$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft File: ixqAZb6Iqmwbo_7bVOCH59KttN4.mft (raw, json) Hash identifier: tTjtT+ZdcH5bkt5P5K/vUr8aOxrQz0EQkB/AyelOPwQ= Subject key identifier: CD:7E:81:D2:74:34:1D:8E:30:A0:11:ED:8D:18:B3:16:D1:71:CE:3A Authority key identifier: 8B:1A:80:65:BE:88:AA:6C:1B:A3:FE:DB:54:E0:87:E7:D2:AD:B4:DE Certificate issuer: /CN=A91DC068/serialNumber=8B1A8065BE88AA6C1BA3FEDB54E087E7D2ADB4DE Certificate serial: 017B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixqAZb6Iqmwbo_7bVOCH59KttN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft Manifest number: 0177 Signing time: Sun 01 Mar 2026 05:39:01 +0000 Manifest this update: Sun 01 Mar 2026 05:39:01 +0000 Manifest next update: Sun 08 Mar 2026 05:39:01 +0000 Files and hashes: 1: ixqAZb6Iqmwbo_7bVOCH59KttN4.crl (hash: cWE5scZQeJRu19GDDgT1rJEu4oebHP0b2+TcD++1tLs=) 2: 4D69D2D2D5DD11EEA5B1C711C4F9AE02.roa (hash: PAO2tzUE6VhuIQPWRUUuXZiVK/zRgbkDyCoIJqVq33M=) 3: 4DDA8A18D5DD11EEA5B1C711C4F9AE02.roa (hash: FHRlsB48eK0jdLR0VwZXrRd3F+Rj548sH8y8zKsy5+s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.crl rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixqAZb6Iqmwbo_7bVOCH59KttN4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 05:39:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 379 (0x17b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC068, serialNumber=8B1A8065BE88AA6C1BA3FEDB54E087E7D2ADB4DE Validity Not Before: Mar 1 05:39:01 2026 GMT Not After : Mar 8 05:39:01 2026 GMT Subject: CN=69a3d0f5-5a6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:65:1e:ca:22:89:7d:12:bb:18:44:bf:0c:a1: a8:9f:8f:16:dc:58:8a:4a:1e:90:42:0e:3d:9b:bd: c2:31:5d:5f:52:12:7e:5b:79:15:2e:d3:ff:6e:fa: 17:5e:30:dc:e2:82:d5:6c:50:1c:d7:2a:6c:d7:f7: 40:1c:22:f6:32:69:2e:65:16:77:2b:b0:56:67:0f: c6:87:6b:bd:0a:53:18:ab:f0:b6:b3:8a:19:8b:1a: 99:d9:f7:9d:7e:b2:b9:9e:b1:4d:3d:06:35:12:73: d4:a1:75:48:65:56:f1:77:ef:44:67:10:cb:9b:5c: 43:f9:4e:3d:79:c9:33:00:37:20:fb:f4:14:ac:6e: 25:14:b6:e4:9e:a0:d2:59:6d:6e:bb:db:bf:08:5e: 26:e4:ec:bc:96:d2:18:0b:68:3d:a3:20:7c:ff:20: a9:d2:ed:5f:03:6f:a4:5c:e8:f9:19:2f:2e:90:ae: dd:44:28:04:7f:81:ff:67:c4:e7:f5:2e:29:d2:f2: b0:be:5a:e9:e4:eb:16:07:cf:c7:37:78:8a:40:06: 86:c1:45:a3:34:f0:53:d1:9c:8b:f0:5a:05:3f:96: d4:d9:43:2a:41:80:c5:76:74:5e:b0:ab:e5:93:f5: 94:9d:49:91:09:bf:2c:32:3f:e1:e8:34:99:f6:0e: 6f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:7E:81:D2:74:34:1D:8E:30:A0:11:ED:8D:18:B3:16:D1:71:CE:3A X509v3 Authority Key Identifier: