$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.mft File: IAAAWsWhdEBL07_CmUMyPpYGJbk.mft (raw, json) Hash identifier: thgKvkovfMQApKh1LfNj5r+s8XVEr0BSS3mgA1yfCgE= Subject key identifier: EB:74:5C:0D:91:F9:22:80:AA:A3:B2:23:8F:2D:91:88:CE:54:13:DB Authority key identifier: 20:00:00:5A:C5:A1:74:40:4B:D3:BF:C2:99:43:32:3E:96:06:25:B9 Certificate issuer: /CN=A91DA590/serialNumber=2000005AC5A174404BD3BFC29943323E960625B9 Certificate serial: 03DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAAAWsWhdEBL07_CmUMyPpYGJbk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.mft Manifest number: 03D1 Signing time: Mon 02 Mar 2026 01:49:42 +0000 Manifest this update: Mon 02 Mar 2026 01:49:40 +0000 Manifest next update: Mon 09 Mar 2026 01:49:40 +0000 Files and hashes: 1: IAAAWsWhdEBL07_CmUMyPpYGJbk.crl (hash: CYp9BKXYIaBXJGkre1PjH+fe9DVz4avFZOd6iJ8nh6I=) 2: 09E46A74C07F11ECB0707F18C4F9AE02.roa (hash: kBFUh+A5t0uG5ToonKBS8JyMqqztNI0BDIiwYVryoTc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.crl rsync://rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAAAWsWhdEBL07_CmUMyPpYGJbk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 989 (0x3dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA590, serialNumber=2000005AC5A174404BD3BFC29943323E960625B9 Validity Not Before: Mar 2 01:49:40 2026 GMT Not After : Mar 9 01:49:40 2026 GMT Subject: CN=69a4ecb6-288c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1c:2b:16:d8:d9:97:79:a4:cb:d3:51:9d:95: 51:8f:d3:a5:31:b7:6d:1b:5c:8f:3f:8b:f2:0a:02: 6c:bc:3f:a3:1f:1a:21:bd:26:f1:7b:42:b4:d2:ea: b7:5f:cb:00:f0:91:78:9b:03:32:76:72:b2:55:b3: cb:3f:a6:1e:68:cc:c0:1d:74:29:ba:42:0b:7c:18: 59:11:64:ac:b8:14:9e:22:a3:c5:88:7f:ab:fd:44: 20:47:3b:6f:6b:f3:c4:41:da:56:fb:59:e0:bb:3a: 57:9d:bd:9f:64:8d:11:4a:9c:08:36:2f:72:d7:b2: 00:2d:81:a1:14:75:ad:a1:5d:83:06:53:e5:42:5b: be:ab:ea:68:b9:f2:4e:90:a3:68:ad:c0:00:e7:69: 10:56:ca:24:56:c4:e8:69:b3:7d:04:17:3f:62:6e: 4f:88:d8:0c:8c:84:cb:12:c9:95:5a:73:28:b2:0f: 51:b8:ee:ec:58:81:f2:1d:3c:41:ca:da:94:39:60: cd:34:88:ca:94:99:ca:f6:e5:dc:98:de:6a:1a:a8: b0:bc:09:0b:2e:09:ff:bf:80:27:35:88:7b:61:5a: a0:f3:21:90:f3:99:66:e7:3c:6a:4a:c6:8e:47:f4: df:14:32:81:bc:e2:8b:68:52:6b:ce:9c:95:47:3d: 4a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:74:5C:0D:91:F9:22:80:AA:A3:B2:23:8F:2D:91:88:CE:54:13:DB X509v3 Authority Key Identifier: