$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft File: Ii81OE7WK2pwdPiC574Cnw4E40M.mft (raw, json) Hash identifier: Fz0MkrGOPdG4XLPGcwQgy9MBUwpGMbILeqQtOOj65W0= Subject key identifier: 2F:14:B2:EE:C7:55:52:FD:5E:DD:6B:14:98:84:9E:82:62:47:F4:E0 Authority key identifier: 22:2F:35:38:4E:D6:2B:6A:70:74:F8:82:E7:BE:02:9F:0E:04:E3:43 Certificate issuer: /CN=A91E5D61/serialNumber=222F35384ED62B6A7074F882E7BE029F0E04E343 Certificate serial: 3540 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ii81OE7WK2pwdPiC574Cnw4E40M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft Manifest number: 486D Signing time: Sun 01 Mar 2026 23:52:26 +0000 Manifest this update: Sun 01 Mar 2026 23:52:24 +0000 Manifest next update: Sun 08 Mar 2026 23:52:24 +0000 Files and hashes: 1: Ii81OE7WK2pwdPiC574Cnw4E40M.crl (hash: q4FJI6MT2Jts2sUu9bjpJ0uA3QUA0TDFiTeAgp3XbEY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.crl rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ii81OE7WK2pwdPiC574Cnw4E40M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13632 (0x3540) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D61, serialNumber=222F35384ED62B6A7074F882E7BE029F0E04E343 Validity Not Before: Mar 1 23:52:24 2026 GMT Not After : Mar 8 23:52:24 2026 GMT Subject: CN=69a4d139-25ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b8:9d:55:bd:f0:2e:98:09:01:ec:d0:82:5e: ed:fe:40:fc:2d:23:5e:5d:cc:31:41:48:fd:d6:63: 6c:f8:7c:a7:ef:9f:67:39:94:9a:e6:5c:4f:95:2b: 50:a7:08:0e:c5:eb:3c:34:d6:52:6b:bf:7d:7f:dd: 4e:94:33:1b:fc:bd:ca:81:f4:25:a9:ba:b7:1c:ae: 85:96:67:00:f5:d0:5b:10:1c:d5:33:ec:d7:0a:74: fa:5f:f6:a5:ae:bd:1f:1b:70:5e:fe:40:7e:94:d7: c4:6b:0b:b5:10:f3:a2:04:ca:5c:b0:b9:10:fe:2e: 17:a6:a8:70:34:d8:03:cd:a8:99:80:3f:b9:02:0b: 2a:ca:c6:be:97:b6:80:21:48:aa:ff:2c:0b:b4:7b: d4:99:94:80:be:ad:79:c0:c6:d4:a8:c4:fc:29:09: e4:dc:61:25:38:46:57:58:f5:2b:53:1c:b2:83:e1: 44:f3:a9:d9:44:02:86:92:10:ad:c7:03:20:04:97: af:db:82:00:c7:c9:27:31:35:08:84:e8:43:f9:7f: 6b:63:d5:74:a4:e5:c8:15:47:e3:51:0c:0c:f9:52: 11:bf:a9:29:7f:c7:8d:b8:31:54:02:39:db:a9:91: a1:63:dd:05:ad:56:ae:46:4d:04:25:96:49:8d:a3: f4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:14:B2:EE:C7:55:52:FD:5E:DD:6B:14:98:84:9E:82:62:47:F4:E0 X509v3 Authority Key Identifier: keyid:22:2F:35:38:4E:D6:2B:6A:70:74:F8:82:E7:BE:02:9F:0E:04:E3:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ii81OE7WK2pwdPiC574Cnw4E40M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/Ii81OE7WK2pwdPiC574Cnw4E40M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:09:d9:21:18:c4:9d:7a:aa:32:4e:fc:72:af:76:97:81:79: e3:c8:07:3e:ba:7a:8c:b0:71:6c:53:7a:53:a4:3c:e1:19:cf: 09:54:a0:17:67:a8:68:34:a5:6f:92:96:01:30:d6:5f:75:c5: 15:da:d5:af:bb:6f:c0:cd:d1:db:e6:c5:4f:99:40:84:c6:52: da:a9:c5:01:b6:93:d7:1d:32:ef:1f:59:a6:7a:9b:69:a7:df: 68:96:f5:31:22:9d:d5:d1:c6:db:f7:57:1d:db:00:60:63:9d: 4f:42:0c:f4:c1:e5:0b:16:92:d9:79:89:5c:a2:d8:1e:c4:2e: 5c:ad:ca:51:55:ba:57:82:9f:ce:90:6d:52:d2:11:df:00:91: a5:e5:14:98:ad:dd:fd:e4:af:b3:40:c7:e8:32:92:2e:9e:07: 46:b8:6d:f3:e1:dc:e0:a6:23:5f:ad:09:72:4e:4f:09:64:d7: a8:d5:15:91:84:09:b2:4e:6a:5c:43:9d:7c:07:27:57:2b:31: cd:1f:53:d3:da:c1:ea:e3:c6:47:67:ef:05:80:fe:de:b0:23: 17:15:6d:62:92:42:78:80:7d:52:db:75:e4:34:f2:d6:7b:92: f7:08:63:5f:4a:3b:56:01:d4:e1:45:8d:59:1f:85:13:34:98: c1:3e:fa:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVENjExMTAvBgNVBAUTKDIyMkYzNTM4NEVENjJCNkE3MDc0Rjg4MkU3QkUwMjlG MEUwNEUzNDMwHhcNMjYwMzAxMjM1MjI0WhcNMjYwMzA4MjM1MjI0WjAYMRYwFAYD VQQDEw02OWE0ZDEzOS0yNWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAubidVb3wLpgJAezQgl7t/kD8LSNeXcwxQUj91mNs+Hyn759nOZSa5lxPlStQ pwgOxes8NNZSa799f91OlDMb/L3KgfQlqbq3HK6FlmcA9dBbEBzVM+zXCnT6X/al rr0fG3Be/kB+lNfEawu1EPOiBMpcsLkQ/i4XpqhwNNgDzaiZgD+5Agsqysa+l7aA IUiq/ywLtHvUmZSAvq15wMbUqMT8KQnk3GElOEZXWPUrUxyyg+FE86nZRAKGkhCt xwMgBJev24IAx8knMTUIhOhD+X9rY9V0pOXIFUfjUQwM+VIRv6kpf8eNuDFUAjnb qZGhY90FrVauRk0EJZZJjaP0bQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC8Usu7H VVL9Xt1rFJiEnoJiR/TgMB8GA1UdIwQYMBaAFCIvNThO1itqcHT4gue+Ap8OBOND MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS9FRTY3RDhDMDFE NzgxMUUyODc5RTM4QzUwOEIwMkNEMi9JaTgxT0U3V0sycHdkUGlDNTc0Q253NEU0 ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lpODFPRTdXSzJwd2RQaUM1NzRDbnc0RTQwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQ2MS9FRTY3RDhDMDFENzgxMUUyODc5RTM4QzUwOEIwMkNEMi9JaTgxT0U3V0sy cHdkUGlDNTc0Q253NEU0ME0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbQnZIRjEnXqqMk78cq92l4F548gHPrp6jLBxbFN6U6Q84RnPCVSgF2eoaDSl b5KWATDWX3XFFdrVr7tvwM3R2+bFT5lAhMZS2qnFAbaT1x0y7x9ZpnqbaaffaJb1 MSKd1dHG2/dXHdsAYGOdT0IM9MHlCxaS2XmJXKLYHsQuXK3KUVW6V4KfzpBtUtIR 3wCRpeUUmK3d/eSvs0DH6DKSLp4HRrht8+Hc4KYjX60Jck5PCWTXqNUVkYQJsk5q XEOdfAcnVysxzR9T09rB6uPGR2fvBYD+3rAjFxVtYpJCeIB9Utt15DTy1nuS9whj X0o7VgHU4UWNWR+FEzSYwT76Lg== -----END CERTIFICATE-----Generated at Mon Mar 2 07:44:06 2026 by rpki-client