$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.mft File: Ikchh2oR4tOkuYshvIT3jmT-yEY.mft (raw, json) Hash identifier: pJ1shBKAFE0QOrMju6m1cfUbqXiga1czSOZKFIklrpE= Subject key identifier: B0:5D:80:8D:85:43:9C:C6:E5:FC:0A:E7:BC:C4:28:E5:1D:B6:1F:8B Authority key identifier: 22:47:21:87:6A:11:E2:D3:A4:B9:8B:21:BC:84:F7:8E:64:FE:C8:46 Certificate issuer: /CN=A91CEE6D/serialNumber=224721876A11E2D3A4B98B21BC84F78E64FEC846 Certificate serial: 57 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ikchh2oR4tOkuYshvIT3jmT-yEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.mft Manifest number: 55 Signing time: Tue 03 Mar 2026 07:48:40 +0000 Manifest this update: Tue 03 Mar 2026 07:48:39 +0000 Manifest next update: Tue 10 Mar 2026 07:48:39 +0000 Files and hashes: 1: Ikchh2oR4tOkuYshvIT3jmT-yEY.crl (hash: +6u7or+UnpIw4YyBY/QhvbTw8/TuWr9Cb5TvXA39cVo=) 2: 09F2A296A02E11F08BC71221C4F9AE02.roa (hash: SOUc2IXOvl/L1pMPWSJBgclEArQVhHSL8F26Jssjy60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.crl rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ikchh2oR4tOkuYshvIT3jmT-yEY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 07:48:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEE6D, serialNumber=224721876A11E2D3A4B98B21BC84F78E64FEC846 Validity Not Before: Mar 3 07:48:39 2026 GMT Not After : Mar 10 07:48:39 2026 GMT Subject: CN=69a69258-e5e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3f:0a:30:1f:91:12:73:9c:c0:59:fe:6f:0c: e4:d5:87:b5:d0:eb:98:c2:8f:0c:8f:2a:00:44:cc: 71:1a:87:2e:6f:90:4a:4a:d8:21:b6:71:25:24:6b: c4:2d:f3:37:1f:88:0a:5d:6c:3d:fd:14:f8:40:43: a6:24:b7:1f:2c:69:30:22:68:20:03:2d:da:26:d8: eb:16:8e:b1:be:9a:6c:cf:49:d8:8b:54:72:a3:40: 1c:9b:4b:4c:64:b7:2d:99:dc:69:34:90:44:ab:e5: 57:96:e7:da:bc:e1:fc:70:85:1e:63:b9:c6:c9:bc: fb:81:a6:b7:8c:da:c6:ac:1d:ae:36:f6:66:8b:ae: dc:20:5f:c4:a3:de:c1:b0:e9:4d:c9:f6:03:d5:b6: 7a:ba:aa:05:b0:68:34:7b:95:b7:c5:36:b0:02:b9: 45:49:fc:b2:7f:5a:c1:73:92:4f:01:0d:e1:d2:ad: 40:64:d7:56:cd:c5:a2:00:a5:00:0b:f0:3c:c2:22: 13:9e:92:f8:7a:63:3f:e0:4c:8c:ae:3b:f4:c2:69: 5f:b6:43:f7:21:ba:a4:c0:0d:8e:5e:ac:50:d4:eb: da:51:57:91:57:6e:44:99:60:0b:ee:6e:c2:fc:1a: bd:a0:49:79:84:d2:d4:54:21:8f:45:02:70:a4:2c: d3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:5D:80:8D:85:43:9C:C6:E5:FC:0A:E7:BC:C4:28:E5:1D:B6:1F:8B X509v3 Authority Key Identifier: keyid:22:47:21:87:6A:11:E2:D3:A4:B9:8B:21:BC:84:F7:8E:64:FE:C8:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ikchh2oR4tOkuYshvIT3jmT-yEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:6d:a1:69:3d:40:fc:29:4d:a1:48:8c:c9:2f:0b:28:1e:c3: 5a:87:4b:8e:4b:44:31:f8:8a:c4:b6:70:6e:21:ee:54:d9:03: 8f:a5:da:57:99:3c:52:05:75:9b:ab:fe:c6:cb:b4:ab:6f:b9: c9:0a:4c:c0:cd:a9:5b:21:30:cc:70:c6:22:c4:4d:6e:d6:a3: 14:78:88:10:22:f2:30:2d:8d:7b:7d:92:a7:61:3b:ce:99:92: a5:eb:04:79:62:ac:b3:bd:59:99:6d:04:4f:45:f5:ab:4a:c4: 71:b8:77:c6:b3:d7:ab:6b:9c:cc:1a:59:32:c3:d2:df:ae:47: 86:41:bc:95:05:8d:a9:3c:75:bc:d3:75:95:4b:a7:63:1a:87: 33:f3:72:e6:c7:f9:08:73:7d:64:fb:79:ac:fd:45:50:f1:99: 88:10:89:1d:2b:b1:a4:c8:7b:74:fb:a6:38:49:2a:b4:71:78: e2:34:fb:0a:38:d7:78:a2:b4:11:f6:ac:05:46:81:2f:2b:25: 2a:91:de:ea:e9:b4:af:22:38:68:ac:1f:f9:a0:83:68:91:78: d2:99:d4:ff:1a:cf:b5:2a:f4:f4:f2:51:91:aa:fb:6d:01:cd: 11:9f:40:7b:b0:de:b9:0d:b9:e0:fe:2b:25:93:d3:ef:62:b2: d8:e0:42:cf -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RUU2RDExMC8GA1UEBRMoMjI0NzIxODc2QTExRTJEM0E0Qjk4QjIxQkM4NEY3OEU2 NEZFQzg0NjAeFw0yNjAzMDMwNzQ4MzlaFw0yNjAzMTAwNzQ4MzlaMBgxFjAUBgNV BAMTDTY5YTY5MjU4LWU1ZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtPwowH5ESc5zAWf5vDOTVh7XQ65jCjwyPKgBEzHEahy5vkEpK2CG2cSUka8Qt 8zcfiApdbD39FPhAQ6Yktx8saTAiaCADLdom2OsWjrG+mmzPSdiLVHKjQBybS0xk ty2Z3Gk0kESr5VeW59q84fxwhR5jucbJvPuBpreM2sasHa429maLrtwgX8Sj3sGw 6U3J9gPVtnq6qgWwaDR7lbfFNrACuUVJ/LJ/WsFzkk8BDeHSrUBk11bNxaIApQAL 8DzCIhOekvh6Yz/gTIyuO/TCaV+2Q/chuqTADY5erFDU69pRV5FXbkSZYAvubsL8 Gr2gSXmE0tRUIY9FAnCkLNN1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUsF2AjYVD nMbl/ArnvMQo5R22H4swHwYDVR0jBBgwFoAUIkchh2oR4tOkuYshvIT3jmT+yEYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNFRTZELzUxMTEwQUZFOTc2 NTExRjA5MjNBNjcwQ0M0RjlBRTAyL0lrY2hoMm9SNHRPa3VZc2h2SVQzam1ULXlF WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSWtjaGgyb1I0dE9rdVlzaHZJVDNqbVQteUVZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNF RTZELzUxMTEwQUZFOTc2NTExRjA5MjNBNjcwQ0M0RjlBRTAyL0lrY2hoMm9SNHRP a3VZc2h2SVQzam1ULXlFWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCpbaFpPUD8KU2hSIzJLwsoHsNah0uOS0Qx+IrEtnBuIe5U2QOPpdpXmTxSBXWb q/7Gy7Srb7nJCkzAzalbITDMcMYixE1u1qMUeIgQIvIwLY17fZKnYTvOmZKl6wR5 YqyzvVmZbQRPRfWrSsRxuHfGs9era5zMGlkyw9LfrkeGQbyVBY2pPHW803WVS6dj Gocz83Lmx/kIc31k+3ms/UVQ8ZmIEIkdK7GkyHt0+6Y4SSq0cXjiNPsKONd4orQR 9qwFRoEvKyUqkd7q6bSvIjhorB/5oINokXjSmdT/Gs+1KvT08lGRqvttAc0Rn0B7 sN65Dbng/islk9PvYrLY4ELP -----END CERTIFICATE-----Generated at Wed Mar 4 08:38:28 2026 by rpki-client