$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft File: iX261kcCN4pu4YYw4Yv3Whcpgmk.mft (raw, json) Hash identifier: Y+xLcRQalX5E4OFL1hPNyh95HtTY86Aa+4sMnFsbAVI= Subject key identifier: 5B:88:44:DA:DD:72:D3:6B:D5:7A:85:7D:3C:66:CD:1A:CE:A3:B1:28 Authority key identifier: 89:7D:BA:D6:47:02:37:8A:6E:E1:86:30:E1:8B:F7:5A:17:29:82:69 Certificate issuer: /CN=A91D8117/serialNumber=897DBAD64702378A6EE18630E18BF75A17298269 Certificate serial: 0196 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft Manifest number: 018F Signing time: Sun 01 Mar 2026 05:26:00 +0000 Manifest this update: Sun 01 Mar 2026 05:26:00 +0000 Manifest next update: Sun 08 Mar 2026 05:26:00 +0000 Files and hashes: 1: iX261kcCN4pu4YYw4Yv3Whcpgmk.crl (hash: q9xPVGBb6cCRoY1y96cSSf93BnJm8i4S8+Qjx+siUCQ=) 2: D442A7A0BE2E11EEAFAF1934C4F9AE02.roa (hash: RLZuHwOgQEUaPkuZuTnWsz7rfKPwv51ebWShkrRfCcE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.crl rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 05:25:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 406 (0x196) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8117, serialNumber=897DBAD64702378A6EE18630E18BF75A17298269 Validity Not Before: Mar 1 05:26:00 2026 GMT Not After : Mar 8 05:26:00 2026 GMT Subject: CN=69a3cde8-61b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5c:76:c5:68:f8:48:03:c4:3f:2e:ff:24:0f: f0:9f:f8:2e:d5:04:67:80:d7:33:2d:c2:21:37:98: 55:98:58:a3:4e:d5:17:30:7b:bc:c2:31:64:af:93: d9:74:7c:be:cf:f3:95:8f:99:00:ff:4d:08:bb:7d: ad:ef:4f:f0:b3:8a:65:3a:d7:9b:21:6d:a8:6c:c5: 1f:2f:2e:5d:f2:2d:2f:a7:23:c2:08:f5:c9:cb:4e: 19:3d:78:5a:e1:8e:08:9d:b1:c2:48:87:bd:68:52: f0:3e:cf:f1:3d:4d:d5:1f:5f:38:0a:75:4a:f4:3b: 2f:37:b6:df:e5:f1:74:de:4c:ea:54:b1:98:53:6a: 4a:e4:04:07:f6:02:ca:69:98:4d:50:81:2b:dc:f6: e7:a3:64:15:f4:9f:98:84:4f:ba:ae:3d:c2:8e:21: 55:dc:07:7e:fc:58:7a:f6:b4:78:cc:43:29:0b:75: 4d:8d:c9:5c:4b:48:1b:30:24:58:c2:eb:fb:14:18: 5d:80:89:6e:48:61:1f:9c:f0:9d:6a:3e:de:1d:0a: 48:bb:ed:fc:08:88:e0:c8:7f:f9:af:4a:27:3a:4d: 44:18:98:f0:cd:c6:dc:32:0b:36:b3:84:ed:27:7b: 18:8e:d8:66:9c:7b:56:26:19:7d:6a:45:14:ab:e6: a5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:88:44:DA:DD:72:D3:6B:D5:7A:85:7D:3C:66:CD:1A:CE:A3:B1:28 X509v3 Authority Key Identifier: keyid:89:7D:BA:D6:47:02:37:8A:6E:E1:86:30:E1:8B:F7:5A:17:29:82:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:53:3f:18:7f:d9:bb:56:48:8d:ce:61:29:9b:65:32:c3:09: da:38:24:c8:d2:7e:ee:d0:71:3d:78:ed:1c:6a:40:cd:a9:a8: 4c:c7:a5:73:44:b7:ea:f5:9e:27:4b:08:09:18:93:9c:6a:dd: ab:bf:f8:16:a1:7d:de:6d:a1:cf:36:1a:5b:a4:81:19:1c:0c: 59:43:a5:a7:bb:67:71:71:49:6e:8e:a9:c6:87:27:1c:d3:3a: 80:3b:9d:cc:b8:de:e4:dc:6e:a1:f3:b1:1f:c1:92:50:8e:b9: 2a:02:b7:19:28:21:37:85:c0:4c:05:e9:60:80:18:a3:25:b6: d5:14:a1:df:3a:c7:7d:a9:a2:bc:44:07:af:17:ea:43:c2:bd: ac:00:02:0c:d8:55:69:74:98:8b:ef:10:db:08:1f:24:b5:1f: b4:c4:75:ab:6e:eb:f2:39:ba:65:20:3d:34:91:ba:d1:5c:77: 3b:e6:78:bc:66:85:c1:20:97:bc:b1:7b:d8:7a:b9:29:3a:e5: 1e:e2:77:ed:30:de:fb:16:b5:4c:b2:d8:1e:e7:c5:96:38:36: a7:07:c3:0a:2b:95:f4:87:17:ca:de:39:89:51:8d:5b:e3:27: a4:cd:a2:c5:90:6e:44:43:0d:ca:91:36:16:3a:c6:c8:fe:86: 99:15:7e:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgxMTcxMTAvBgNVBAUTKDg5N0RCQUQ2NDcwMjM3OEE2RUUxODYzMEUxOEJGNzVB MTcyOTgyNjkwHhcNMjYwMzAxMDUyNjAwWhcNMjYwMzA4MDUyNjAwWjAYMRYwFAYD VQQDEw02OWEzY2RlOC02MWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtVx2xWj4SAPEPy7/JA/wn/gu1QRngNczLcIhN5hVmFijTtUXMHu8wjFkr5PZ dHy+z/OVj5kA/00Iu32t70/ws4plOtebIW2obMUfLy5d8i0vpyPCCPXJy04ZPXha 4Y4InbHCSIe9aFLwPs/xPU3VH184CnVK9DsvN7bf5fF03kzqVLGYU2pK5AQH9gLK aZhNUIEr3Pbno2QV9J+YhE+6rj3CjiFV3Ad+/Fh69rR4zEMpC3VNjclcS0gbMCRY wuv7FBhdgIluSGEfnPCdaj7eHQpIu+38CIjgyH/5r0onOk1EGJjwzcbcMgs2s4Tt J3sYjthmnHtWJhl9akUUq+alpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFuIRNrd ctNr1XqFfTxmzRrOo7EoMB8GA1UdIwQYMBaAFIl9utZHAjeKbuGGMOGL91oXKYJp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODExNy84RTI4RTc5NEJF MkQxMUVFODUzNkQwMzBDNEY5QUUwMi9pWDI2MWtjQ040cHU0WVl3NFl2M1doY3Bn bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lYMjYxa2NDTjRwdTRZWXc0WXYzV2hjcGdtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODExNy84RTI4RTc5NEJFMkQxMUVFODUzNkQwMzBDNEY5QUUwMi9pWDI2MWtjQ040 cHU0WVl3NFl2M1doY3BnbWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAk1M/GH/Zu1ZIjc5hKZtlMsMJ2jgkyNJ+7tBxPXjtHGpAzamoTMelc0S36vWe J0sICRiTnGrdq7/4FqF93m2hzzYaW6SBGRwMWUOlp7tncXFJbo6pxocnHNM6gDud zLje5NxuofOxH8GSUI65KgK3GSghN4XATAXpYIAYoyW21RSh3zrHfamivEQHrxfq Q8K9rAACDNhVaXSYi+8Q2wgfJLUftMR1q27r8jm6ZSA9NJG60Vx3O+Z4vGaFwSCX vLF72Hq5KTrlHuJ37TDe+xa1TLLYHufFljg2pwfDCiuV9IcXyt45iVGNW+MnpM2i xZBuREMNypE2FjrGyP6GmRV+GQ== -----END CERTIFICATE-----Generated at Sun Mar 1 20:39:55 2026 by rpki-client