$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.mft File: iUgJYwlWkkOCzDnUYPpHZLAXWTQ.mft (raw, json) Hash identifier: +unMiwRuS9YxNmp5ZT8AmVFZvbCzHPKu6tiej1u2LWE= Subject key identifier: EB:69:05:CF:1A:BB:C9:6E:0D:EE:2A:EA:97:CD:75:B0:7D:05:45:DF Authority key identifier: 89:48:09:63:09:56:92:43:82:CC:39:D4:60:FA:47:64:B0:17:59:34 Certificate issuer: /CN=A91F2046/serialNumber=894809630956924382CC39D460FA4764B0175934 Certificate serial: 0C99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.mft Manifest number: 0C8F Signing time: Tue 24 Mar 2026 18:23:03 +0000 Manifest this update: Tue 24 Mar 2026 18:23:03 +0000 Manifest next update: Tue 31 Mar 2026 18:23:03 +0000 Files and hashes: 1: iUgJYwlWkkOCzDnUYPpHZLAXWTQ.crl (hash: Hx1i5kMiL948G0Db8CRcjhHqskcN/uzoQFkuNw3xMDY=) 2: 0D2573FA173E11EA947B2976C4F9AE02.roa (hash: Sez/a2sgGSbWwvJeQPZUS5uIi1mmZfqNVL6dsISb/6o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.crl rsync://rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:23:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3225 (0xc99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2046, serialNumber=894809630956924382CC39D460FA4764B0175934 Validity Not Before: Mar 24 18:23:03 2026 GMT Not After : Mar 31 18:23:03 2026 GMT Subject: CN=69c2d687-4039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f2:08:ed:d8:c7:3b:73:7e:d8:db:37:fc:03: 9c:49:86:2f:da:66:f0:81:78:d4:49:d5:25:9a:d8: cd:58:e0:14:6d:44:69:15:2a:da:69:cf:d6:e9:04: c0:86:16:61:33:7e:d5:37:96:15:71:b2:29:0d:d3: 80:3c:0b:18:68:83:bb:a2:85:6d:67:a6:4d:29:ae: 90:13:9a:3b:25:6c:ee:71:d7:0e:3b:21:75:90:18: 1d:18:1f:fa:07:f3:07:03:04:69:5e:03:2e:2a:c3: 2e:9d:74:7d:bb:67:f1:94:2d:17:70:ee:15:f8:50: fb:27:39:df:3d:3c:fe:4d:f4:4c:e4:68:16:93:2f: 01:dc:32:40:16:85:0f:b4:94:4a:59:d5:13:96:1b: 61:b2:c7:93:3c:6f:ed:84:02:03:ef:cd:ac:c0:ac: 04:bc:cf:96:e7:d3:20:94:e9:8b:24:ba:c7:44:42: 03:f5:3a:57:c9:ca:29:b1:bd:64:c2:f8:a1:07:6e: 5b:b5:ad:05:f9:19:87:b6:c1:51:c6:8c:dd:41:2f: 63:16:12:99:c7:e8:dd:60:b3:10:d9:38:35:1c:b9: 46:2d:7c:2d:5d:bd:12:d5:6f:d6:ec:4a:72:b8:0f: b5:d5:5b:b5:77:54:fe:8c:f5:02:33:fc:19:90:61: 79:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:69:05:CF:1A:BB:C9:6E:0D:EE:2A:EA:97:CD:75:B0:7D:05:45:DF X509v3 Authority Key Identifier: keyid:89:48:09:63:09:56:92:43:82:CC:39:D4:60:FA:47:64:B0:17:59:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:ce:ef:1d:36:e1:04:a4:68:3a:cb:a2:02:86:cd:22:1d:43: b6:75:37:d4:d0:45:94:3c:96:23:4b:ec:65:88:17:c8:33:ba: d5:6c:83:84:34:5c:90:b8:a8:cc:c4:01:e4:e5:ce:ea:87:70: 96:7f:f4:c3:e9:5b:e4:34:75:c3:54:90:78:12:b5:61:e8:55: d6:e9:01:b3:e4:5f:d1:5a:1c:85:24:0a:cf:e0:a8:14:60:c4: 20:60:1e:18:21:04:59:7e:03:00:0c:8a:c4:53:94:51:06:c1: 55:05:3a:1f:57:f6:e6:2e:4e:9d:48:70:5f:23:66:21:07:b8: 60:03:ea:09:c7:f5:d2:c3:19:24:ea:35:ea:01:42:22:b0:3f: 71:27:5c:84:90:48:50:7e:47:39:a7:47:87:23:36:00:1c:d9: b1:86:e2:1e:c3:da:8d:11:fe:80:e3:46:3c:60:ce:aa:46:71: 76:0d:d5:38:fb:1a:37:5d:14:a8:5d:f4:35:78:25:97:df:17: 1f:ce:30:14:99:d2:21:f5:68:18:f4:1b:0d:7a:6c:52:1c:dc: e5:f7:0c:9b:a2:aa:6d:61:3d:f6:7e:c4:cb:ff:99:7e:ff:d9: 18:78:98:64:53:62:5d:4d:81:1f:d9:a8:32:90:a8:83:96:b8: f1:81:2e:56 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjIwNDYxMTAvBgNVBAUTKDg5NDgwOTYzMDk1NjkyNDM4MkNDMzlENDYwRkE0NzY0 QjAxNzU5MzQwHhcNMjYwMzI0MTgyMzAzWhcNMjYwMzMxMTgyMzAzWjAYMRYwFAYD VQQDEw02OWMyZDY4Ny00MDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAufII7djHO3N+2Ns3/AOcSYYv2mbwgXjUSdUlmtjNWOAUbURpFSraac/W6QTA hhZhM37VN5YVcbIpDdOAPAsYaIO7ooVtZ6ZNKa6QE5o7JWzucdcOOyF1kBgdGB/6 B/MHAwRpXgMuKsMunXR9u2fxlC0XcO4V+FD7JznfPTz+TfRM5GgWky8B3DJAFoUP tJRKWdUTlhthsseTPG/thAID782swKwEvM+W59MglOmLJLrHREID9TpXycopsb1k wvihB25bta0F+RmHtsFRxozdQS9jFhKZx+jdYLMQ2Tg1HLlGLXwtXb0S1W/W7Epy uA+11Vu1d1T+jPUCM/wZkGF5SwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOtpBc8a u8luDe4q6pfNdbB9BUXfMB8GA1UdIwQYMBaAFIlICWMJVpJDgsw51GD6R2SwF1k0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjA0Ni8zRkIwMkFFMjE0 RDUxMUVBODEyNjQwMERDNEY5QUUwMi9pVWdKWXdsV2trT0N6RG5VWVBwSFpMQVhX VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lVZ0pZd2xXa2tPQ3pEblVZUHBIWkxBWFdUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjA0Ni8zRkIwMkFFMjE0RDUxMUVBODEyNjQwMERDNEY5QUUwMi9pVWdKWXdsV2tr T0N6RG5VWVBwSFpMQVhXVFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABM7vHTbhBKRoOsuiAobNIh1DtnU31NBFlDyWI0vsZYgXyDO61WyDhDRckLio zMQB5OXO6odwln/0w+lb5DR1w1SQeBK1YehV1ukBs+Rf0VochSQKz+CoFGDEIGAe GCEEWX4DAAyKxFOUUQbBVQU6H1f25i5OnUhwXyNmIQe4YAPqCcf10sMZJOo16gFC IrA/cSdchJBIUH5HOadHhyM2ABzZsYbiHsPajRH+gONGPGDOqkZxdg3VOPsaN10U qF30NXgll98XH84wFJnSIfVoGPQbDXpsUhzc5fcMm6KqbWE99n7Ey/+Zfv/ZGHiY ZFNiXU2BH9moMpCog5a48YEuVg== -----END CERTIFICATE-----Generated at Thu Mar 26 06:08:59 2026 by rpki-client