$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.mft File: IsfsPNntTFDolKEbzXDQMQzV-Fk.mft (raw, json) Hash identifier: Kdn1lpo7FNi+CIq+SNDGy98133CamO6HDMstX8tFqag= Subject key identifier: 7F:0E:21:04:83:50:91:30:D3:36:5B:D5:70:45:42:9C:AE:50:F1:8F Authority key identifier: 22:C7:EC:3C:D9:ED:4C:50:E8:94:A1:1B:CD:70:D0:31:0C:D5:F8:59 Certificate issuer: /CN=A91EC225/serialNumber=22C7EC3CD9ED4C50E894A11BCD70D0310CD5F859 Certificate serial: F6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IsfsPNntTFDolKEbzXDQMQzV-Fk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.mft Manifest number: F2 Signing time: Tue 24 Mar 2026 17:26:46 +0000 Manifest this update: Tue 24 Mar 2026 17:26:46 +0000 Manifest next update: Tue 31 Mar 2026 17:26:46 +0000 Files and hashes: 1: IsfsPNntTFDolKEbzXDQMQzV-Fk.crl (hash: 7+Tf8ymjuFYdih9wMUi0FpKdg3TFnNdaXlpJKTohAZQ=) 2: 25D2B94CDECD11EFA79E4065C4F9AE02.roa (hash: akLA24IwRVeRV87VrcCP9mJOdJA7ntWRSTCaXT2ZWc8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.crl rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IsfsPNntTFDolKEbzXDQMQzV-Fk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:26:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 246 (0xf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC225, serialNumber=22C7EC3CD9ED4C50E894A11BCD70D0310CD5F859 Validity Not Before: Mar 24 17:26:46 2026 GMT Not After : Mar 31 17:26:46 2026 GMT Subject: CN=69c2c956-a9cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d7:dd:ce:b5:14:14:1c:27:f9:21:f3:be:4d: 1c:5b:e4:18:44:5c:b4:0f:3c:25:6e:da:40:b4:de: 29:20:44:a7:c5:f3:b6:73:33:8b:fd:61:2b:29:16: b7:54:cc:fe:66:83:b5:6f:28:54:98:b0:e3:b1:67: 52:46:e0:e5:84:95:b2:c0:90:43:07:07:89:09:2c: 6e:da:33:c6:81:df:8b:a9:cf:52:38:58:d9:8a:3b: b4:45:34:14:6c:30:5d:6d:93:3a:4b:f4:00:3c:25: ef:58:e8:5d:e1:0c:1f:40:7c:9e:a0:d0:bb:fd:9d: 6c:05:ae:68:94:1a:52:4b:88:35:c2:1d:bc:0e:88: 5d:66:57:a2:43:3e:55:95:79:8d:6c:f1:46:3b:47: 61:e4:c5:e4:b4:ee:80:2a:fb:06:eb:b1:8d:00:74: e3:49:29:c0:96:f9:b9:56:b8:ff:b2:2c:bf:be:c5: 63:7a:46:e4:39:af:73:44:0b:06:5a:90:40:91:a8: 61:db:d6:6d:ec:4f:7d:3a:80:db:91:27:ae:a9:f2: 5f:5c:18:90:b2:1e:af:2d:d5:62:49:b0:b6:c6:06: 10:6a:2e:ab:64:5a:85:5d:cc:4b:47:7b:54:57:fd: 8c:5a:b9:96:aa:ff:10:28:f6:e5:5b:98:d8:e8:84: 2e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:0E:21:04:83:50:91:30:D3:36:5B:D5:70:45:42:9C:AE:50:F1:8F X509v3 Authority Key Identifier: