$ rpki-client -vvf rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft File: i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft (raw, json) Hash identifier: /GE3sqT6a0+uJ7065TtpdRN1TGESdciPiZFxIoBYiVQ= Subject key identifier: 64:52:EA:E6:77:73:11:E7:45:61:14:F1:C3:2A:71:2B:B7:0C:FB:E7 Authority key identifier: 8B:DA:8A:1F:E0:7B:46:C3:30:63:04:6A:72:5E:AB:85:64:2B:9C:2D Certificate issuer: /CN=A91D37E4/serialNumber=8BDA8A1FE07B46C33063046A725EAB85642B9C2D Certificate serial: 0806 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9qKH-B7RsMwYwRqcl6rhWQrnC0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft Manifest number: 07F7 Signing time: Thu 12 Mar 2026 20:50:29 +0000 Manifest this update: Thu 12 Mar 2026 20:50:29 +0000 Manifest next update: Thu 19 Mar 2026 20:50:29 +0000 Files and hashes: 1: i9qKH-B7RsMwYwRqcl6rhWQrnC0.crl (hash: AF/j3jXefISr4BLrr1DD8tX5EMXbC+9OVSuSnWSsESs=) 2: BD764EAE1D5B11EBAB008D19C4F9AE02.roa (hash: JZqHXQRGfZxF3NgJ2VE0gwCg4J3Ofdou+/uDHMJJLwg=) 3: D933655E23B511EBA7BDD50FC4F9AE02.roa (hash: D8eauO5Ji5HlCRuIfjUIlmK4L86PjKaAnDzrks9sonQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.crl rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9qKH-B7RsMwYwRqcl6rhWQrnC0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Mar 2026 20:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2054 (0x806) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D37E4, serialNumber=8BDA8A1FE07B46C33063046A725EAB85642B9C2D Validity Not Before: Mar 12 20:50:29 2026 GMT Not After : Mar 19 20:50:29 2026 GMT Subject: CN=69b32715-df08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:13:0e:ff:7f:62:ea:e8:0c:a1:2f:0a:cc:13: a5:9a:84:97:90:8b:1f:f1:b6:f7:02:eb:da:12:ae: f2:22:97:69:a2:b8:8b:15:a9:c7:82:d3:20:c1:99: 06:15:69:fb:bb:04:8c:2d:c9:53:63:76:d6:57:68: 29:69:81:b7:44:cd:ef:1c:e0:e2:ba:58:b4:83:68: 55:61:94:07:de:fb:76:fe:ef:a4:1e:9a:0a:f2:a5: ea:9c:c4:f5:ab:aa:80:a7:3c:c2:99:3c:bf:b2:7f: 41:3f:64:ca:90:95:45:b5:db:32:b2:fd:0b:b1:b3: 1d:69:87:32:ca:41:5b:92:9d:b5:8e:ae:3c:b8:ed: 20:01:e0:2a:ab:ae:05:fb:4e:98:24:f7:d7:0a:08: b9:d2:a4:4f:6b:3f:ff:09:9d:b5:34:3f:ff:fa:68: b0:c2:5e:83:84:6f:8e:15:de:00:03:7b:08:a0:0f: 48:cc:b7:6d:e1:53:d8:d6:db:2d:ee:a8:3b:c4:76: 6e:00:34:9f:dd:d0:96:ef:c0:8e:fa:7b:52:54:7b: 8c:4f:c2:6d:79:ee:7f:38:5d:0b:01:ab:95:60:47: ea:c6:e1:1b:a3:90:bc:2c:25:dc:41:14:05:fc:eb: aa:eb:58:b6:39:9a:36:36:12:e7:27:03:11:24:34: 8c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:52:EA:E6:77:73:11:E7:45:61:14:F1:C3:2A:71:2B:B7:0C:FB:E7 X509v3 Authority Key Identifier: