$ rpki-client -vvf rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft File: IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft (raw, json) Hash identifier: Giqi9dvOXMzPI7EJLGOigZy4Fae4lNO+aQpnk7076pg= Subject key identifier: 1F:A2:2C:1F:49:B3:10:A1:F6:B6:96:F5:E2:7B:3C:0B:6E:8B:1E:48 Authority key identifier: 21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B Certificate issuer: /CN=A91E96D9/serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B Certificate serial: 091B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft Manifest number: 08BE Signing time: Thu 12 Mar 2026 20:15:00 +0000 Manifest this update: Thu 12 Mar 2026 20:14:59 +0000 Manifest next update: Thu 19 Mar 2026 20:14:59 +0000 Files and hashes: 1: IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl (hash: 2GTQsjBCj3VksJtOeQqPIQ5cTivI1cWahM4gzAABGBM=) 2: BAEB4B28FBDF11EA8B73595BC4F9AE02.roa (hash: M1VJgF+x/Um3lhU3p8O1xPTE+txLupRts9yRpHKZudw=) 3: 02BCB71ABF0411F097C9AB09C4F9AE02.roa (hash: YRs268il8jeL4kWOWO8b3QB1BLS7s3nyXufDu9/6sJo=) 4: F8E5E56ABA3311F097F3633AC4F9AE02.roa (hash: HAqcjovZJYFVqZGaHRtS4+R51e9Xtry3aapf5JCY8eI=) 5: 46D8E036BED211F093382E71C4F9AE02.roa (hash: gY7ktW7M2ychNUMmTz0Yp8V+96oZXWr94hCnEiAKvfs=) 6: 94EC9E22BEF311F0A6F14E84C4F9AE02.roa (hash: jLSqDdcG0AQq/rzP9wArGf39t8AjysMfIb5LgZiEQeg=) 7: 4A06FF10FF2711EAB7D5F235C4F9AE02.roa (hash: mg17sUTdYtMBrbbm2kbt75lKpJ892MbQTYVPcd6BdmU=) 8: C8C64A4AED4D11EA895BC037C4F9AE02.roa (hash: LxOE3iZIwIwbWUQyl4az6q7pcoRLSjG1pe6jKOrSfF0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Mar 2026 20:14:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2331 (0x91b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E96D9, serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B Validity Not Before: Mar 12 20:14:59 2026 GMT Not After : Mar 19 20:14:59 2026 GMT Subject: CN=69b31ec4-21bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:51:da:9f:ac:91:6a:56:35:08:33:73:2d:b4: 08:2f:66:d5:01:92:7f:6a:28:40:06:24:95:bb:cb: c0:75:5f:e2:bd:7d:52:1a:a4:8f:4e:28:c6:e7:d6: 01:2a:fc:b7:3a:f2:ea:e6:8d:b9:46:e7:98:e6:5f: 95:50:fa:49:cc:3f:ef:1e:68:41:56:88:6c:19:c5: 91:ea:1b:ea:e0:f5:c8:f3:63:1b:3a:5b:93:42:f1: 5e:3c:66:e3:5f:ca:bc:a8:cf:15:ea:16:02:76:66: 86:9e:6a:6d:42:12:62:40:b2:d2:4b:7d:74:02:02: eb:29:15:8a:5e:47:79:18:cc:c1:00:bf:df:df:a8: 87:05:34:64:25:13:61:43:0b:42:ae:11:a0:b2:25: c8:9d:c5:2f:42:28:42:12:44:e4:c4:f2:0a:a0:b2: 96:66:4d:4b:6c:9f:d1:0a:6a:0f:94:ca:5b:c0:e9: e7:5b:49:f0:61:98:12:6c:ff:f8:6f:00:54:3b:bd: 1e:b4:1e:b8:a1:da:30:4d:45:4a:5a:76:9f:41:a1: 7c:29:5f:a3:79:3c:98:09:dd:38:8d:a6:b3:92:35: 6a:ef:2e:d4:f9:7e:04:a8:6a:88:b1:9c:2b:16:06: 