$ rpki-client -vvf rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft File: -iKAHFKuKl_EkbfL6-aO_KLI0dk.mft (raw, json) Hash identifier: yktOZQbNOOKdOmi1ylEdoH9y7dE8z7vuU0rdzwcw2Mo= Subject key identifier: 64:FD:8F:73:DB:4B:1D:59:B9:AD:36:29:90:D1:83:55:C4:20:73:F8 Authority key identifier: FA:22:80:1C:52:AE:2A:5F:C4:91:B7:CB:EB:E6:8E:FC:A2:C8:D1:D9 Certificate issuer: /CN=A91D837B/serialNumber=FA22801C52AE2A5FC491B7CBEBE68EFCA2C8D1D9 Certificate serial: F8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-iKAHFKuKl_EkbfL6-aO_KLI0dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft Manifest number: F4 Signing time: Wed 25 Mar 2026 05:34:28 +0000 Manifest this update: Wed 25 Mar 2026 05:34:28 +0000 Manifest next update: Wed 01 Apr 2026 05:34:28 +0000 Files and hashes: 1: -iKAHFKuKl_EkbfL6-aO_KLI0dk.crl (hash: CjVQ5FmC7mBg6cK23EiJFGCt46/FzlSNlaO4t5+h74E=) 2: 8F7DFE66C96E11EF98B64E15C4F9AE02.roa (hash: 0O2Y56VE28BDUyW/y7K+tvSZF089IWlNTSJ1ih9VrPA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.crl rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-iKAHFKuKl_EkbfL6-aO_KLI0dk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:34:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 248 (0xf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D837B, serialNumber=FA22801C52AE2A5FC491B7CBEBE68EFCA2C8D1D9 Validity Not Before: Mar 25 05:34:28 2026 GMT Not After : Apr 1 05:34:28 2026 GMT Subject: CN=69c373e4-32f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e5:a0:ec:af:70:25:ce:c5:30:70:e4:a9:dd: 6d:c9:f9:ba:17:cd:7f:15:05:b4:ef:dd:e3:7e:3c: de:ba:84:1c:a0:74:f1:cf:d9:38:b9:ff:38:61:63: d6:51:61:95:39:3c:fa:8a:b4:fc:1e:0f:0b:93:c3: 33:2b:c9:05:85:75:83:c8:ab:f0:a3:a6:90:04:e6: a2:64:c7:fe:a2:31:d1:c1:55:12:25:ef:ef:47:b6: b1:74:72:d3:f3:7d:38:f5:29:4c:fb:28:46:e7:a3: c7:79:0e:91:00:66:f0:46:14:c0:39:4e:95:42:04: 25:01:af:ce:63:03:44:ba:b9:1a:8f:39:c9:46:31: 6a:bb:b0:81:d4:0e:31:52:60:f6:74:a6:cd:c9:33: 51:46:c4:16:05:45:26:7f:45:ad:5e:4d:f8:03:cc: 12:c9:23:85:3e:98:c7:7a:24:7e:38:18:71:48:ae: 8b:ad:a6:ee:9d:82:67:35:a6:c5:fa:4e:86:ed:7a: 9b:e7:8c:66:80:c5:93:fc:03:84:7b:37:a2:e4:33: ee:32:90:cd:61:26:6e:7e:a5:7d:fd:83:04:e6:13: 4e:93:c7:e2:71:6a:fd:26:6d:27:2c:aa:09:70:a2: f4:13:2b:5f:48:ca:a8:f7:f3:cf:92:b4:e1:f7:d8: 7f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:FD:8F:73:DB:4B:1D:59:B9:AD:36:29:90:D1:83:55:C4:20:73:F8 X509v3 Authority Key Identifier: keyid:FA:22:80:1C:52:AE:2A:5F:C4:91:B7:CB:EB:E6:8E:FC:A2:C8:D1:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-iKAHFKuKl_EkbfL6-aO_KLI0dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:21:0d:5b:a9:61:41:78:8a:5e:65:68:34:8c:e6:dc:3c:42: 77:6f:a2:bb:21:04:96:8c:98:72:26:03:19:cb:ee:68:25:96: 85:e1:78:ed:bd:4d:65:b6:09:53:fd:28:98:fe:31:b9:4d:71: 93:38:49:09:d8:35:25:ac:55:b1:7c:57:1c:ed:40:7d:68:d0: 0f:ae:54:40:ff:6a:0b:d7:25:2b:d1:7a:29:6c:b3:1b:c6:c9: 92:5e:aa:9f:6d:66:e7:3e:2a:bd:ce:e5:97:33:80:6f:a5:2d: 98:0e:94:3b:57:80:2a:3f:30:71:45:a1:39:7a:4d:38:49:63: db:0e:15:1d:03:8e:74:36:fc:c0:3a:cb:1c:6e:e9:a9:68:4c: ba:19:03:65:e0:ca:c5:d9:02:69:70:0a:f8:f8:ae:c1:52:a1: 34:72:c8:cf:db:9a:3e:3e:75:a1:cb:9a:d5:a3:f9:e7:f0:ba: 23:29:a7:85:ee:24:71:4b:cb:9b:d2:27:02:d2:1c:78:a9:6c: b8:0f:c3:de:33:6b:13:87:45:d7:b4:d3:d0:a9:07:39:0b:45: 43:62:db:a1:a5:df:ae:6d:60:71:05:33:20:8a:b4:5a:5e:f1: 53:8e:f4:26:0f:eb:b2:03:e1:0b:d5:a8:ae:ba:aa:67:e7:f9: c6:7e:ee:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgzN0IxMTAvBgNVBAUTKEZBMjI4MDFDNTJBRTJBNUZDNDkxQjdDQkVCRTY4RUZD QTJDOEQxRDkwHhcNMjYwMzI1MDUzNDI4WhcNMjYwNDAxMDUzNDI4WjAYMRYwFAYD VQQDEw02OWMzNzNlNC0zMmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAteWg7K9wJc7FMHDkqd1tyfm6F81/FQW0793jfjzeuoQcoHTxz9k4uf84YWPW UWGVOTz6irT8Hg8Lk8MzK8kFhXWDyKvwo6aQBOaiZMf+ojHRwVUSJe/vR7axdHLT 83049SlM+yhG56PHeQ6RAGbwRhTAOU6VQgQlAa/OYwNEurkajznJRjFqu7CB1A4x UmD2dKbNyTNRRsQWBUUmf0WtXk34A8wSySOFPpjHeiR+OBhxSK6LrabunYJnNabF +k6G7Xqb54xmgMWT/AOEezei5DPuMpDNYSZufqV9/YME5hNOk8ficWr9Jm0nLKoJ cKL0EytfSMqo9/PPkrTh99h/FwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGT9j3Pb Sx1Zua02KZDRg1XEIHP4MB8GA1UdIwQYMBaAFPoigBxSripfxJG3y+vmjvyiyNHZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODM3Qi8xNThEN0YzQ0I5 OUMxMUVGOTYzOEY3NjlDNEY5QUUwMi8taUtBSEZLdUtsX0VrYmZMNi1hT19LTEkw ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1pS0FIRkt1S2xfRWtiZkw2LWFPX0tMSTBkay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODM3Qi8xNThEN0YzQ0I5OUMxMUVGOTYzOEY3NjlDNEY5QUUwMi8taUtBSEZLdUts X0VrYmZMNi1hT19LTEkwZGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANCENW6lhQXiKXmVoNIzm3DxCd2+iuyEEloyYciYDGcvuaCWWheF47b1NZbYJ U/0omP4xuU1xkzhJCdg1JaxVsXxXHO1AfWjQD65UQP9qC9clK9F6KWyzG8bJkl6q n21m5z4qvc7llzOAb6UtmA6UO1eAKj8wcUWhOXpNOElj2w4VHQOOdDb8wDrLHG7p qWhMuhkDZeDKxdkCaXAK+PiuwVKhNHLIz9uaPj51ocua1aP55/C6Iymnhe4kcUvL m9InAtIceKlsuA/D3jNrE4dF17TT0KkHOQtFQ2LboaXfrm1gcQUzIIq0Wl7xU470 Jg/rsgPhC9WorrqqZ+f5xn7ujA== -----END CERTIFICATE-----Generated at Thu Mar 26 17:50:50 2026 by rpki-client