$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft File: IbLqdC_w7568zvOZh5Dj9bCNa2M.mft (raw, json) Hash identifier: MKpZu7H2Qzz746LOITUi3qkkOgxsJxsdvdvgU5Lu0wc= Subject key identifier: E0:C0:72:2D:DB:D7:5C:E2:EA:D8:95:D2:36:5E:EA:17:F0:A2:BB:3E Authority key identifier: 21:B2:EA:74:2F:F0:EF:9E:BC:CE:F3:99:87:90:E3:F5:B0:8D:6B:63 Certificate issuer: /CN=A91B6172/serialNumber=21B2EA742FF0EF9EBCCEF3998790E3F5B08D6B63 Certificate serial: 0285 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft Manifest number: 0271 Signing time: Sun 29 Mar 2026 01:44:52 +0000 Manifest this update: Sun 29 Mar 2026 01:44:51 +0000 Manifest next update: Sun 05 Apr 2026 01:44:51 +0000 Files and hashes: 1: IbLqdC_w7568zvOZh5Dj9bCNa2M.crl (hash: uOaAYyvuh13NYQ5rxuRf+OYtIZssrHAOGrZJcyF+s58=) 2: ABDDEF28722F11EDA987AB75C4F9AE02.roa (hash: A7VcLCIr/FcjJaPxb9fLesSTHqaiYIJD5WUKTmg4W9Q=) 3: 08A71970723811EDB0BD0312C4F9AE02.roa (hash: FAsv4u0lMC/I3QYc2qVpW+Zdc9wxgYJL7HZ2HtRyWFE=) 4: AC80FFE2722F11EDA987AB75C4F9AE02.roa (hash: Pu3HSh7UAJem3mpQag6OD//H7HzHFiNKKj+xFn4gXBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.crl rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 01:44:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 645 (0x285) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6172, serialNumber=21B2EA742FF0EF9EBCCEF3998790E3F5B08D6B63 Validity Not Before: Mar 29 01:44:51 2026 GMT Not After : Apr 5 01:44:51 2026 GMT Subject: CN=69c88414-a503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:39:31:3b:9a:97:8f:a5:f0:9f:7d:a9:0a:d1: d6:95:86:be:13:41:7c:03:8d:54:6f:00:35:b8:dd: 30:6d:f6:bd:e9:0e:14:cf:1c:97:c1:4b:07:0f:b8: 82:74:8a:68:f3:a6:36:b7:a4:9e:61:23:32:0d:b6: d6:4d:05:0b:c5:d2:3b:b9:7c:e2:3f:29:cb:7a:8c: 58:d4:94:dd:6e:bc:0a:e3:5e:24:95:17:00:d7:90: 6d:74:48:fc:43:82:81:c5:cb:43:62:8c:eb:14:fc: 1f:49:a4:51:3e:57:68:36:07:24:c0:51:13:d5:7e: f3:cc:c7:11:e3:92:71:d1:ea:70:18:6a:b0:24:94: 74:c9:f4:a8:d0:f5:24:55:cc:ed:8e:83:a7:f5:ef: 9c:48:79:a7:eb:b9:06:54:46:98:f1:93:36:0e:3b: 93:a7:1e:52:17:fa:ab:b8:3e:e2:57:ea:f1:45:73: 18:99:f6:35:d9:6d:f0:34:98:cd:30:16:f7:54:75: 1f:f5:64:cc:fe:01:41:9b:f0:d1:bf:25:f7:91:1c: 94:6e:4e:2c:92:a6:76:f7:6a:0d:a8:1b:f9:81:6d: 21:ac:41:40:69:9d:38:cd:d9:66:fe:cb:e5:68:ef: 28:57:fe:75:32:46:1f:ce:dc:e6:54:cc:82:9d:83: 3c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:C0:72:2D:DB:D7:5C:E2:EA:D8:95:D2:36:5E:EA:17:F0:A2:BB:3E X509v3 Authority Key Identifier: keyid:21:B2:EA:74:2F:F0:EF:9E:BC:CE:F3:99:87:90:E3:F5:B0:8D:6B:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:b4:21:11:05:91:69:2f:69:aa:12:97:1b:3c:45:67:57:e2: 88:a4:76:a3:56:6f:c5:b6:e9:47:1f:ca:a0:a7:1d:ac:f9:04: 2e:28:9d:63:1a:ef:9e:5c:e3:57:a6:8a:cb:e6:59:64:95:34: 68:56:0e:e6:b5:16:f3:62:2e:a6:41:4b:20:21:15:2e:25:80: 57:9a:ab:23:46:1c:96:43:4b:bf:6b:6f:c9:22:1e:9e:c3:82: 62:3a:08:3b:66:dc:91:3f:01:8c:cd:7d:3a:11:63:94:b6:56: 2b:cd:ba:55:a1:ea:26:f9:0e:f7:93:51:fc:0d:d0:69:31:96: a5:19:ae:43:64:36:38:7a:e0:a7:48:08:43:b1:0c:5e:de:93: 95:79:dc:e3:94:58:58:b7:5c:d8:59:a5:56:d1:e8:1d:8e:80: dc:06:33:28:ac:74:e1:9e:fa:0e:6b:a6:c7:ae:42:dd:5a:63: 8c:0c:29:28:8f:b7:9c:73:7a:af:01:1f:2f:c1:a3:13:96:1b: b9:21:ff:7a:81:f1:8d:44:06:32:6b:f8:99:1f:b0:d0:ab:98: 68:e4:94:ed:1e:20:09:9c:62:b8:69:9a:da:35:3a:0d:4c:cf: 24:50:56:40:34:57:d2:23:28:75:bc:62:8d:2a:78:d9:ce:3a: 1f:06:83:ed -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYxNzIxMTAvBgNVBAUTKDIxQjJFQTc0MkZGMEVGOUVCQ0NFRjM5OTg3OTBFM0Y1 QjA4RDZCNjMwHhcNMjYwMzI5MDE0NDUxWhcNMjYwNDA1MDE0NDUxWjAYMRYwFAYD VQQDEw02OWM4ODQxNC1hNTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuTkxO5qXj6Xwn32pCtHWlYa+E0F8A41UbwA1uN0wbfa96Q4UzxyXwUsHD7iC dIpo86Y2t6SeYSMyDbbWTQULxdI7uXziPynLeoxY1JTdbrwK414klRcA15BtdEj8 Q4KBxctDYozrFPwfSaRRPldoNgckwFET1X7zzMcR45Jx0epwGGqwJJR0yfSo0PUk VcztjoOn9e+cSHmn67kGVEaY8ZM2DjuTpx5SF/qruD7iV+rxRXMYmfY12W3wNJjN MBb3VHUf9WTM/gFBm/DRvyX3kRyUbk4skqZ292oNqBv5gW0hrEFAaZ04zdlm/svl aO8oV/51MkYfztzmVMyCnYM8GQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFODAci3b 11zi6tiV0jZe6hfwors+MB8GA1UdIwQYMBaAFCGy6nQv8O+evM7zmYeQ4/WwjWtj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjE3Mi9CQTU0QzEzNDcy MkIxMUVEOTdENzNDNUFDNEY5QUUwMi9JYkxxZENfdzc1Njh6dk9aaDVEajliQ05h Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0liTHFkQ193NzU2OHp2T1poNURqOWJDTmEyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjE3Mi9CQTU0QzEzNDcyMkIxMUVEOTdENzNDNUFDNEY5QUUwMi9JYkxxZENfdzc1 Njh6dk9aaDVEajliQ05hMk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYbQhEQWRaS9pqhKXGzxFZ1fiiKR2o1ZvxbbpRx/KoKcdrPkELiidYxrvnlzj V6aKy+ZZZJU0aFYO5rUW82IupkFLICEVLiWAV5qrI0YclkNLv2tvySIensOCYjoI O2bckT8BjM19OhFjlLZWK826VaHqJvkO95NR/A3QaTGWpRmuQ2Q2OHrgp0gIQ7EM Xt6TlXnc45RYWLdc2FmlVtHoHY6A3AYzKKx04Z76Dmumx65C3VpjjAwpKI+3nHN6 rwEfL8GjE5YbuSH/eoHxjUQGMmv4mR+w0KuYaOSU7R4gCZxiuGma2jU6DUzPJFBW QDRX0iModbxijSp42c46HwaD7Q== -----END CERTIFICATE-----Generated at Sun Mar 29 21:27:46 2026 by rpki-client