keyid:22:C7:EC:3C:D9:ED:4C:50:E8:94:A1:1B:CD:70:D0:31:0C:D5:F8:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IsfsPNntTFDolKEbzXDQMQzV-Fk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:72:56:76:58:86:27:2e:b1:94:f7:6b:da:d6:33:c6:c6:76: 3f:70:42:e2:a6:9f:0f:2f:03:c6:23:83:9a:81:d5:13:27:01: c9:a8:fc:83:ef:e8:b7:a6:38:a0:3d:b7:a8:98:d5:77:d7:4e: 16:11:3a:87:d8:7e:16:44:b9:ac:a3:d5:6c:d2:8e:64:96:5c: 35:3d:4e:5f:dd:25:fd:77:14:7d:1e:cd:73:13:00:da:f6:aa: 53:b1:90:28:db:5b:3c:8f:10:6e:db:fe:ce:dc:3f:a3:7f:cc: 19:2f:2f:01:cc:d0:96:f7:e3:41:92:26:1d:cf:70:b3:fc:30: 03:d9:bc:16:b2:0d:06:05:35:63:98:29:c2:bf:18:da:95:7e: 50:7a:35:f6:76:d1:02:01:dc:af:43:b5:5b:91:17:61:a3:a2: 9d:5d:13:83:86:5e:60:5e:45:b4:6a:96:76:c1:ef:91:c4:26: 4b:5a:0c:1f:49:48:5d:f0:0c:8c:49:49:03:7c:f5:0d:4e:96: d1:54:4b:f6:52:e2:0d:dd:3e:ba:7c:6d:70:c9:ce:bd:5f:e5: 82:af:6b:9d:f5:d1:91:2f:0c:5a:0a:4c:18:ac:0b:c5:f7:c4: c0:7c:2a:c8:fa:04:10:93:c3:4b:6f:4e:ae:e7:9a:2c:8c:e9: 94:27:cd:3d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUMyMjUxMTAvBgNVBAUTKDIyQzdFQzNDRDlFRDRDNTBFODk0QTExQkNENzBEMDMx MENENUY4NTkwHhcNMjYwMzI0MTcyNjQ2WhcNMjYwMzMxMTcyNjQ2WjAYMRYwFAYD VQQDEw02OWMyYzk1Ni1hOWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxdfdzrUUFBwn+SHzvk0cW+QYRFy0DzwlbtpAtN4pIESnxfO2czOL/WErKRa3 VMz+ZoO1byhUmLDjsWdSRuDlhJWywJBDBweJCSxu2jPGgd+Lqc9SOFjZiju0RTQU bDBdbZM6S/QAPCXvWOhd4QwfQHyeoNC7/Z1sBa5olBpSS4g1wh28DohdZleiQz5V lXmNbPFGO0dh5MXktO6AKvsG67GNAHTjSSnAlvm5Vrj/siy/vsVjekbkOa9zRAsG WpBAkahh29Zt7E99OoDbkSeuqfJfXBiQsh6vLdViSbC2xgYQai6rZFqFXcxLR3tU V/2MWrmWqv8QKPblW5jY6IQuSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH8OIQSD UJEw0zZb1XBFQpyuUPGPMB8GA1UdIwQYMBaAFCLH7DzZ7UxQ6JShG81w0DEM1fhZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzIyNS9DOTQ0N0ZGMEJF RjkxMUVGQkNGNjg5NDRDNEY5QUUwMi9Jc2ZzUE5udFRGRG9sS0VielhEUU1RelYt RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lzZnNQTm50VEZEb2xLRWJ6WERRTVF6Vi1Gay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzIyNS9DOTQ0N0ZGMEJFRjkxMUVGQkNGNjg5NDRDNEY5QUUwMi9Jc2ZzUE5udFRG RG9sS0VielhEUU1RelYtRmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOXJWdliGJy6xlPdr2tYzxsZ2P3BC4qafDy8DxiODmoHVEycByaj8g+/ot6Y4 oD23qJjVd9dOFhE6h9h+FkS5rKPVbNKOZJZcNT1OX90l/XcUfR7NcxMA2vaqU7GQ KNtbPI8Qbtv+ztw/o3/MGS8vAczQlvfjQZImHc9ws/wwA9m8FrINBgU1Y5gpwr8Y 2pV+UHo19nbRAgHcr0O1W5EXYaOinV0Tg4ZeYF5FtGqWdsHvkcQmS1oMH0lIXfAM jElJA3z1DU6W0VRL9lLiDd0+unxtcMnOvV/lgq9rnfXRkS8MWgpMGKwLxffEwHwq yPoEEJPDS29OrueaLIzplCfNPQ== -----END CERTIFICATE-----Generated at Thu Mar 26 14:30:46 2026 by rpki-client