$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft File: iP8qX1-BdhNDU35LVLXmoW8gfqk.mft (raw, json) Hash identifier: lwQxlEvMRUQA0i57CRtmogjLgJYKvbW5BwA4m3a4boI= Subject key identifier: 28:01:E2:DF:36:B4:9F:AF:DB:A5:89:05:48:C2:AC:54:F5:2F:7E:98 Authority key identifier: 88:FF:2A:5F:5F:81:76:13:43:53:7E:4B:54:B5:E6:A1:6F:20:7E:A9 Certificate issuer: /CN=A91CF1E7/serialNumber=88FF2A5F5F81761343537E4B54B5E6A16F207EA9 Certificate serial: 01D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iP8qX1-BdhNDU35LVLXmoW8gfqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft Manifest number: 01D5 Signing time: Sun 01 Mar 2026 04:19:14 +0000 Manifest this update: Sun 01 Mar 2026 04:19:14 +0000 Manifest next update: Sun 08 Mar 2026 04:19:14 +0000 Files and hashes: 1: iP8qX1-BdhNDU35LVLXmoW8gfqk.crl (hash: DJ/5cBGU2/o85/x+Xw32HM6Y26hxzAhVlGeLxd3Av1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.crl rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iP8qX1-BdhNDU35LVLXmoW8gfqk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 04:19:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 469 (0x1d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF1E7, serialNumber=88FF2A5F5F81761343537E4B54B5E6A16F207EA9 Validity Not Before: Mar 1 04:19:14 2026 GMT Not After : Mar 8 04:19:14 2026 GMT Subject: CN=69a3be42-f446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:66:46:44:b5:cc:d5:ac:3e:6b:f4:b5:c5:46: b0:79:7c:1d:3e:32:28:b7:70:d7:0f:ba:f0:32:15: aa:5c:0e:47:67:a5:55:75:d6:8d:28:5a:c1:a4:0d: f8:e3:68:ec:0b:dc:b5:11:63:2b:ef:30:33:fa:e6: 36:a6:22:9a:75:f1:2e:57:95:ca:48:cb:15:11:2a: 57:c2:56:49:63:82:59:2a:1a:4c:1e:82:3d:9a:49: 9e:4a:45:46:88:b2:6e:1f:cf:0c:65:ca:bf:d7:c0: f3:88:88:c6:7d:2f:b8:42:4d:e4:cf:0e:b5:d8:16: 58:4e:49:a6:da:68:a4:7a:e2:55:79:23:16:8b:af: 37:4f:4c:b5:53:55:8e:e5:50:27:a0:40:6b:98:9f: 5f:7e:1b:7b:ce:8b:7b:df:32:35:84:12:5c:1e:bd: 9f:89:08:64:b2:64:7c:e1:6b:33:45:de:d0:81:c0: e5:2a:98:b4:72:f7:2b:fc:be:14:ac:04:9c:e7:c4: 4c:51:72:f0:0a:94:20:95:a3:3f:82:08:43:57:7e: d7:e5:53:99:4d:7b:be:e8:2c:c4:62:b6:08:cb:7e: b9:da:f5:fb:14:5e:f4:30:5c:35:bd:29:f2:c3:fc: 99:27:16:66:53:7e:34:b7:36:d4:0a:5c:9c:87:9e: 0a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:01:E2:DF:36:B4:9F:AF:DB:A5:89:05:48:C2:AC:54:F5:2F:7E:98 X509v3 Authority Key Identifier: keyid:88:FF:2A:5F:5F:81:76:13:43:53:7E:4B:54:B5:E6:A1:6F:20:7E:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iP8qX1-BdhNDU35LVLXmoW8gfqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:3d:78:05:34:c0:55:a9:1b:e1:45:76:43:4c:00:3b:76:e4: 50:e4:f6:fe:bd:a6:7c:53:81:5a:d2:57:4d:dd:23:d6:4b:25: 42:ef:58:db:2e:d5:26:10:dd:2d:2c:9b:a4:e5:e2:19:7b:20: 19:fc:94:43:24:13:bc:47:52:4c:b0:c7:53:f7:b1:d7:4f:c2: 7a:3a:06:86:11:67:32:9a:1f:fc:41:0a:cc:9d:de:e2:68:0f: 4d:bf:fc:46:6b:bd:26:50:3c:55:83:ee:bb:65:24:d1:d6:4d: 0f:08:d3:05:6d:2f:e6:6f:f4:02:76:0b:65:3d:3e:e2:6e:00: 3a:6a:fb:9e:ff:42:4f:6d:07:4d:a6:27:09:31:ce:4e:9d:71: c2:01:e1:dc:6a:e3:56:a8:2d:92:c1:ca:30:64:c6:2a:7c:6c: d6:88:1d:56:36:ee:7f:25:61:3c:a9:e3:08:c7:40:db:59:19: 1e:ae:91:e4:43:cc:1f:d1:f1:91:49:6d:ba:bb:6e:e3:15:0a: 2b:d9:0e:1a:9c:19:ec:d5:aa:db:71:d9:1c:db:83:84:b8:71: 63:f5:6c:21:9e:7f:7e:88:d4:1a:f7:ab:3b:db:ff:67:4f:d1: 05:ac:47:e8:07:31:4a:cd:21:ef:3c:4d:3f:02:36:12:e2:ad: e3:17:2a:bf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YxRTcxMTAvBgNVBAUTKDg4RkYyQTVGNUY4MTc2MTM0MzUzN0U0QjU0QjVFNkEx NkYyMDdFQTkwHhcNMjYwMzAxMDQxOTE0WhcNMjYwMzA4MDQxOTE0WjAYMRYwFAYD VQQDEw02OWEzYmU0Mi1mNDQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvmZGRLXM1aw+a/S1xUaweXwdPjIot3DXD7rwMhWqXA5HZ6VVddaNKFrBpA34 42jsC9y1EWMr7zAz+uY2piKadfEuV5XKSMsVESpXwlZJY4JZKhpMHoI9mkmeSkVG iLJuH88MZcq/18DziIjGfS+4Qk3kzw612BZYTkmm2mikeuJVeSMWi683T0y1U1WO 5VAnoEBrmJ9ffht7zot73zI1hBJcHr2fiQhksmR84WszRd7QgcDlKpi0cvcr/L4U rASc58RMUXLwCpQglaM/gghDV37X5VOZTXu+6CzEYrYIy3652vX7FF70MFw1vSny w/yZJxZmU340tzbUClych54KDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCgB4t82 tJ+v26WJBUjCrFT1L36YMB8GA1UdIwQYMBaAFIj/Kl9fgXYTQ1N+S1S15qFvIH6p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjFFNy8xREJFMUEzMjQ3 QjkxMUVFQUFEM0RCNEFDNEY5QUUwMi9pUDhxWDEtQmRoTkRVMzVMVkxYbW9XOGdm cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lQOHFYMS1CZGhORFUzNUxWTFhtb1c4Z2Zxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjFFNy8xREJFMUEzMjQ3QjkxMUVFQUFEM0RCNEFDNEY5QUUwMi9pUDhxWDEtQmRo TkRVMzVMVkxYbW9XOGdmcWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHj14BTTAVakb4UV2Q0wAO3bkUOT2/r2mfFOBWtJXTd0j1kslQu9Y2y7VJhDd LSybpOXiGXsgGfyUQyQTvEdSTLDHU/ex10/CejoGhhFnMpof/EEKzJ3e4mgPTb/8 Rmu9JlA8VYPuu2Uk0dZNDwjTBW0v5m/0AnYLZT0+4m4AOmr7nv9CT20HTaYnCTHO Tp1xwgHh3GrjVqgtksHKMGTGKnxs1ogdVjbufyVhPKnjCMdA21kZHq6R5EPMH9Hx kUlturtu4xUKK9kOGpwZ7NWq23HZHNuDhLhxY/VsIZ5/fojUGverO9v/Z0/RBaxH 6AcxSs0h7zxNPwI2EuKt4xcqvw== -----END CERTIFICATE-----Generated at Sun Mar 1 20:22:25 2026 by rpki-client