$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.mft File: IsfsPNntTFDolKEbzXDQMQzV-Fk.mft (raw, json) Hash identifier: 0OOMioAeAaByNuxiCQp3i7WcwpCpJ2GQ9vEbfwdCwVQ= Subject key identifier: 2F:B3:83:94:EE:50:CA:B1:6E:33:E1:DC:59:6F:5F:D1:90:28:0E:7C Authority key identifier: 22:C7:EC:3C:D9:ED:4C:50:E8:94:A1:1B:CD:70:D0:31:0C:D5:F8:59 Certificate issuer: /CN=A91EC225/serialNumber=22C7EC3CD9ED4C50E894A11BCD70D0310CD5F859 Certificate serial: EA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IsfsPNntTFDolKEbzXDQMQzV-Fk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.mft Manifest number: E6 Signing time: Sun 01 Mar 2026 23:26:50 +0000 Manifest this update: Sun 01 Mar 2026 23:26:48 +0000 Manifest next update: Sun 08 Mar 2026 23:26:48 +0000 Files and hashes: 1: IsfsPNntTFDolKEbzXDQMQzV-Fk.crl (hash: 8OgYRICWNzv+0BncHbYM6Vubce87GEdS8eg37AGi8A0=) 2: 25D2B94CDECD11EFA79E4065C4F9AE02.roa (hash: akLA24IwRVeRV87VrcCP9mJOdJA7ntWRSTCaXT2ZWc8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.crl rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IsfsPNntTFDolKEbzXDQMQzV-Fk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:26:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC225, serialNumber=22C7EC3CD9ED4C50E894A11BCD70D0310CD5F859 Validity Not Before: Mar 1 23:26:48 2026 GMT Not After : Mar 8 23:26:48 2026 GMT Subject: CN=69a4cb39-a571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:3b:44:fe:8d:61:d1:b3:10:9c:e5:d3:4c:ee: 02:b5:09:7b:dd:6e:02:e7:10:8e:ec:2e:55:af:8c: 64:b5:c6:85:bf:a9:bc:ca:39:8d:ec:b8:f0:4b:90: e1:fe:98:8d:f5:a1:d0:c5:7d:ef:d8:53:ca:48:1b: ce:e9:32:53:bf:0c:00:24:75:94:c7:dc:58:45:4f: 29:e0:1b:57:47:7f:7a:42:31:d2:fa:70:b5:93:86: 79:ff:64:ef:16:e6:67:75:36:f2:84:b9:09:d6:44: f6:ef:6f:95:97:1b:03:b3:ca:cc:23:f3:4a:34:6f: d3:8e:b9:df:2e:7a:a0:31:e6:30:2a:9c:c8:88:e8: 5e:8d:be:bf:22:38:71:27:91:41:f2:e1:bf:5a:c0: ae:36:3a:1c:42:48:0d:6a:ad:72:67:0c:7a:aa:5f: f6:ec:e4:92:f4:35:07:17:6c:1f:8e:6d:bd:c3:86: 78:06:8f:ba:86:67:ef:9b:17:a3:d0:2d:55:16:0f: be:07:4e:2a:f2:fa:1d:66:16:a1:00:89:b1:eb:4b: 4c:e4:17:bc:4b:6c:7d:cd:41:61:1a:73:10:d0:15: 2d:68:18:88:85:66:09:04:dd:9c:e2:22:e1:cb:b3: 8f:79:41:45:27:fc:64:d8:da:24:d6:21:6e:47:23: b0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:B3:83:94:EE:50:CA:B1:6E:33:E1:DC:59:6F:5F:D1:90:28:0E:7C X509v3 Authority Key Identifier: