$ rpki-client -vvf rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.mft File: iB8oqx80yszxJe2ul-HgEGBYI0k.mft (raw, json) Hash identifier: IaZE60N6gO28lsn0yuGL7yUbTDHr+hQXOWbnsjGTwSs= Subject key identifier: D2:09:51:33:4D:7F:A6:4C:B3:07:2D:EB:04:FE:90:16:E8:D6:42:5C Authority key identifier: 88:1F:28:AB:1F:34:CA:CC:F1:25:ED:AE:97:E1:E0:10:60:58:23:49 Certificate issuer: /CN=A91D342A/serialNumber=881F28AB1F34CACCF125EDAE97E1E01060582349 Certificate serial: 67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iB8oqx80yszxJe2ul-HgEGBYI0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.mft Manifest number: 67 Signing time: Wed 25 Mar 2026 07:10:30 +0000 Manifest this update: Wed 25 Mar 2026 07:10:30 +0000 Manifest next update: Wed 01 Apr 2026 07:10:30 +0000 Files and hashes: 1: iB8oqx80yszxJe2ul-HgEGBYI0k.crl (hash: GjHep7W/KLXw6WOvZ2H8lpNFxz+hKn9Vi7rZh4IQK1U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.crl rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iB8oqx80yszxJe2ul-HgEGBYI0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:10:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D342A, serialNumber=881F28AB1F34CACCF125EDAE97E1E01060582349 Validity Not Before: Mar 25 07:10:30 2026 GMT Not After : Apr 1 07:10:30 2026 GMT Subject: CN=69c38a66-434d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:61:8b:ba:ac:0f:57:e0:3b:98:6a:97:10:b4: d8:64:10:81:3f:8f:0c:2e:e2:8c:b3:83:52:1a:84: dc:52:75:d8:40:4f:79:49:61:36:07:e5:4e:36:8e: f8:cc:ce:1a:72:48:cf:4b:22:79:e2:5a:29:97:84: 59:c0:e8:f2:97:15:3f:25:95:d5:87:09:dc:09:31: 67:e2:1d:e3:77:0b:56:59:42:c3:9c:82:dc:41:4b: 67:c7:31:ae:24:6d:77:20:be:42:fa:30:c6:9f:fe: 45:e2:1f:72:df:ef:fd:08:f9:72:79:cc:4b:28:d2: 45:8a:27:d9:51:0c:24:53:42:78:ca:d3:b3:e5:1c: 31:48:c2:2a:cc:84:ee:ea:3c:a3:8f:96:3e:0a:2e: f6:0b:69:e6:7f:73:17:f8:95:12:27:64:c8:60:e1: 5d:db:0f:c2:2a:7c:27:0d:6e:84:59:ec:1b:a5:37: 63:7d:5f:6c:93:a5:34:8b:6a:da:9d:ef:5e:88:c4: 80:a3:d2:f1:f2:aa:56:3d:38:58:52:80:ec:88:bb: f4:87:5b:2a:0d:30:51:cb:75:14:b4:e3:21:84:1d: 60:ee:3f:59:f3:a1:64:e0:92:cb:45:11:99:69:cf: b8:47:e9:3d:fb:d0:21:96:a9:15:41:3d:cb:57:94: 16:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:09:51:33:4D:7F:A6:4C:B3:07:2D:EB:04:FE:90:16:E8:D6:42:5C X509v3 Authority Key Identifier: keyid:88:1F:28:AB:1F:34:CA:CC:F1:25:ED:AE:97:E1:E0:10:60:58:23:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iB8oqx80yszxJe2ul-HgEGBYI0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:7b:2a:89:ae:b5:5f:3c:00:8e:d2:f4:fd:74:5b:44:81:33: 