$ rpki-client -vvf rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft File: -iKAHFKuKl_EkbfL6-aO_KLI0dk.mft (raw, json) Hash identifier: e35ECdn2Dtr+MklCeZeJkykI3q/G+sLQUm5xsXGVTyE= Subject key identifier: E7:7A:81:C5:E1:82:EB:CB:F9:AB:E5:8C:47:7C:5A:47:F1:4D:FF:74 Authority key identifier: FA:22:80:1C:52:AE:2A:5F:C4:91:B7:CB:EB:E6:8E:FC:A2:C8:D1:D9 Certificate issuer: /CN=A91D837B/serialNumber=FA22801C52AE2A5FC491B7CBEBE68EFCA2C8D1D9 Certificate serial: E8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-iKAHFKuKl_EkbfL6-aO_KLI0dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft Manifest number: E6 Signing time: Sun 01 Mar 2026 07:37:53 +0000 Manifest this update: Sun 01 Mar 2026 07:37:52 +0000 Manifest next update: Sun 08 Mar 2026 07:37:52 +0000 Files and hashes: 1: -iKAHFKuKl_EkbfL6-aO_KLI0dk.crl (hash: 5eWlkCfDQrSbCwJiyitVUDirS1i2q+V7C95ZUiHEqYs=) 2: 8F7DFE66C96E11EF98B64E15C4F9AE02.roa (hash: Vr8pXD8G4eSp3CxAKl8qQ0s6JHPMaTbvSElZhIh+h1I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.crl rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-iKAHFKuKl_EkbfL6-aO_KLI0dk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 07:37:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 232 (0xe8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D837B, serialNumber=FA22801C52AE2A5FC491B7CBEBE68EFCA2C8D1D9 Validity Not Before: Mar 1 07:37:52 2026 GMT Not After : Mar 8 07:37:52 2026 GMT Subject: CN=69a3ecd1-cc9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1f:07:1f:ed:00:76:b0:53:f0:ac:ac:8e:78: ce:ef:12:de:b5:14:08:23:b3:ee:ce:39:fb:81:22: 93:28:b1:d4:4e:56:d2:d2:ad:16:56:60:3c:66:1f: ab:d6:3b:f7:a7:ff:aa:b1:bc:55:8f:01:d8:ed:15: 80:1c:dc:1c:3e:14:2d:b9:af:09:1f:82:4b:fb:4b: 46:ff:a4:7f:7f:84:1f:06:07:1a:fe:d2:0a:ae:9f: 3c:31:6c:bd:dd:a8:bd:a0:21:74:01:dd:08:99:76: d2:d3:7f:4a:ff:d2:b5:e5:70:05:83:00:f1:2b:d7: e6:34:31:46:e7:d9:ab:7f:cb:d9:82:36:9a:4d:44: be:4a:20:f2:16:64:8e:ba:c2:cb:55:a7:39:e9:8d: cf:c7:08:df:b1:ea:a7:5a:3c:53:bb:42:f9:e7:ff: ae:38:e3:e5:18:7c:86:0c:dd:2b:f8:56:41:48:31: 51:bd:09:32:62:fe:59:a6:32:a1:21:c8:2a:8f:c8: f0:47:7a:df:43:05:8b:0c:72:fa:ea:51:df:01:55: a4:24:1b:5c:c6:d3:16:08:8c:46:ac:4e:c8:2b:24: e9:d1:b5:11:2b:ad:92:fd:dd:4c:1d:6a:53:22:cf: 59:63:e7:6b:b4:63:a7:58:bf:6c:2b:bb:09:51:1d: 4a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:7A:81:C5:E1:82:EB:CB:F9:AB:E5:8C:47:7C:5A:47:F1:4D:FF:74 X509v3 Authority Key Identifier: