$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/iPsdIcuIPJfCmst31NaIhLOnpgg.mft File: iPsdIcuIPJfCmst31NaIhLOnpgg.mft (raw, json) Hash identifier: jvfi6N153fleZl8huCa8Hmdjo4B9K3ezgRSeEqXg+aM= Subject key identifier: 27:82:22:49:74:87:F2:BE:97:6E:17:55:C2:93:93:51:A2:B7:D2:04 Authority key identifier: 88:FB:1D:21:CB:88:3C:97:C2:9A:CB:77:D4:D6:88:84:B3:A7:A6:08 Certificate issuer: /CN=A91B6A04/serialNumber=88FB1D21CB883C97C29ACB77D4D68884B3A7A608 Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iPsdIcuIPJfCmst31NaIhLOnpgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/iPsdIcuIPJfCmst31NaIhLOnpgg.mft Manifest number: 36 Signing time: Sun 01 Mar 2026 10:02:30 +0000 Manifest this update: Sun 01 Mar 2026 10:02:30 +0000 Manifest next update: Sun 08 Mar 2026 10:02:30 +0000 Files and hashes: 1: iPsdIcuIPJfCmst31NaIhLOnpgg.crl (hash: AAIB1qgnYMf1jBWqtIKbNEfkc5Vx3k3Ep6cr4bC97x4=) 2: 74C3FC2413B911F1B7CEB625083D8C67.roa (hash: P4H5FeCoBASYrayJLn/hEkJQo4s7Z0+nN2dTkoyBEgM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/iPsdIcuIPJfCmst31NaIhLOnpgg.crl rsync://rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/iPsdIcuIPJfCmst31NaIhLOnpgg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iPsdIcuIPJfCmst31NaIhLOnpgg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6A04, serialNumber=88FB1D21CB883C97C29ACB77D4D68884B3A7A608 Validity Not Before: Mar 1 10:02:30 2026 GMT Not After : Mar 8 10:02:30 2026 GMT Subject: CN=69a40eb6-b5f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:61:48:9e:d5:d8:3f:e3:0a:d2:02:f2:70:0c: c9:0b:42:e4:0f:c7:83:29:f1:a0:6b:04:b2:2c:92: 68:98:d8:51:c8:80:f1:8c:54:44:5e:91:81:7e:99: b6:c1:09:8a:1a:2e:14:30:55:b6:43:0b:9c:c3:19: f3:a0:2f:f3:90:63:28:25:68:3c:80:6a:b6:e8:7d: 12:71:96:b2:28:eb:aa:ce:cb:81:1a:7a:67:f8:82: 11:6b:4f:bf:46:e5:b7:8c:0c:fc:f8:99:ca:f0:24: f2:38:e8:57:af:41:d7:23:e8:82:e6:c1:38:f5:7c: 9d:0c:c8:f0:7a:1e:66:67:ee:b5:c8:7c:0a:55:d6: 60:37:f7:d7:84:12:01:0c:c9:e2:02:bc:7b:cf:2a: 50:44:8a:8b:68:05:3a:25:f7:f0:d8:f9:18:df:e0: 87:1a:8d:8a:25:28:cb:2b:7e:e0:3f:02:bf:15:56: d5:ee:1a:19:74:ac:18:1a:2a:2f:50:e4:99:c8:bf: 30:d0:37:8a:1c:e4:29:c9:bf:26:3b:d0:38:b9:53: 79:9a:bc:0e:f0:19:2e:a1:46:0f:3a:3c:d4:c2:9e: eb:30:d3:03:d1:61:73:c3:84:a3:69:04:61:cf:a3: 22:e5:2f:67:17:48:9b:be:e3:43:fc:9a:af:1a:97: 7e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:82:22:49:74:87:F2:BE:97:6E:17:55:C2:93:93:51:A2:B7:D2:04 X509v3 Authority Key Identifier: keyid:88:FB:1D:21:CB:88:3C:97:C2:9A:CB:77:D4:D6:88:84:B3:A7:A6:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/iPsdIcuIPJfCmst31NaIhLOnpgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iPsdIcuIPJfCmst31NaIhLOnpgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/iPsdIcuIPJfCmst31NaIhLOnpgg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:27:60:e2:2c:21:42:9c:45:6a:2a:7e:dc:52:11:be:34:8f: c2:fa:53:8b:53:3a:46:43:3b:2b:8a:b4:fb:a3:b4:11:ea:2f: 9a:17:25:37:ea:27:91:39:13:6c:54:5b:57:41:3c:c6:19:31: d5:0c:d4:a3:c7:db:84:b7:e0:00:05:3f:08:15:07:09:93:95: bc:39:61:bf:73:35:7c:46:51:04:a5:e4:36:2f:1e:66:80:f8: 0e:c8:a1:35:ad:b0:ae:b9:92:94:cc:7f:f0:f7:26:5f:db:01: 95:b4:83:c7:98:e8:13:f4:67:55:e9:4f:e3:2f:8d:d5:ec:0b: ae:18:8f:85:53:19:07:1a:7d:62:d2:64:42:bf:4f:4d:0b:d4: 54:f5:6d:93:2b:db:6c:8e:e2:4a:1d:28:4c:7d:a7:7b:18:4f: b5:c9:ae:d3:59:ce:e2:17:47:ed:70:6d:50:89:18:d4:23:e5: b9:57:e8:fc:77:d2:83:8a:50:3e:96:ba:a2:96:20:84:81:17: ed:9c:33:63:27:fa:d9:a4:91:6f:ee:31:2d:ef:1f:41:d3:c4: f7:ff:dd:e1:f0:6c:b5:5d:71:a2:27:32:1f:26:a1:0d:a8:fe: 24:59:8c:b2:03:80:00:45:39:ca:f4:a0:0c:67:9d:16:b0:7c: 9f:0a:0c:75 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NkEwNDExMC8GA1UEBRMoODhGQjFEMjFDQjg4M0M5N0MyOUFDQjc3RDRENjg4ODRC M0E3QTYwODAeFw0yNjAzMDExMDAyMzBaFw0yNjAzMDgxMDAyMzBaMBgxFjAUBgNV BAMTDTY5YTQwZWI2LWI1ZjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrYUie1dg/4wrSAvJwDMkLQuQPx4Mp8aBrBLIskmiY2FHIgPGMVERekYF+mbbB CYoaLhQwVbZDC5zDGfOgL/OQYyglaDyAarbofRJxlrIo66rOy4Eaemf4ghFrT79G 5beMDPz4mcrwJPI46FevQdcj6ILmwTj1fJ0MyPB6HmZn7rXIfApV1mA399eEEgEM yeICvHvPKlBEiotoBTol9/DY+Rjf4IcajYolKMsrfuA/Ar8VVtXuGhl0rBgaKi9Q 5JnIvzDQN4oc5CnJvyY70Di5U3mavA7wGS6hRg86PNTCnusw0wPRYXPDhKNpBGHP oyLlL2cXSJu+40P8mq8al35LAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUJ4IiSXSH 8r6XbhdVwpOTUaK30gQwHwYDVR0jBBgwFoAUiPsdIcuIPJfCmst31NaIhLOnpggw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2QTA0LzI1QzUyNzdFQzlB RTExRjA5OEU5Mjc0NUM0RjlBRTAyL2lQc2RJY3VJUEpmQ21zdDMxTmFJaExPbnBn Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaVBzZEljdUlQSmZDbXN0MzFOYUloTE9ucGdnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2 QTA0LzI1QzUyNzdFQzlBRTExRjA5OEU5Mjc0NUM0RjlBRTAyL2lQc2RJY3VJUEpm Q21zdDMxTmFJaExPbnBnZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCAJ2DiLCFCnEVqKn7cUhG+NI/C+lOLUzpGQzsrirT7o7QR6i+aFyU36ieRORNs VFtXQTzGGTHVDNSjx9uEt+AABT8IFQcJk5W8OWG/czV8RlEEpeQ2Lx5mgPgOyKE1 rbCuuZKUzH/w9yZf2wGVtIPHmOgT9GdV6U/jL43V7AuuGI+FUxkHGn1i0mRCv09N C9RU9W2TK9tsjuJKHShMfad7GE+1ya7TWc7iF0ftcG1QiRjUI+W5V+j8d9KDilA+ lrqiliCEgRftnDNjJ/rZpJFv7jEt7x9B08T3/93h8Gy1XXGiJzIfJqENqP4kWYyy A4AARTnK9KAMZ50WsHyfCgx1 -----END CERTIFICATE-----Generated at Sun Mar 1 22:59:30 2026 by rpki-client