$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft File: rI34tAewexNnm3HFASus3eJQHnE.mft (raw, json) Hash identifier: YhhfYbe1dPr8B/2elNsBlKVFW6UI0VPUBsGQf/7jTjA= Subject key identifier: F4:62:EE:9E:31:14:83:F8:4D:23:C1:A8:05:5A:DD:7E:14:49:8E:3E Authority key identifier: AC:8D:F8:B4:07:B0:7B:13:67:9B:71:C5:01:2B:AC:DD:E2:50:1E:71 Certificate issuer: /CN=A91FC43D/serialNumber=AC8DF8B407B07B13679B71C5012BACDDE2501E71 Certificate serial: 2349 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rI34tAewexNnm3HFASus3eJQHnE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft Manifest number: 2337 Signing time: Tue 24 Mar 2026 15:46:16 +0000 Manifest this update: Tue 24 Mar 2026 15:46:15 +0000 Manifest next update: Tue 31 Mar 2026 15:46:15 +0000 Files and hashes: 1: rI34tAewexNnm3HFASus3eJQHnE.crl (hash: 2IXeyoPObZ1NnNkiy6LmSzXLWaBtALFmYoFFYqmD5Rk=) 2: 2D55F42CB0F611E5B464E359C4F9AE02.roa (hash: M/O1J1VLRBP8Yu48SR4HhSAZfmBAh2lLp+RQu6a6E8U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.crl rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rI34tAewexNnm3HFASus3eJQHnE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:46:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9033 (0x2349) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC43D, serialNumber=AC8DF8B407B07B13679B71C5012BACDDE2501E71 Validity Not Before: Mar 24 15:46:15 2026 GMT Not After : Mar 31 15:46:15 2026 GMT Subject: CN=69c2b1c8-3854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:7c:18:40:92:9d:45:84:24:30:34:7c:2c:2c: a7:a4:ad:31:73:ee:96:b1:07:9d:20:3a:b1:d0:09: 7d:db:d0:49:a4:3f:a1:fe:d7:40:a6:c2:d5:d8:61: ea:0e:ff:33:6f:cc:37:ad:e1:50:c6:95:47:16:33: 07:90:92:2a:1e:b8:c6:ab:d2:75:d1:c9:52:fb:6f: 8d:b7:0c:f2:5b:19:d7:b9:e7:39:e2:b0:13:a5:d7: fb:ae:b5:2c:09:9d:f7:63:20:3f:66:08:b5:21:18: 50:4a:6c:89:95:a6:81:a7:cd:c2:28:cb:44:56:b6: 27:e1:90:25:92:61:c4:4f:d3:51:2b:20:ba:fd:fd: c2:e3:df:31:29:8f:dd:f0:2c:bb:49:f9:e5:70:4d: fc:f6:2c:99:de:83:13:0f:40:9d:4c:42:31:bf:12: 6e:8a:0e:76:c5:1c:71:58:4a:62:1f:63:90:df:59: 0b:08:33:dc:af:c7:28:c5:d9:c7:d2:4f:7e:42:c0: 21:77:aa:18:a7:ae:25:09:ec:01:37:32:87:5e:15: 56:7c:9e:15:e1:44:68:87:d1:b1:0c:f1:d6:4b:45: 62:30:18:d1:56:a1:18:88:f1:0b:79:24:04:22:44: 18:7f:3e:0a:f0:f2:c7:94:67:8b:7e:29:29:b6:7a: ef:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:62:EE:9E:31:14:83:F8:4D:23:C1:A8:05:5A:DD:7E:14:49:8E:3E X509v3 Authority Key Identifier: