$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6835/465CF5A2000E11F1A6B3148B3E6F56BC/ijL6yit6Kieb3e2pT1iNAGddgKQ.mft File: ijL6yit6Kieb3e2pT1iNAGddgKQ.mft (raw, json) Hash identifier: 8firxWysGpA6T5rrMyMEFXtovBakXQnCq8GyDH5Ek0s= Subject key identifier: 8C:F7:B5:6D:CC:B7:40:AA:00:89:DE:03:5A:AD:FD:81:47:BC:4C:C3 Authority key identifier: 8A:32:FA:CA:2B:7A:2A:27:9B:DD:ED:A9:4F:58:8D:00:67:5D:80:A4 Certificate issuer: /CN=A91D6835/serialNumber=8A32FACA2B7A2A279BDDEDA94F588D00675D80A4 Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijL6yit6Kieb3e2pT1iNAGddgKQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6835/465CF5A2000E11F1A6B3148B3E6F56BC/ijL6yit6Kieb3e2pT1iNAGddgKQ.mft Manifest number: 20 Signing time: Wed 25 Mar 2026 08:04:53 +0000 Manifest this update: Wed 25 Mar 2026 08:04:52 +0000 Manifest next update: Wed 01 Apr 2026 08:04:52 +0000 Files and hashes: 1: ijL6yit6Kieb3e2pT1iNAGddgKQ.crl (hash: lTKE7VsJOoybvONU9+zge8REFlSLixLISZ03ao23dp8=) 2: 8F628C6C000E11F1B0B593243F6F56BC.roa (hash: mhV3wJI4sW60cgaV9TFMNE1Xlg3TBUPjAyuhHyfLW4o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6835/465CF5A2000E11F1A6B3148B3E6F56BC/ijL6yit6Kieb3e2pT1iNAGddgKQ.crl rsync://rpki.apnic.net/member_repository/A91D6835/465CF5A2000E11F1A6B3148B3E6F56BC/ijL6yit6Kieb3e2pT1iNAGddgKQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijL6yit6Kieb3e2pT1iNAGddgKQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:04:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6835, serialNumber=8A32FACA2B7A2A279BDDEDA94F588D00675D80A4 Validity Not Before: Mar 25 08:04:52 2026 GMT Not After : Apr 1 08:04:52 2026 GMT Subject: CN=69c39725-5dd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:8b:46:bb:58:45:38:8d:96:0d:f5:6b:55:f8: f5:9c:1e:05:e7:ed:fa:e9:ee:cc:72:90:af:47:cf: ca:0f:cc:f9:8c:7b:74:56:63:2e:c3:5f:01:30:3b: 3c:60:b8:8f:1e:36:0b:f1:10:2a:38:b0:37:4f:44: 44:9a:97:2a:12:a7:93:c5:2c:28:fe:9c:c2:c0:fc: d8:2d:fa:b2:77:94:3d:43:68:2d:de:8e:1a:b3:92: 76:da:33:f9:1d:b6:ac:f6:00:7d:f6:7e:49:1c:1c: 66:c2:54:0d:18:68:b5:48:c4:ae:52:dd:2c:21:6a: 31:fb:73:c8:5f:fb:2d:3f:e8:d7:56:78:0f:7f:7b: 06:2d:4e:4f:c0:5e:f3:3d:9c:cf:8e:3d:16:12:e8: 20:a4:1f:fe:80:59:01:69:6e:96:cf:f3:b8:b0:d7: cc:b1:15:7c:91:18:be:57:69:36:8b:87:80:f9:8b: 4d:b1:f5:e5:42:2f:c0:86:69:9a:ae:b2:e2:9d:21: 8f:59:f1:b1:4b:c2:50:5c:41:5e:f3:53:62:12:51: 22:af:57:a3:0f:fb:5e:83:8f:ac:c1:f3:1b:66:c0: 32:a9:87:68:4b:67:62:25:05:39:f4:85:dc:04:43: 72:48:29:f8:e4:b0:0b:34:58:e0:7d:a0:13:59:98: b8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F7:B5:6D:CC:B7:40:AA:00:89:DE:03:5A:AD:FD:81:47:BC:4C:C3 X509v3 Authority Key Identifier: