$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft File: iV-zzi-cLke5FLsqa2bHfVOXpAo.mft (raw, json) Hash identifier: acnrMyTtmEoeaEf/K33y+TdRlTPIgxnj6SVXkBQl5Z0= Subject key identifier: F7:F6:C9:DA:CC:6D:19:58:F6:4F:9B:CF:CB:A7:DD:5A:80:B1:76:7A Authority key identifier: 89:5F:B3:CE:2F:9C:2E:47:B9:14:BB:2A:6B:66:C7:7D:53:97:A4:0A Certificate issuer: /CN=A91E6419/serialNumber=895FB3CE2F9C2E47B914BB2A6B66C77D5397A40A Certificate serial: 028F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft Manifest number: 0287 Signing time: Fri 27 Mar 2026 01:21:22 +0000 Manifest this update: Fri 27 Mar 2026 01:21:21 +0000 Manifest next update: Fri 03 Apr 2026 01:21:21 +0000 Files and hashes: 1: iV-zzi-cLke5FLsqa2bHfVOXpAo.crl (hash: X0P7LhoEAwbHSmm9ECBkbFoqKCzrbWj9FZaODdYa0rQ=) 2: 38DEC3C04ED611ED84336740C4F9AE02.roa (hash: lsL1bzm7xgDwCWDuOlZQ/MIqVfUaWity48F6FNEzoq8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.crl rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 01:21:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 655 (0x28f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6419, serialNumber=895FB3CE2F9C2E47B914BB2A6B66C77D5397A40A Validity Not Before: Mar 27 01:21:21 2026 GMT Not After : Apr 3 01:21:21 2026 GMT Subject: CN=69c5db92-14f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1b:f0:63:ea:70:ab:50:cc:8a:be:aa:de:c3: 4d:11:98:96:e0:86:ad:6d:4e:f1:50:5d:e8:b3:a2: c7:63:10:b5:80:cc:78:2c:f3:b4:d4:1a:05:3d:c0: 0d:29:7e:fb:a1:52:ff:7f:19:13:7a:a9:3b:fc:df: bf:02:63:ae:3f:22:32:10:d3:4b:f3:fb:07:cc:3e: 31:69:83:77:b1:da:d6:36:e3:da:ad:e1:4c:eb:a6: 5d:97:1e:28:be:6a:5f:71:7d:fb:4b:d5:26:23:95: c3:bb:11:94:3c:e4:96:b6:0e:d4:08:3c:c5:18:b1: 22:8a:9d:07:8d:b3:df:be:a1:e2:3c:6a:b2:ad:2b: 1a:e0:2e:12:15:2d:93:30:1b:21:26:ff:e7:8f:99: 7d:7f:4b:1c:f2:50:73:fe:11:eb:a3:74:b4:39:bd: 2a:08:09:fb:7e:25:54:c8:e7:0d:f4:18:d9:05:bc: 97:d0:07:6b:a4:cc:0e:27:2d:7a:ed:36:99:c6:7e: 47:cb:58:01:e6:04:d3:ca:c2:ad:3e:70:35:3a:ee: a4:4c:39:de:d4:a2:d9:55:71:28:0b:7b:0f:55:a2: 6f:eb:a3:a6:fa:c2:87:a7:7e:eb:55:f9:76:e8:28: b0:63:f2:13:92:24:17:ed:b6:b1:38:2e:61:c2:ac: 24:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:F6:C9:DA:CC:6D:19:58:F6:4F:9B:CF:CB:A7:DD:5A:80:B1:76:7A X509v3 Authority Key Identifier: keyid:89:5F:B3:CE:2F:9C:2E:47:B9:14:BB:2A:6B:66:C7:7D:53:97:A4:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:b9:75:40:78:50:2c:45:fb:ea:45:32:30:62:d1:b8:a7:7b: 