$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft File: i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft (raw, json) Hash identifier: zOdLhVLBgkcE7doHgYqCngE6NZjvxL4WiBFqVYo9aGs= Subject key identifier: 3B:83:73:B5:92:01:70:3E:98:7E:CC:0B:7A:BB:7E:D2:6E:1E:C3:D4 Authority key identifier: 8B:64:19:68:69:11:7B:99:B8:79:B4:DC:BA:F0:42:90:BC:16:81:0C Certificate issuer: /CN=A91C0EDF/serialNumber=8B64196869117B99B879B4DCBAF04290BC16810C Certificate serial: 0181 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2QZaGkRe5m4ebTcuvBCkLwWgQw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft Manifest number: 017D Signing time: Sun 01 Mar 2026 05:36:11 +0000 Manifest this update: Sun 01 Mar 2026 05:36:10 +0000 Manifest next update: Sun 08 Mar 2026 05:36:10 +0000 Files and hashes: 1: i2QZaGkRe5m4ebTcuvBCkLwWgQw.crl (hash: MxPOfQ9l7hOoiI1yi26Tk5rC2mETj8EYCEE4un7Daz8=) 2: 52333EB4CFAE11EEB928CD25C4F9AE02.roa (hash: 6P1QigKgDh/og+D4IavE2ADNPbY260YTNHIn9cQtib4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.crl rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2QZaGkRe5m4ebTcuvBCkLwWgQw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 05:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 385 (0x181) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0EDF, serialNumber=8B64196869117B99B879B4DCBAF04290BC16810C Validity Not Before: Mar 1 05:36:10 2026 GMT Not After : Mar 8 05:36:10 2026 GMT Subject: CN=69a3d04a-6a2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fc:03:a5:58:4d:ca:30:77:54:65:4a:fb:4e: a1:b9:5a:5a:5c:27:d5:cc:15:51:20:9c:ea:20:ba: f0:c8:aa:5c:79:56:22:32:2c:fe:a7:76:80:3c:1d: 36:7c:65:14:84:4c:b1:fa:b1:36:11:3c:f6:fa:0c: 2b:c3:a8:be:9a:35:9c:f1:af:ed:84:c1:2b:0d:26: 1a:e2:e6:38:79:cf:49:b7:83:e0:17:42:3f:69:fb: 88:9c:b1:d6:f1:85:20:4e:8b:ab:3e:23:ca:a3:f0: 9e:4f:4f:6b:56:42:3d:3c:9c:b8:6f:62:e0:df:47: 91:89:dd:1f:8f:5a:cf:53:b6:c5:c6:5f:41:fe:c0: b6:fa:9c:1f:da:e0:5c:28:fa:04:c4:21:25:ce:e4: 69:3d:86:bc:af:49:93:91:13:db:c4:e7:cc:16:84: 0f:88:59:ab:bf:a6:9e:24:82:90:9b:72:f4:79:2c: f1:82:f0:85:4b:c3:77:52:da:88:4c:60:bf:8b:bc: 8f:49:6d:2b:67:95:42:90:50:d6:b2:88:6b:aa:5c: 85:c9:32:4e:47:0a:44:4f:ff:51:21:c7:c8:a2:b8: ba:fb:9e:4c:df:fc:08:9c:42:e5:a3:c3:e8:b7:30: c9:4b:89:ec:41:97:bf:53:05:0d:07:24:84:87:87: a1:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:83:73:B5:92:01:70:3E:98:7E:CC:0B:7A:BB:7E:D2:6E:1E:C3:D4 X509v3 Authority Key Identifier: