuhMnb5XbNWL34UivswBPb+OMQgtQtt/GcaBSkb4YH79I fm6yzAPEKWsNNDpr/2cpTVSuDvEX5ABS3TUBqTPN9LihuLdEWdfqdcnRckWJWyMF GctR/J7ZpPJKiTDKRZgB8Wn0ALmnYbvwtcI01qXPS3aW+WCMAOl235I4B+NGaBYe xw7ayoaoSB0O15j9HTfVlopcKm117aNrMYRrxoapVFi3G+DYTx3HhAbunRVHULl6 OwqQldpWEt0LOy4S6XjHV6fQB9UvHeQIdv4hKeQSD+7oP4CHqaA8BcLeN+4hfgtE 5fIeWvWn8a8EYsbSj3qZX2jxkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMPczisB 5+F9vzrmPPoFAXJXy1sfMB8GA1UdIwQYMBaAFIsmFoa9kuLPa/VIzTVZbeqV/1gz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzA3OC82NkM4MzAyQzEz QkMxMUU5OTg3QzQ2NDZDNEY5QUUwMi9peVlXaHIyUzRzOXI5VWpOTlZsdDZwWF9X RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l5WVdocjJTNHM5cjlVak5OVmx0NnBYX1dETS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzA3OC82NkM4MzAyQzEzQkMxMUU5OTg3QzQ2NDZDNEY5QUUwMi9peVlXaHIyUzRz OXI5VWpOTlZsdDZwWF9XRE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANKQZzFou+ZSTQANmT7oLaduHIVSZZWV+2xE7htOtjMMtCTPXpLOT/6mQM/TV 92HK5CduYXe/fo66oXr2NWxncgYA8E3VWWfOIgCjN/pv0CHXoiRMpJvlQXSbyGKD zdL/kmomaCRiilVGgBiZuzVqRm4u03S7UpvJHkBqwdPqwgJHzcdQugghuiKQYGz6 1UwP9rSaBKOUnlg8liOVOAnbnfxbkNpaw5jMOKsBva7d6T5G3qv6hUeBmlnRURkG 60xlStmGVPBfiSp3S92gj1yhJOOKVP0XuhLVK6k0wrrPWoSQCPzc9MfbpbkS0CPI 2SFE/WkkmQoaVDW1oLUY2+SlTQ== -----END CERTIFICATE-----Generated at Thu Mar 26 00:52:33 2026 by rpki-client