keyid:8A:32:FA:CA:2B:7A:2A:27:9B:DD:ED:A9:4F:58:8D:00:67:5D:80:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6835/465CF5A2000E11F1A6B3148B3E6F56BC/ijL6yit6Kieb3e2pT1iNAGddgKQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijL6yit6Kieb3e2pT1iNAGddgKQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6835/465CF5A2000E11F1A6B3148B3E6F56BC/ijL6yit6Kieb3e2pT1iNAGddgKQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:08:dc:ea:4c:c5:dd:46:b4:92:b4:12:84:e2:bc:17:a2:00: e7:7c:ca:2a:c7:4a:31:9a:3c:fa:09:ab:6e:d4:97:d5:ac:77: 2e:e3:db:17:07:53:5f:63:13:b4:81:37:62:a6:07:7e:66:cf: 72:70:1c:74:13:c4:3c:ae:87:08:2d:aa:ed:9d:be:7f:38:c0: ab:50:9f:bc:10:24:f7:87:7d:d7:45:55:52:df:0d:84:25:05: 23:28:e8:63:5d:3d:c3:c8:10:26:53:f5:e8:87:13:bf:95:6b: 30:cf:02:4b:28:e6:ea:5e:e0:2c:dc:f8:53:0d:b8:32:97:08: d4:ec:73:f5:d8:e3:a4:4d:90:0f:85:7c:7f:55:be:b7:4b:e8: 0e:00:82:aa:43:97:81:99:d0:7a:f8:94:aa:ad:aa:7b:f2:74: 61:d7:0b:a1:78:31:ff:99:b2:d3:65:5e:c5:47:31:84:35:9d: f2:54:76:ce:97:98:5a:78:43:1d:c8:3e:71:71:87:78:65:9a: b2:af:a8:13:00:b9:d2:5a:47:3f:20:39:62:80:d0:95:19:9e: 8a:11:c9:3d:1a:c4:1e:fd:c2:66:36:11:78:97:1e:37:31:a6: 77:59:48:b2:6b:a1:cf:42:9d:8b:c9:05:0d:a8:a2:8c:87:91: cb:f0:fa:34 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NjgzNTExMC8GA1UEBRMoOEEzMkZBQ0EyQjdBMkEyNzlCRERFREE5NEY1ODhEMDA2 NzVEODBBNDAeFw0yNjAzMjUwODA0NTJaFw0yNjA0MDEwODA0NTJaMBgxFjAUBgNV BAMTDTY5YzM5NzI1LTVkZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDyi0a7WEU4jZYN9WtV+PWcHgXn7frp7sxykK9Hz8oPzPmMe3RWYy7DXwEwOzxg uI8eNgvxECo4sDdPRESalyoSp5PFLCj+nMLA/Ngt+rJ3lD1DaC3ejhqzknbaM/kd tqz2AH32fkkcHGbCVA0YaLVIxK5S3SwhajH7c8hf+y0/6NdWeA9/ewYtTk/AXvM9 nM+OPRYS6CCkH/6AWQFpbpbP87iw18yxFXyRGL5XaTaLh4D5i02x9eVCL8CGaZqu suKdIY9Z8bFLwlBcQV7zU2ISUSKvV6MP+16Dj6zB8xtmwDKph2hLZ2IlBTn0hdwE Q3JIKfjksAs0WOB9oBNZmLiLAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUjPe1bcy3 QKoAid4DWq39gUe8TMMwHwYDVR0jBBgwFoAUijL6yit6Kieb3e2pT1iNAGddgKQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2ODM1LzQ2NUNGNUEyMDAw RTExRjFBNkIzMTQ4QjNFNkY1NkJDL2lqTDZ5aXQ2S2llYjNlMnBUMWlOQUdkZGdL US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaWpMNnlpdDZLaWViM2UycFQxaU5BR2RkZ0tRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2 ODM1LzQ2NUNGNUEyMDAwRTExRjFBNkIzMTQ4QjNFNkY1NkJDL2lqTDZ5aXQ2S2ll YjNlMnBUMWlOQUdkZGdLUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCbCNzqTMXdRrSStBKE4rwXogDnfMoqx0oxmjz6Catu1JfVrHcu49sXB1NfYxO0 gTdipgd+Zs9ycBx0E8Q8rocILartnb5/OMCrUJ+8ECT3h33XRVVS3w2EJQUjKOhj XT3DyBAmU/XohxO/lWswzwJLKObqXuAs3PhTDbgylwjU7HP12OOkTZAPhXx/Vb63 S+gOAIKqQ5eBmdB6+JSqrap78nRh1wuheDH/mbLTZV7FRzGENZ3yVHbOl5haeEMd yD5xcYd4ZZqyr6gTALnSWkc/IDligNCVGZ6KEck9GsQe/cJmNhF4lx43MaZ3WUiy a6HPQp2LyQUNqKKMh5HL8Po0 -----END CERTIFICATE-----Generated at Thu Mar 26 12:13:48 2026 by rpki-client