2a:f0:be:6f:7b:bc:e7:8a:5d:bd:2b:23:51:f6:d5:bb:ed:d1: 65:50:19:65:a8:d0:49:22:03:bb:dc:ec:f4:ad:b6:fa:48:4a: 1e:6b:83:17:a5:e3:ee:50:9d:98:68:d1:5f:a2:a3:7e:65:99: 0f:d6:f1:e4:b7:94:a8:3b:a0:61:2f:35:8d:43:69:f7:ab:17: 29:c3:f0:8b:99:71:01:e6:35:27:32:d6:3b:67:da:b7:43:c6: 36:93:bb:0f:05:cf:65:af:b2:39:83:4d:71:3f:c9:43:27:19: b4:ca:59:9d:2c:4c:9d:3e:11:f6:c6:7d:18:eb:9d:ce:34:ac: 30:0a:9c:ea:a6:7d:80:9c:b0:72:cc:de:0e:62:8b:a4:80:79: 6c:bf:33:7c:6a:ea:f3:96:e7:0b:84:8f:74:56:28:4d:01:34: 88:50:a5:b6:06:dd:86:09:ae:fd:3a:83:63:9b:99:21:d2:d7: 66:04:1b:d3:16:ba:fc:7e:24:f4:f0:90:d2:7d:89:87:3a:96: 2b:8c:1e:28:bf:39:76:9f:39:e7:9b:85:58:8b:e7:d5:af:b0: 66:e5:00:4b:c6:f9:f7:a0:b1:5b:cd:31:df:b3:76:2e:3b:5f: 2c:1a:34:f2 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MzQyQTExMC8GA1UEBRMoODgxRjI4QUIxRjM0Q0FDQ0YxMjVFREFFOTdFMUUwMTA2 MDU4MjM0OTAeFw0yNjAzMjUwNzEwMzBaFw0yNjA0MDEwNzEwMzBaMBgxFjAUBgNV BAMTDTY5YzM4YTY2LTQzNGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCiYYu6rA9X4DuYapcQtNhkEIE/jwwu4oyzg1IahNxSddhAT3lJYTYH5U42jvjM zhpySM9LInniWimXhFnA6PKXFT8lldWHCdwJMWfiHeN3C1ZZQsOcgtxBS2fHMa4k bXcgvkL6MMaf/kXiH3Lf7/0I+XJ5zEso0kWKJ9lRDCRTQnjK07PlHDFIwirMhO7q PKOPlj4KLvYLaeZ/cxf4lRInZMhg4V3bD8IqfCcNboRZ7BulN2N9X2yTpTSLatqd 716IxICj0vHyqlY9OFhSgOyIu/SHWyoNMFHLdRS04yGEHWDuP1nzoWTgkstFEZlp z7hH6T370CGWqRVBPctXlBbdAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU0glRM01/ pkyzBy3rBP6QFujWQlwwHwYDVR0jBBgwFoAUiB8oqx80yszxJe2ul+HgEGBYI0kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQzNDJBLzE3NzhCNzBDOEVD NzExRjBCQjEyODUzQ0M0RjlBRTAyL2lCOG9xeDgweXN6eEplMnVsLUhnRUdCWUkw ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaUI4b3F4ODB5c3p4SmUydWwtSGdFR0JZSTBrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQz NDJBLzE3NzhCNzBDOEVDNzExRjBCQjEyODUzQ0M0RjlBRTAyL2lCOG9xeDgweXN6 eEplMnVsLUhnRUdCWUkway5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCHeyqJrrVfPACO0vT9dFtEgTMq8L5ve7znil29KyNR9tW77dFlUBllqNBJIgO7 3Oz0rbb6SEoea4MXpePuUJ2YaNFfoqN+ZZkP1vHkt5SoO6BhLzWNQ2n3qxcpw/CL mXEB5jUnMtY7Z9q3Q8Y2k7sPBc9lr7I5g01xP8lDJxm0ylmdLEydPhH2xn0Y653O NKwwCpzqpn2AnLByzN4OYoukgHlsvzN8aurzlucLhI90VihNATSIUKW2Bt2GCa79 OoNjm5kh0tdmBBvTFrr8fiT08JDSfYmHOpYrjB4ovzl2nznnm4VYi+fVr7Bm5QBL xvn3oLFbzTHfs3YuO18sGjTy -----END CERTIFICATE-----Generated at Thu Mar 26 23:48:26 2026 by rpki-client