$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft File: IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft (raw, json) Hash identifier: BkrfMMUb7A/F01fKnIfy1/wUMFdLIK5f8T5JQvs4JGo= Subject key identifier: 57:F3:F3:50:1A:1E:B6:16:22:DD:BD:26:ED:8D:BE:D0:B0:E3:C1:77 Authority key identifier: 22:24:29:44:16:B8:46:57:06:55:4B:52:CB:C5:6F:44:9B:C4:6C:89 Certificate issuer: /CN=A91CFFCB/serialNumber=2224294416B8465706554B52CBC56F449BC46C89 Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiQpRBa4RlcGVUtSy8VvRJvEbIk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft Manifest number: 8C Signing time: Sun 01 Mar 2026 08:52:10 +0000 Manifest this update: Sun 01 Mar 2026 08:52:10 +0000 Manifest next update: Sun 08 Mar 2026 08:52:10 +0000 Files and hashes: 1: IiQpRBa4RlcGVUtSy8VvRJvEbIk.crl (hash: EVGQDMKb7tQxJEJaW8PFhV9VjhqYlrzRhPQO8XOeL1g=) 2: BAEA3A3C497B11F096DCA14EC4F9AE02.roa (hash: b+mY57M99SmP6KZ5ZfpHKrC3YrkcKIFwFC4SLOMsH9I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.crl rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiQpRBa4RlcGVUtSy8VvRJvEbIk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 08:52:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFCB, serialNumber=2224294416B8465706554B52CBC56F449BC46C89 Validity Not Before: Mar 1 08:52:10 2026 GMT Not After : Mar 8 08:52:10 2026 GMT Subject: CN=69a3fe3a-5fac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:41:c6:a5:9e:50:35:74:13:80:51:07:7a:85: a6:fa:8c:34:6e:5c:2e:cf:d8:7d:bb:9d:a9:50:1c: 47:af:35:b7:66:6f:70:92:32:59:0a:d2:c6:a9:66: f5:8a:a2:23:38:e9:31:d9:46:74:db:90:ea:08:99: bf:f7:bb:92:e7:0e:56:cb:fc:1c:d3:d0:58:28:a0: cc:31:d1:9f:66:29:bb:d5:90:03:c0:f9:6c:d0:c2: dd:83:52:d7:02:fa:82:36:89:a3:f2:bc:fb:8d:d4: dc:5d:c1:df:64:d1:f9:37:1b:21:26:81:2e:61:07: be:39:3e:d7:01:3d:f5:96:35:39:d9:70:cf:4f:c4: da:e9:47:04:ca:40:77:ff:25:6c:97:88:49:3e:cc: 9c:33:51:4a:0d:33:07:f5:91:56:9b:7a:9b:a0:d2: 94:16:4f:e3:51:93:93:36:4d:e3:e6:a1:db:d9:eb: 01:74:11:58:b2:cd:6e:21:ac:91:63:34:c2:1c:47: d9:51:9b:af:e8:00:17:68:79:d9:ec:df:cf:2b:33: 42:ef:9b:f9:c9:e8:5b:77:46:0b:b5:3c:26:ef:14: d1:8f:0d:1b:a5:8a:fd:cb:ca:38:da:db:51:45:92: f8:e6:45:32:88:86:fc:07:4e:9c:87:ce:01:8f:ab: 91:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:F3:F3:50:1A:1E:B6:16:22:DD:BD:26:ED:8D:BE:D0:B0:E3:C1:77 X509v3 Authority Key Identifier: keyid:22:24:29:44:16:B8:46:57:06:55:4B:52:CB:C5:6F:44:9B:C4:6C:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiQpRBa4RlcGVUtSy8VvRJvEbIk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:27:80:a3:9a:19:f9:40:6a:b6:40:a9:44:37:69:52:53:2c: b4:ea:e3:5c:0f:40:dc:d0:41:68:6a:bd:82:0a:3a:dd:89:1d: d1:89:bf:39:a8:a3:b5:7e:7c:52:89:8b:3f:66:20:32:a2:91: 62:43:10:ca:9d:78:16:e3:c3:35:6d:c3:29:4f:2d:0c:e1:65: 27:16:01:b8:cc:61:29:57:27:2f:d8:d3:60:ff:77:d6:ea:06: fc:78:8a:a5:ad:f7:02:c0:74:29:52:7b:c1:21:d4:a8:e0:0f: 5f:d9:20:38:61:2a:63:04:35:22:da:1c:85:d8:59:e5:93:eb: 9a:d1:14:be:86:ca:ef:49:3d:31:39:42:04:83:e3:49:e4:f8: 2b:1a:ed:c0:24:95:37:a3:0e:a8:e3:cb:00:41:6c:0d:4d:aa: 30:06:bd:3d:1e:9a:a9:68:a6:16:4c:32:f3:7a:3e:3b:41:e8: 2f:5c:2a:e4:14:24:38:83:c4:69:a3:c0:6d:4c:4c:f8:6a:58: 60:d9:f3:ec:05:65:91:f4:30:5b:19:16:81:a6:1c:d1:9d:41: 25:59:a8:cf:cf:d9:b8:37:c2:49:3a:50:fa:2c:3b:22:c2:f1: a4:7f:e5:ff:ad:f4:b2:a6:7b:36:17:96:bd:64:88:b3:96:2f: 4d:ac:f9:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGQ0IxMTAvBgNVBAUTKDIyMjQyOTQ0MTZCODQ2NTcwNjU1NEI1MkNCQzU2RjQ0 OUJDNDZDODkwHhcNMjYwMzAxMDg1MjEwWhcNMjYwMzA4MDg1MjEwWjAYMRYwFAYD VQQDEw02OWEzZmUzYS01ZmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwUHGpZ5QNXQTgFEHeoWm+ow0blwuz9h9u52pUBxHrzW3Zm9wkjJZCtLGqWb1 iqIjOOkx2UZ025DqCJm/97uS5w5Wy/wc09BYKKDMMdGfZim71ZADwPls0MLdg1LX AvqCNomj8rz7jdTcXcHfZNH5NxshJoEuYQe+OT7XAT31ljU52XDPT8Ta6UcEykB3 /yVsl4hJPsycM1FKDTMH9ZFWm3qboNKUFk/jUZOTNk3j5qHb2esBdBFYss1uIayR YzTCHEfZUZuv6AAXaHnZ7N/PKzNC75v5yehbd0YLtTwm7xTRjw0bpYr9y8o42ttR RZL45kUyiIb8B06ch84Bj6uRsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFfz81Aa HrYWIt29Ju2NvtCw48F3MB8GA1UdIwQYMBaAFCIkKUQWuEZXBlVLUsvFb0SbxGyJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZDQi9FRDBGMTFGNDQy MDUxMUYwQkY3QTg3MTFDNEY5QUUwMi9JaVFwUkJhNFJsY0dWVXRTeThWdlJKdkVi SWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lpUXBSQmE0UmxjR1ZVdFN5OFZ2Ukp2RWJJay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkZDQi9FRDBGMTFGNDQyMDUxMUYwQkY3QTg3MTFDNEY5QUUwMi9JaVFwUkJhNFJs Y0dWVXRTeThWdlJKdkViSWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVyeAo5oZ+UBqtkCpRDdpUlMstOrjXA9A3NBBaGq9ggo63Ykd0Ym/OaijtX58 UomLP2YgMqKRYkMQyp14FuPDNW3DKU8tDOFlJxYBuMxhKVcnL9jTYP931uoG/HiK pa33AsB0KVJ7wSHUqOAPX9kgOGEqYwQ1ItochdhZ5ZPrmtEUvobK70k9MTlCBIPj SeT4KxrtwCSVN6MOqOPLAEFsDU2qMAa9PR6aqWimFkwy83o+O0HoL1wq5BQkOIPE aaPAbUxM+GpYYNnz7AVlkfQwWxkWgaYc0Z1BJVmoz8/ZuDfCSTpQ+iw7IsLxpH/l /630sqZ7NheWvWSIs5YvTaz5gQ== -----END CERTIFICATE-----Generated at Mon Mar 2 14:02:16 2026 by rpki-client