keyid:8B:1A:80:65:BE:88:AA:6C:1B:A3:FE:DB:54:E0:87:E7:D2:AD:B4:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixqAZb6Iqmwbo_7bVOCH59KttN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:79:47:b3:e1:4a:5f:2c:c4:ef:b1:b6:e8:db:08:be:aa:df: ba:2a:f0:46:dc:59:ae:ed:28:2e:2c:5d:98:1d:11:57:be:96: 0e:eb:64:fb:a9:3b:54:b6:fb:26:57:98:b2:05:14:5a:7c:f0: 81:c2:ce:19:38:0a:61:98:46:44:3a:79:9e:ef:23:98:68:b0: 60:aa:18:5a:29:1b:34:73:22:e8:71:d5:ab:35:a9:2a:99:fd: 25:52:6b:5d:bb:fd:8a:0f:9f:6c:2f:47:17:b5:ba:56:a5:27: df:ed:fd:1f:f9:6f:3b:05:fb:f5:fc:52:91:95:8a:a1:0a:6c: f6:84:0b:d4:1b:fc:7a:26:e9:09:6c:8b:3d:37:f3:5e:b4:5c: e1:6a:4a:fe:16:63:f5:13:1c:87:44:5a:04:b8:9a:5c:27:65: e2:77:49:de:b6:1d:b5:85:66:e1:ca:3f:91:32:66:90:cf:29: 7e:78:ff:e0:72:5e:93:ed:fe:47:a1:e2:d4:a1:60:0c:1b:36: d1:3a:3c:b5:23:8c:93:6d:06:c5:c2:64:32:b6:68:fe:e7:dc: 6f:a7:5d:51:9f:de:56:a8:83:43:e0:2f:09:69:40:5b:e6:a0: 03:ff:cf:84:8c:45:b4:c8:26:f3:32:bf:21:f9:0a:bd:13:64: f7:6e:2c:fd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwNjgxMTAvBgNVBAUTKDhCMUE4MDY1QkU4OEFBNkMxQkEzRkVEQjU0RTA4N0U3 RDJBREI0REUwHhcNMjYwMzAxMDUzOTAxWhcNMjYwMzA4MDUzOTAxWjAYMRYwFAYD VQQDEw02OWEzZDBmNS01YTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1WUeyiKJfRK7GES/DKGon48W3FiKSh6QQg49m73CMV1fUhJ+W3kVLtP/bvoX XjDc4oLVbFAc1yps1/dAHCL2MmkuZRZ3K7BWZw/Gh2u9ClMYq/C2s4oZixqZ2fed frK5nrFNPQY1EnPUoXVIZVbxd+9EZxDLm1xD+U49eckzADcg+/QUrG4lFLbknqDS WW1uu9u/CF4m5Oy8ltIYC2g9oyB8/yCp0u1fA2+kXOj5GS8ukK7dRCgEf4H/Z8Tn 9S4p0vKwvlrp5OsWB8/HN3iKQAaGwUWjNPBT0ZyL8FoFP5bU2UMqQYDFdnResKvl k/WUnUmRCb8sMj/h6DSZ9g5vNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM1+gdJ0 NB2OMKAR7Y0YsxbRcc46MB8GA1UdIwQYMBaAFIsagGW+iKpsG6P+21Tgh+fSrbTe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzA2OC9ENzdCOUQ2NkQ1 QzQxMUVFODlDMTk3MERDNEY5QUUwMi9peHFBWmI2SXFtd2JvXzdiVk9DSDU5S3R0 TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2l4cUFaYjZJcW13Ym9fN2JWT0NINTlLdHRONC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzA2OC9ENzdCOUQ2NkQ1QzQxMUVFODlDMTk3MERDNEY5QUUwMi9peHFBWmI2SXFt d2JvXzdiVk9DSDU5S3R0TjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhnlHs+FKXyzE77G26NsIvqrfuirwRtxZru0oLixdmB0RV76WDutk+6k7VLb7 JleYsgUUWnzwgcLOGTgKYZhGRDp5nu8jmGiwYKoYWikbNHMi6HHVqzWpKpn9JVJr Xbv9ig+fbC9HF7W6VqUn3+39H/lvOwX79fxSkZWKoQps9oQL1Bv8eibpCWyLPTfz XrRc4WpK/hZj9RMch0RaBLiaXCdl4ndJ3rYdtYVm4co/kTJmkM8pfnj/4HJek+3+ R6Hi1KFgDBs20To8tSOMk20GxcJkMrZo/ufcb6ddUZ/eVqiDQ+AvCWlAW+agA//P hIxFtMgm8zK/IfkKvRNk924s/Q== -----END CERTIFICATE-----Generated at Sun Mar 1 22:51:37 2026 by rpki-client