keyid:20:00:00:5A:C5:A1:74:40:4B:D3:BF:C2:99:43:32:3E:96:06:25:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAAAWsWhdEBL07_CmUMyPpYGJbk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:fb:ab:30:3e:92:f9:11:e3:cf:f3:52:76:87:24:8b:99:a3: e9:25:7f:d3:5b:f1:8a:cd:63:07:79:2b:de:75:9b:fc:e9:6d: 78:a2:85:1a:e8:18:6c:c1:c6:b9:91:02:b0:f3:73:20:f7:1c: 2d:46:d1:ae:2b:15:4f:57:91:f6:07:eb:e7:49:5c:2f:71:4c: f6:de:ed:e4:74:da:11:b9:10:77:a8:de:ef:df:6c:e0:96:26: d5:0d:b4:f5:4b:46:08:0f:33:68:93:48:83:db:c0:23:80:19: 18:95:22:98:6f:ac:01:f5:ef:f6:88:b2:90:82:31:7d:72:ee: 22:a3:1a:13:0d:cf:9a:0f:de:31:89:46:83:a9:a8:4e:84:3d: 3c:40:30:af:03:50:bd:b3:12:7e:84:c5:a7:f1:5c:15:4a:6b: 8d:99:cf:43:56:e3:18:c5:b3:46:d7:48:bd:23:65:da:d8:9c: 7c:f2:ea:f2:99:1e:af:15:7b:b0:0b:9a:a7:6a:3a:3e:38:a8: 29:ba:e9:32:ae:29:ca:d6:0d:4e:7a:a0:8f:cc:1f:9e:d1:29: 4d:10:92:40:6d:1e:76:5d:e2:ea:44:b3:1c:df:07:31:6f:5e: 60:fa:7c:15:49:34:cd:20:e2:f2:c5:ed:5a:3b:2c:5a:39:eb: 15:7d:dd:c0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REE1OTAxMTAvBgNVBAUTKDIwMDAwMDVBQzVBMTc0NDA0QkQzQkZDMjk5NDMzMjNF OTYwNjI1QjkwHhcNMjYwMzAyMDE0OTQwWhcNMjYwMzA5MDE0OTQwWjAYMRYwFAYD VQQDEw02OWE0ZWNiNi0yODhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsRwrFtjZl3mky9NRnZVRj9OlMbdtG1yPP4vyCgJsvD+jHxohvSbxe0K00uq3 X8sA8JF4mwMydnKyVbPLP6YeaMzAHXQpukILfBhZEWSsuBSeIqPFiH+r/UQgRztv a/PEQdpW+1nguzpXnb2fZI0RSpwINi9y17IALYGhFHWtoV2DBlPlQlu+q+poufJO kKNorcAA52kQVsokVsToabN9BBc/Ym5PiNgMjITLEsmVWnMosg9RuO7sWIHyHTxB ytqUOWDNNIjKlJnK9uXcmN5qGqiwvAkLLgn/v4AnNYh7YVqg8yGQ85lm5zxqSsaO R/TfFDKBvOKLaFJrzpyVRz1KtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOt0XA2R +SKAqqOyI48tkYjOVBPbMB8GA1UdIwQYMBaAFCAAAFrFoXRAS9O/wplDMj6WBiW5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTU5MC85NTEwRTg2QUMw N0IxMUVDOTg3Qjg0N0ZDNEY5QUUwMi9JQUFBV3NXaGRFQkwwN19DbVVNeVBwWUdK YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lBQUFXc1doZEVCTDA3X0NtVU15UHBZR0piay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTU5MC85NTEwRTg2QUMwN0IxMUVDOTg3Qjg0N0ZDNEY5QUUwMi9JQUFBV3NXaGRF QkwwN19DbVVNeVBwWUdKYmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALvurMD6S+RHjz/NSdocki5mj6SV/01vxis1jB3kr3nWb/OlteKKFGugYbMHG uZECsPNzIPccLUbRrisVT1eR9gfr50lcL3FM9t7t5HTaEbkQd6je799s4JYm1Q20 9UtGCA8zaJNIg9vAI4AZGJUimG+sAfXv9oiykIIxfXLuIqMaEw3Pmg/eMYlGg6mo ToQ9PEAwrwNQvbMSfoTFp/FcFUprjZnPQ1bjGMWzRtdIvSNl2ticfPLq8pkerxV7 sAuap2o6PjioKbrpMq4pytYNTnqgj8wfntEpTRCSQG0edl3i6kSzHN8HMW9eYPp8 FUk0zSDi8sXtWjssWjnrFX3dwA== -----END CERTIFICATE-----Generated at Mon Mar 2 04:00:06 2026 by rpki-client