$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft File: iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft (raw, json) Hash identifier: QVPtrCwx+bq/smpF4YtaSQQAV5Yafn+yd+9HCKltf6s= Subject key identifier: 8F:10:B6:2F:45:A6:43:5C:C6:0A:6B:0E:66:E2:2E:28:4E:BC:D8:6F Authority key identifier: 89:78:4D:6D:93:8B:05:CC:3B:7B:66:6E:5E:7A:EE:92:23:DE:4D:70 Certificate issuer: /CN=A91D8185/serialNumber=89784D6D938B05CC3B7B666E5E7AEE9223DE4D70 Certificate serial: 76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXhNbZOLBcw7e2ZuXnrukiPeTXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft Manifest number: 71 Signing time: Wed 25 Mar 2026 07:05:48 +0000 Manifest this update: Wed 25 Mar 2026 07:05:47 +0000 Manifest next update: Wed 01 Apr 2026 07:05:47 +0000 Files and hashes: 1: iXhNbZOLBcw7e2ZuXnrukiPeTXA.crl (hash: 1PJDrps62xWAo/uAFUKb7rQ5Ramu1S+Mgz0CjfumH0I=) 2: CC2C3CB684AC11F0B7B8977DC4F9AE02.roa (hash: MctOJZfpNmGzytE5FJJXm650+JtZjVtwencqZk15AMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.crl rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXhNbZOLBcw7e2ZuXnrukiPeTXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:05:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 118 (0x76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8185, serialNumber=89784D6D938B05CC3B7B666E5E7AEE9223DE4D70 Validity Not Before: Mar 25 07:05:47 2026 GMT Not After : Apr 1 07:05:47 2026 GMT Subject: CN=69c3894c-b41c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:37:7f:7b:a6:02:9e:23:1c:9e:cf:46:c8:7d: 9c:16:81:72:61:e5:ac:bc:32:e8:9d:ca:71:0c:aa: 65:b3:1f:0b:bd:7f:c9:70:2b:f8:5c:f1:19:c5:64: 77:4f:3e:71:fa:74:80:4c:f7:35:82:96:5b:82:94: 00:d3:cd:0e:15:a7:8d:2c:42:bf:f2:1c:03:e0:28: 9c:62:e4:c3:15:bc:82:9c:da:58:19:64:e0:a2:e5: 31:2b:ba:da:8d:07:54:68:ce:8a:f4:12:36:0e:89: b2:4e:04:06:80:9d:23:06:1f:e2:07:35:aa:08:d1: b4:2c:25:a4:59:04:29:64:77:50:e7:c6:23:4d:7a: 61:1e:2d:77:07:27:f9:ea:d5:c0:21:e8:31:94:af: f5:f9:dc:98:42:3e:4d:7e:6c:08:04:34:1f:91:b5: d8:7d:b7:d1:ef:fa:4c:64:60:b3:0d:cb:0f:86:34: 92:1f:44:6c:42:98:5a:c3:ae:2d:7b:07:31:4f:e1: f3:0b:1f:91:ad:6f:6e:2f:32:27:a7:03:08:0a:eb: 11:0e:2a:22:ac:28:3c:1a:75:89:47:52:8d:2e:d5: d4:a1:77:52:48:89:30:9e:32:90:14:74:86:30:aa: 2d:e7:9a:b6:27:16:2a:90:4d:6b:c8:e8:0e:1b:bf: 23:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:10:B6:2F:45:A6:43:5C:C6:0A:6B:0E:66:E2:2E:28:4E:BC:D8:6F X509v3 Authority Key Identifier: keyid:89:78:4D:6D:93:8B:05:CC:3B:7B:66:6E:5E:7A:EE:92:23:DE:4D:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXhNbZOLBcw7e2ZuXnrukiPeTXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:da:bd:87:79:bf:2e:c0:98:df:68:c9:4c:23:1f:c7:93:55: 71:41:8f:69:23:1d:c3:4c:88:42:6f:b3:4e:9b:39:ea:69:2d: e9:d3:a7:ea:d0:ee:e0:3f:f1:d4:ea:d8:dd:25:6a:5c:15:6b: 73:8a:26:c6:2f:f7:ca:a1:2b:0b:4e:83:9a:2d:b4:70:9d:ac: bb:3f:98:dd:0b:c3:d8:42:01:fd:93:1a:f0:ed:3f:54:f9:d9: 87:47:72:95:62:87:51:84:13:85:c9:00:53:d5:2c:a8:d7:58: e2:08:4d:81:1a:06:ad:08:56:b4:11:05:65:dc:60:a9:51:17: b7:56:26:34:e9:2a:06:bd:94:52:db:a0:84:bd:65:94:7a:db: bd:cd:ff:b2:04:24:8f:69:97:3c:c2:90:bb:23:09:98:d7:c5: 3f:77:74:84:a4:b4:bc:c9:2c:de:00:d0:8d:e3:08:49:92:24: cc:ca:e0:23:41:c6:44:e7:a2:ed:7c:66:86:cd:c0:04:d8:df: 8f:10:ab:5c:ca:65:57:bb:a7:bf:4f:41:91:a0:a2:48:71:79: ca:93:20:23:b0:96:b5:b7:ac:01:67:7d:45:b0:42:09:81:19: 72:9e:4f:47:e5:d5:2b:05:ed:df:94:cf:61:27:67:a5:a1:52: 95:80:2f:4b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE ODE4NTExMC8GA1UEBRMoODk3ODRENkQ5MzhCMDVDQzNCN0I2NjZFNUU3QUVFOTIy M0RFNEQ3MDAeFw0yNjAzMjUwNzA1NDdaFw0yNjA0MDEwNzA1NDdaMBgxFjAUBgNV BAMTDTY5YzM4OTRjLWI0MWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCdN397pgKeIxyez0bIfZwWgXJh5ay8MuidynEMqmWzHwu9f8lwK/hc8RnFZHdP PnH6dIBM9zWClluClADTzQ4Vp40sQr/yHAPgKJxi5MMVvIKc2lgZZOCi5TErutqN B1Rozor0EjYOibJOBAaAnSMGH+IHNaoI0bQsJaRZBClkd1DnxiNNemEeLXcHJ/nq 1cAh6DGUr/X53JhCPk1+bAgENB+Rtdh9t9Hv+kxkYLMNyw+GNJIfRGxCmFrDri17 BzFP4fMLH5Gtb24vMienAwgK6xEOKiKsKDwadYlHUo0u1dShd1JIiTCeMpAUdIYw qi3nmrYnFiqQTWvI6A4bvyOVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUjxC2L0Wm Q1zGCmsOZuIuKE682G8wHwYDVR0jBBgwFoAUiXhNbZOLBcw7e2ZuXnrukiPeTXAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4MTg1Lzg1MDExNTMyODRB QzExRjA4RDNBQjk3OUM0RjlBRTAyL2lYaE5iWk9MQmN3N2UyWnVYbnJ1a2lQZVRY QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaVhoTmJaT0xCY3c3ZTJadVhucnVraVBlVFhBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 MTg1Lzg1MDExNTMyODRBQzExRjA4RDNBQjk3OUM0RjlBRTAyL2lYaE5iWk9MQmN3 N2UyWnVYbnJ1a2lQZVRYQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBD2r2Heb8uwJjfaMlMIx/Hk1VxQY9pIx3DTIhCb7NOmznqaS3p06fq0O7gP/HU 6tjdJWpcFWtziibGL/fKoSsLToOaLbRwnay7P5jdC8PYQgH9kxrw7T9U+dmHR3KV YodRhBOFyQBT1Syo11jiCE2BGgatCFa0EQVl3GCpURe3ViY06SoGvZRS26CEvWWU etu9zf+yBCSPaZc8wpC7IwmY18U/d3SEpLS8ySzeANCN4whJkiTMyuAjQcZE56Lt fGaGzcAE2N+PEKtcymVXu6e/T0GRoKJIcXnKkyAjsJa1t6wBZ31FsEIJgRlynk9H 5dUrBe3flM9hJ2eloVKVgC9L -----END CERTIFICATE-----Generated at Thu Mar 26 16:03:27 2026 by rpki-client