8d:17:f5:3a:87:00:b4:df:79:37:a8:2e:ef:bc:eb: f4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:A2:2C:1F:49:B3:10:A1:F6:B6:96:F5:E2:7B:3C:0B:6E:8B:1E:48 X509v3 Authority Key Identifier: keyid:21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:c3:d9:8a:74:a6:8c:34:3c:80:f0:8d:44:12:49:a5:87:c3: e2:79:cc:0e:69:e2:ec:23:37:55:63:70:03:5d:ac:55:2a:00: 02:60:a9:91:e0:03:b7:70:6d:a5:bd:67:29:e8:46:b4:dc:00: 85:3d:01:93:8b:0c:56:44:d9:0d:de:f6:97:7e:dc:12:13:93: 41:27:99:24:b3:8a:cf:db:11:0f:71:03:61:49:de:8d:cf:20: 06:0b:1c:b0:21:fc:a0:38:29:1c:f6:72:24:3c:66:b8:f8:22: f8:49:10:70:33:d7:73:66:aa:8a:ae:fd:8e:6c:d1:6d:60:52: e6:1d:17:18:aa:17:6d:27:5b:e2:0b:3d:da:6e:62:65:91:37: fe:11:99:09:7a:d7:b7:04:60:c3:e9:3c:87:a9:da:3b:9c:00: fb:5d:fa:2a:c4:05:78:9f:76:b3:3c:e6:e1:28:24:6f:a9:bd: 6e:09:8a:24:d5:bb:6d:66:ca:42:ae:86:c5:04:c8:b6:4c:2c: cd:81:92:57:86:65:c0:2d:e8:71:df:60:80:40:18:23:34:9e: af:c0:c8:05:26:e5:4e:6e:4d:4e:d3:21:f9:fd:db:96:5b:ad: 7c:21:f5:d0:ae:ee:7a:80:37:38:73:c3:de:09:86:30:f0:c3: df:a6:28:de -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCRswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk2RDkxMTAvBgNVBAUTKDIxOUVBNjNDNkFDOTY2RERCMjg1ODg2QkQ3MTFDNzhB MTRERjUxMkIwHhcNMjYwMzEyMjAxNDU5WhcNMjYwMzE5MjAxNDU5WjAYMRYwFAYD VQQDEw02OWIzMWVjNC0yMWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvlHan6yRalY1CDNzLbQIL2bVAZJ/aihABiSVu8vAdV/ivX1SGqSPTijG59YB Kvy3OvLq5o25RueY5l+VUPpJzD/vHmhBVohsGcWR6hvq4PXI82MbOluTQvFePGbj X8q8qM8V6hYCdmaGnmptQhJiQLLSS310AgLrKRWKXkd5GMzBAL/f36iHBTRkJRNh QwtCrhGgsiXIncUvQihCEkTkxPIKoLKWZk1LbJ/RCmoPlMpbwOnnW0nwYZgSbP/4 bwBUO70etB64odowTUVKWnafQaF8KV+jeTyYCd04jaazkjVq7y7U+X4EqGqIsZwr FgaNF/U6hwC033k3qC7vvOv0rQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB+iLB9J sxCh9raW9eJ7PAtuix5IMB8GA1UdIwQYMBaAFCGepjxqyWbdsoWIa9cRx4oU31Er MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTZEOS84MERGREVDMEU1 REQxMUVBQjI0NjhENjVDNEY5QUUwMi9JWjZtUEdySlp0MnloWWhyMXhISGloVGZV U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0laNm1QR3JKWnQyeWhZaHIxeEhIaWhUZlVTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTZEOS84MERGREVDMEU1REQxMUVBQjI0NjhENjVDNEY5QUUwMi9JWjZtUEdySlp0 MnloWWhyMXhISGloVGZVU3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHcPZinSmjDQ8gPCNRBJJpYfD4nnMDmni7CM3VWNwA12sVSoAAmCpkeADt3Bt pb1nKehGtNwAhT0Bk4sMVkTZDd72l37cEhOTQSeZJLOKz9sRD3EDYUnejc8gBgsc sCH8oDgpHPZyJDxmuPgi+EkQcDPXc2aqiq79jmzRbWBS5h0XGKoXbSdb4gs92m5i ZZE3/hGZCXrXtwRgw+k8h6naO5wA+136KsQFeJ92szzm4Sgkb6m9bgmKJNW7bWbK Qq6GxQTItkwszYGSV4ZlwC3ocd9ggEAYIzSer8DIBSblTm5NTtMh+f3bllutfCH1 0K7ueoA3OHPD3gmGMPDD36Yo3g== -----END CERTIFICATE-----Generated at Fri Mar 13 12:33:46 2026 by rpki-client