$ rpki-client -vvf rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft File: iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft (raw, json) Hash identifier: 2vagYBXwIuiQoc5cIZaPesi3Bl1HEPatMG5YnWN8R7I= Subject key identifier: F7:3D:5B:E9:C6:5B:0F:A8:DA:7C:5C:51:35:B1:F5:F3:17:22:71:B6 Authority key identifier: 89:70:77:B7:1F:2C:5A:ED:DE:6C:1D:D4:95:47:DC:C9:95:2C:DA:BE Certificate issuer: /CN=A91F40E0/serialNumber=897077B71F2C5AEDDE6C1DD49547DCC9952CDABE Certificate serial: 8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXB3tx8sWu3ebB3UlUfcyZUs2r4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft Manifest number: 81 Signing time: Sun 05 Apr 2026 07:07:16 +0000 Manifest this update: Sun 05 Apr 2026 07:07:16 +0000 Manifest next update: Sun 12 Apr 2026 07:07:16 +0000 Files and hashes: 1: iXB3tx8sWu3ebB3UlUfcyZUs2r4.crl (hash: oFMSCGdneVw2VLOKPkJv4xU7sm3kHRiu8eYnpvoRKzc=) 2: 399480C4ACD011F08828DD7BC4F9AE02.roa (hash: faAWxuL02WBDF7lhFM/mV+aG3ZsWz2hDnEoq4EKfApA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.crl rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXB3tx8sWu3ebB3UlUfcyZUs2r4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 07:07:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F40E0, serialNumber=897077B71F2C5AEDDE6C1DD49547DCC9952CDABE Validity Not Before: Apr 5 07:07:16 2026 GMT Not After : Apr 12 07:07:16 2026 GMT Subject: CN=69d20a24-d77c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6c:3e:61:d5:ec:a1:f3:1a:f1:79:4d:6b:06: f1:b3:c8:33:16:bc:9e:75:1a:ac:4a:57:2c:4f:38: 44:85:2a:c5:de:db:63:7b:e0:03:b6:85:69:cb:a4: 8e:22:0a:26:b9:10:0c:94:ec:96:44:c7:2e:59:5a: 69:0c:9c:e6:7d:54:76:82:a9:18:10:04:e1:08:55: 98:7c:dc:45:78:30:5b:bc:31:48:9b:04:cf:29:3c: 76:e9:76:e9:28:e9:82:ee:95:53:b2:63:05:a9:c5: 90:be:89:b5:7b:dd:bb:d0:f1:55:d4:e4:71:5a:2d: 66:3a:1b:2b:df:27:9f:2b:2f:1d:3b:a7:18:ec:7c: c2:f9:bd:fe:cf:f4:91:ff:2a:74:74:ca:b1:de:bb: 8d:b3:b0:90:09:79:6f:e1:ff:6a:f2:cf:b6:72:b1: e8:25:e6:61:09:77:5e:f6:e7:af:59:23:b8:a0:73: d5:0c:8f:7c:e6:1e:01:38:27:2b:8f:96:d9:1f:5f: 0f:d7:89:fb:14:f3:b6:b2:99:c8:69:c0:51:53:55: 21:13:31:33:2b:27:1d:2b:9a:76:57:7e:72:ce:b5: 33:2f:5a:da:bb:f0:c2:6e:bd:39:8e:2f:7e:8d:b8: a0:63:61:1b:21:94:d2:fa:f6:1d:b8:f1:39:81:c8: 87:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:3D:5B:E9:C6:5B:0F:A8:DA:7C:5C:51:35:B1:F5:F3:17:22:71:B6 X509v3 Authority Key Identifier: keyid:89:70:77:B7:1F:2C:5A:ED:DE:6C:1D:D4:95:47:DC:C9:95:2C:DA:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXB3tx8sWu3ebB3UlUfcyZUs2r4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:a9:b7:39:bf:9d:fa:df:1b:77:34:89:4d:3f:de:de:3d:91: 46:c4:36:ba:bd:d8:23:a6:96:e0:28:63:f4:23:2c:c8:85:1e: d6:65:32:73:63:3c:c3:ff:fb:0c:02:18:89:ca:5a:d1:d4:09: 3f:cf:09:f4:09:92:15:30:f8:5d:50:ec:93:cf:af:8f:b6:18: ce:33:16:ba:c2:b8:17:de:fc:2b:cc:5e:e4:32:48:80:87:61: 5f:c9:2d:fc:47:38:95:31:ed:8d:97:75:31:19:88:8b:f9:14: 6f:dd:70:70:1e:74:b2:f2:16:f2:c9:9f:d3:e5:ea:13:d7:cf: ee:e3:de:c4:5d:7d:12:7b:a9:7b:7a:18:2b:87:92:8a:00:1e: f2:f0:a7:40:99:19:0c:d1:fa:35:22:4c:68:a4:e9:fc:19:8d: 5c:94:73:d3:b8:72:22:69:b9:fa:b8:23:7b:9f:61:ba:cc:64: bd:bc:89:6f:f2:5b:96:19:de:0c:52:a8:e0:39:64:55:ed:ef: 76:b8:a9:bb:41:28:e9:ad:ae:8d:47:c4:95:1c:a9:37:7f:ed: f9:11:3d:3d:b3:80:9f:ca:98:bf:76:f1:1b:90:dc:cf:22:94: 13:e2:9c:7f:91:be:48:48:30:fd:8b:20:27:b9:5f:01:1f:59: d3:f8:32:26 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQwRTAxMTAvBgNVBAUTKDg5NzA3N0I3MUYyQzVBRURERTZDMURENDk1NDdEQ0M5 OTUyQ0RBQkUwHhcNMjYwNDA1MDcwNzE2WhcNMjYwNDEyMDcwNzE2WjAYMRYwFAYD VQQDEw02OWQyMGEyNC1kNzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApWw+YdXsofMa8XlNawbxs8gzFryedRqsSlcsTzhEhSrF3ttje+ADtoVpy6SO IgomuRAMlOyWRMcuWVppDJzmfVR2gqkYEAThCFWYfNxFeDBbvDFImwTPKTx26Xbp KOmC7pVTsmMFqcWQvom1e9270PFV1ORxWi1mOhsr3yefKy8dO6cY7HzC+b3+z/SR /yp0dMqx3ruNs7CQCXlv4f9q8s+2crHoJeZhCXde9uevWSO4oHPVDI985h4BOCcr j5bZH18P14n7FPO2spnIacBRU1UhEzEzKycdK5p2V35yzrUzL1rau/DCbr05ji9+ jbigY2EbIZTS+vYduPE5gciHRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPc9W+nG Ww+o2nxcUTWx9fMXInG2MB8GA1UdIwQYMBaAFIlwd7cfLFrt3mwd1JVH3MmVLNq+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDBFMC8zRkJCNUUwNDdC NTMxMUYwOUI1NDg0NUZDNEY5QUUwMi9pWEIzdHg4c1d1M2ViQjNVbFVmY3laVXMy cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lYQjN0eDhzV3UzZWJCM1VsVWZjeVpVczJyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDBFMC8zRkJCNUUwNDdCNTMxMUYwOUI1NDg0NUZDNEY5QUUwMi9pWEIzdHg4c1d1 M2ViQjNVbFVmY3laVXMycjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArKm3Ob+d+t8bdzSJTT/e3j2RRsQ2ur3YI6aW4Chj9CMsyIUe1mUyc2M8w//7 DAIYicpa0dQJP88J9AmSFTD4XVDsk8+vj7YYzjMWusK4F978K8xe5DJIgIdhX8kt /Ec4lTHtjZd1MRmIi/kUb91wcB50svIW8smf0+XqE9fP7uPexF19Enupe3oYK4eS igAe8vCnQJkZDNH6NSJMaKTp/BmNXJRz07hyImm5+rgje59husxkvbyJb/Jblhne DFKo4DlkVe3vdripu0Eo6a2ujUfElRypN3/t+RE9PbOAn8qYv3bxG5DczyKUE+Kc f5G+SEgw/YsgJ7lfAR9Z0/gyJg== -----END CERTIFICATE-----Generated at Mon Apr 6 13:58:45 2026 by rpki-client