$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft File: I3t9TKhKJtX8SVjUgZHzahS8ei8.mft (raw, json) Hash identifier: NOjL/NohJ41+10G1VQ365Bp9d1iLSFLzA1yaPpe8Prg= Subject key identifier: C1:F1:AF:65:98:B8:7B:8F:C7:7B:9A:24:EB:30:FF:17:F2:C8:EE:30 Authority key identifier: 23:7B:7D:4C:A8:4A:26:D5:FC:49:58:D4:81:91:F3:6A:14:BC:7A:2F Certificate issuer: /CN=A91DB6F8/serialNumber=237B7D4CA84A26D5FC4958D48191F36A14BC7A2F Certificate serial: 0293 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft Manifest number: 0280 Signing time: Wed 25 Mar 2026 01:28:10 +0000 Manifest this update: Wed 25 Mar 2026 01:28:10 +0000 Manifest next update: Wed 01 Apr 2026 01:28:10 +0000 Files and hashes: 1: I3t9TKhKJtX8SVjUgZHzahS8ei8.crl (hash: DBMvcsj8U98/lqMLcl3pXlds3JN+RQVZVZmy9WTjG/w=) 2: 4E8695C04F6111F0AEF2037CC4F9AE02.roa (hash: ncn7Gjv5/K5v/CMdlLouui8Rvj7iaqS9f9pgwJ6xHLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.crl rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:28:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 659 (0x293) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB6F8, serialNumber=237B7D4CA84A26D5FC4958D48191F36A14BC7A2F Validity Not Before: Mar 25 01:28:10 2026 GMT Not After : Apr 1 01:28:10 2026 GMT Subject: CN=69c33a2a-1359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:39:a7:22:f5:ce:97:5a:0d:06:63:0d:50:f7: 4b:ec:a4:10:f6:e3:0a:ac:c0:4c:c9:cb:34:84:88: 27:cd:9d:17:69:63:e1:df:b7:ad:8d:82:8c:a4:02: ca:09:a5:fc:5c:32:ec:99:b0:5a:ad:6c:f3:84:66: cc:9b:01:28:04:50:df:83:aa:47:2a:14:b7:71:76: 35:af:47:02:d5:dd:b8:ee:98:eb:18:14:54:27:43: d0:74:79:f2:d3:a2:3b:5b:1d:0b:d6:da:8e:fc:fb: 38:59:de:9b:54:50:31:67:06:ef:59:2a:52:dd:a5: b7:c0:de:18:68:15:b4:aa:f6:18:7b:63:ee:10:ae: 7b:33:42:ab:92:3e:ab:03:55:90:6c:ea:a9:42:0a: d1:5d:91:f1:37:a5:52:8a:b5:58:48:11:7a:33:7d: 34:42:d9:df:f2:87:d1:c4:0e:4d:2a:b0:20:9f:76: d6:88:e6:16:de:30:42:87:94:85:f2:09:00:57:c8: 1c:9b:24:8e:2d:7a:0a:49:97:2b:05:df:0e:97:04: 3a:1a:88:cb:1c:be:9d:27:ea:97:1d:11:a1:b6:54: b3:3a:33:eb:44:44:2a:23:45:19:36:de:de:70:75: 1b:87:4b:e0:e4:cf:71:60:41:2d:aa:1b:f9:20:8d: fb:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F1:AF:65:98:B8:7B:8F:C7:7B:9A:24:EB:30:FF:17:F2:C8:EE:30 X509v3 Authority Key Identifier: keyid:23:7B:7D:4C:A8:4A:26:D5:FC:49:58:D4:81:91:F3:6A:14:BC:7A:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:e3:8e:86:91:03:fb:2e:71:15:ba:20:25:44:a2:6d:b7:b6: c9:c8:70:cf:ef:cc:ef:de:d5:1d:1e:44:fd:aa:fc:08:62:55: f1:14:ba:28:2b:e3:e7:c4:c9:d8:53:0f:58:c3:8c:20:dd:e1: 1f:54:5c:18:ae:49:23:92:3c:21:56:2c:a0:47:7e:58:69:0b: 25:96:09:7e:ef:67:1b:17:3f:54:bd:82:1b:62:5f:51:0b:e9: 3e:37:49:47:f7:06:02:c9:d4:5a:65:c0:41:fa:89:7c:4b:f2: 8d:1b:ff:62:91:83:e3:b8:9c:5b:c7:4f:f1:7d:6e:be:51:0a: b6:83:13:09:54:d4:41:0e:b5:b5:4a:34:8a:98:bf:04:48:78: 40:50:2f:0e:4f:e7:1a:10:23:5d:7b:95:ec:2e:0d:6f:89:d7: 86:d1:1f:41:87:ec:3f:7f:cf:3f:0e:d6:7f:fd:3b:14:b9:62: 70:5f:d3:ca:27:6b:88:fa:af:d2:ce:1b:08:99:33:3d:80:d9: 6a:5b:05:bc:e0:ba:b4:8d:83:4f:be:f0:ae:50:fe:2b:99:f3: d2:bd:1c:ae:6d:f8:62:e8:a7:2a:1c:ff:d0:72:94:36:68:c2: 05:20:33:ed:79:3c:29:dc:4f:29:02:5a:85:5b:76:7c:7d:1e: ee:ba:af:c3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI2RjgxMTAvBgNVBAUTKDIzN0I3RDRDQTg0QTI2RDVGQzQ5NThENDgxOTFGMzZB MTRCQzdBMkYwHhcNMjYwMzI1MDEyODEwWhcNMjYwNDAxMDEyODEwWjAYMRYwFAYD VQQDEw02OWMzM2EyYS0xMzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuTmnIvXOl1oNBmMNUPdL7KQQ9uMKrMBMycs0hIgnzZ0XaWPh37etjYKMpALK CaX8XDLsmbBarWzzhGbMmwEoBFDfg6pHKhS3cXY1r0cC1d247pjrGBRUJ0PQdHny 06I7Wx0L1tqO/Ps4Wd6bVFAxZwbvWSpS3aW3wN4YaBW0qvYYe2PuEK57M0Krkj6r A1WQbOqpQgrRXZHxN6VSirVYSBF6M300Qtnf8ofRxA5NKrAgn3bWiOYW3jBCh5SF 8gkAV8gcmySOLXoKSZcrBd8OlwQ6GojLHL6dJ+qXHRGhtlSzOjPrREQqI0UZNt7e cHUbh0vg5M9xYEEtqhv5II37kQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMHxr2WY uHuPx3uaJOsw/xfyyO4wMB8GA1UdIwQYMBaAFCN7fUyoSibV/ElY1IGR82oUvHov MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjZGOC81NjJDM0NCNDcy NEUxMUVEOEUyMDY3M0VDNEY5QUUwMi9JM3Q5VEtoS0p0WDhTVmpVZ1pIemFoUzhl aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0kzdDlUS2hLSnRYOFNWalVnWkh6YWhTOGVpOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjZGOC81NjJDM0NCNDcyNEUxMUVEOEUyMDY3M0VDNEY5QUUwMi9JM3Q5VEtoS0p0 WDhTVmpVZ1pIemFoUzhlaTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOOOOhpED+y5xFbogJUSibbe2ychwz+/M797VHR5E/ar8CGJV8RS6KCvj58TJ 2FMPWMOMIN3hH1RcGK5JI5I8IVYsoEd+WGkLJZYJfu9nGxc/VL2CG2JfUQvpPjdJ R/cGAsnUWmXAQfqJfEvyjRv/YpGD47icW8dP8X1uvlEKtoMTCVTUQQ61tUo0ipi/ BEh4QFAvDk/nGhAjXXuV7C4Nb4nXhtEfQYfsP3/PPw7Wf/07FLlicF/TyidriPqv 0s4bCJkzPYDZalsFvOC6tI2DT77wrlD+K5nz0r0crm34YuinKhz/0HKUNmjCBSAz 7Xk8KdxPKQJahVt2fH0e7rqvww== -----END CERTIFICATE-----Generated at Thu Mar 26 04:21:46 2026 by rpki-client