57:f0:78:f3:01:38:67:24:21:04:29:87:b1:38:59:a9:98:a4: 6f:b0:f4:7f:ea:ae:b7:2d:58:ed:1f:75:72:f5:4c:45:92:bc: ac:ae:1c:dd:f0:f8:cd:f7:69:2f:b3:59:f9:92:cd:93:05:cb: f6:5f:32:e3:34:79:b2:fe:a2:8b:68:e8:15:6f:ad:70:63:34: 98:de:53:12:f2:a6:ed:77:ea:86:2f:50:41:de:ff:46:de:be: b5:2f:21:aa:b2:45:85:f8:10:3d:5e:ce:dc:a0:d6:f8:fe:53: f9:fc:fa:2d:bd:81:48:31:7a:ab:8e:9a:c2:33:f7:cc:1f:59: 49:7a:ef:04:ea:77:61:b4:ec:0b:a0:53:bd:d1:32:22:9e:91: ac:f6:f8:85:15:93:6f:2a:fc:dc:0f:fb:14:9d:74:25:70:a1: 2a:83:3e:b0:f4:63:39:63:c2:93:f7:90:61:5d:1a:f3:69:b4: fe:37:3f:ca:cb:24:02:9f:04:48:18:b3:f5:82:9c:ea:31:4a: cc:a4:2e:25:1e:b4:37:1c:89:57:fa:02:6c:aa:4a:db:4f:b0: 23:9e:4c:c9:fe:e8:4b:09:12:d8:dc:c2:6f:fc:7e:86:83:37: 6b:cb:0c:67 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY0MTkxMTAvBgNVBAUTKDg5NUZCM0NFMkY5QzJFNDdCOTE0QkIyQTZCNjZDNzdE NTM5N0E0MEEwHhcNMjYwMzI3MDEyMTIxWhcNMjYwNDAzMDEyMTIxWjAYMRYwFAYD VQQDEw02OWM1ZGI5Mi0xNGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvxvwY+pwq1DMir6q3sNNEZiW4IatbU7xUF3os6LHYxC1gMx4LPO01BoFPcAN KX77oVL/fxkTeqk7/N+/AmOuPyIyENNL8/sHzD4xaYN3sdrWNuPareFM66Zdlx4o vmpfcX37S9UmI5XDuxGUPOSWtg7UCDzFGLEiip0HjbPfvqHiPGqyrSsa4C4SFS2T MBshJv/nj5l9f0sc8lBz/hHro3S0Ob0qCAn7fiVUyOcN9BjZBbyX0AdrpMwOJy16 7TaZxn5Hy1gB5gTTysKtPnA1Ou6kTDne1KLZVXEoC3sPVaJv66Om+sKHp37rVfl2 6CiwY/ITkiQX7baxOC5hwqwkIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPf2ydrM bRlY9k+bz8un3VqAsXZ6MB8GA1UdIwQYMBaAFIlfs84vnC5HuRS7Kmtmx31Tl6QK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjQxOS9GQTZFMzZDQzRF RDMxMUVEQTVFNTMwNDBDNEY5QUUwMi9pVi16emktY0xrZTVGTHNxYTJiSGZWT1hw QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lWLXp6aS1jTGtlNUZMc3FhMmJIZlZPWHBBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjQxOS9GQTZFMzZDQzRFRDMxMUVEQTVFNTMwNDBDNEY5QUUwMi9pVi16emktY0xr ZTVGTHNxYTJiSGZWT1hwQW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAp7l1QHhQLEX76kUyMGLRuKd7V/B48wE4ZyQhBCmHsThZqZikb7D0f+quty1Y 7R91cvVMRZK8rK4c3fD4zfdpL7NZ+ZLNkwXL9l8y4zR5sv6ii2joFW+tcGM0mN5T EvKm7Xfqhi9QQd7/Rt6+tS8hqrJFhfgQPV7O3KDW+P5T+fz6Lb2BSDF6q46awjP3 zB9ZSXrvBOp3YbTsC6BTvdEyIp6RrPb4hRWTbyr83A/7FJ10JXChKoM+sPRjOWPC k/eQYV0a82m0/jc/ysskAp8ESBiz9YKc6jFKzKQuJR60NxyJV/oCbKpK20+wI55M yf7oSwkS2NzCb/x+hoM3a8sMZw== -----END CERTIFICATE-----Generated at Sat Mar 28 12:04:48 2026 by rpki-client