$ rpki-client -vvf rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft File: I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft (raw, json) Hash identifier: MJmH3gyb81yDneZX690CyyEvuuzUKproToSAbEQqE88= Subject key identifier: 91:BF:09:D6:3E:96:83:54:C9:70:9E:6F:A9:C7:47:BC:5F:80:2C:C9 Authority key identifier: 23:B9:60:37:AB:8A:D2:37:E6:32:6F:7E:D0:F8:1E:31:8E:8A:14:AB Certificate issuer: /CN=A91E892A/serialNumber=23B96037AB8AD237E6326F7ED0F81E318E8A14AB Certificate serial: 1999 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft Manifest number: 1989 Signing time: Tue 24 Mar 2026 16:19:06 +0000 Manifest this update: Tue 24 Mar 2026 16:19:05 +0000 Manifest next update: Tue 31 Mar 2026 16:19:05 +0000 Files and hashes: 1: I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl (hash: wPQdntgJVKzaOMXmFv9EvGVCo5hWFv0axQVCrXM/YH0=) 2: D421D958881611E78B9B0850C4F9AE02.roa (hash: 8Nuoull25KblVQ1PNDvmoNwHbwhuQ64gaT6vwAXGPpc=) 3: D57C98A88C0311EFAA53FF12C4F9AE02.roa (hash: sk/aWgMAKHJV+S5wciXhAIcHYQF2Px3Gvke4ka59rbI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:19:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6553 (0x1999) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E892A, serialNumber=23B96037AB8AD237E6326F7ED0F81E318E8A14AB Validity Not Before: Mar 24 16:19:05 2026 GMT Not After : Mar 31 16:19:05 2026 GMT Subject: CN=69c2b97a-af07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2d:63:8e:08:86:f1:8c:f4:98:3f:07:ff:84: 2c:62:02:80:63:ed:38:19:d2:b9:72:f7:51:13:8e: 42:c4:b6:e4:0e:b3:09:22:cf:d0:94:f9:6d:5b:90: 97:77:6b:f7:6c:55:98:b7:dd:fa:67:bd:75:7c:48: 91:99:6e:71:a2:a2:c8:1d:6f:a3:d8:1a:f2:d6:e5: e2:34:e2:86:39:03:a8:4e:4d:a7:8e:53:42:db:75: 00:54:00:ce:bc:5f:18:5e:96:ee:fb:5a:9b:e6:d7: 97:e8:66:50:bd:62:18:fb:ea:31:85:47:43:5a:46: 92:f2:79:60:de:4a:1d:49:36:77:b7:fb:5c:23:19: 11:67:ce:b7:f9:f5:14:19:ba:75:0c:40:8a:e7:04: cb:21:f1:3e:4c:7b:7a:0b:63:40:0a:d4:52:8a:a0: d0:0c:f5:cd:27:e0:cd:10:01:19:b8:d3:91:cf:df: 50:35:00:8d:4b:05:a7:a5:d7:53:5d:c3:c9:06:3b: 72:78:34:a3:45:8b:3e:e6:ec:fc:5f:16:bc:b4:13: ce:70:c9:48:7b:ef:78:4e:73:6e:a6:05:01:2b:0a: 07:2a:ae:13:47:21:5e:65:98:81:cd:76:e8:57:d6: 62:81:73:94:47:99:ec:87:d8:8b:e7:1e:21:bd:d6: 15:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:BF:09:D6:3E:96:83:54:C9:70:9E:6F:A9:C7:47:BC:5F:80:2C:C9 X509v3 Authority Key Identifier: keyid:23:B9:60:37:AB:8A:D2:37:E6:32:6F:7E:D0:F8:1E:31:8E:8A:14:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:83:de:d5:81:c0:79:ec:b1:38:f5:20:fc:86:f8:17:94:d9: ba:58:7f:e1:6d:b2:3f:ad:79:9b:25:62:d5:cc:44:93:6a:d6: 6b:a6:5c:87:23:a0:a1:66:4d:4f:0b:15:ce:ea:ef:51:56:e3: 9e:4d:aa:cf:78:a1:07:f4:31:38:fe:70:21:0b:18:a0:34:0f: dc:86:dd:a2:cb:fd:b7:87:34:5d:3b:aa:e9:15:8e:2c:8b:3a: 34:cb:19:43:76:bf:77:1c:22:cc:f3:41:81:dc:e5:76:5d:4f: ba:06:3b:f0:f4:61:17:06:5c:b2:88:67:d0:1d:f7:63:c7:21: ac:3c:7c:3c:e1:e6:08:8d:f7:96:53:22:fc:6b:31:d7:64:6f: 57:16:48:15:75:42:5d:68:fe:13:8b:77:a6:f5:18:4e:8e:5c: 3e:83:23:b3:d8:9a:ae:d9:ad:69:45:ea:0d:7a:83:29:c0:39: f4:9c:67:f6:93:46:f7:25:72:c0:87:e2:f3:82:ac:ba:b5:5c: e9:78:4b:c9:80:6b:6c:f0:5b:35:15:67:ef:a4:aa:e2:f8:9f: dd:74:02:66:75:d8:3d:b2:55:f3:32:43:5f:69:6b:f5:a0:c6: 30:ce:a0:f7:19:64:74:0a:cb:82:5e:7b:db:ce:b6:5d:64:75: 94:1a:4e:cb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg5MkExMTAvBgNVBAUTKDIzQjk2MDM3QUI4QUQyMzdFNjMyNkY3RUQwRjgxRTMx OEU4QTE0QUIwHhcNMjYwMzI0MTYxOTA1WhcNMjYwMzMxMTYxOTA1WjAYMRYwFAYD VQQDEw02OWMyYjk3YS1hZjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAui1jjgiG8Yz0mD8H/4QsYgKAY+04GdK5cvdRE45CxLbkDrMJIs/QlPltW5CX d2v3bFWYt936Z711fEiRmW5xoqLIHW+j2Bry1uXiNOKGOQOoTk2njlNC23UAVADO vF8YXpbu+1qb5teX6GZQvWIY++oxhUdDWkaS8nlg3kodSTZ3t/tcIxkRZ863+fUU Gbp1DECK5wTLIfE+THt6C2NACtRSiqDQDPXNJ+DNEAEZuNORz99QNQCNSwWnpddT XcPJBjtyeDSjRYs+5uz8Xxa8tBPOcMlIe+94TnNupgUBKwoHKq4TRyFeZZiBzXbo V9ZigXOUR5nsh9iL5x4hvdYVUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJG/CdY+ loNUyXCeb6nHR7xfgCzJMB8GA1UdIwQYMBaAFCO5YDeritI35jJvftD4HjGOihSr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODkyQS9GODEwRTlBNDg4 MTUxMUU3OEJGN0QxNEVDNEY5QUUwMi9JN2xnTjZ1SzBqZm1NbTktMFBnZU1ZNktG S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k3bGdONnVLMGpmbU1tOS0wUGdlTVk2S0ZLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODkyQS9GODEwRTlBNDg4MTUxMUU3OEJGN0QxNEVDNEY5QUUwMi9JN2xnTjZ1SzBq Zm1NbTktMFBnZU1ZNktGS3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYYPe1YHAeeyxOPUg/Ib4F5TZulh/4W2yP615myVi1cxEk2rWa6ZchyOgoWZN TwsVzurvUVbjnk2qz3ihB/QxOP5wIQsYoDQP3Ibdosv9t4c0XTuq6RWOLIs6NMsZ Q3a/dxwizPNBgdzldl1PugY78PRhFwZcsohn0B33Y8chrDx8POHmCI33llMi/Gsx 12RvVxZIFXVCXWj+E4t3pvUYTo5cPoMjs9iartmtaUXqDXqDKcA59Jxn9pNG9yVy wIfi84KsurVc6XhLyYBrbPBbNRVn76Sq4vif3XQCZnXYPbJV8zJDX2lr9aDGMM6g 9xlkdArLgl572862XWR1lBpOyw== -----END CERTIFICATE-----Generated at Thu Mar 26 18:50:13 2026 by rpki-client