keyid:FA:22:80:1C:52:AE:2A:5F:C4:91:B7:CB:EB:E6:8E:FC:A2:C8:D1:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-iKAHFKuKl_EkbfL6-aO_KLI0dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:a9:ab:02:8e:73:fc:8a:6b:6a:43:f6:14:3e:87:6d:f1:7e: c0:2f:5d:c0:3f:5b:72:40:8d:2b:0d:49:30:d1:5b:a9:ed:83: b3:4f:bb:15:30:63:40:cb:14:c0:60:da:85:9b:12:85:a6:1d: bc:40:23:8c:ce:b8:0f:e2:69:49:5c:5a:39:a1:4e:39:76:b0: 54:33:d2:35:b9:7d:25:2d:6b:27:fe:d6:42:78:5a:5d:ca:a6: ab:74:a4:41:d8:49:0a:73:51:ec:b6:6c:a0:5a:24:0f:6c:24: ec:49:55:de:7a:ed:0b:8f:e5:48:79:af:db:c7:7a:4b:12:13: 3d:14:6f:d7:3c:6d:70:52:d6:b4:91:b0:bc:e0:f4:53:7c:1b: c5:e5:d0:0e:4c:d7:dc:46:8b:8a:27:f8:e0:c2:44:3d:cd:ea: 57:b0:65:5c:b0:74:34:f5:5c:ef:3f:48:8a:0b:82:22:f5:e5: d0:52:4a:b2:cd:c3:67:9e:45:dc:ba:e3:4f:3e:4b:e3:07:67: 71:ad:31:88:1e:52:3d:1f:2f:e4:e2:3e:fb:6f:48:4a:3c:5f: 03:b0:56:0e:60:4d:e4:98:58:21:bd:21:fe:fd:e6:cc:23:18: db:f7:40:27:a6:d6:c4:35:72:fe:81:4d:39:0d:2c:2c:5e:69: 6e:57:82:ed -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgzN0IxMTAvBgNVBAUTKEZBMjI4MDFDNTJBRTJBNUZDNDkxQjdDQkVCRTY4RUZD QTJDOEQxRDkwHhcNMjYwMzAxMDczNzUyWhcNMjYwMzA4MDczNzUyWjAYMRYwFAYD VQQDEw02OWEzZWNkMS1jYzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApB8HH+0AdrBT8KysjnjO7xLetRQII7Puzjn7gSKTKLHUTlbS0q0WVmA8Zh+r 1jv3p/+qsbxVjwHY7RWAHNwcPhQtua8JH4JL+0tG/6R/f4QfBgca/tIKrp88MWy9 3ai9oCF0Ad0ImXbS039K/9K15XAFgwDxK9fmNDFG59mrf8vZgjaaTUS+SiDyFmSO usLLVac56Y3PxwjfseqnWjxTu0L55/+uOOPlGHyGDN0r+FZBSDFRvQkyYv5ZpjKh Icgqj8jwR3rfQwWLDHL66lHfAVWkJBtcxtMWCIxGrE7IKyTp0bURK62S/d1MHWpT Is9ZY+drtGOnWL9sK7sJUR1KHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOd6gcXh guvL+avljEd8WkfxTf90MB8GA1UdIwQYMBaAFPoigBxSripfxJG3y+vmjvyiyNHZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODM3Qi8xNThEN0YzQ0I5 OUMxMUVGOTYzOEY3NjlDNEY5QUUwMi8taUtBSEZLdUtsX0VrYmZMNi1hT19LTEkw ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1pS0FIRkt1S2xfRWtiZkw2LWFPX0tMSTBkay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODM3Qi8xNThEN0YzQ0I5OUMxMUVGOTYzOEY3NjlDNEY5QUUwMi8taUtBSEZLdUts X0VrYmZMNi1hT19LTEkwZGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYqmrAo5z/IprakP2FD6HbfF+wC9dwD9bckCNKw1JMNFbqe2Ds0+7FTBjQMsU wGDahZsShaYdvEAjjM64D+JpSVxaOaFOOXawVDPSNbl9JS1rJ/7WQnhaXcqmq3Sk QdhJCnNR7LZsoFokD2wk7ElV3nrtC4/lSHmv28d6SxITPRRv1zxtcFLWtJGwvOD0 U3wbxeXQDkzX3EaLiif44MJEPc3qV7BlXLB0NPVc7z9IiguCIvXl0FJKss3DZ55F 3LrjTz5L4wdnca0xiB5SPR8v5OI++29ISjxfA7BWDmBN5JhYIb0h/v3mzCMY2/dA J6bWxDVy/oFNOQ0sLF5pbleC7Q== -----END CERTIFICATE-----Generated at Mon Mar 2 00:56:09 2026 by rpki-client