$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft File: i6wN0-SRhYlP2uKChO3IBHILRhQ.mft (raw, json) Hash identifier: OkUUO9RP/wX+6+1vuIejrh2r5ggHLOkASbMYrxwMPFY= Subject key identifier: 09:89:AF:B5:98:39:93:2F:15:6D:52:00:D7:D0:42:CE:90:15:D1:A2 Authority key identifier: 8B:AC:0D:D3:E4:91:85:89:4F:DA:E2:82:84:ED:C8:04:72:0B:46:14 Certificate issuer: /CN=A91EBFAE/serialNumber=8BAC0DD3E49185894FDAE28284EDC804720B4614 Certificate serial: 3528 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft Manifest number: 3527 Signing time: Thu 26 Mar 2026 14:35:04 +0000 Manifest this update: Thu 26 Mar 2026 14:35:04 +0000 Manifest next update: Thu 02 Apr 2026 14:35:04 +0000 Files and hashes: 1: i6wN0-SRhYlP2uKChO3IBHILRhQ.crl (hash: VGa9N9BPeEbgN/+hWB47Afhx/QIW2gSa+vUGVrVKiIw=) 2: 93F991501F4C11F19ED52041133D8C67.roa (hash: riV+YFoj73RGskIzJAtr/Lp7lGHXyMFCcQQ1eQ66pUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.crl rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:35:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13608 (0x3528) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBFAE, serialNumber=8BAC0DD3E49185894FDAE28284EDC804720B4614 Validity Not Before: Mar 26 14:35:04 2026 GMT Not After : Apr 2 14:35:04 2026 GMT Subject: CN=69c54418-4619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:82:38:15:da:8c:89:7f:a1:bb:81:34:e0:14: b2:03:09:2b:a6:2a:2e:eb:68:bf:60:36:2e:1b:00: a6:f6:39:eb:d1:d2:f0:7c:ec:95:32:53:36:c3:a1: 6b:01:e4:11:0e:86:79:73:0d:ae:ac:21:d3:59:94: 27:42:d0:94:ad:2f:d5:a0:4d:fe:1c:ff:79:28:16: 8a:e2:91:cc:3d:a6:10:7d:33:b8:2a:8b:b0:32:47: f3:6c:3a:c5:dc:36:b5:20:f0:4a:03:67:65:f9:ce: ba:d4:fb:1b:75:a3:57:66:d1:7e:07:a1:f8:4e:47: aa:d0:60:27:ed:55:b1:53:74:9a:1e:1b:7b:1a:37: e8:dd:0e:9c:90:21:46:08:28:95:06:f6:c9:24:b3: e8:7f:4a:0f:25:76:d8:3b:db:d0:c0:66:b0:a8:86: 13:a1:61:bf:9a:43:6d:23:ba:d8:c1:6f:b5:af:8c: c6:e6:41:c3:0d:40:ec:c9:ec:df:3d:5c:ab:2b:d2: 3d:25:b9:75:32:dd:f3:99:e0:36:cb:0b:8d:51:dd: 5e:b5:57:98:3c:4d:6a:6a:3f:ae:fa:9b:45:8b:1a: 52:db:ca:4d:c1:32:99:e9:88:47:bf:b0:ad:25:ad: f5:67:fe:04:71:fd:ba:cf:65:bc:23:3e:08:9d:11: 7b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:89:AF:B5:98:39:93:2F:15:6D:52:00:D7:D0:42:CE:90:15:D1:A2 X509v3 Authority Key Identifier: keyid:8B:AC:0D:D3:E4:91:85:89:4F:DA:E2:82:84:ED:C8:04:72:0B:46:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:6d:40:1c:f6:95:52:d4:9a:e2:ee:b8:fb:be:0a:a4:4a:37: 