keyid:8B:DA:8A:1F:E0:7B:46:C3:30:63:04:6A:72:5E:AB:85:64:2B:9C:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9qKH-B7RsMwYwRqcl6rhWQrnC0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:c8:21:bc:3c:11:58:ac:7d:0b:6d:74:d1:ca:24:95:fd:2f: 6a:b2:ed:b1:19:41:eb:07:96:0b:7d:5a:7e:39:d4:96:1d:65: 5a:1f:f0:9b:17:2d:ad:6c:2a:d2:bc:0f:b6:7d:48:18:41:e9: 9a:da:2b:a5:3c:76:5d:da:7b:5c:09:e7:69:72:ab:c7:64:9f: 68:85:3d:e6:36:6f:9a:85:92:0b:c4:af:6c:8e:22:1a:8f:f3: 8e:9a:ba:49:38:ad:14:71:9b:69:73:62:f6:14:b9:97:9f:e3: e4:b8:c1:c2:24:f2:bf:a7:a4:05:47:0a:1a:d9:85:e1:d5:ec: 82:ab:8b:2f:01:fd:fd:da:b8:bf:37:ba:b0:c0:5f:9f:37:66: ec:37:95:1d:fe:ce:bc:4d:72:29:e2:93:7d:51:24:76:53:13: 66:81:9c:e0:86:48:79:9b:b9:30:01:17:39:53:75:ce:3b:28: 38:88:5c:4f:67:37:b3:bd:51:f2:01:fd:f4:85:f2:4b:04:bf: f8:27:ee:e5:70:bf:d2:42:93:b1:d9:ea:af:63:8f:5a:43:7e: c6:56:e2:7c:31:4b:95:7e:ec:c2:ee:24:d3:d8:f8:2d:c6:cb: c9:af:6a:72:70:2e:38:41:87:c0:78:2b:5d:c5:2b:58:72:c0: 09:d5:6f:d7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCAYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM3RTQxMTAvBgNVBAUTKDhCREE4QTFGRTA3QjQ2QzMzMDYzMDQ2QTcyNUVBQjg1 NjQyQjlDMkQwHhcNMjYwMzEyMjA1MDI5WhcNMjYwMzE5MjA1MDI5WjAYMRYwFAYD VQQDEw02OWIzMjcxNS1kZjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyhMO/39i6ugMoS8KzBOlmoSXkIsf8bb3AuvaEq7yIpdporiLFanHgtMgwZkG FWn7uwSMLclTY3bWV2gpaYG3RM3vHODiuli0g2hVYZQH3vt2/u+kHpoK8qXqnMT1 q6qApzzCmTy/sn9BP2TKkJVFtdsysv0LsbMdaYcyykFbkp21jq48uO0gAeAqq64F +06YJPfXCgi50qRPaz//CZ21ND//+miwwl6DhG+OFd4AA3sIoA9IzLdt4VPY1tst 7qg7xHZuADSf3dCW78CO+ntSVHuMT8Jtee5/OF0LAauVYEfqxuEbo5C8LCXcQRQF /Ouq61i2OZo2NhLnJwMRJDSM0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGRS6uZ3 cxHnRWEU8cMqcSu3DPvnMB8GA1UdIwQYMBaAFIvaih/ge0bDMGMEanJeq4VkK5wt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzdFNC8zNkZCMTE0NDFE NUExMUVCQjc5ODhEMTdDNEY5QUUwMi9pOXFLSC1CN1JzTXdZd1JxY2w2cmhXUXJu QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2k5cUtILUI3UnNNd1l3UnFjbDZyaFdRcm5DMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzdFNC8zNkZCMTE0NDFENUExMUVCQjc5ODhEMTdDNEY5QUUwMi9pOXFLSC1CN1Jz TXdZd1JxY2w2cmhXUXJuQzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgcghvDwRWKx9C2100coklf0varLtsRlB6weWC31afjnUlh1lWh/wmxctrWwq 0rwPtn1IGEHpmtorpTx2Xdp7XAnnaXKrx2SfaIU95jZvmoWSC8SvbI4iGo/zjpq6 STitFHGbaXNi9hS5l5/j5LjBwiTyv6ekBUcKGtmF4dXsgquLLwH9/dq4vze6sMBf nzdm7DeVHf7OvE1yKeKTfVEkdlMTZoGc4IZIeZu5MAEXOVN1zjsoOIhcT2c3s71R 8gH99IXySwS/+Cfu5XC/0kKTsdnqr2OPWkN+xlbifDFLlX7swu4k09j4LcbLya9q cnAuOEGHwHgrXcUrWHLACdVv1w== -----END CERTIFICATE-----Generated at Fri Mar 13 05:53:01 2026 by rpki-client