$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft File: i0b6Eepu4jUJnkhDPIJJehl7nXw.mft (raw, json) Hash identifier: K7HWnNJoQooiyXR4oS27APAVSb0tzqUZT/PJ6uEfeuA= Subject key identifier: EF:90:E6:43:D0:52:3A:FB:4D:A2:A3:A9:A0:89:AD:87:6D:CA:05:95 Authority key identifier: 8B:46:FA:11:EA:6E:E2:35:09:9E:48:43:3C:82:49:7A:19:7B:9D:7C Certificate issuer: /CN=A91FB03A/serialNumber=8B46FA11EA6EE235099E48433C82497A197B9D7C Certificate serial: 02AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0b6Eepu4jUJnkhDPIJJehl7nXw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft Manifest number: 02A2 Signing time: Wed 25 Mar 2026 01:07:45 +0000 Manifest this update: Wed 25 Mar 2026 01:07:45 +0000 Manifest next update: Wed 01 Apr 2026 01:07:45 +0000 Files and hashes: 1: i0b6Eepu4jUJnkhDPIJJehl7nXw.crl (hash: YdGpI+1hL05wO04LZPZcJw1/40oeg/SJmr1i0A2vWCM=) 2: 0B3B85D63A1B11EDAE662B14C4F9AE02.roa (hash: 2DYUUwYe0W6JaKRaSDK/nTIVkC2tQtPbi07IA11TupM=) 3: 0BF33B7C3A1B11EDAE662B14C4F9AE02.roa (hash: kfwibtPkvWEnray3ziysa8GBq7c9TQV7u4P5QPWtP1Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.crl rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0b6Eepu4jUJnkhDPIJJehl7nXw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:07:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 686 (0x2ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB03A, serialNumber=8B46FA11EA6EE235099E48433C82497A197B9D7C Validity Not Before: Mar 25 01:07:45 2026 GMT Not After : Apr 1 01:07:45 2026 GMT Subject: CN=69c33561-4a56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9d:05:09:4f:f1:89:50:ce:24:d3:9c:e1:93: 7b:8e:dd:15:9b:82:dd:2e:3c:d8:08:cd:61:73:19: 6e:d4:27:28:2d:21:d9:b6:dc:db:e8:65:28:1e:b2: 01:29:e0:96:3c:83:ad:ea:db:68:ae:7a:d0:d4:f1: 81:bd:4c:64:79:ac:4b:e2:8f:c6:22:6b:d6:0a:73: a3:29:ed:a9:36:68:96:10:72:84:da:3d:2e:c9:fb: 1a:82:34:65:00:bd:d9:d5:ee:25:bb:96:02:1c:49: 60:7a:c9:0f:4e:d3:b5:f1:55:e0:50:a2:c0:67:ed: 0e:a2:e8:d4:0f:cc:48:07:cd:85:b3:64:b1:a8:1a: c6:63:20:43:1a:c6:66:77:0a:1e:e7:a9:ab:b6:6c: f4:33:39:dc:9e:e7:4b:7c:6f:8d:4d:f9:91:2c:7c: f4:33:7d:63:4a:2e:50:b9:a2:2d:47:78:b2:22:18: 7b:46:77:6a:ed:71:f0:ea:a3:b1:43:88:b0:c7:92: 76:fe:81:d1:7c:d0:d9:9f:00:a7:79:f0:50:9b:c2: 3d:c0:99:35:7f:47:72:57:69:99:4d:7c:bf:37:f5: 89:9d:3c:79:77:99:aa:b7:cd:0e:91:36:7b:14:a0: 8c:24:9b:29:39:01:9d:6c:0c:17:e6:c6:9f:9f:0c: ab:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:90:E6:43:D0:52:3A:FB:4D:A2:A3:A9:A0:89:AD:87:6D:CA:05:95 X509v3 Authority Key Identifier: keyid:8B:46:FA:11:EA:6E:E2:35:09:9E:48:43:3C:82:49:7A:19:7B:9D:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0b6Eepu4jUJnkhDPIJJehl7nXw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:dd:08:db:fc:29:ad:70:ea:34:f5:8c:05:89:c8:38:88:0f: 87:d5:bf:75:dc:60:41:5c:53:b9:e1:18:92:75:a7:92:0a:24: 84:f4:82:b4:c7:db:19:1a:f5:0d:6d:a9:ff:78:73:e0:6c:83: 65:d0:ab:bc:89:4b:bb:0d:6c:eb:5c:9c:a2:fa:58:42:4b:91: 48:8b:01:61:32:71:f1:05:e5:21:1c:f2:9d:1e:44:88:61:f8: af:58:75:d4:94:9b:81:ed:44:c8:f8:b7:c6:71:68:fe:fc:e8: 1b:49:08:c5:5b:79:11:c0:e2:6c:4f:bc:14:78:c5:55:b3:d2: ab:13:ef:cf:80:43:fb:9f:bd:05:ec:ca:1a:f0:02:d6:eb:a2: ec:60:5c:53:ec:bf:ec:7c:d8:7e:32:08:63:18:f5:af:1f:00: c0:46:6c:55:22:3f:61:58:04:6e:3e:bb:10:99:38:71:34:1a: c2:a2:14:ff:10:2f:96:7e:9e:52:f9:8d:c6:12:ed:1f:6a:c4: 03:b4:64:82:f8:06:c9:86:e5:7d:03:02:10:30:58:da:c5:f6: bf:13:fa:c1:ad:d1:78:75:21:16:19:b1:88:0b:2a:dd:00:7d: a9:81:f7:e0:fd:76:1b:44:72:51:d5:ec:f6:1f:5b:b8:d3:d1: 02:c8:cc:9b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAq4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkIwM0ExMTAvBgNVBAUTKDhCNDZGQTExRUE2RUUyMzUwOTlFNDg0MzNDODI0OTdB MTk3QjlEN0MwHhcNMjYwMzI1MDEwNzQ1WhcNMjYwNDAxMDEwNzQ1WjAYMRYwFAYD VQQDEw02OWMzMzU2MS00YTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtp0FCU/xiVDOJNOc4ZN7jt0Vm4LdLjzYCM1hcxlu1CcoLSHZttzb6GUoHrIB KeCWPIOt6ttornrQ1PGBvUxkeaxL4o/GImvWCnOjKe2pNmiWEHKE2j0uyfsagjRl AL3Z1e4lu5YCHElgeskPTtO18VXgUKLAZ+0OoujUD8xIB82Fs2SxqBrGYyBDGsZm dwoe56mrtmz0MzncnudLfG+NTfmRLHz0M31jSi5QuaItR3iyIhh7Rndq7XHw6qOx Q4iwx5J2/oHRfNDZnwCnefBQm8I9wJk1f0dyV2mZTXy/N/WJnTx5d5mqt80OkTZ7 FKCMJJspOQGdbAwX5safnwyrWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO+Q5kPQ Ujr7TaKjqaCJrYdtygWVMB8GA1UdIwQYMBaAFItG+hHqbuI1CZ5IQzyCSXoZe518 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjAzQS9ERkM2OEQ2NDNB MTYxMUVEOTE1MkJGMEVDNEY5QUUwMi9pMGI2RWVwdTRqVUpua2hEUElKSmVobDdu WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2kwYjZFZXB1NGpVSm5raERQSUpKZWhsN25Ydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjAzQS9ERkM2OEQ2NDNBMTYxMUVEOTE1MkJGMEVDNEY5QUUwMi9pMGI2RWVwdTRq VUpua2hEUElKSmVobDduWHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsd0I2/wprXDqNPWMBYnIOIgPh9W/ddxgQVxTueEYknWnkgokhPSCtMfbGRr1 DW2p/3hz4GyDZdCrvIlLuw1s61ycovpYQkuRSIsBYTJx8QXlIRzynR5EiGH4r1h1 1JSbge1EyPi3xnFo/vzoG0kIxVt5EcDibE+8FHjFVbPSqxPvz4BD+5+9BezKGvAC 1uui7GBcU+y/7HzYfjIIYxj1rx8AwEZsVSI/YVgEbj67EJk4cTQawqIU/xAvln6e UvmNxhLtH2rEA7RkgvgGyYblfQMCEDBY2sX2vxP6wa3ReHUhFhmxiAsq3QB9qYH3 4P12G0RyUdXs9h9buNPRAsjMmw== -----END CERTIFICATE-----Generated at Thu Mar 26 11:54:28 2026 by rpki-client