68:02:22:05:50:8c:91:00:c2:dd:9f:1a:69:90:fe:79:4b:36: 51:ed:68:82:6b:b8:54:f3:3c:91:6b:30:3e:ec:1b:0a:e3:26: e1:7f:f7:72:ac:b5:c0:0f:fd:34:6f:fd:4c:92:4c:44:7f:f9: ba:6f:97:07:fe:1c:01:8a:70:95:0f:f3:8d:1b:e5:63:15:0c: 2a:d3:81:07:71:b4:af:f7:74:99:65:71:91:b7:b2:93:61:8a: bd:79:40:59:cb:25:51:94:74:9e:f9:d5:0c:6a:2d:fe:e4:e5: 8f:04:8c:bf:0e:9f:c6:6a:13:ff:a2:25:31:57:b6:50:c5:a8: 82:67:f9:f2:62:73:51:9c:3f:b4:70:f5:ee:be:62:d8:8f:4c: 11:3d:11:f6:ed:ef:1e:50:fd:e3:e8:0a:51:d5:57:29:00:d9: ab:b5:f7:16:41:b8:2a:f6:34:e5:aa:de:ac:22:5a:4d:39:6e: 93:64:4a:76:e5:6b:fd:61:a1:d6:44:27:99:ff:fc:ed:28:21: 90:8d:54:9b:5b:5b:b5:19:40:20:bc:7d:ea:3e:94:e0:b0:6a: fc:fb:4d:6f:b2:28:15:47:2c:e5:c8:d4:6a:78:8e:47:5d:0f: d0:5e:c0:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNSgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJGQUUxMTAvBgNVBAUTKDhCQUMwREQzRTQ5MTg1ODk0RkRBRTI4Mjg0RURDODA0 NzIwQjQ2MTQwHhcNMjYwMzI2MTQzNTA0WhcNMjYwNDAyMTQzNTA0WjAYMRYwFAYD VQQDEw02OWM1NDQxOC00NjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA04I4FdqMiX+hu4E04BSyAwkrpiou62i/YDYuGwCm9jnr0dLwfOyVMlM2w6Fr AeQRDoZ5cw2urCHTWZQnQtCUrS/VoE3+HP95KBaK4pHMPaYQfTO4KouwMkfzbDrF 3Da1IPBKA2dl+c661PsbdaNXZtF+B6H4Tkeq0GAn7VWxU3SaHht7Gjfo3Q6ckCFG CCiVBvbJJLPof0oPJXbYO9vQwGawqIYToWG/mkNtI7rYwW+1r4zG5kHDDUDsyezf PVyrK9I9Jbl1Mt3zmeA2ywuNUd1etVeYPE1qaj+u+ptFixpS28pNwTKZ6YhHv7Ct Ja31Z/4Ecf26z2W8Iz4InRF79QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAmJr7WY OZMvFW1SANfQQs6QFdGiMB8GA1UdIwQYMBaAFIusDdPkkYWJT9rigoTtyARyC0YU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkZBRS8xNjhGRkQ2QzFE OEExMUUyOTBEMERFRTMwOEIwMkNEMi9pNndOMC1TUmhZbFAydUtDaE8zSUJISUxS aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2k2d04wLVNSaFlsUDJ1S0NoTzNJQkhJTFJoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkZBRS8xNjhGRkQ2QzFEOEExMUUyOTBEMERFRTMwOEIwMkNEMi9pNndOMC1TUmhZ bFAydUtDaE8zSUJISUxSaFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaG1AHPaVUtSa4u64+74KpEo3aAIiBVCMkQDC3Z8aaZD+eUs2Ue1ogmu4VPM8 kWswPuwbCuMm4X/3cqy1wA/9NG/9TJJMRH/5um+XB/4cAYpwlQ/zjRvlYxUMKtOB B3G0r/d0mWVxkbeyk2GKvXlAWcslUZR0nvnVDGot/uTljwSMvw6fxmoT/6IlMVe2 UMWogmf58mJzUZw/tHD17r5i2I9MET0R9u3vHlD94+gKUdVXKQDZq7X3FkG4KvY0 5arerCJaTTluk2RKduVr/WGh1kQnmf/87SghkI1Um1tbtRlAILx96j6U4LBq/PtN b7IoFUcs5cjUaniOR10P0F7AFw== -----END CERTIFICATE-----Generated at Sat Mar 28 10:45:17 2026 by rpki-client