$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft File: ijkUYMpvZEpYkR23ODRhhON40AU.mft (raw, json) Hash identifier: mxNXwXeusd82HY3Jq/XEKYOl5O2eS2+ymC3ec0AhGEg= Subject key identifier: A0:1A:CC:14:FF:48:03:E2:67:F7:17:87:E2:9F:FA:FE:D8:1F:ED:09 Authority key identifier: 8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05 Certificate issuer: /CN=A91CF7F6/serialNumber=8A391460CA6F644A58911DB738346184E378D005 Certificate serial: 03F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft Manifest number: 03D8 Signing time: Fri 13 Mar 2026 00:06:34 +0000 Manifest this update: Fri 13 Mar 2026 00:06:34 +0000 Manifest next update: Fri 20 Mar 2026 00:06:34 +0000 Files and hashes: 1: ijkUYMpvZEpYkR23ODRhhON40AU.crl (hash: oRhQakTOxhNLOVB5gzNYxynggA9ivRtNQ/6WcKDfIys=) 2: C09ED7E6804A11EDABB05C09C4F9AE02.roa (hash: s1eXFpPP1drLzWYFfSWX2mxgRfaTxGb5Di3eSFyUmzk=) 3: 16B9139A238311EEA2B7992CC4F9AE02.roa (hash: 3gy1qN11JcP8FRxi5dz6npPXSjCXwvC3iutXG65AMSI=) 4: 244CF0D8329D11EF9B0F1058C4F9AE02.roa (hash: RGbQplIoBoixh77E1ML8kaMqxyukkROuY8CpRD/mvKs=) 5: 12A549F8BFC111ECBF03EF63C4F9AE02.roa (hash: a/OjejWguoz8SOjUqilIOKY73TJSTeqh0jYpuVfKqTM=) 6: 446E8606745311EDBF95BB2CC4F9AE02.roa (hash: rOANBQKPsfQ6Tk+3BJxQVcGQ9b8/ioqyWVW5xCF9Omw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 00:06:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1017 (0x3f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF7F6, serialNumber=8A391460CA6F644A58911DB738346184E378D005 Validity Not Before: Mar 13 00:06:34 2026 GMT Not After : Mar 20 00:06:34 2026 GMT Subject: CN=69b3550a-808d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6b:fe:de:7d:03:bc:f6:1f:40:59:c1:2f:6b: 0d:d8:a0:e9:82:9a:59:cb:55:72:ec:40:4d:f8:f2: 5f:d9:b1:56:55:b5:ec:a7:4e:f1:d8:cf:50:a5:ff: 4b:45:47:59:73:86:6f:f9:c7:b1:4e:e3:d5:6f:d0: 8e:70:34:02:fb:cc:8a:89:77:63:3c:a6:91:41:36: 60:da:e5:2b:d4:75:d0:8a:22:f9:29:82:7a:d0:58: 0e:ae:a0:20:e8:12:25:6d:88:e9:f1:f9:03:8b:98: 60:be:dd:41:f9:c8:42:83:5d:4a:cc:b1:49:ac:5c: 7d:d1:ab:3e:a4:17:4f:a1:7c:e1:2b:e9:10:1e:fe: 89:c3:e3:3d:02:6c:d7:3a:3e:f4:7c:2c:02:0d:c3: 54:08:82:37:78:47:f4:a0:1f:db:27:fd:ea:7a:33: 1c:a5:61:a0:05:c2:32:6e:a6:d1:27:f8:6b:00:a8: b4:50:8e:81:76:37:95:0e:b3:95:e7:62:3d:cf:ec: 2f:36:09:61:79:73:01:70:f7:60:59:48:1b:9b:a5: 00:ea:ff:71:0a:8a:27:3b:f3:62:6f:37:e8:bc:c9: f0:21:e8:12:04:18:4d:a0:07:08:6a:be:8b:44:f1: 52:12:84:12:7e:60:38:09:ca:a6:f1:7f:79:4a:e7: 73:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:1A:CC:14:FF:48:03:E2:67:F7:17:87:E2:9F:FA:FE:D8:1F:ED:09 