keyid:22:C7:EC:3C:D9:ED:4C:50:E8:94:A1:1B:CD:70:D0:31:0C:D5:F8:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IsfsPNntTFDolKEbzXDQMQzV-Fk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:7b:7b:0d:db:1f:ee:27:32:4c:32:ad:e3:1d:91:9d:c2:f0: 30:2b:db:24:0b:86:ff:0a:55:83:17:59:93:65:76:f4:b5:8b: 47:a1:a3:c0:30:09:8f:00:b6:01:52:b2:26:df:f8:46:50:67: e1:63:12:25:21:15:2b:ed:40:03:89:23:70:53:6d:1a:2c:2e: 3b:ff:8a:72:f5:03:ec:74:5d:87:ee:36:d8:86:f8:4a:55:45: f4:94:4c:98:a4:5e:05:68:eb:4c:02:fe:44:a8:86:a0:1f:32: d5:60:95:8c:06:32:ee:d3:0d:e7:90:9d:1d:1e:be:8e:c6:a3: 91:eb:e7:5a:bf:db:63:ea:3f:87:26:7e:a4:2d:a7:15:da:3a: 19:0d:c1:26:c9:63:8d:7c:9a:33:22:64:a0:fb:15:c5:b1:b8: a8:47:87:c0:cd:59:96:8e:3d:be:fb:c9:0f:3c:59:d5:6a:b6: 3e:8b:b7:54:1b:78:fb:66:e4:f9:95:db:3c:60:54:af:d1:bb: bb:2f:f1:96:29:fc:08:4b:92:98:50:5e:54:41:89:37:de:d5: 55:10:51:b3:c4:5b:34:14:cd:b3:3e:73:b1:e0:75:cc:0c:d5: 21:f5:a7:61:57:62:ec:b9:4f:5b:1e:1d:32:bd:b8:94:2e:c6: d3:58:b4:b0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUMyMjUxMTAvBgNVBAUTKDIyQzdFQzNDRDlFRDRDNTBFODk0QTExQkNENzBEMDMx MENENUY4NTkwHhcNMjYwMzAxMjMyNjQ4WhcNMjYwMzA4MjMyNjQ4WjAYMRYwFAYD VQQDEw02OWE0Y2IzOS1hNTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4TtE/o1h0bMQnOXTTO4CtQl73W4C5xCO7C5Vr4xktcaFv6m8yjmN7LjwS5Dh /piN9aHQxX3v2FPKSBvO6TJTvwwAJHWUx9xYRU8p4BtXR396QjHS+nC1k4Z5/2Tv FuZndTbyhLkJ1kT272+VlxsDs8rMI/NKNG/TjrnfLnqgMeYwKpzIiOhejb6/Ijhx J5FB8uG/WsCuNjocQkgNaq1yZwx6ql/27OSS9DUHF2wfjm29w4Z4Bo+6hmfvmxej 0C1VFg++B04q8vodZhahAImx60tM5Be8S2x9zUFhGnMQ0BUtaBiIhWYJBN2c4iLh y7OPeUFFJ/xk2Nok1iFuRyOwowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC+zg5Tu UMqxbjPh3FlvX9GQKA58MB8GA1UdIwQYMBaAFCLH7DzZ7UxQ6JShG81w0DEM1fhZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzIyNS9DOTQ0N0ZGMEJF RjkxMUVGQkNGNjg5NDRDNEY5QUUwMi9Jc2ZzUE5udFRGRG9sS0VielhEUU1RelYt RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lzZnNQTm50VEZEb2xLRWJ6WERRTVF6Vi1Gay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzIyNS9DOTQ0N0ZGMEJFRjkxMUVGQkNGNjg5NDRDNEY5QUUwMi9Jc2ZzUE5udFRG RG9sS0VielhEUU1RelYtRmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAt3t7Ddsf7icyTDKt4x2RncLwMCvbJAuG/wpVgxdZk2V29LWLR6GjwDAJjwC2 AVKyJt/4RlBn4WMSJSEVK+1AA4kjcFNtGiwuO/+KcvUD7HRdh+422Ib4SlVF9JRM mKReBWjrTAL+RKiGoB8y1WCVjAYy7tMN55CdHR6+jsajkevnWr/bY+o/hyZ+pC2n Fdo6GQ3BJsljjXyaMyJkoPsVxbG4qEeHwM1Zlo49vvvJDzxZ1Wq2Pou3VBt4+2bk +ZXbPGBUr9G7uy/xlin8CEuSmFBeVEGJN97VVRBRs8RbNBTNsz5zseB1zAzVIfWn YVdi7LlPWx4dMr24lC7G01i0sA== -----END CERTIFICATE-----Generated at Mon Mar 2 06:52:08 2026 by rpki-client