$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.mft File: iQoeXMwexsfOHqcfSRKRH1mShrI.mft (raw, json) Hash identifier: 9JcI091WMdj60C0wTG6qBJ9Dr5OPYMe/X7ezYT6sVbg= Subject key identifier: A2:BD:41:F5:E1:A6:E5:6C:2F:CA:18:E9:B8:E0:CA:9A:E5:88:6A:66 Authority key identifier: 89:0A:1E:5C:CC:1E:C6:C7:CE:1E:A7:1F:49:12:91:1F:59:92:86:B2 Certificate issuer: /CN=A91E2234/serialNumber=890A1E5CCC1EC6C7CE1EA71F4912911F599286B2 Certificate serial: 351D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQoeXMwexsfOHqcfSRKRH1mShrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.mft Manifest number: 351D Signing time: Tue 24 Mar 2026 14:49:24 +0000 Manifest this update: Tue 24 Mar 2026 14:49:23 +0000 Manifest next update: Tue 31 Mar 2026 14:49:23 +0000 Files and hashes: 1: iQoeXMwexsfOHqcfSRKRH1mShrI.crl (hash: 2MotdK2ygFjiFfRqofl/oJJQ9zstnuVaXfMIxYoDKMk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.crl rsync://rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQoeXMwexsfOHqcfSRKRH1mShrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 14:49:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13597 (0x351d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2234, serialNumber=890A1E5CCC1EC6C7CE1EA71F4912911F599286B2 Validity Not Before: Mar 24 14:49:23 2026 GMT Not After : Mar 31 14:49:23 2026 GMT Subject: CN=69c2a474-7f42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:4b:2f:da:8e:18:9e:6a:a3:aa:26:19:70:75: 8a:80:29:5e:13:f2:ae:1a:19:93:9b:4a:a4:40:37: 37:3e:93:7d:1c:61:74:17:f6:40:b7:89:18:7f:a1: 4b:46:24:f6:6d:98:6b:d0:dc:5a:19:36:65:07:98: 69:db:4d:1d:9c:5f:b6:4d:48:77:78:50:49:db:ba: 61:b2:cf:af:48:21:d1:bb:cd:5c:25:07:1a:db:b8: ed:de:1c:f5:eb:a0:cf:81:0c:c2:39:55:50:06:c3: 83:3b:f8:f5:2f:1a:4a:e1:65:61:2c:9f:59:61:a8: c4:c9:60:57:47:89:71:ca:d2:16:ab:ab:60:c6:a8: 24:ca:96:d2:df:08:6f:a4:a4:7c:d8:d8:44:da:7c: 2f:a5:e5:b8:7a:aa:bf:6b:5f:16:20:01:09:50:54: 32:74:a5:81:af:59:50:44:b7:72:6a:14:bf:23:9a: f5:60:df:b5:5d:1b:19:e5:15:c9:6b:0b:11:93:77: d3:93:09:07:3e:83:c9:b1:69:82:70:97:ef:6f:6d: 06:ca:51:cd:27:7d:c0:b5:06:6e:09:b5:0d:2a:bb: c8:78:60:94:68:42:ca:ad:a2:34:bb:8d:64:48:31: de:25:62:eb:a2:6c:63:67:4d:6f:21:2a:8b:4d:59: 78:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:BD:41:F5:E1:A6:E5:6C:2F:CA:18:E9:B8:E0:CA:9A:E5:88:6A:66 X509v3 Authority Key Identifier: keyid:89:0A:1E:5C:CC:1E:C6:C7:CE:1E:A7:1F:49:12:91:1F:59:92:86:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQoeXMwexsfOHqcfSRKRH1mShrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:a7:81:38:c1:b4:be:09:9b:c2:fb:e8:5c:92:c3:46:6b:62: 7d:49:65:ef:ed:3a:47:9f:c1:d4:95:d6:25:27:6e:bf:8d:cd: b3:95:92:12:f9:12:73:2b:0e:73:4a:a7:e6:27:28:f0:ea:da: 46:a8:fb:3f:ba:94:88:c9:e0:00:4d:81:54:13:87:00:3b:03: 52:d5:df:a1:56:6c:ba:56:91:ce:b7:bb:17:2b:9d:ac:60:d4: e8:3d:52:0c:3b:9b:d5:81:ce:b6:5a:a9:ac:66:5a:6e:94:79: 06:68:e8:4a:11:ef:aa:3b:7a:54:a2:de:0b:94:b4:d1:0c:8a: 5b:0b:20:40:b1:b7:bc:2f:4c:74:f1:94:8d:d9:93:0e:01:7f: 45:1d:04:e3:9b:d5:f5:a3:e0:da:9a:51:e5:f6:59:59:c2:d9: 60:48:53:b5:ba:bf:1e:fd:0e:e3:34:ca:19:3c:59:aa:92:92: c7:c5:e2:b1:3f:63:bb:8f:d6:be:12:72:49:98:37:02:dd:2c: fd:8e:ba:fd:27:65:a1:40:17:91:f9:e0:aa:ec:2c:3b:03:30: 45:5d:61:10:f2:ad:8f:88:33:60:63:64:f3:fc:16:e7:3f:e4: fe:de:7a:16:10:0c:66:0c:06:05:51:77:95:6e:14:58:cd:03: 46:a0:7e:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIyMzQxMTAvBgNVBAUTKDg5MEExRTVDQ0MxRUM2QzdDRTFFQTcxRjQ5MTI5MTFG NTk5Mjg2QjIwHhcNMjYwMzI0MTQ0OTIzWhcNMjYwMzMxMTQ0OTIzWjAYMRYwFAYD VQQDEw02OWMyYTQ3NC03ZjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8ksv2o4YnmqjqiYZcHWKgCleE/KuGhmTm0qkQDc3PpN9HGF0F/ZAt4kYf6FL RiT2bZhr0NxaGTZlB5hp200dnF+2TUh3eFBJ27phss+vSCHRu81cJQca27jt3hz1 66DPgQzCOVVQBsODO/j1LxpK4WVhLJ9ZYajEyWBXR4lxytIWq6tgxqgkypbS3whv pKR82NhE2nwvpeW4eqq/a18WIAEJUFQydKWBr1lQRLdyahS/I5r1YN+1XRsZ5RXJ awsRk3fTkwkHPoPJsWmCcJfvb20GylHNJ33AtQZuCbUNKrvIeGCUaELKraI0u41k SDHeJWLromxjZ01vISqLTVl4qwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKK9QfXh puVsL8oY6bjgyprliGpmMB8GA1UdIwQYMBaAFIkKHlzMHsbHzh6nH0kSkR9Zkoay MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjIzNC81MjI1NjkxNDFE OTYxMUUyOUVFNUNCN0UwOEIwMkNEMi9pUW9lWE13ZXhzZk9IcWNmU1JLUkgxbVNo ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lRb2VYTXdleHNmT0hxY2ZTUktSSDFtU2hySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjIzNC81MjI1NjkxNDFEOTYxMUUyOUVFNUNCN0UwOEIwMkNEMi9pUW9lWE13ZXhz Zk9IcWNmU1JLUkgxbVNockkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQaeBOMG0vgmbwvvoXJLDRmtifUll7+06R5/B1JXWJSduv43Ns5WSEvkScysO c0qn5ico8OraRqj7P7qUiMngAE2BVBOHADsDUtXfoVZsulaRzre7FyudrGDU6D1S DDub1YHOtlqprGZabpR5BmjoShHvqjt6VKLeC5S00QyKWwsgQLG3vC9MdPGUjdmT DgF/RR0E45vV9aPg2ppR5fZZWcLZYEhTtbq/Hv0O4zTKGTxZqpKSx8XisT9ju4/W vhJySZg3At0s/Y66/SdloUAXkfngquwsOwMwRV1hEPKtj4gzYGNk8/wW5z/k/t56 FhAMZgwGBVF3lW4UWM0DRqB+0A== -----END CERTIFICATE-----Generated at Thu Mar 26 15:50:19 2026 by rpki-client