keyid:AC:8D:F8:B4:07:B0:7B:13:67:9B:71:C5:01:2B:AC:DD:E2:50:1E:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rI34tAewexNnm3HFASus3eJQHnE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:e3:4a:3d:02:dc:5a:d1:97:f9:7a:31:2c:6b:a6:f8:c1:cf: 68:41:09:33:ff:1a:f2:75:dd:b5:c8:60:1c:5f:a8:cc:31:b1: 82:d9:85:e9:d7:e9:ca:c8:56:ee:e4:22:85:5a:2a:4b:8d:d0: f4:f7:5b:55:37:6d:e6:1d:df:37:bf:16:e6:3e:5f:1b:ad:96: e4:7f:a1:a9:e0:15:d7:28:db:5c:c9:3f:e0:46:33:10:5a:97: 62:5f:89:42:c0:43:99:c7:9d:3e:9e:c0:3c:c0:84:a5:77:c4: b5:3c:4c:81:74:a8:3b:2c:b7:4f:bf:22:f5:f0:13:e8:91:17: f8:33:90:2f:69:07:10:4a:91:b8:34:61:03:30:2c:a8:3d:7f: b6:b5:b3:2b:94:59:52:a0:d6:98:94:6c:ed:1c:f2:5a:98:ae: a5:46:80:58:59:70:d4:66:d3:74:02:34:a9:33:13:db:a9:a9: 02:21:06:a7:8c:92:5f:ac:55:42:f5:62:98:0f:ae:94:02:a0: cd:a0:41:d0:13:9d:21:df:a4:ea:ac:61:4b:5c:3e:d4:e8:22: 7e:55:23:55:10:cb:b0:27:07:d7:02:bb:0c:3d:c0:25:e7:f9: 57:ab:d5:11:7f:47:19:ac:eb:ca:ad:5d:ac:e3:1c:3b:86:b3: f7:b8:69:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICI0kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM0M0QxMTAvBgNVBAUTKEFDOERGOEI0MDdCMDdCMTM2NzlCNzFDNTAxMkJBQ0RE RTI1MDFFNzEwHhcNMjYwMzI0MTU0NjE1WhcNMjYwMzMxMTU0NjE1WjAYMRYwFAYD VQQDEw02OWMyYjFjOC0zODU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAgnwYQJKdRYQkMDR8LCynpK0xc+6WsQedIDqx0Al929BJpD+h/tdApsLV2GHq Dv8zb8w3reFQxpVHFjMHkJIqHrjGq9J10clS+2+NtwzyWxnXuec54rATpdf7rrUs CZ33YyA/Zgi1IRhQSmyJlaaBp83CKMtEVrYn4ZAlkmHET9NRKyC6/f3C498xKY/d 8Cy7SfnlcE389iyZ3oMTD0CdTEIxvxJuig52xRxxWEpiH2OQ31kLCDPcr8coxdnH 0k9+QsAhd6oYp64lCewBNzKHXhVWfJ4V4URoh9GxDPHWS0ViMBjRVqEYiPELeSQE IkQYfz4K8PLHlGeLfikptnrv8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPRi7p4x FIP4TSPBqAVa3X4USY4+MB8GA1UdIwQYMBaAFKyN+LQHsHsTZ5txxQErrN3iUB5x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzQzRC9FREIyOEU3RUE0 ODAxMUU1ODMzNzg4ODZDNEY5QUUwMi9ySTM0dEFld2V4Tm5tM0hGQVN1czNlSlFI bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JJMzR0QWV3ZXhObm0zSEZBU3VzM2VKUUhuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzQzRC9FREIyOEU3RUE0ODAxMUU1ODMzNzg4ODZDNEY5QUUwMi9ySTM0dEFld2V4 Tm5tM0hGQVN1czNlSlFIbkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAp+NKPQLcWtGX+XoxLGum+MHPaEEJM/8a8nXdtchgHF+ozDGxgtmF6dfpyshW 7uQihVoqS43Q9PdbVTdt5h3fN78W5j5fG62W5H+hqeAV1yjbXMk/4EYzEFqXYl+J QsBDmcedPp7APMCEpXfEtTxMgXSoOyy3T78i9fAT6JEX+DOQL2kHEEqRuDRhAzAs qD1/trWzK5RZUqDWmJRs7RzyWpiupUaAWFlw1GbTdAI0qTMT26mpAiEGp4ySX6xV QvVimA+ulAKgzaBB0BOdId+k6qxhS1w+1OgiflUjVRDLsCcH1wK7DD3AJef5V6vV EX9HGazryq1drOMcO4az97hpMQ== -----END CERTIFICATE-----Generated at Thu Mar 26 00:54:41 2026 by rpki-client