$ rpki-client -vvf rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft File: IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft (raw, json) Hash identifier: FfdDatGNDnKox7GdZHIa6fnOkcEr3xQtx2FXvOYNMnA= Subject key identifier: 00:E9:C0:E0:2E:D3:B5:A2:40:74:65:66:82:D0:3D:4B:63:3B:08:B1 Authority key identifier: 21:FC:81:5F:CB:1C:EA:D7:70:BD:6C:90:36:94:74:5F:71:CA:71:95 Certificate issuer: /CN=A91A91D2/serialNumber=21FC815FCB1CEAD770BD6C903694745F71CA7195 Certificate serial: 0A18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft Manifest number: 0A07 Signing time: Mon 02 Mar 2026 01:28:52 +0000 Manifest this update: Mon 02 Mar 2026 01:28:50 +0000 Manifest next update: Mon 09 Mar 2026 01:28:50 +0000 Files and hashes: 1: IfyBX8sc6tdwvWyQNpR0X3HKcZU.crl (hash: uRXPVZdodahYcjR0jXBY9QudEy68+OqhK+vOx8EUH+4=) 2: FE6C73289C9A11ED8123147BC4F9AE02.roa (hash: 2OCGb2GsDSN9eWUkEJm9OxDpHisk081Il0yQc3djlTw=) 3: 371ADD3E9C9811EDA6AEF053C4F9AE02.roa (hash: ZDaQsYTQonQRSy58mGR7Kcfg4nWAO+ekMAlPoJ+tMyE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.crl rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:28:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2584 (0xa18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A91D2, serialNumber=21FC815FCB1CEAD770BD6C903694745F71CA7195 Validity Not Before: Mar 2 01:28:50 2026 GMT Not After : Mar 9 01:28:50 2026 GMT Subject: CN=69a4e7d3-b818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ec:d7:42:27:46:2d:ee:85:ba:17:43:8f:f1: 6b:7b:db:3c:1b:0e:88:f3:90:b6:4e:83:31:0a:ee: 53:f9:1e:9d:57:0f:3e:86:ed:48:c7:69:b8:45:f8: bd:b9:4b:c9:19:1f:07:fb:ef:09:e9:03:5a:7c:6c: 6b:03:e6:65:72:7c:64:1d:82:d5:1d:31:e8:25:9d: 45:15:45:5e:70:92:52:fc:82:31:9c:b6:93:88:41: 0f:10:8d:42:0a:3d:c8:fa:a8:30:bc:85:e1:e2:4d: a1:ad:22:eb:7a:a9:e0:89:2e:6a:df:01:dc:16:fa: b5:7b:22:ec:21:a7:d0:9c:45:93:51:91:a8:7a:fe: a0:ee:c5:3e:c4:bc:89:1f:1f:fc:06:bc:a2:66:f3: cd:01:d4:38:66:28:d2:1e:a0:73:09:71:3f:34:69: 54:07:80:58:10:ee:92:b5:1d:e4:17:e4:d3:0e:c6: bf:c7:1d:5b:d5:91:a8:f0:33:37:10:9e:72:2a:b5: bd:1d:d8:b4:9f:7d:cf:c6:e9:89:84:b3:95:20:0e: 43:d3:2b:9f:d2:04:4c:89:b1:7d:43:3e:b3:31:b5: 29:9c:17:78:57:d2:a1:7c:4f:d6:aa:79:c4:df:66: 14:aa:6a:4c:c2:da:08:ad:7e:84:d4:ec:f0:5a:a2: 63:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:E9:C0:E0:2E:D3:B5:A2:40:74:65:66:82:D0:3D:4B:63:3B:08:B1 X509v3 Authority Key Identifier: keyid:21:FC:81:5F:CB:1C:EA:D7:70:BD:6C:90:36:94:74:5F:71:CA:71:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:54:23:b2:0d:bc:74:4b:54:2a:bc:40:d0:67:c3:a0:d2:9c: bb:4f:17:4e:bf:45:f9:20:bd:8f:c1:bd:73:45:ad:dd:41:33: 50:a6:26:e6:ed:60:49:cd:4f:52:9f:2b:74:1a:92:b0:a1:4a: 3f:7d:70:33:65:9f:a8:5d:ca:a4:3e:e2:93:b2:11:cb:fe:3c: aa:f2:25:b1:ff:98:62:e8:f7:39:5a:ed:fa:14:d2:18:14:75: 46:96:a9:47:63:9b:1c:5b:47:f1:03:ec:cc:de:b4:00:c9:c3: bf:b0:6e:1c:cd:77:7c:a7:02:64:b3:65:dd:b7:99:1b:7b:46: d3:9d:49:f0:8c:bc:22:97:60:9f:2c:12:2f:f6:ec:90:5e:f8: 85:aa:f8:64:1c:66:8a:bd:d2:f8:cf:76:87:6a:31:9e:25:55: a6:2f:ad:3d:40:20:04:3f:1a:ee:9a:6a:58:2c:d7:fc:74:ed: 83:ca:f4:c4:d5:0f:af:85:c4:b6:c6:6c:47:41:31:91:18:9d: 1f:e8:a0:45:36:4c:93:c0:e8:9c:da:de:bb:c2:2b:2a:34:db: 60:f7:7b:fc:3c:c1:03:99:85:74:fd:88:00:6b:09:e1:62:28: d1:16:a7:ba:84:f8:7c:2e:1a:f0:11:45:72:9e:c3:5f:da:5e: 3e:79:83:ba -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICChgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkxRDIxMTAvBgNVBAUTKDIxRkM4MTVGQ0IxQ0VBRDc3MEJENkM5MDM2OTQ3NDVG NzFDQTcxOTUwHhcNMjYwMzAyMDEyODUwWhcNMjYwMzA5MDEyODUwWjAYMRYwFAYD VQQDEw02OWE0ZTdkMy1iODE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjuzXQidGLe6FuhdDj/Fre9s8Gw6I85C2ToMxCu5T+R6dVw8+hu1Ix2m4Rfi9 uUvJGR8H++8J6QNafGxrA+ZlcnxkHYLVHTHoJZ1FFUVecJJS/IIxnLaTiEEPEI1C Cj3I+qgwvIXh4k2hrSLreqngiS5q3wHcFvq1eyLsIafQnEWTUZGoev6g7sU+xLyJ Hx/8BryiZvPNAdQ4ZijSHqBzCXE/NGlUB4BYEO6StR3kF+TTDsa/xx1b1ZGo8DM3 EJ5yKrW9Hdi0n33PxumJhLOVIA5D0yuf0gRMibF9Qz6zMbUpnBd4V9KhfE/WqnnE 32YUqmpMwtoIrX6E1OzwWqJjOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFADpwOAu 07WiQHRlZoLQPUtjOwixMB8GA1UdIwQYMBaAFCH8gV/LHOrXcL1skDaUdF9xynGV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTFEMi84QzE0RTk0NDkx RDExMUVBQTUzM0E5NzhDNEY5QUUwMi9JZnlCWDhzYzZ0ZHd2V3lRTnBSMFgzSEtj WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lmeUJYOHNjNnRkd3ZXeVFOcFIwWDNIS2NaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTFEMi84QzE0RTk0NDkxRDExMUVBQTUzM0E5NzhDNEY5QUUwMi9JZnlCWDhzYzZ0 ZHd2V3lRTnBSMFgzSEtjWlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAblQjsg28dEtUKrxA0GfDoNKcu08XTr9F+SC9j8G9c0Wt3UEzUKYm5u1gSc1P Up8rdBqSsKFKP31wM2WfqF3KpD7ik7IRy/48qvIlsf+YYuj3OVrt+hTSGBR1Rpap R2ObHFtH8QPszN60AMnDv7BuHM13fKcCZLNl3beZG3tG051J8Iy8IpdgnywSL/bs kF74har4ZBxmir3S+M92h2oxniVVpi+tPUAgBD8a7ppqWCzX/HTtg8r0xNUPr4XE tsZsR0ExkRidH+igRTZMk8DonNreu8IrKjTbYPd7/DzBA5mFdP2IAGsJ4WIo0Ran uoT4fC4a8BFFcp7DX9pePnmDug== -----END CERTIFICATE-----Generated at Mon Mar 2 14:15:58 2026 by rpki-client