X509v3 Authority Key Identifier: keyid:8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:cd:0a:bc:71:64:b9:2b:67:33:bd:21:37:51:bf:a7:3c:76: 16:40:1e:f0:bb:14:92:99:e0:0f:61:c9:10:dc:a0:2e:b3:f1: 26:09:95:2b:2e:a4:40:e7:d2:6a:f3:68:97:cc:29:3a:d7:08: f0:b1:d7:88:51:c8:f3:63:fa:03:21:7f:97:77:3a:d6:17:80: 0f:75:7f:e4:5f:d7:89:09:90:9e:4f:4f:f1:b2:44:ef:73:6e: a3:27:39:67:57:e8:9a:f7:6d:6f:0d:ca:4a:62:fa:4c:92:5e: 78:4a:b4:88:2e:b6:12:2e:c7:a5:c3:2a:c3:c0:e4:04:00:71: 24:e6:57:50:a4:c8:52:ea:d3:20:81:3d:17:de:b0:a6:b6:6c: 5b:24:79:41:c0:bd:e1:47:25:34:9e:e4:4f:cf:e7:54:78:68: 41:ee:a2:75:d5:c7:13:f1:0b:c0:59:78:0c:c9:5d:1c:ba:d7: 84:2d:d0:57:d9:18:62:ae:7e:83:e4:bc:30:95:90:77:49:10: d5:ac:a8:20:72:3d:ac:cf:87:1b:28:3d:6e:32:e1:d4:f8:91: aa:fe:36:c0:10:e9:db:c4:9a:47:9d:39:35:6c:91:28:c9:10: 05:dc:6a:92:5c:3d:91:80:3d:d3:56:d6:18:ce:32:27:b3:ce: 06:23:ae:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA/kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y3RjYxMTAvBgNVBAUTKDhBMzkxNDYwQ0E2RjY0NEE1ODkxMURCNzM4MzQ2MTg0 RTM3OEQwMDUwHhcNMjYwMzEzMDAwNjM0WhcNMjYwMzIwMDAwNjM0WjAYMRYwFAYD VQQDEw02OWIzNTUwYS04MDhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs2v+3n0DvPYfQFnBL2sN2KDpgppZy1Vy7EBN+PJf2bFWVbXsp07x2M9Qpf9L RUdZc4Zv+cexTuPVb9COcDQC+8yKiXdjPKaRQTZg2uUr1HXQiiL5KYJ60FgOrqAg 6BIlbYjp8fkDi5hgvt1B+chCg11KzLFJrFx90as+pBdPoXzhK+kQHv6Jw+M9AmzX Oj70fCwCDcNUCII3eEf0oB/bJ/3qejMcpWGgBcIybqbRJ/hrAKi0UI6BdjeVDrOV 52I9z+wvNglheXMBcPdgWUgbm6UA6v9xCoonO/NibzfovMnwIegSBBhNoAcIar6L RPFSEoQSfmA4Ccqm8X95SudzpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKAazBT/ SAPiZ/cXh+Kf+v7YH+0JMB8GA1UdIwQYMBaAFIo5FGDKb2RKWJEdtzg0YYTjeNAF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjdGNi83ODI0RUJENEJG QkQxMUVDQjc4ODEyNURDNEY5QUUwMi9pamtVWU1wdlpFcFlrUjIzT0RSaGhPTjQw QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lqa1VZTXB2WkVwWWtSMjNPRFJoaE9ONDBBVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjdGNi83ODI0RUJENEJGQkQxMUVDQjc4ODEyNURDNEY5QUUwMi9pamtVWU1wdlpF cFlrUjIzT0RSaGhPTjQwQVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKs0KvHFkuStnM70hN1G/pzx2FkAe8LsUkpngD2HJENygLrPxJgmVKy6kQOfS avNol8wpOtcI8LHXiFHI82P6AyF/l3c61heAD3V/5F/XiQmQnk9P8bJE73Nuoyc5 Z1fomvdtbw3KSmL6TJJeeEq0iC62Ei7HpcMqw8DkBABxJOZXUKTIUurTIIE9F96w prZsWyR5QcC94UclNJ7kT8/nVHhoQe6iddXHE/ELwFl4DMldHLrXhC3QV9kYYq5+ g+S8MJWQd0kQ1ayoIHI9rM+HGyg9bjLh1PiRqv42wBDp28SaR505NWyRKMkQBdxq klw9kYA901bWGM4yJ7POBiOufA== -----END CERTIFICATE-----Generated at Fri Mar 13 09:27:44 2026 by rpki-client