keyid:8B:64:19:68:69:11:7B:99:B8:79:B4:DC:BA:F0:42:90:BC:16:81:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2QZaGkRe5m4ebTcuvBCkLwWgQw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:2c:27:06:1b:da:c4:29:f2:97:a6:83:e1:a4:56:22:61:b6: a4:56:7b:2b:93:a1:be:0c:f6:d5:d7:3e:54:81:dc:e9:13:e4: 53:b0:ad:e6:e1:f3:d0:a9:5d:55:f6:0d:29:22:f1:d4:f8:d6: 02:ee:50:e2:02:2c:8d:38:b9:8b:38:13:bd:e5:6f:04:e4:d3: 63:21:08:0f:13:aa:a4:51:a8:93:c0:84:91:86:ba:5a:2b:f0: 9e:0a:d0:0b:7f:96:80:72:3c:8a:67:e3:ac:3a:33:cd:a1:0b: 5e:d5:0f:c1:d9:8e:09:12:d5:6e:cd:be:1f:6b:40:4f:4d:f4: 08:91:5f:b4:2b:e9:c1:95:1b:aa:43:6c:ea:2b:63:52:0f:29: 72:fd:d0:44:11:4e:17:98:ca:a8:31:01:cd:17:25:4e:be:52: a8:bc:1f:35:ff:12:c4:a1:e1:36:f4:38:35:8c:d8:48:b5:96: 32:7c:d0:62:81:e1:c4:ca:32:ab:85:3f:b0:3f:bb:57:96:64: f9:56:67:1a:dc:c2:1f:1e:12:ca:6e:ac:5f:03:a8:89:31:e9: 40:e2:7b:5e:e2:55:0b:cb:c6:a6:20:7f:7e:90:9c:5a:e7:75: dc:a4:4f:be:5b:c9:c0:66:0b:ca:3d:cd:22:84:44:9f:39:2c: 24:8b:22:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBFREYxMTAvBgNVBAUTKDhCNjQxOTY4NjkxMTdCOTlCODc5QjREQ0JBRjA0Mjkw QkMxNjgxMEMwHhcNMjYwMzAxMDUzNjEwWhcNMjYwMzA4MDUzNjEwWjAYMRYwFAYD VQQDEw02OWEzZDA0YS02YTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx/wDpVhNyjB3VGVK+06huVpaXCfVzBVRIJzqILrwyKpceVYiMiz+p3aAPB02 fGUUhEyx+rE2ETz2+gwrw6i+mjWc8a/thMErDSYa4uY4ec9Jt4PgF0I/afuInLHW 8YUgTourPiPKo/CeT09rVkI9PJy4b2Lg30eRid0fj1rPU7bFxl9B/sC2+pwf2uBc KPoExCElzuRpPYa8r0mTkRPbxOfMFoQPiFmrv6aeJIKQm3L0eSzxgvCFS8N3UtqI TGC/i7yPSW0rZ5VCkFDWsohrqlyFyTJORwpET/9RIcfIori6+55M3/wInELlo8Po tzDJS4nsQZe/UwUNBySEh4ehkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDuDc7WS AXA+mH7MC3q7ftJuHsPUMB8GA1UdIwQYMBaAFItkGWhpEXuZuHm03LrwQpC8FoEM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEVERi8zREUzOUU4MkNG QUQxMUVFQUNGQTQyNjhDNEY5QUUwMi9pMlFaYUdrUmU1bTRlYlRjdXZCQ2tMd1dn UXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2kyUVphR2tSZTVtNGViVGN1dkJDa0x3V2dRdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEVERi8zREUzOUU4MkNGQUQxMUVFQUNGQTQyNjhDNEY5QUUwMi9pMlFaYUdrUmU1 bTRlYlRjdXZCQ2tMd1dnUXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqSwnBhvaxCnyl6aD4aRWImG2pFZ7K5Ohvgz21dc+VIHc6RPkU7Ct5uHz0Kld VfYNKSLx1PjWAu5Q4gIsjTi5izgTveVvBOTTYyEIDxOqpFGok8CEkYa6WivwngrQ C3+WgHI8imfjrDozzaELXtUPwdmOCRLVbs2+H2tAT030CJFftCvpwZUbqkNs6itj Ug8pcv3QRBFOF5jKqDEBzRclTr5SqLwfNf8SxKHhNvQ4NYzYSLWWMnzQYoHhxMoy q4U/sD+7V5Zk+VZnGtzCHx4Sym6sXwOoiTHpQOJ7XuJVC8vGpiB/fpCcWud13KRP vlvJwGYLyj3NIoREnzksJIsiJQ== -----END CERTIFICATE-----Generated at Sun Mar 1 22:30:00 2026 by rpki-client