$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft File: iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft (raw, json) Hash identifier: mc0nw0O8WQjATuvHeQaq3ddjPH4Mpa2ApLWfOFBChiI= Subject key identifier: A3:66:E2:1F:DB:85:BD:36:22:EA:B6:AB:3B:8C:F8:A7:56:85:20:D5 Authority key identifier: 89:78:4D:6D:93:8B:05:CC:3B:7B:66:6E:5E:7A:EE:92:23:DE:4D:70 Certificate issuer: /CN=A91D8185/serialNumber=89784D6D938B05CC3B7B666E5E7AEE9223DE4D70 Certificate serial: 7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXhNbZOLBcw7e2ZuXnrukiPeTXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft Manifest number: 77 Signing time: Sun 05 Apr 2026 07:10:44 +0000 Manifest this update: Sun 05 Apr 2026 07:10:44 +0000 Manifest next update: Sun 12 Apr 2026 07:10:44 +0000 Files and hashes: 1: iXhNbZOLBcw7e2ZuXnrukiPeTXA.crl (hash: nTflb0KlkqvOjSliPlqZ4pCA7OyI+v55sznzi3Yflk0=) 2: CC2C3CB684AC11F0B7B8977DC4F9AE02.roa (hash: MctOJZfpNmGzytE5FJJXm650+JtZjVtwencqZk15AMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.crl rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXhNbZOLBcw7e2ZuXnrukiPeTXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 07:10:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 124 (0x7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8185, serialNumber=89784D6D938B05CC3B7B666E5E7AEE9223DE4D70 Validity Not Before: Apr 5 07:10:44 2026 GMT Not After : Apr 12 07:10:44 2026 GMT Subject: CN=69d20af4-c86b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bf:fb:b1:da:b7:1c:1e:6f:73:bd:dc:e5:a9: cb:83:ae:ba:ea:68:66:70:ce:08:d9:b9:a0:07:14: 0a:04:38:e0:68:78:e7:10:d0:64:66:b2:cf:54:f7: 07:56:56:67:67:74:ba:e4:61:f5:be:52:ee:b1:9a: 71:e8:54:a0:c2:74:87:c7:3d:69:b6:af:8b:cf:0a: 17:d0:55:cc:c9:de:ca:a4:26:4a:99:f9:18:c5:92: 1c:09:cd:a9:a8:f4:32:95:72:7d:2d:70:32:a9:6c: 4c:7c:d8:e6:fb:64:db:6c:b1:28:97:6b:5f:32:99: 15:9e:7a:41:00:5a:ff:cd:c3:19:4e:04:6a:2a:9d: 70:9f:c3:89:03:fc:22:d2:0b:2b:fd:52:27:f5:27: 7a:88:d5:14:5b:b8:5e:c7:c3:50:d2:6b:22:96:a4: 3c:c3:54:ff:f4:61:c4:18:f0:d0:95:91:86:76:22: 0e:ef:4f:98:62:2a:65:a9:d1:a1:e5:ed:1f:37:1b: 94:ad:08:ed:6e:e8:1d:13:7c:b7:a2:83:16:53:bc: 9a:29:a9:62:87:40:a7:e1:67:d9:e5:79:87:69:f3: eb:15:51:58:cc:94:3d:06:f1:84:77:c6:b8:27:83: 35:6a:2c:2f:7c:49:d1:44:fc:80:f5:78:94:ea:7a: ec:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:66:E2:1F:DB:85:BD:36:22:EA:B6:AB:3B:8C:F8:A7:56:85:20:D5 X509v3 Authority Key Identifier: keyid:89:78:4D:6D:93:8B:05:CC:3B:7B:66:6E:5E:7A:EE:92:23:DE:4D:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXhNbZOLBcw7e2ZuXnrukiPeTXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:c8:26:95:b2:27:74:83:ef:92:02:b8:15:85:b7:ff:0b:6f: 0c:2b:da:db:48:17:d8:c0:f3:c1:c5:80:69:c2:fc:89:69:5d: e4:8f:48:40:79:77:9d:5d:ed:c9:08:b3:22:db:46:e8:90:32: 3d:1a:cb:2b:fc:83:73:c9:e3:59:78:26:a2:d5:7e:a0:e4:7f: 9f:23:ee:5d:52:a7:ed:4b:fb:95:32:42:09:2e:0b:9c:02:26: 40:18:28:1d:f1:af:a9:37:fe:57:87:de:46:86:ae:f4:ae:98: 33:5c:50:f4:3c:54:92:af:f5:a8:33:c0:2e:6c:10:b4:69:28: 2f:9f:1f:38:de:86:a1:f1:f0:54:9b:e3:68:e2:7e:6c:97:9c: 3f:ca:bf:54:8e:0a:1a:4e:13:09:81:9a:e9:a2:de:e0:8c:71: cf:09:7f:cc:43:b8:99:8a:82:69:51:2d:9a:2d:c6:d7:0f:7a: 24:6b:e3:c9:1d:1d:5c:84:09:fb:f7:bd:4b:22:30:e8:f3:73: e2:d1:42:7c:45:e8:cc:a0:0d:8e:de:8c:25:42:16:b6:83:59: ba:be:2e:c6:83:85:ec:38:08:ac:1b:d5:8c:04:0e:ab:1b:6b: e6:e6:41:dd:40:87:b1:d7:de:74:3a:ce:2b:62:e6:26:e6:5f: e5:31:4a:2f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE ODE4NTExMC8GA1UEBRMoODk3ODRENkQ5MzhCMDVDQzNCN0I2NjZFNUU3QUVFOTIy M0RFNEQ3MDAeFw0yNjA0MDUwNzEwNDRaFw0yNjA0MTIwNzEwNDRaMBgxFjAUBgNV BAMTDTY5ZDIwYWY0LWM4NmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9v/ux2rccHm9zvdzlqcuDrrrqaGZwzgjZuaAHFAoEOOBoeOcQ0GRmss9U9wdW VmdndLrkYfW+Uu6xmnHoVKDCdIfHPWm2r4vPChfQVczJ3sqkJkqZ+RjFkhwJzamo 9DKVcn0tcDKpbEx82Ob7ZNtssSiXa18ymRWeekEAWv/NwxlOBGoqnXCfw4kD/CLS Cyv9Uif1J3qI1RRbuF7Hw1DSayKWpDzDVP/0YcQY8NCVkYZ2Ig7vT5hiKmWp0aHl 7R83G5StCO1u6B0TfLeigxZTvJopqWKHQKfhZ9nleYdp8+sVUVjMlD0G8YR3xrgn gzVqLC98SdFE/ID1eJTqeuy7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUo2biH9uF vTYi6rarO4z4p1aFINUwHwYDVR0jBBgwFoAUiXhNbZOLBcw7e2ZuXnrukiPeTXAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4MTg1Lzg1MDExNTMyODRB QzExRjA4RDNBQjk3OUM0RjlBRTAyL2lYaE5iWk9MQmN3N2UyWnVYbnJ1a2lQZVRY QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaVhoTmJaT0xCY3c3ZTJadVhucnVraVBlVFhBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 MTg1Lzg1MDExNTMyODRBQzExRjA4RDNBQjk3OUM0RjlBRTAyL2lYaE5iWk9MQmN3 N2UyWnVYbnJ1a2lQZVRYQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBwyCaVsid0g++SArgVhbf/C28MK9rbSBfYwPPBxYBpwvyJaV3kj0hAeXedXe3J CLMi20bokDI9Gssr/INzyeNZeCai1X6g5H+fI+5dUqftS/uVMkIJLgucAiZAGCgd 8a+pN/5Xh95Ghq70rpgzXFD0PFSSr/WoM8AubBC0aSgvnx843oah8fBUm+No4n5s l5w/yr9UjgoaThMJgZrpot7gjHHPCX/MQ7iZioJpUS2aLcbXD3oka+PJHR1chAn7 971LIjDo83Pi0UJ8RejMoA2O3owlQha2g1m6vi7Gg4XsOAisG9WMBA6rG2vm5kHd QIex1950Os4rYuYm5l/lMUov -----END CERTIFICATE-----Generated at Sun Apr 5 19:44:06 2026 by rpki-client