$ rpki-client -vvf rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.mft File: iCJHhVdMHyPKnEOe2PVTiPamjOI.mft (raw, json) Hash identifier: QGFWtnBWyQdYfFmV7gYyrjQW5tyM2EDCqIbI1wbchpU= Subject key identifier: A1:93:DB:16:5F:BC:43:F3:43:EA:49:C6:09:48:18:C9:D3:18:D3:D9 Authority key identifier: 88:22:47:85:57:4C:1F:23:CA:9C:43:9E:D8:F5:53:88:F6:A6:8C:E2 Certificate issuer: /CN=A91689B7/serialNumber=88224785574C1F23CA9C439ED8F55388F6A68CE2 Certificate serial: 027D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iCJHhVdMHyPKnEOe2PVTiPamjOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.mft Manifest number: 0276 Signing time: Sun 01 Mar 2026 02:32:58 +0000 Manifest this update: Sun 01 Mar 2026 02:32:58 +0000 Manifest next update: Sun 08 Mar 2026 02:32:58 +0000 Files and hashes: 1: iCJHhVdMHyPKnEOe2PVTiPamjOI.crl (hash: iRGvziiXhvtKnWWJD0r9SgBi9MVv9HLN7oSABu/e8rU=) 2: 2455276E39B311EEA6DFE66BC4F9AE02.roa (hash: RK5tPBygONDShLt3IeKagZkrWMr91hP51vzRoPslud0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.crl rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iCJHhVdMHyPKnEOe2PVTiPamjOI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 02:32:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 637 (0x27d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91689B7, serialNumber=88224785574C1F23CA9C439ED8F55388F6A68CE2 Validity Not Before: Mar 1 02:32:58 2026 GMT Not After : Mar 8 02:32:58 2026 GMT Subject: CN=69a3a55a-c25c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:38:d5:66:9e:97:4f:8f:f2:4b:bd:1b:f1:69: bc:09:ba:0a:7f:81:35:98:e4:62:ea:7d:97:71:f4: d1:ed:16:df:2d:bf:ec:ba:e8:e6:e3:33:ad:91:43: f3:45:5a:e2:ba:7e:f4:c3:9f:3b:68:51:ff:03:73: 03:3b:61:b8:01:b4:ea:e0:49:e0:6d:c2:47:ba:81: 04:e7:3c:01:42:0a:d2:1b:f3:0a:97:92:d3:9b:54: 1b:24:2e:26:c0:74:a0:9c:dd:37:80:e3:b8:ab:38: 44:7a:81:9d:af:55:34:66:6b:38:28:c8:50:d5:83: e0:16:26:74:dc:eb:26:7e:98:4e:65:33:69:70:84: 68:ec:17:d3:bd:b2:1c:24:f3:1a:80:91:ad:6e:f5: 91:37:7a:2c:99:c5:0f:92:c5:39:f3:3c:ae:7c:fc: 52:40:90:cc:2e:2f:bf:45:ed:3f:87:8a:c4:b0:46: 6a:ff:9d:f3:1d:c5:0e:cb:74:a2:04:bb:86:b5:95: 72:13:e9:8c:9a:ab:e2:f0:b9:c9:19:b9:f9:56:3b: 36:15:6f:0a:e1:68:2a:ca:12:bb:41:2f:07:cd:0e: 29:4a:44:c1:fc:cc:3d:17:4f:05:bd:5f:8e:bf:e6: 73:a9:bf:9a:45:5f:5a:07:77:77:cc:c5:61:17:c0: f3:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:93:DB:16:5F:BC:43:F3:43:EA:49:C6:09:48:18:C9:D3:18:D3:D9 X509v3 Authority Key Identifier: keyid:88:22:47:85:57:4C:1F:23:CA:9C:43:9E:D8:F5:53:88:F6:A6:8C:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iCJHhVdMHyPKnEOe2PVTiPamjOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91689B7/B1E54AB856A211EDB4A1B225C4F9AE02/iCJHhVdMHyPKnEOe2PVTiPamjOI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:4f:34:8f:bb:62:ad:01:81:dc:48:15:c6:03:6b:c1:3b:70: 6e:b8:26:52:5c:78:47:ad:ef:eb:e8:ae:42:6c:da:6e:7d:b5: 66:cf:2e:69:b0:c9:93:cf:5c:80:4b:33:3a:3a:89:fb:07:c4: 38:10:8f:c2:07:a4:ce:a9:c2:08:15:84:be:ff:28:59:01:46: 10:70:ab:bd:c7:1c:d5:b6:fe:ba:c0:3d:0e:43:fd:17:e8:41: 71:5e:c0:93:8b:90:68:8c:9f:03:47:29:89:24:29:f0:99:5e: dd:ce:39:47:74:b8:db:ba:4d:e6:73:35:72:c2:b4:2e:bf:e1: e6:06:57:38:93:95:bc:69:aa:77:b3:c9:af:0e:42:24:f7:f4: 5a:c2:ad:f8:89:aa:5a:8b:e2:b2:a8:a6:7e:48:37:5a:74:22: c4:bb:27:2e:b0:19:69:ba:51:c6:2e:2a:c3:42:81:0e:26:83: 29:fe:a2:b9:c8:38:40:01:ce:4c:58:c2:e8:39:70:a8:98:99: 52:22:73:09:aa:dd:75:a0:54:28:4c:3d:26:ee:3c:11:43:b3: 74:9f:9d:69:b1:68:1b:df:b8:9d:3e:62:c1:4d:63:1b:f6:d6: c9:f5:f6:92:e6:b8:0d:71:ae:41:bb:de:6f:34:89:ab:24:3f: d6:63:31:75 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAn0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg5QjcxMTAvBgNVBAUTKDg4MjI0Nzg1NTc0QzFGMjNDQTlDNDM5RUQ4RjU1Mzg4 RjZBNjhDRTIwHhcNMjYwMzAxMDIzMjU4WhcNMjYwMzA4MDIzMjU4WjAYMRYwFAYD VQQDDA02OWEzYTU1YS1jMjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1zjVZp6XT4/yS70b8Wm8CboKf4E1mORi6n2XcfTR7RbfLb/suujm4zOtkUPz RVriun70w587aFH/A3MDO2G4AbTq4EngbcJHuoEE5zwBQgrSG/MKl5LTm1QbJC4m wHSgnN03gOO4qzhEeoGdr1U0Zms4KMhQ1YPgFiZ03OsmfphOZTNpcIRo7BfTvbIc JPMagJGtbvWRN3osmcUPksU58zyufPxSQJDMLi+/Re0/h4rEsEZq/53zHcUOy3Si BLuGtZVyE+mMmqvi8LnJGbn5Vjs2FW8K4WgqyhK7QS8HzQ4pSkTB/Mw9F08FvV+O v+Zzqb+aRV9aB3d3zMVhF8DzgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKGT2xZf vEPzQ+pJxglIGMnTGNPZMB8GA1UdIwQYMBaAFIgiR4VXTB8jypxDntj1U4j2pozi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODlCNy9CMUU1NEFCODU2 QTIxMUVEQjRBMUIyMjVDNEY5QUUwMi9pQ0pIaFZkTUh5UEtuRU9lMlBWVGlQYW1q T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lDSkhoVmRNSHlQS25FT2UyUFZUaVBhbWpPSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODlCNy9CMUU1NEFCODU2QTIxMUVEQjRBMUIyMjVDNEY5QUUwMi9pQ0pIaFZkTUh5 UEtuRU9lMlBWVGlQYW1qT0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQU80j7tirQGB3EgVxgNrwTtwbrgmUlx4R63v6+iuQmzabn21Zs8uabDJk89c gEszOjqJ+wfEOBCPwgekzqnCCBWEvv8oWQFGEHCrvccc1bb+usA9DkP9F+hBcV7A k4uQaIyfA0cpiSQp8Jle3c45R3S427pN5nM1csK0Lr/h5gZXOJOVvGmqd7PJrw5C JPf0WsKt+ImqWovisqimfkg3WnQixLsnLrAZabpRxi4qw0KBDiaDKf6iucg4QAHO TFjC6DlwqJiZUiJzCarddaBUKEw9Ju48EUOzdJ+dabFoG9+4nT5iwU1jG/bWyfX2 kua4DXGuQbvebzSJqyQ/1mMxdQ== -----END CERTIFICATE-----Generated at Mon Mar 2 00:15:20 2026 by rpki-client